last executing test programs:

5m1.015134529s ago: executing program 2 (id=2586):
r0 = socket(0xa, 0x3, 0x9)
getsockopt$nfc_llcp(r0, 0x3a, 0x0, 0x0, 0x2000005d)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) (async)
getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000280)) (async)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x64090) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r3, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0xffffffffffffff03) (async)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x18, {0x4e22, 0xffff}}]}, 0x24}}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) (async)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r5, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0)

5m0.924781509s ago: executing program 2 (id=2590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async)
bind$tipc(r2, 0x0, 0x0)
write(r3, 0x0, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000fffffffffd000000fdfffdff18010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000700000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)

5m0.728984125s ago: executing program 2 (id=2592):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094)
getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4)

5m0.538708208s ago: executing program 2 (id=2596):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000200)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="96f58d448845f5cf542c46470aa2888b0a471ac35119a40293d50eeac7ffa26f505a7afb6bd57e22cde0c9ce516fa301dba5b4c281c7ec413a67231a9588e0ca93a56c30299d85547d987b214d74376bd56a683cde995e4f193f5cc370a0efb5cfcc6759b18d8fef242432f3c78e75a0b4db134e1af212e0f9e1234bc11159855560f0e73323d7b45568e280548ea2", 0x8f}, {&(0x7f0000000340)="f722f00372de4b7a75550d50d7269934ca516d28d1e83e657e7acc454c9ea2d725b03968d53067b3c26fbaf3ddc492a57c3a0e4fa9680af185ba2e51040ec18bb5bc80ea1f407ce7d48bd4a606d60564f2c7e6a9a2d5efccfdb7b6deb72a35a06b625601732bff93a425127c1d341728c53a62d621304518524b9285c412049dedd5df8d34df496f3d0267247ca6f18f6f733b21e9dc5a5f212871ad8ab6f10aa9e809e93b3a7264411a087752dec908f3698244c77206050cadef0b9cf6a38bb2b3bd34015bf27dbb7beb337bcd37ce0ebea009f9e1cdfc72e591d8", 0xdc}], 0x2, &(0x7f0000000480)=[{0xe1, 0x118, 0xe0000, "4885737701d28ed560c331e5bf4a66c40e6fa532ad8ee9cc4904e1ba4a58674938d827970da9c211f8af154b244adfeaf0f2a562e945ae7fd9d6e7c8c8d70541b9ff192b5d9e948a1171ae7999c44557be8bd410f5f1f2d9fa5493091e716f83226301f447bba11b05ddd81369c6f79899dcb2f17f0b486bd906ba1f2944a869440370de426575c62426c9fc95bbf921e0bba1e621a6874bb268f63db3bb352fa842b5d99aa7797047e564a8c7b21d73810daa5fac2b6feba355e68c7bd21b8959c573a0fed7b5df517431ddd5310320dc94"}, {0x70, 0x111, 0xfa, "dea1399a33eb30cf3af9b303568838c5c51d74bf8514529160d8450b8cb6dbe739e53448a8165986d62db7c77342eb278308764a61182bc45455c2a2fd9809dae0efa5d8024b9eddb787529e8279366ca6db80a3ad92ff4a875c7048c855a7e7"}, {0x58, 0x0, 0x2, "f73c0fc8fa0cfbbb9f94b65ab3f53fabb8879df26b8f9ce48656b143e13400dc2516b1afaafbec9fc6fd26ebfddeeb6aaba48de3295388bfd4486fc075e6bcd17970"}, {0x58, 0x110, 0x3ff, "04f29fde9b558e7dbf0476ecfea54e46635cb5d7f51a73e8c26eea8734b604418e5727649088614c7d5387c37a58130e527411198d7844b2893388f94083fb130b612eb6527d73c5"}], 0x208}, 0x20000801)
r1 = socket(0x2b, 0x80801, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @empty, 0xfffffffe}, 0x1c)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0)
poll(&(0x7f0000001140)=[{r1, 0x702}], 0x1, 0x6)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r2)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=<r9=>0x0)
sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000b80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000900)={0x210, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0x1ec, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x9, 0x1, '%\'@-['}, {0x4}, {0x5, 0x1, '\x00'}, {0xa, 0x1, 'match\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x9, 0x1, '^@+.%'}, {0x7, 0x1, '\xdd$\\'}, {0x5, 0x1, '{'}, {0x9, 0x1, 'syz0\x00'}]}, {0x70, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0x5, 0x1, '\x00'}, {0xc, 0x1, '.\x11(\'%\\.*'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x5, 0x1, '\x00'}, {0x6, 0x1, '*.'}, {0x4}, {0x5, 0x1, '\x00'}, {0xd, 0x1, '\\[/:^-\xf8{*'}, {0x9, 0x1, 'syz2\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0x8, 0x1, 'cpu\x00'}, {0x4}, {0x8, 0x1, 'cpu\x00'}, {0x9, 0x1, 'syz0\x00'}, {0x6, 0x1, 'Z['}, {0x8, 0x1, ',-(:'}, {0xa, 0x1, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0x6, 0x1, '^$'}, {0x5, 0x1, ':'}]}, {0x34, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0xa, 0x1, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0xa, 0x1, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0x5, 0x1, ')'}]}, {0x38, 0x0, 0x0, 0x1, [{0xa, 0x1, 'match\x00'}, {0x8, 0x1, 'cpu\x00'}, {0x9, 0x1, 'syz2\x00'}, {0xa, 0x1, 'match\x00'}, {0x5, 0x1, '\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, ']'}, {0x9, 0x1, 'syz2\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x6, 0x1, '%('}, {0x9, 0x1, 'syz2\x00'}, {0xa, 0x1, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0x8, 0x1, '/[\\@'}]}, {0x24, 0x0, 0x0, 0x1, [{0x8, 0x1, 'cpu\x00'}, {0x6, 0x1, '$^'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x210}, 0x1, 0x0, 0x0, 0x48800}, 0x1)
r10 = socket$inet6(0xa, 0x80000, 0xd1b3)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000007c0)={<r11=>r10})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'cpu\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
accept$inet6(r11, 0x0, &(0x7f0000000800))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}]}, 0x1c}}, 0x0)
r13 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={<r14=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000100)={r14, @in6={{0xa, 0x4e24, 0x8001, @empty, 0x3}}, 0x6, 0x4}, &(0x7f00000001c0)=0x90)

5m0.295111385s ago: executing program 2 (id=2601):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000001200)=""/4137, 0x1029}, {0x0}], 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000104fdfffffffbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="05150000040000001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010)

4m59.87951207s ago: executing program 2 (id=2608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r5, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x100e}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0xe8}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f00000026c0)=""/255, 0xff}, {&(0x7f0000001640)=""/12, 0xc}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000440)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r6, &(0x7f00000000c0)="a6e2976b5c4383036d32dadd2e144da645ca8d1b230e105634396838da830000007bea2f35d4ea667817d90d532af0becd6019c05777058c20e8", 0xfffffffffffffffe, 0x850, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)
write$bt_hci(r5, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x259fdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "e84c4e835beeb26007f2d13c341d2dc7"}}}]}, 0x48}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000240)={<r10=>r9})
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000300)=""/140, 0x4c000, 0x1800, 0xd341, 0x3}, 0x20)
ioctl$FITRIM(r9, 0x40305829, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f0000000000)={0x7, 0xc, 0x2, 0x5, 0x3, 0xf, 0x1c, "524900f1f54e1c4970058203e29719411f71f8e3", "03bb79d47fd849366c5f65d6e3ef389d75dcb643"})
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x140d, 0x4, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004041}, 0x4000000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040)

4m44.581525423s ago: executing program 32 (id=2608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r5, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x100e}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0xe8}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f00000026c0)=""/255, 0xff}, {&(0x7f0000001640)=""/12, 0xc}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000440)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r6, &(0x7f00000000c0)="a6e2976b5c4383036d32dadd2e144da645ca8d1b230e105634396838da830000007bea2f35d4ea667817d90d532af0becd6019c05777058c20e8", 0xfffffffffffffffe, 0x850, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)
write$bt_hci(r5, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x259fdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "e84c4e835beeb26007f2d13c341d2dc7"}}}]}, 0x48}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000240)={<r10=>r9})
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000300)=""/140, 0x4c000, 0x1800, 0xd341, 0x3}, 0x20)
ioctl$FITRIM(r9, 0x40305829, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f0000000000)={0x7, 0xc, 0x2, 0x5, 0x3, 0xf, 0x1c, "524900f1f54e1c4970058203e29719411f71f8e3", "03bb79d47fd849366c5f65d6e3ef389d75dcb643"})
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x140d, 0x4, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004041}, 0x4000000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040)

2m33.48778426s ago: executing program 4 (id=3360):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080), 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
sendto$inet6(r4, &(0x7f0000000380)="68b1fbaa58eaf400b7136760084c62751f302453e90848b9c8b2b8b9b17ef0bb5b2034edc5b1ebde2db48355e1c0cf5bfcddffe6c1f71fb213dc7d831c36612ad30b06f242bc0f679a7ed66fc28e98c790ffa4b0358b996c09e9639a5ca49ddf9480321ef0986ab1145d80598cccd81ca94b85745f3521c842e948f333607d012a69b7756b3ce2238b87c0024da9a591650500c937a7e8165fdfbd1d5ae70098904894d03fc9efaec19f0fa34c6fc0eba662b0372ebbf4ca3745863b8ca861bad074aad8eae429", 0xc7, 0x20000004, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1c}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000040)}}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r6, 0x1, 0x6, @multicast}, 0x10)
write(r0, &(0x7f0000000000)="23000300010006", 0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080), 0x4) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async)
sendto$inet6(r4, &(0x7f0000000380)="68b1fbaa58eaf400b7136760084c62751f302453e90848b9c8b2b8b9b17ef0bb5b2034edc5b1ebde2db48355e1c0cf5bfcddffe6c1f71fb213dc7d831c36612ad30b06f242bc0f679a7ed66fc28e98c790ffa4b0358b996c09e9639a5ca49ddf9480321ef0986ab1145d80598cccd81ca94b85745f3521c842e948f333607d012a69b7756b3ce2238b87c0024da9a591650500c937a7e8165fdfbd1d5ae70098904894d03fc9efaec19f0fa34c6fc0eba662b0372ebbf4ca3745863b8ca861bad074aad8eae429", 0xc7, 0x20000004, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1c}, 0x1c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async)
bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000040)}}, 0x10) (async)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r6, 0x1, 0x6, @multicast}, 0x10) (async)
write(r0, &(0x7f0000000000)="23000300010006", 0x7) (async)

2m33.221385946s ago: executing program 4 (id=3363):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000200008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fdffffffffffffff00"/112], 0xb8}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000100)=@default_ibss_ssid, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000200), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r6=>0x0})
sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r6}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085)

2m30.266399296s ago: executing program 4 (id=3374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100b6424a73378fe9150c0002800500110001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async)
listen(r1, 0x0)
r2 = socket(0xf, 0x3, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async)
close(0x4) (async)
close(0x3)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000300))
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f00000002c0)={0x1}, 0x8) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000002c0)) (async, rerun: 32)
r5 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32)
r6 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) (async)
bind$unix(r6, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = accept4(r5, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x800) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r8, @ANYRES32=r4, @ANYBLOB="00012abd7000f9dbdf25120000000600ed007a020000"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x4000850)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x25, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
sendmsg$can_j1939(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000001)

2m30.083163654s ago: executing program 4 (id=3379):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x3, 0x300)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
close(0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
pipe(&(0x7f0000000040)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async)
close(0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async)

2m28.973583746s ago: executing program 4 (id=3385):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x61abb8eb28cb88d4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

2m28.848628396s ago: executing program 4 (id=3387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$kcm(0x25, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042)
epoll_create1(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
sendto$inet6(r5, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c)
sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
shutdown(r5, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f007b846313ef960bcf2809", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
socket$packet(0x11, 0x2, 0x300)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

2m13.736057684s ago: executing program 33 (id=3387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$kcm(0x25, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042)
epoll_create1(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
sendto$inet6(r5, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c)
sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
shutdown(r5, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f007b846313ef960bcf2809", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
socket$packet(0x11, 0x2, 0x300)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

18.1126418s ago: executing program 3 (id=4942):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x228, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "feac14b427717fc68fd61ea46ed3b2b4bc14cccd6693"}}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x745}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000094}, 0x10) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}}, 0x4008014) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0)

17.985197868s ago: executing program 3 (id=4944):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000)

17.780142336s ago: executing program 3 (id=4948):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0xa, 0x801, 0x84) (async)
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x94)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)

17.442959091s ago: executing program 3 (id=4953):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x66}]}, &(0x7f0000000240)='GPL\x00', 0x4}, 0x90)

17.311251967s ago: executing program 3 (id=4957):
r0 = socket$inet6(0x10, 0x2, 0x0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2389a7e0f3aec3e368af5d90fba3e1003ec3", @ANYRES16=r5, @ANYBLOB="010022c51230e12c1e8696ce0278567c69010000340200000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r4) (rerun: 32)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0xf7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048001) (async)
write$nci(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="710505030b0406dbe6050304da3e1c330d349b6f80eb05074923356cc33d7349d63b8b1e7fc3dd90d0717e854a4e406cc841f08a3507577b6b9c8eb4230a2debf2a146776f8c1207d07a1f53e6ffef051c10082dc24988a2d2684621c9d836f9c53879f96c0ff47d867e695dac81d50d4209e45d9d268f96c0e11db92b8ce5b05d08e0a9a9331cbeb505aa1e"], 0x62) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async, rerun: 32)
r8 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
bind$unix(r8, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x58) (async, rerun: 64)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x26}, 0x94) (async, rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) (async)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r13, 0x6, 0x21, &(0x7f0000000500)="3a2fc975c93f0b1127825edfbf938ac8", 0x10) (async, rerun: 32)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) (rerun: 32)

17.122210646s ago: executing program 3 (id=4962):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000010000300686173683a69702c6d616300140007800800120000000000080008"], 0x5c}}, 0x0)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@dev}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r6, 0xe7816804f9787cab, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x240008d0}, 0x40002084)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x400, 0x70bd29, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r9=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan3\x00', <r12=>0x0})
syz_emit_ethernet(0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd607fa72700012c00fc02000a000000000000000000000004fe8000000000000000000000000000aa33"], 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={r5})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8020c000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r11, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x4)

2.586548798s ago: executing program 6 (id=5182):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x38, r1, 0x805, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev}]}, 0x38}}, 0x0)

2.327770078s ago: executing program 6 (id=5186):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="001b03cb00eb00", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000018005a801400018005000400010000000400020004000100"], 0x2c}}, 0x4004)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r6, 0x10000}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r5, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r7}, 0x38)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x51, 0x3e]}}, 0x0, 0x38}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}], 0x2, 0x4004851)
setsockopt(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8)
r8 = socket$inet(0xa, 0x800, 0x85)
connect$inet(r8, &(0x7f0000000340)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000006c0)=[{&(0x7f0000000180)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="3fc77ca9264328a18250b1c69bc92435f1e5d5bf12a464c91575fd8e33d0758ed4f97538b3857e8a2737732a318aa7458447a5", 0x33}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f0000000400)="5afb1af01d66780b1523e2be7d6b937c34", 0x11}, {&(0x7f0000000440)="bef876060b95972ebd313d98ac32f5245eeec5cbd924afda0340fb", 0x1b}], 0x4, &(0x7f0000000680)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x6, 0x201, 0x423, 0x2, 0xe10, 0x1000, 0x800}}], 0x30, 0x4}], 0x1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$bt_hci(r9, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
listen(r8, 0x8)
r11 = accept4(r8, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r11, 0x84, 0x78, &(0x7f0000000100), 0x4)

2.246708525s ago: executing program 0 (id=5187):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x3, 0x3, 0xffffffff}}, 0x2e)
sendmmsg(r0, &(0x7f000000b200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000480)={{<r4=>0x0, 0x4, 0x1, 0x81, 0x798f, 0x8, 0x3, 0x9, 0x51, 0x3861, 0xffffffff, 0x3, 0x9246, 0x3, 0x9}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000540)={r3, r4, "3ee9b16dba221e997b03e165c4230780c6e57ce3a98249feab156e35c4a9ab8fb40c3bbf4c2dc8580b6ec1cb7ac023508be8fa2a8c80cee4e971c2abd6bdadb7a43523561e9bfd8a1be571d1c18300088a627acf76a491663c6b33a4591d1dfcd8f84decda8ca4b738810ce39a7a2638fd4628d9a042dc8f9d74793e35457947d02c834a86d73b2b0c7f123c4f896f1db81081b2ff8aa942a4068a8f7480edcdf31e609e09858b17853ed512987ef8d29e2d8f3f8fc8501f0a3260a1a59b2c4cf9576a4ee9bad4216cf5307045dc1b8927ce2a9f6cf6dcaaa70a629d4e6d36b261c08d1800f557d02b62e2bcbfd47461375c7fe4cc94afb52b49d512e55bf9ed", "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"})

2.144044141s ago: executing program 1 (id=5189):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x6f6)
writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0x7fff, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61148c00000000001d430000000000007a0a00fe00581c1f61144f0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58d"], 0x0}, 0x94)
r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:* rr'], 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

2.063358877s ago: executing program 0 (id=5190):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r1=>0x0})
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r3 = gettid()
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0xfe, 0x3, 0xe8, 0xa0, 0x7, 0xff, 0x3, 0x2, 0x86, 0x24}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010)

2.05714273s ago: executing program 34 (id=4962):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000010000300686173683a69702c6d616300140007800800120000000000080008"], 0x5c}}, 0x0)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@dev}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r6, 0xe7816804f9787cab, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x240008d0}, 0x40002084)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f5, 0x400, 0x70bd29, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r9=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan3\x00', <r12=>0x0})
syz_emit_ethernet(0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd607fa72700012c00fc02000a000000000000000000000004fe8000000000000000000000000000aa33"], 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={r5})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8020c000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r11, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x4)

1.991904346s ago: executing program 5 (id=5192):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a60000000060a0b04661f794a000000000200000034000480300001800b0001006c6f6f6b75700000200002800900010073797a30000000000800054000000000080003400000001d0900010073797a30000000000900020073797a32"], 0x88}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) (async)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

1.94728457s ago: executing program 1 (id=5193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xd, &(0x7f00000002c0)=@raw=[@ldst={0x2, 0x1, 0x2, 0xa, 0x0, 0xffffffffffffffe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0x3, 0xd4, &(0x7f0000000340)=""/212, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xc, 0x9, 0xfff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[r0, 0x1, 0x1], &(0x7f00000004c0)=[{0x5, 0x1, 0x3, 0x2}, {0x0, 0x5, 0xc, 0xa}, {0x1, 0x5, 0x2, 0xb}, {0x0, 0x5, 0x7, 0x8}, {0x3, 0x1, 0xe, 0x3}, {0x0, 0x3, 0xb, 0x5}], 0x10, 0x200}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x25, 0x23, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=[0x3, 0x5], 0xead0, 0x0, 0x1}}, 0x40)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r0, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1a}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}]}, &(0x7f0000000840)='GPL\x00', 0x6, 0x42, &(0x7f0000000880)=""/66, 0x41000, 0x20, '\x00', r5, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x7, 0x2, 0x6fc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r6, r7, r8, r9], 0x0, 0x10, 0x3}, 0x94)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
clock_gettime(0x0, &(0x7f0000000640)={<r15=>0x0, <r16=>0x0})
sendmsg$can_bcm(r10, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r14}, 0x10, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="0200000045060000f8ffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r15, @ANYRES64=r16/1000+10000, @ANYBLOB="0100008001000000030000800801000047e302c864e40200fabd40c5e97aa63ab7a8c93496745a912b81fc9398b99a9b139e561904b341dc50da9b4dbd04aba725b9b312c7205a0334b2ddd60d2d1c28a8c999686cb7c9aac86dd379af64830433a032f650366d4a9176b59ea3f8fbbbd80b8f0423725c4e819fa73747c317321d44163dbc7385dab46e7a51"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x800)
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x4, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r14, {0xc, 0x3}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000040)=""/52, &(0x7f00000000c0)=0x34)
r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x200000, 0x0)
ioctl$TUNSETCARRIER(r17, 0x400454e2, &(0x7f0000000bc0))
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000100001082dbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00fffffffffffffff5001b000000000004001880"], 0x2c}}, 0x0)

1.765660058s ago: executing program 5 (id=5194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c4"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0)

1.62120244s ago: executing program 5 (id=5195):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x28, r4, 0x60b, 0x70bd2d, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x28}, 0x1, 0x8000000, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x401}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x725c}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x4040010)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0)

1.537772468s ago: executing program 1 (id=5196):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x1, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
unshare(0x6060600)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r5, 0x0, 0x0, 0x4}, 0xffffffffffffff0a)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
splice(r0, 0x0, r7, 0x0, 0x25a5, 0x0)

1.462741164s ago: executing program 0 (id=5197):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00042abd7000fddbdf2502000000080005000400000030000380140002006970365f76746930000000000000000008000300000000000800010000000000060004007f0000000c00038006000700000400002400028008000300000000000800030001000000080007008000000008000300010000003c000180080006006f766600060001000a00000008000b00736970000600020021000000060001000000000008000900690000000800090009000000"], 0xb8}}, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa080045000028000000002c909378acf2b222e02f1a90efb7f2f800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0)

1.313579829s ago: executing program 0 (id=5198):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2005}]}, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000202010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006000340000200001400018008000100ac1414aa08000200ff01000008000440ef0000075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c00018014000300200100000000000000000000000000021400040000000000004000"/176], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000100000034000000090a01040000000000000000010000050900020073797a32000000000900010073797a3000000000080005400000001f340000000c0a01020000000000000000010000000900010073797a30000000000900020073797a3200000000080003800400008014000000c5e229a300000000000000000000000a"], 0xa4}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a"], 0x24}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000380), 0x4)
setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000007c0), 0x10)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0x6)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000001c0))

1.309072546s ago: executing program 5 (id=5199):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140), 0x4)
getsockopt$packet_int(r5, 0x107, 0x12, 0x0, &(0x7f0000000240))
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x19, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32], 0x20)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffe0}, {0x1, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

942.623318ms ago: executing program 0 (id=5200):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000000c0)) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r2 = socket(0xa, 0x80000, 0x2)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xa3, "484394422652a08a3ad6c77d6f3bc2e79addf0a39324ef501a03b1b79b6f816eede1116ca2026c0e00d92592bfeaa35f88c042347d2d1a269c78a4a083b4950f1da978986ccb7812fb46b8001b16d94a0ebcf20ef3c80f1fb246e9d4318e026afb60b15b840fc0215e2e8f485131281d10162ab3c0248de440c60b74da59fe09058f4f5a247635fc526523fb01a8a9c23121a733aa24952328f1defa81467339540857"}, &(0x7f0000000040)=0xab)

916.088853ms ago: executing program 5 (id=5201):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10)
recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d0000000001000000000000000000000000000000005f10"], 0x0, 0x39}, 0x20)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000000066e328df00000000008510000002000000850000007600000095000810000000009500a505d3f9644a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/138, 0x8a}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10)
sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x0, 0x4, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x24}, 0xd5d}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002580)="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", 0x1000}], 0x1, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xb4a}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x90}, 0x4000000)
socket$inet6_sctp(0xa, 0x1, 0x84)

814.253422ms ago: executing program 6 (id=5202):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x1}}}], 0x30}}], 0x1, 0x4044800)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async)
r3 = accept4(r2, 0x0, 0x0, 0x80000) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
r6 = socket(0x2, 0x80805, 0x0) (rerun: 64)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) (async, rerun: 32)
bind$bt_sco(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (rerun: 32)
listen(r5, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r4}, {r5, 0x1008}], 0x2, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x4, 0x7c}, [@typed={0x4, 0xc3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3) (async, rerun: 64)
sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) (async, rerun: 64)
r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r8, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x6fd9, @bearer=@l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44004)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
sendmmsg(r9, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[{0x10, 0x1, 0x6}], 0x10}}], 0x2, 0x40840) (async)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async, rerun: 32)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffef}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) (rerun: 32)

594.56347ms ago: executing program 0 (id=5203):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000005500)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x44854) (async)
recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0)

567.628139ms ago: executing program 6 (id=5204):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000aa0000400003000000000000006754b6694f372fb3e8ad66b6a732e7986ca182b71aa76c742569be3d97e5078917", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="181a0000000000c7644d00ee0000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000320000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

505.670126ms ago: executing program 1 (id=5205):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x1)
getsockname$netlink(r1, &(0x7f0000000000), &(0x7f00000000c0)=0xc) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000400)={<r4=>r0, 0x6b, 0x2a})
bind$isdn(r4, &(0x7f0000000440)={0x22, 0x28, 0x58, 0x9, 0x3}, 0x6) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x240440d0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084)

379.432661ms ago: executing program 6 (id=5206):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="cab1837dbcb5f31a24001280110001006272696467655f736c617665000000000c0005803c97377a638c31f1ad587198541305000a000000000014000300626f"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
socketpair(0x28, 0xa, 0x7, &(0x7f00000002c0))
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x200003, 0x0, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1814b150}}}, 0x3a)
getsockname(r3, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x25, 0x1, @val=@netfilter={0x3, 0x0, 0xfcd}}, 0x20)

194.079798ms ago: executing program 1 (id=5207):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) (async)

189.991406ms ago: executing program 6 (id=5208):
r0 = socket(0xa, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x50)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r5, 0x0, 0x31, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x74, r7, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private0, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2c8e3c9e, @local, 0x3ff}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}]}]}, 0x74}}, 0x40001)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052)

15.464492ms ago: executing program 5 (id=5209):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}, [@generic={0x4, 0x8, 0x6, 0x4, 0xf}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94)

0s ago: executing program 1 (id=5210):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c40001000000"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x611, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x20, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3, 0x8, 0x30, 0xffff}}, @challenge={0x10, 0x1, 0x7d}, @chsw_timing={0x68, 0x4, {0x6, 0x81}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @cf={0x4, 0x6, {0x85, 0x3, 0x0, 0x10}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x44094)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="0000ff7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000080000000a0000000c100000", @ANYRES32=0x1, @ANYBLOB="00000000ddac00"/20, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00b7b10e22fffb42e398c3ea449f0228b0ee180000ff0f00000000f0ffffffffffffff00000000"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp}, 0x20)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd92", 0x76}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a", 0x9c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291", 0x8b}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336be81140", 0x7b}, {&(0x7f00000021c0)="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", 0x22b}], 0x5}}], 0x2, 0x2090)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r7, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
sendmsg$802154_raw(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090)

kernel console output (not intermixed with test programs):

g ib device syz2
[  449.599375][T10888] syz1: Port: 1 Link DOWN
[  450.209353][T24452] netlink: 'syz.3.3211': attribute type 1 has an invalid length.
[  450.212148][T24050] tipc: Subscription rejected, illegal request
[  450.332610][T24457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'.
[  450.522070][T24465] netlink: 'syz.5.3214': attribute type 1 has an invalid length.
[  450.580879][T24454] Bluetooth: hci3: command 0x041b tx timeout
[  450.713348][T24474] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3216'.
[  450.807443][T24471] bond3: (slave gretap1): making interface the new active one
[  450.837363][T24471] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  450.882553][T24315] chnl_net:caif_netlink_parms(): no params data found
[  451.147652][T24495] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3219'.
[  451.361542][T24503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3220'.
[  451.423617][T24488] delete_channel: no stack
[  451.771854][T24517] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3223'.
[  451.785399][T24517] netlink: 'syz.5.3223': attribute type 29 has an invalid length.
[  451.915886][T24523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.948179][T24315] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.975852][T24315] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.996845][T24315] bridge_slave_0: entered allmulticast mode
[  452.031627][T24315] bridge_slave_0: entered promiscuous mode
[  452.054485][T24315] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.091630][T24315] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.101464][T24315] bridge_slave_1: entered allmulticast mode
[  452.157108][T24532] __nla_validate_parse: 1 callbacks suppressed
[  452.157126][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3227'.
[  452.186324][T24315] bridge_slave_1: entered promiscuous mode
[  452.268856][T24454] Bluetooth: hci5: command 0x0406 tx timeout
[  452.412100][T24315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.539540][T24315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.661136][ T5829] Bluetooth: hci3: command 0x041b tx timeout
[  452.665778][T24551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3229'.
[  452.794757][T24555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3232'.
[  452.837824][T24315] team0: Port device team_slave_0 added
[  452.900023][T24315] team0: Port device team_slave_1 added
[  453.142713][T24575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3236'.
[  453.196157][T24315] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.226285][T24315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.298924][T24315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.341767][T24580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.366097][T24315] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.398942][T24315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.476296][T24315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.492241][   T30] audit: type=1800 audit(1770366631.528:9): pid=24589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3241" name="memory.events" dev="tmpfs" ino=495 res=0 errno=0
[  453.565134][   T30] audit: type=1804 audit(1770366631.528:10): pid=24589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3241" name="/newroot/93/memory.events" dev="tmpfs" ino=495 res=1 errno=0
[  453.725363][T24315] hsr_slave_0: entered promiscuous mode
[  453.754044][T24315] hsr_slave_1: entered promiscuous mode
[  453.772613][T24315] debugfs: 'hsr0' already exists in 'hsr'
[  453.792903][T24600] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3245'.
[  453.803645][T24315] Cannot create hsr debugfs directory
[  453.826621][T24600] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  453.899304][T23048] : left promiscuous mode
[  454.052309][T23048] tipc: Disabling bearer <udp:syz2>
[  454.101974][T23048] tipc: Left network mode
[  454.152757][T24622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3250'.
[  454.170688][T24622] openvswitch: netlink: Flow key attr not present in new flow.
[  454.226974][T23048] IPVS: stopping backup sync thread 9113 ...
[  454.442729][T24643] netlink: 'syz.3.3255': attribute type 1 has an invalid length.
[  454.565153][T24636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'.
[  454.629165][T24648] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  454.663203][T24648] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  454.683116][T24648] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  454.736297][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms
[  454.736878][ T5829] Bluetooth: hci3: command 0x041b tx timeout
[  454.744415][    C1] lec:lec_tx_timeout: lec0
[  454.883430][T24664] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3260'.
[  454.935705][T24669] bond0: entered promiscuous mode
[  454.950789][T24669] bond_slave_0: entered promiscuous mode
[  454.958831][T24669] bond_slave_1: entered promiscuous mode
[  454.970887][T24666] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3261'.
[  455.018510][T24669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'.
[  455.713786][T24718] netlink: 'syz.4.3270': attribute type 8 has an invalid length.
[  456.184570][T24740] netlink: 'syz.3.3275': attribute type 4 has an invalid length.
[  456.248418][T24735] team0: Port device team_slave_0 removed
[  456.345763][T24745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.404103][T24315] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  456.509581][T24315] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  456.687743][T24770] netlink: 'syz.5.3280': attribute type 2 has an invalid length.
[  456.817444][ T5829] Bluetooth: hci3: command 0x041b tx timeout
[  456.831186][T23048] hsr_slave_0: left promiscuous mode
[  456.868885][T23048] hsr_slave_1: left promiscuous mode
[  456.896750][T23048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.919318][T23048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.015441][T23048] pimreg (unregistering): left allmulticast mode
[  457.680063][T24756] �x9�: renamed from bridge_slave_0 (while UP)
[  457.688285][T24315] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  457.702584][T24315] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  458.020900][T24315] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.116084][T24315] 8021q: adding VLAN 0 to HW filter on device team0
[  458.174938][T24043] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.182186][T24043] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.249458][T24043] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.256749][T24043] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.563744][T24847] __nla_validate_parse: 5 callbacks suppressed
[  458.563764][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3297'.
[  458.672525][T24848] netlink: 'syz.1.3296': attribute type 3 has an invalid length.
[  458.697212][T24848] netlink: 'syz.1.3296': attribute type 3 has an invalid length.
[  458.722293][T23048] IPVS: stop unused estimator thread 0...
[  458.856115][T24315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.979513][T24315] veth0_vlan: entered promiscuous mode
[  459.022300][T24315] veth1_vlan: entered promiscuous mode
[  459.091719][T24876] netlink: 39 bytes leftover after parsing attributes in process `syz.4.3303'.
[  459.135941][T24878] netlink: 39 bytes leftover after parsing attributes in process `syz.4.3303'.
[  459.173026][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3304'.
[  459.173332][T24315] veth0_macvtap: entered promiscuous mode
[  459.220657][T24876] netlink: 39 bytes leftover after parsing attributes in process `syz.4.3303'.
[  459.262571][T24878] netlink: 39 bytes leftover after parsing attributes in process `syz.4.3303'.
[  459.286050][T24881] netlink: 'syz.3.3304': attribute type 1 has an invalid length.
[  459.306380][T24881] netlink: 'syz.3.3304': attribute type 2 has an invalid length.
[  459.323073][T24315] veth1_macvtap: entered promiscuous mode
[  459.403306][T24315] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.459768][T24315] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.494606][T24050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.546448][T24050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.555205][T24050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.654243][T24050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.909301][T24050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.930969][T24050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.992518][T24925] Bluetooth: MGMT ver 1.23
[  460.003995][T24925] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  460.019490][T24050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.050190][T24050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.207784][T24929] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3315'.
[  460.403845][T24946] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3175'.
[  460.774034][T24969] netlink: 'syz.4.3321': attribute type 1 has an invalid length.
[  460.850539][T24975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3320'.
[  460.993148][T24983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3323'.
[  461.088460][T24988] netlink: 'syz.1.3325': attribute type 3 has an invalid length.
[  461.653525][T25024] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  461.902005][T25040] netlink: 'syz.3.3344': attribute type 1 has an invalid length.
[  462.049358][T25040] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  462.099786][T25040] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  462.118461][T25040] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  462.224705][T25049] 8021q: adding VLAN 0 to HW filter on device bond3
[  462.234043][T25049] bond2: (slave bond3): making interface the new active one
[  462.243784][T25049] bond2: (slave bond3): Enslaving as an active interface with an up link
[  462.254191][T25066] netlink: 'syz.5.3346': attribute type 28 has an invalid length.
[  462.326845][T25066] netlink: 'syz.5.3346': attribute type 3 has an invalid length.
[  462.580868][T25076] 8021q: adding VLAN 0 to HW filter on device bond1
[  462.634697][T25090] openvswitch: netlink: IP tunnel TTL not specified.
[  462.727562][T25096] siw: device registration error -23
[  462.822313][T25107] bridge0: the hash_elasticity option has been deprecated and is always 16
[  462.853179][T25107] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.860947][T25107] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.101726][T25121] netlink: 'syz.0.3359': attribute type 10 has an invalid length.
[  463.135524][T25121] team0: Device veth1_macvtap failed to register rx_handler
[  463.328167][T25121] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  463.363510][T25121] 8021q: VLANs not supported on lo
[  463.628909][T25156] __nla_validate_parse: 8 callbacks suppressed
[  463.628926][T25156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3367'.
[  463.773111][T25163] netlink: 'syz.1.3368': attribute type 26 has an invalid length.
[  463.847004][T25166] erspan0: entered promiscuous mode
[  463.864618][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'.
[  463.921704][T25168] macsec1: entered promiscuous mode
[  464.022702][T25170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'.
[  464.033369][T25170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'.
[  464.046891][T25170] gretap0: entered promiscuous mode
[  464.053442][T25170] gretap0: left promiscuous mode
[  466.138868][T25126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  466.345748][T25177] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3373'.
[  466.522813][T25196] FAULT_INJECTION: forcing a failure.
[  466.522813][T25196] name failslab, interval 1, probability 0, space 0, times 0
[  466.563016][T25196] CPU: 0 UID: 0 PID: 25196 Comm: syz.0.3378 Not tainted syzkaller #0 PREEMPT(full) 
[  466.563042][T25196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  466.563060][T25196] Call Trace:
[  466.563067][T25196]  <TASK>
[  466.563076][T25196]  dump_stack_lvl+0xe8/0x150
[  466.563104][T25196]  should_fail_ex+0x412/0x560
[  466.563132][T25196]  should_failslab+0xa8/0x100
[  466.563153][T25196]  kmem_cache_alloc_noprof+0x87/0x6e0
[  466.563177][T25196]  ? __netlink_lookup+0xc6/0x8b0
[  466.563198][T25196]  ? skb_clone+0x212/0x3a0
[  466.563225][T25196]  skb_clone+0x212/0x3a0
[  466.563251][T25196]  __netlink_deliver_tap+0x404/0x850
[  466.563283][T25196]  ? netlink_deliver_tap+0x2e/0x1b0
[  466.563303][T25196]  netlink_deliver_tap+0x19c/0x1b0
[  466.563323][T25196]  netlink_unicast+0x7e3/0x9b0
[  466.563355][T25196]  ? __pfx_netlink_unicast+0x10/0x10
[  466.563378][T25196]  ? __alloc_skb+0x193/0x390
[  466.563398][T25196]  ? netlink_sendmsg+0x650/0xb40
[  466.563415][T25196]  ? skb_put+0x11b/0x210
[  466.563439][T25196]  netlink_sendmsg+0x813/0xb40
[  466.563467][T25196]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.563488][T25196]  ? aa_sock_msg_perm+0xf1/0x1b0
[  466.563509][T25196]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  466.563528][T25196]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.563547][T25196]  ____sys_sendmsg+0xa68/0xad0
[  466.563568][T25196]  ? __might_fault+0xaf/0x130
[  466.563598][T25196]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.563638][T25196]  ? import_iovec+0x73/0xa0
[  466.563666][T25196]  ___sys_sendmsg+0x2a5/0x360
[  466.563686][T25196]  ? __lock_acquire+0x6b5/0x2cf0
[  466.563713][T25196]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.563771][T25196]  ? __fget_files+0x2a/0x420
[  466.563789][T25196]  ? __fget_files+0x3a0/0x420
[  466.563819][T25196]  __x64_sys_sendmsg+0x1bd/0x2a0
[  466.563842][T25196]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  466.563871][T25196]  ? __pfx_ksys_write+0x10/0x10
[  466.563903][T25196]  do_syscall_64+0xe2/0xf80
[  466.563921][T25196]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.563937][T25196]  ? trace_irq_disable+0x37/0x100
[  466.563953][T25196]  ? clear_bhb_loop+0x60/0xb0
[  466.563973][T25196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.563998][T25196] RIP: 0033:0x7fd098f9aeb9
[  466.564018][T25196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.564033][T25196] RSP: 002b:00007fd099dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.564059][T25196] RAX: ffffffffffffffda RBX: 00007fd099215fa0 RCX: 00007fd098f9aeb9
[  466.564071][T25196] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000004
[  466.564083][T25196] RBP: 00007fd099dfd090 R08: 0000000000000000 R09: 0000000000000000
[  466.564094][T25196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.564104][T25196] R13: 00007fd099216038 R14: 00007fd099215fa0 R15: 00007ffcd96fbbd8
[  466.564134][T25196]  </TASK>
[  466.973153][T25200] bridge_slave_0: left allmulticast mode
[  467.001304][T25200] bridge_slave_0: left promiscuous mode
[  467.011213][T25200] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.071969][T25200] bridge_slave_1: left allmulticast mode
[  467.115750][T25200] bridge_slave_1: left promiscuous mode
[  467.121872][T25200] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.212125][T25200] bond0: (slave bond_slave_0): Releasing backup interface
[  467.294236][T25200] bond0: (slave bond_slave_1): Releasing backup interface
[  467.334563][T25200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  467.344822][T25200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  467.354133][T25200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.362492][T25200] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.373567][T25200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  467.438130][T25236] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3383'.
[  467.498830][T25236] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3383'.
[  467.609046][T25243] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3385'.
[  467.677977][T25250] netlink: 'syz.0.3386': attribute type 1 has an invalid length.
[  467.700476][T25250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3386'.
[  468.022155][T25265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.222710][T25265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.414432][T25265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.698634][T25265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.099044][T24044] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.178888][T24043] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.278686][T24043] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.303638][T24043] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.640928][T25321] siw: device registration error -23
[  469.799497][T25331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3402'.
[  470.294097][T25351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3408'.
[  470.333676][T25351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3408'.
[  470.908442][T25381] x_tables: duplicate underflow at hook 2
[  470.933624][T25388] xt_limit: Overflow, try lower: 604147548/4200216962
[  470.936228][T25384] syzkaller0: entered promiscuous mode
[  470.945893][T25384] syzkaller0: entered allmulticast mode
[  471.400086][T25409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3421'.
[  471.410117][T25406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'.
[  472.012626][T25433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3427'.
[  472.088626][T25440] netlink: 'syz.0.3429': attribute type 11 has an invalid length.
[  472.195157][T25446] IPVS: set_ctl: invalid protocol: 46 172.20.20.11:20000
[  472.221959][T25448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3431'.
[  472.241646][T25448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3431'.
[  472.252437][T25448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3431'.
[  472.262875][T25448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3431'.
[  472.414026][T25456] netlink: 'syz.5.3432': attribute type 6 has an invalid length.
[  472.446750][T25459] syzkaller0: entered promiscuous mode
[  472.452286][T25459] syzkaller0: entered allmulticast mode
[  472.714964][T25470] bridge4: port 1(veth3) entered blocking state
[  472.721683][T25470] bridge4: port 1(veth3) entered disabled state
[  472.731462][T25470] veth3: entered allmulticast mode
[  472.739547][T25470] veth3: entered promiscuous mode
[  472.767430][T25470] bridge4: port 2(veth0_to_bond) entered blocking state
[  472.782097][T25470] bridge4: port 2(veth0_to_bond) entered disabled state
[  472.791292][T25470] veth0_to_bond: entered allmulticast mode
[  472.801829][T25470] veth0_to_bond: entered promiscuous mode
[  473.219133][T24454] Bluetooth: hci3: command 0x041b tx timeout
[  473.959313][T25528] netlink: 'syz.1.3448': attribute type 10 has an invalid length.
[  474.021917][T25528] team0: Port device dummy0 added
[  474.237253][T25541] netlink: 'syz.5.3453': attribute type 21 has an invalid length.
[  474.675487][T25590] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  475.036979][T25610] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  475.050653][T25610] bond2 (unregistering): Released all slaves
[  475.212988][T25624] 
@0�: renamed from bond_slave_1 (while UP)
[  475.222809][T25624] __nla_validate_parse: 8 callbacks suppressed
[  475.222824][T25624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3471'.
[  475.419459][T25634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  475.460816][T25634] netlink: 'syz.0.3473': attribute type 1 has an invalid length.
[  475.470413][T25634] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3473'.
[  475.518277][T25639] xt_limit: Overflow, try lower: 271964/0
[  476.013206][T25673] netlink: 'syz.3.3482': attribute type 30 has an invalid length.
[  476.238410][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3486'.
[  476.348289][T25699] netlink: 4108 bytes leftover after parsing attributes in process `syz.1.3488'.
[  476.357712][T25699] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  476.458676][T25697] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3489'.
[  476.706758][T25714] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3493'.
[  476.833754][T25726] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3497'.
[  476.985606][T25735] netlink: 'syz.0.3498': attribute type 1 has an invalid length.
[  477.016301][T25735] netlink: 'syz.0.3498': attribute type 3 has an invalid length.
[  477.025716][T25735] netlink: 'syz.0.3498': attribute type 7 has an invalid length.
[  477.098050][T25735] netlink: 'syz.0.3498': attribute type 8 has an invalid length.
[  477.105910][T25735] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3498'.
[  477.115912][T25735] NCSI netlink: No device for ifindex 131092
[  477.127962][T25743] smc: net device wlan0 erased user defined pnetid SYZ0
[  477.315323][T25766] netlink: 'syz.0.3504': attribute type 1 has an invalid length.
[  477.505914][T25776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3504'.
[  477.570699][T25768] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address
[  477.582058][T25768] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  477.611727][T25768] bond1: (slave xfrm1): making interface the new active one
[  477.625697][T25768] bond1: (slave xfrm1): Enslaving as an active interface with an up link
[  477.639862][T25776] bond1 (unregistering): (slave xfrm1): Releasing backup interface
[  477.665775][T25776] bond1 (unregistering): Released all slaves
[  477.895596][T25792] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3511'.
[  477.953643][T25799] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  478.021977][T25799] 8021q: adding VLAN 0 to HW filter on device bond1
[  479.684100][T25904] netlink: 'syz.5.3539': attribute type 11 has an invalid length.
[  479.717830][T25901] tipc: Started in network mode
[  479.722744][T25901] tipc: Node identity ac14140f, cluster identity 4711
[  479.748631][T25901] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  479.842111][T25916] netlink: ct family unspecified
[  479.954022][T25918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  480.460541][T25952] __nla_validate_parse: 7 callbacks suppressed
[  480.460563][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3552'.
[  480.722838][T25974] tipc: Started in network mode
[  480.744518][T25974] tipc: Node identity 769a8e2edd9c, cluster identity 4711
[  480.779976][T25974] tipc: Enabled bearer <eth:bridge_slave_0>, priority 10
[  481.488771][T26017] syzkaller0: entered promiscuous mode
[  481.504368][T26017] syzkaller0: entered allmulticast mode
[  481.710710][T26033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3570'.
[  481.872450][T26041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'.
[  481.883698][T26041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.907054][T26041] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.932599][T26041] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.954408][T26041] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.023153][ T5879] tipc: Node number set to 2869333550
[  482.034326][T26046] tipc: MTU too low for tipc bearer
[  482.722829][T26091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3582'.
[  482.755286][T26091] validate_nla: 1 callbacks suppressed
[  482.755303][T26091] netlink: 'syz.5.3582': attribute type 30 has an invalid length.
[  482.822335][T26092] IPVS: set_ctl: invalid protocol: 29 172.30.1.1:20000
[  482.829375][T26091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3582'.
[  482.895895][T26100] xt_TPROXY: Can be used only with -p tcp or -p udp
[  483.035850][T26104] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3587'.
[  483.177141][T24454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  483.187400][T24454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  483.195532][T24454] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  483.204544][T24454] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  483.236721][T24454] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  483.632723][T26138] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check.
[  483.695937][T26147] tipc: Enabled bearer <eth:vlan0>, priority 10
[  483.708041][T26147] xt_l2tp: unknown flags: 10
[  483.763073][T26151] tipc: Can't bind to reserved service type 1
[  483.800265][T26154] netlink: 'syz.5.3599': attribute type 1 has an invalid length.
[  483.990076][T26164] 8021q: adding VLAN 0 to HW filter on device bond5
[  484.039792][T26164] bond4: (slave bond5): making interface the new active one
[  484.070838][T26164] bond4: (slave bond5): Enslaving as an active interface with an up link
[  484.113757][T26154] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  484.146404][T26154] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  484.255494][T26182] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  484.437225][T26190] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3604'.
[  484.688050][T26201] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  484.806693][   T39] tipc: Node number set to 2886997007
[  484.836416][T26107] chnl_net:caif_netlink_parms(): no params data found
[  485.032169][T26221] netlink: 'syz.3.3613': attribute type 1 has an invalid length.
[  485.125626][T26107] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.133941][T26107] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.142423][T26107] bridge_slave_0: entered allmulticast mode
[  485.152864][T26107] bridge_slave_0: entered promiscuous mode
[  485.178193][T26107] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.187294][T26107] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.194562][T26107] bridge_slave_1: entered allmulticast mode
[  485.218367][T26107] bridge_slave_1: entered promiscuous mode
[  485.297497][ T5829] Bluetooth: hci0: command tx timeout
[  485.312075][T26245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3619'.
[  485.387001][T26107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.459509][T26107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.596978][T26260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3624'.
[  485.632643][T26107] team0: Port device team_slave_0 added
[  485.657996][T26107] team0: Port device team_slave_1 added
[  485.731602][T26269] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3627'.
[  485.768349][T26107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.775333][T26107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  485.847385][T26107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.910446][T26107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.926358][T26107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  485.969541][T26107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.142844][T26107] hsr_slave_0: entered promiscuous mode
[  486.172212][T26107] hsr_slave_1: entered promiscuous mode
[  486.190605][T26107] debugfs: 'hsr0' already exists in 'hsr'
[  486.209176][T26107] Cannot create hsr debugfs directory
[  486.279158][T26292] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3631'.
[  486.370521][T26299] syzkaller1: entered promiscuous mode
[  486.409510][T26299] syzkaller1: entered allmulticast mode
[  487.105256][T26107] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  487.196921][T26107] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  487.386668][ T5829] Bluetooth: hci0: command tx timeout
[  487.548145][T26107] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  487.564853][T26107] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  487.674372][T26365] openvswitch: netlink: IP tunnel dst address not specified
[  488.059984][T26107] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.123044][T26107] 8021q: adding VLAN 0 to HW filter on device team0
[  488.136264][T23048] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.143395][T23048] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.199206][T24049] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.206455][T24049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  488.654914][T26435] netlink: 'syz.1.3659': attribute type 1 has an invalid length.
[  488.716683][T26444] netlink: 'syz.1.3659': attribute type 1 has an invalid length.
[  488.915424][T26455] netlink: 'syz.3.3660': attribute type 6 has an invalid length.
[  488.982244][T26107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  488.990388][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'.
[  489.024966][T26455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'.
[  489.162049][T26465] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3664'.
[  489.200249][T26465] xfrm1: entered allmulticast mode
[  489.221381][T26471] netlink: 'syz.3.3665': attribute type 21 has an invalid length.
[  489.241034][T26471] IPv6: NLM_F_CREATE should be specified when creating new route
[  489.270562][T26471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  489.277889][T26471] IPv6: NLM_F_CREATE should be set when creating new route
[  489.285174][T26471] IPv6: NLM_F_CREATE should be set when creating new route
[  489.292442][T26471] IPv6: NLM_F_CREATE should be set when creating new route
[  489.350367][T26477] netlink: 'syz.0.3666': attribute type 83 has an invalid length.
[  489.468676][ T5829] Bluetooth: hci0: command tx timeout
[  489.579609][T26487] netlink: 'syz.3.3670': attribute type 4 has an invalid length.
[  489.741916][T26492] openvswitch: netlink: IP tunnel dst address not specified
[  489.775315][T26492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3671'.
[  489.821007][T26107] veth0_vlan: entered promiscuous mode
[  489.908785][T26107] veth1_vlan: entered promiscuous mode
[  490.051417][T26506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3675'.
[  490.055561][T26107] veth0_macvtap: entered promiscuous mode
[  490.093022][T26506] 8021q: adding VLAN 0 to HW filter on device batadv1
[  490.116989][T26506] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  490.131992][T26506] team0: Failed to send options change via netlink (err -105)
[  490.155354][T26506] team0: Port device batadv1 added
[  490.275723][T26107] veth1_macvtap: entered promiscuous mode
[  490.293563][T26526] veth0_to_bond: entered allmulticast mode
[  490.363799][T26107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.407129][T26107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.451604][T24043] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.471803][T24043] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.531246][T26535] bond2 (unregistering): Released all slaves
[  490.560045][T24043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.604764][T26543] netlink: 'syz.1.3683': attribute type 1 has an invalid length.
[  490.631478][T26543] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3683'.
[  490.652363][T24043] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.780914][T24049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.790910][T24049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.843137][T23044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.858956][T23044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.182599][T26563] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  491.212489][T26563] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  491.230660][T26563] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  491.240827][T26563] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  491.269677][T26563] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  491.306851][T26563] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  491.332767][T26573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3687'.
[  491.393887][T26573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'.
[  491.404305][T26563] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  491.426766][T26573] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.433954][T26573] bridge0: port 2(bridge_slave_1) entered forwarding state
[  491.441621][T26573] bridge0: port 1(
1�x9�) entered blocking state
[  491.448104][T26573] bridge0: port 1(
1�x9�) entered forwarding state
[  491.464837][T26563] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  491.479999][T26563] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  491.536859][ T5829] Bluetooth: hci0: command tx timeout
[  492.501665][T26631] syzkaller0: entered promiscuous mode
[  492.513828][T26631] syzkaller0: entered allmulticast mode
[  492.821339][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'.
[  492.844584][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'.
[  492.850538][T26657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3703'.
[  492.877651][T26655] sctp: [Deprecated]: syz.3.3703 (pid 26655) Use of int in maxseg socket option.
[  492.877651][T26655] Use struct sctp_assoc_value instead
[  493.314262][T26674] nbd2: detected capacity change from 0 to 127
[  493.332223][T26679] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3706'.
[  493.373803][T26681] netlink: 'syz.5.3708': attribute type 8 has an invalid length.
[  493.388524][ T5829] block nbd2: Receive control failed (result -104)
[  493.416824][T26683] netlink: 'syz.6.3709': attribute type 24 has an invalid length.
[  493.643714][T26695] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3714'.
[  493.987996][T26715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3715'.
[  494.445919][T26757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3727'.
[  494.710795][T26774] netlink: 'syz.3.3728': attribute type 10 has an invalid length.
[  494.754947][T26774] team0: Device ipvlan1 failed to register rx_handler
[  494.951404][T26788] syzkaller0: entered promiscuous mode
[  494.959942][T26788] syzkaller0: entered allmulticast mode
[  495.047760][T26794] netlink: 'syz.1.3735': attribute type 1 has an invalid length.
[  495.055763][T26794] netlink: 'syz.1.3735': attribute type 3 has an invalid length.
[  495.064580][T26794] netlink: 'syz.1.3735': attribute type 7 has an invalid length.
[  495.073140][T26794] netlink: 'syz.1.3735': attribute type 8 has an invalid length.
[  495.081181][T26794] NCSI netlink: No device for ifindex 131092
[  495.225911][T26798] veth3: entered allmulticast mode
[  495.792863][T26843] syzkaller1: entered allmulticast mode
[  495.988780][T26850] __nla_validate_parse: 2 callbacks suppressed
[  495.988801][T26850] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3749'.
[  496.027417][T26854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3751'.
[  496.036539][T26854] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3751'.
[  496.510775][T26887] net_ratelimit: 1825 callbacks suppressed
[  496.510795][T26887] netlink: zone id is out of range
[  496.556354][T26887] netlink: zone id is out of range
[  496.594843][T26887] netlink: zone id is out of range
[  496.626544][T26887] netlink: zone id is out of range
[  496.644725][T26887] netlink: zone id is out of range
[  496.663646][T26887] netlink: zone id is out of range
[  496.682564][T26887] netlink: zone id is out of range
[  496.706364][T26887] netlink: set zone limit has 4 unknown bytes
[  496.835261][T26904] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3765'.
[  497.044125][T26923] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.3771'.
[  497.681806][T26971] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3783'.
[  497.715950][T26971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3783'.
[  497.732794][T26973] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3782'.
[  497.735987][T26971] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3783'.
[  497.752790][T26973] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3782'.
[  497.786357][T26971] netlink: 'syz.3.3783': attribute type 2 has an invalid length.
[  498.095143][T26983] syzkaller0: entered allmulticast mode
[  498.555077][T27006] dvmrp0: entered allmulticast mode
[  498.593713][T27008] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  498.621342][T27006] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000
[  498.953282][T27021] erspan0: entered allmulticast mode
[  499.213789][T27046] netlink: 'syz.1.3804': attribute type 1 has an invalid length.
[  499.338525][T27051] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  499.355244][T27051] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  499.368074][T27051] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  499.493049][T27046] tc_dump_action: action bad kind
[  499.661138][T27071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.928048][T27135] bond0: entered promiscuous mode
[  500.942050][T27135] bond_slave_0: entered promiscuous mode
[  500.956941][T27135] bond_slave_1: entered promiscuous mode
[  501.005157][T27143] sctp: [Deprecated]: syz.5.3824 (pid 27143) Use of int in maxseg socket option.
[  501.005157][T27143] Use struct sctp_assoc_value instead
[  501.023316][T27135] bond0: left promiscuous mode
[  501.028946][T27135] bond_slave_0: left promiscuous mode
[  501.034759][T27135] bond_slave_1: left promiscuous mode
[  501.108337][T27151] netlink: 'syz.6.3822': attribute type 13 has an invalid length.
[  501.154096][T27137] __nla_validate_parse: 11 callbacks suppressed
[  501.154119][T27137] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3821'.
[  501.170911][T27154] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003
[  501.384889][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  501.790128][T27181] syzkaller0: entered promiscuous mode
[  501.796679][T27181] syzkaller0: entered allmulticast mode
[  501.919676][T27196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3831'.
[  501.966538][T27196] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3831'.
[  502.062725][T27196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3831'.
[  503.715013][T27201] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  503.891484][T27228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3838'.
[  504.149270][T27248] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3843'.
[  504.184471][T27250] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3843'.
[  504.192025][T27248] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.200741][T27248] bridge0: port 1(
1�x9�) entered disabled state
[  504.296338][T27257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3845'.
[  504.407798][T27261] gre1: entered promiscuous mode
[  504.412793][T27261] gre1: entered allmulticast mode
[  504.490374][T27271] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3849'.
[  504.500671][T27271] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3849'.
[  504.520027][T27271] netlink: 'syz.0.3849': attribute type 5 has an invalid length.
[  504.831338][T27295] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  504.837971][T27295] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  504.872173][T27296] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  504.878716][T27296] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  504.911882][T27295] netlink: 'syz.6.3854': attribute type 26 has an invalid length.
[  504.963694][T27296] netlink: 'syz.6.3854': attribute type 26 has an invalid length.
[  505.213804][T27324] sctp: [Deprecated]: syz.1.3857 (pid 27324) Use of int in max_burst socket option deprecated.
[  505.213804][T27324] Use struct sctp_assoc_value instead
[  505.399926][T27333] netlink: 'syz.6.3862': attribute type 10 has an invalid length.
[  505.435972][T27333] batman_adv: batadv0: Adding interface: netdevsim0
[  505.443762][T27333] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.471940][T27333] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  505.579774][T27340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  505.602281][T27340] batadv_slave_0: entered promiscuous mode
[  505.700011][T27346] syzkaller1: entered promiscuous mode
[  505.705898][T27346] syzkaller1: entered allmulticast mode
[  505.717169][ T5879] IPVS: starting estimator thread 0...
[  505.806735][T27349] IPVS: using max 32 ests per chain, 76800 per kthread
[  505.903748][T27355] netlink: 'syz.0.3872': attribute type 10 has an invalid length.
[  505.917543][T27355] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.925442][T27355] bridge_slave_1: left allmulticast mode
[  505.931714][T27355] bridge_slave_1: left promiscuous mode
[  505.937883][T27355] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.949310][T27355] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  506.738602][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms
[  506.746662][    C1] lec:lec_tx_timeout: lec0
[  507.752963][T27377] __nla_validate_parse: 3 callbacks suppressed
[  507.752975][T27377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3878'.
[  507.819002][T27377] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  507.927447][T27382] netlink: 'syz.6.3879': attribute type 4 has an invalid length.
[  507.947193][T27382] netlink: 'syz.6.3879': attribute type 4 has an invalid length.
[  508.061482][T27305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  508.064593][T27386] gre1: entered promiscuous mode
[  508.086354][T27386] gre1: entered allmulticast mode
[  508.182512][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3880'.
[  508.207079][T27387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3880'.
[  508.265825][T24043] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  508.320932][T24043] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  508.367483][T24043] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  508.412896][T24043] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  508.463024][T27403] openvswitch: netlink: Multiple metadata blocks provided
[  508.526006][T27403] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3887'.
[  508.541556][T27407] lo: Caught tx_queue_len zero misconfig
[  508.547633][T27407] sch_tbf: burst 21990 is lower than device lo mtu (11337746) !
[  508.929485][T27437] netlink: 'syz.3.3896': attribute type 64 has an invalid length.
[  509.118789][T27445] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  509.129780][T27442] bond3: Unable to set down delay as MII monitoring is disabled
[  509.185838][T27442] bond3 (unregistering): Released all slaves
[  509.224167][T27456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3899'.
[  509.480024][T27465] netlink: 'syz.3.3903': attribute type 6 has an invalid length.
[  509.670626][T27479] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3907'.
[  509.707667][T27483] netlink: 'syz.6.3908': attribute type 1 has an invalid length.
[  509.727747][T27483] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.3908'.
[  509.744902][T27481] netlink: 'syz.5.3909': attribute type 32 has an invalid length.
[  509.753127][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3909'.
[  509.788289][T27483] netlink: Unknown conntrack attr (type=2304, max=9)
[  509.859078][T27481] bond7: Setting coupled_control to off (0)
[  509.945008][T27492] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.962214][T27492] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.969479][T27492] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.998491][T27505] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.3913'.
[  510.013119][T24043] tipc: Subscription rejected, illegal request
[  510.024998][T27507] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.3913'.
[  510.073915][T27505] --map-set only usable from mangle table
[  510.149073][T27511] syzkaller0: entered promiscuous mode
[  510.163662][T27511] syzkaller0: entered allmulticast mode
[  510.212074][T27516] netlink: 'syz.6.3915': attribute type 21 has an invalid length.
[  510.500290][T27532] veth0: entered promiscuous mode
[  510.616117][T27532] veth0: left promiscuous mode
[  511.307594][T27586] Cannot find add_set index 0 as target
[  511.491261][T27603] netlink: 'syz.5.3936': attribute type 1 has an invalid length.
[  511.562457][T27610] netlink: 'syz.3.3937': attribute type 3 has an invalid length.
[  511.673231][T27615] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  511.681970][T27603] bond8: (slave ip6gretap1): making interface the new active one
[  511.729937][T27603] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  512.440764][T27655] netlink: 'syz.1.3948': attribute type 10 has an invalid length.
[  513.386140][ T8540] lec:lec_start_xmit: lec0:No lecd attached
[  514.147978][T27736] __nla_validate_parse: 6 callbacks suppressed
[  514.147998][T27736] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3969'.
[  514.184614][T27736] openvswitch: netlink: Flow key attr not present in new flow.
[  514.364430][T27746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3971'.
[  514.442898][T27750] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3973'.
[  514.477508][T27753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'.
[  514.558647][T27757] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3975'.
[  514.577979][T27755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3972'.
[  514.619462][T27757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3975'.
[  514.650259][T27759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3976'.
[  514.680365][T27764] veth0: entered promiscuous mode
[  515.034727][T27783] x_tables: duplicate underflow at hook 1
[  515.190139][T27793] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3983'.
[  515.322455][T27798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'.
[  515.419773][T27756] veth0: left promiscuous mode
[  516.272325][T27829] ip6tnl0: Caught tx_queue_len zero misconfig
[  516.428513][T27853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.542428][T27864] netlink: 'syz.5.4001': attribute type 2 has an invalid length.
[  516.552016][T27864] netlink: 'syz.5.4001': attribute type 2 has an invalid length.
[  516.558808][T27853] bond4: entered promiscuous mode
[  516.565234][T27864] netlink: 'syz.5.4001': attribute type 2 has an invalid length.
[  516.573964][T27853] bond4: entered allmulticast mode
[  516.585393][T27864] netlink: 'syz.5.4001': attribute type 2 has an invalid length.
[  516.602872][T27853] 8021q: adding VLAN 0 to HW filter on device bond4
[  516.668199][T27864] syzkaller0: entered promiscuous mode
[  516.688770][T27864] syzkaller0: entered allmulticast mode
[  517.082754][T27898] netlink: 'syz.0.4008': attribute type 10 has an invalid length.
[  518.740383][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms
[  518.748451][    C1] lec:lec_tx_timeout: lec0
[  518.878801][T27898] team0: Port device dummy0 added
[  519.081292][T27936] xt_TCPMSS: Only works on TCP SYN packets
[  519.317194][T27932] hsr_slave_0 (unregistering): left promiscuous mode
[  519.355945][T27948] __nla_validate_parse: 5 callbacks suppressed
[  519.355963][T27948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4018'.
[  519.423630][T27966] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4022'.
[  520.027417][T28005] bond9: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  520.042854][T28005] bond9: entered promiscuous mode
[  520.048074][T28005] bond9: entered allmulticast mode
[  520.053784][T28005] 8021q: adding VLAN 0 to HW filter on device bond9
[  520.064862][T28011] tipc: Started in network mode
[  520.091809][T28011] tipc: Node identity 665bf9ad293e, cluster identity 4711
[  520.160409][T28011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.232970][T27995] veth0_macvtap: left promiscuous mode
[  520.373968][T27993] tipc: Disabling bearer <eth:syzkaller0>
[  520.408765][T28033] bridge_slave_1: left allmulticast mode
[  520.425705][T28033] bridge_slave_1: left promiscuous mode
[  520.432724][T28033] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.473661][T28033] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4038'.
[  520.652165][T28040] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland
[  520.845974][T28056] netlink: 'syz.5.4042': attribute type 11 has an invalid length.
[  520.870300][T28056] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4042'.
[  521.227137][T28068] netdevsim netdevsim3: Direct firmware load for . failed with error -2
[  521.265876][T28068] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  521.345166][T28076] netlink: 'syz.6.4046': attribute type 1 has an invalid length.
[  521.353573][T28076] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4046'.
[  521.491371][T28073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4044'.
[  521.552337][T28083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  521.622211][T28088] veth1_macvtap: left promiscuous mode
[  521.828324][T28096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4051'.
[  521.900081][T28105] netlink: 'syz.1.4053': attribute type 30 has an invalid length.
[  522.068288][T28106] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.410496][T28123] Bluetooth: MGMT ver 1.23
[  522.774555][T28150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4064'.
[  522.817592][T28150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4064'.
[  522.859554][T28154] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4062'.
[  523.783897][   T51] block nbd2: Possible stuck request ffff888026308000: control (read@0,1024B). Runtime 30 seconds
[  523.799090][   T51] block nbd2: Possible stuck request ffff888026308200: control (read@1024,1024B). Runtime 30 seconds
[  523.810552][   T51] block nbd2: Possible stuck request ffff888026308400: control (read@2048,1024B). Runtime 30 seconds
[  523.822627][   T51] block nbd2: Possible stuck request ffff888026308600: control (read@3072,1024B). Runtime 30 seconds
[  524.037824][T23032] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  524.341612][T28239] bond2: option xmit_hash_policy: invalid value (64)
[  524.355644][T28239] bond2 (unregistering): Released all slaves
[  524.662697][T28263] __nla_validate_parse: 7 callbacks suppressed
[  524.662718][T28263] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4085'.
[  524.933554][T28273] netlink: 'syz.5.4088': attribute type 1 has an invalid length.
[  524.980775][T28273] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  525.059995][T28290] netlink: 'syz.3.4089': attribute type 21 has an invalid length.
[  525.070416][T28290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4089'.
[  525.264322][T28303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4092'.
[  525.302255][T28305] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4095'.
[  525.381984][T28305] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4095'.
[  525.941954][T28345] lo: entered promiscuous mode
[  526.001431][T28331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  526.003442][T28345] tunl0: entered promiscuous mode
[  526.050826][T28345] gre0: entered promiscuous mode
[  526.089802][T28345] gretap0: entered promiscuous mode
[  526.133685][T28345] erspan0: entered promiscuous mode
[  526.148862][T28345] erspan0: left allmulticast mode
[  526.155824][T28345] ip_vti0: entered promiscuous mode
[  526.353394][T28361] netlink: 'syz.0.4107': attribute type 21 has an invalid length.
[  526.449207][T28361] netlink: 'syz.0.4107': attribute type 6 has an invalid length.
[  526.462215][T28361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4107'.
[  526.498217][T28373] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4110'.
[  526.550603][T28373] netlink: 'syz.3.4110': attribute type 2 has an invalid length.
[  526.573501][T28376] netlink: 'syz.5.4111': attribute type 1 has an invalid length.
[  526.590944][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4110'.
[  526.652316][T28378] netlink: 'syz.6.4112': attribute type 5 has an invalid length.
[  526.802660][T28382] bond10: (slave veth7): Enslaving as an active interface with a down link
[  526.820904][T28380] netlink: 'syz.0.4113': attribute type 29 has an invalid length.
[  526.863180][T28389] netlink: 'syz.5.4111': attribute type 2 has an invalid length.
[  526.891678][T28382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4111'.
[  526.948355][T28382] 8021q: adding VLAN 0 to HW filter on device bond10
[  527.056002][T28404] sctp: [Deprecated]: syz.1.4117 (pid 28404) Use of struct sctp_assoc_value in delayed_ack socket option.
[  527.056002][T28404] Use struct sctp_sack_info instead
[  527.089467][T28408] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  527.270410][T28420] netlink: 'syz.5.4119': attribute type 2 has an invalid length.
[  527.300826][T28417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  527.308713][T28417] syzkaller0: entered promiscuous mode
[  527.314206][T28417] syzkaller0: entered allmulticast mode
[  527.321075][T28420] netlink: 'syz.5.4119': attribute type 1 has an invalid length.
[  527.753893][T28444] 8021q: adding VLAN 0 to HW filter on device bond4
[  527.761140][T28451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4131'.
[  527.781028][T24117] IPVS: starting estimator thread 0...
[  527.797994][T28444] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  527.820555][T28444] bond4: (slave macvlan2): making interface the new active one
[  527.863058][T28455] rdma_rxe: rxe_newlink: failed to add bond0
[  527.899207][T28452] IPVS: using max 34 ests per chain, 81600 per kthread
[  527.912024][T28444] bond4: (slave macvlan2): Enslaving as an active interface with an up link
[  528.087380][T28414] tipc: Resetting bearer <eth:syzkaller0>
[  528.130210][T28414] tipc: Disabling bearer <eth:syzkaller0>
[  528.160748][T28463] netlink: 'syz.0.4133': attribute type 10 has an invalid length.
[  528.188411][T28463] 8021q: adding VLAN 0 to HW filter on device team0
[  528.209136][T28463] bond0: (slave team0): Enslaving as an active interface with an up link
[  528.537267][T28489] netlink: 'syz.0.4137': attribute type 7 has an invalid length.
[  528.577180][T28491] delete_channel: no stack
[  528.586780][T28491] delete_channel: no stack
[  529.872196][ T5829] Bluetooth: hci0: command 0x0405 tx timeout
[  530.012661][T28577] __nla_validate_parse: 9 callbacks suppressed
[  530.012680][T28577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4159'.
[  530.098101][T28577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4159'.
[  530.109159][T28592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4162'.
[  530.119225][T28600] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4163'.
[  530.263281][T28609] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4165'.
[  530.427685][T28613] geneve2: entered promiscuous mode
[  530.481846][T28613] geneve2: entered allmulticast mode
[  530.622786][T28632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4171'.
[  530.941590][T28653] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4175'.
[  531.074673][T28651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4176'.
[  531.101128][T28651] sctp: [Deprecated]: syz.0.4176 (pid 28651) Use of struct sctp_assoc_value in delayed_ack socket option.
[  531.101128][T28651] Use struct sctp_sack_info instead
[  531.379595][T28679] netlink: 'syz.1.4181': attribute type 11 has an invalid length.
[  531.778097][T28701] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  531.836490][T28701] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  532.010869][T28716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4188'.
[  532.062584][T28716] bridge2: entered promiscuous mode
[  532.068168][T28716] bridge2: entered allmulticast mode
[  532.341200][T28729] syzkaller0: entered promiscuous mode
[  532.371716][T28729] syzkaller0: entered allmulticast mode
[  532.683798][T28749] netlink: 496 bytes leftover after parsing attributes in process `syz.6.4197'.
[  532.829045][T28760] bridge_slave_1: left allmulticast mode
[  532.835065][T28760] bridge_slave_1: left promiscuous mode
[  532.884985][T28760] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.947224][T28760] �x9�: left allmulticast mode
[  532.952150][T28760] �x9�: left promiscuous mode
[  532.970898][T28771] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  533.006147][T28760] bridge0: port 1(
1�x9�) entered disabled state
[  533.149888][T28784] sctp: [Deprecated]: syz.0.4206 (pid 28784) Use of int in maxseg socket option.
[  533.149888][T28784] Use struct sctp_assoc_value instead
[  533.247218][T28772] veth0: Caught tx_queue_len zero misconfig
[  533.368576][T23347] udevd[23347]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  533.821604][T28823] netlink: 'syz.1.4215': attribute type 8 has an invalid length.
[  534.158478][T28840] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  534.176797][T24454] Bluetooth: hci4: command 0x0406 tx timeout
[  534.309208][T28854] netlink: 'syz.3.4221': attribute type 1 has an invalid length.
[  534.411990][T28865] netlink: 'syz.0.4223': attribute type 1 has an invalid length.
[  534.423964][T28854] bond5: entered promiscuous mode
[  534.432955][T28854] 8021q: adding VLAN 0 to HW filter on device bond5
[  534.571246][T28854] bond5: (slave bridge0): making interface the new active one
[  534.605866][T28854] bridge0: entered promiscuous mode
[  534.621546][T28854] bond5: (slave bridge0): Enslaving as an active interface with an up link
[  535.253303][T28913] netlink: 'syz.0.4233': attribute type 15 has an invalid length.
[  535.344082][T28917] __nla_validate_parse: 9 callbacks suppressed
[  535.344099][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4234'.
[  535.437143][T28922] netlink: 'syz.3.4235': attribute type 10 has an invalid length.
[  535.704938][T28922] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  535.747800][T28922] netlink: 'syz.3.4235': attribute type 10 has an invalid length.
[  535.797596][T28922] netlink: 'syz.3.4235': attribute type 10 has an invalid length.
[  535.809685][T28922] netlink: 'syz.3.4235': attribute type 10 has an invalid length.
[  535.866758][T28922] netlink: 'syz.3.4235': attribute type 10 has an invalid length.
[  535.899674][T28922] netlink: 'syz.3.4235': attribute type 10 has an invalid length.
[  536.059276][T28943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4238'.
[  536.214637][T28955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4240'.
[  536.729325][T28989] xt_cgroup: xt_cgroup: no path or classid specified
[  536.941733][T28998] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4251'.
[  536.999561][T29001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4249'.
[  537.226831][T29020] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  537.519420][T29038] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4261'.
[  537.545644][T29040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4262'.
[  537.555406][T29038] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4261'.
[  537.586507][T29040] openvswitch: netlink: EtherType 50a is less than min 600
[  537.720905][T29048] tls_set_device_offload: netdev not found
[  537.901238][T29052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.070110][T29067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4268'.
[  538.088270][T29060] syzkaller0: entered promiscuous mode
[  538.094194][T29060] syzkaller0: entered allmulticast mode
[  538.114739][T29071] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4270'.
[  538.146768][T29052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.288946][T29052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.395534][T29079] nbd: must specify a device to reconfigure
[  538.728892][T29088] xt_policy: neither incoming nor outgoing policy selected
[  539.296784][T24454] Bluetooth: hci6: command 0x0405 tx timeout
[  540.179250][T29052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.292401][T29092] validate_nla: 60 callbacks suppressed
[  540.292420][T29092] netlink: 'syz.5.4277': attribute type 21 has an invalid length.
[  540.343732][T29084] geneve2: entered promiscuous mode
[  540.356445][T29084] geneve2: entered allmulticast mode
[  540.369576][T29087] gtp1: entered promiscuous mode
[  540.403179][T29097] __nla_validate_parse: 3 callbacks suppressed
[  540.403195][T29097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4278'.
[  540.477515][T29101] netlink: 'syz.6.4280': attribute type 83 has an invalid length.
[  540.681740][T23032] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  540.725372][T23032] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  540.801810][T24047] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.847779][T24050] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.196675][T29140] nbd: must specify an index to disconnect
[  541.212966][T29140] netlink: 'syz.3.4288': attribute type 1 has an invalid length.
[  541.420042][T29145] bond6: (slave bridge1): making interface the new active one
[  541.474658][T29145] bond6: (slave bridge1): Enslaving as an active interface with an up link
[  541.700141][T29165] netlink: 'syz.5.4292': attribute type 11 has an invalid length.
[  541.725518][T29165] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4292'.
[  541.838704][T29178] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4298'.
[  541.965950][T29176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4296'.
[  542.008001][T29188] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4299'.
[  542.029338][T29191] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  542.068156][T29190] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  542.136762][T29196] netlink: 'syz.5.4301': attribute type 1 has an invalid length.
[  542.162560][T29197] netlink: 'syz.5.4301': attribute type 1 has an invalid length.
[  542.181495][T29193] syzkaller0: entered promiscuous mode
[  542.192538][T29193] syzkaller0: entered allmulticast mode
[  542.204585][T29200] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4302'.
[  542.255388][T29201] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4302'.
[  542.291822][T29209] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4302'.
[  542.316782][T29205] bond11: Unable to set up delay as MII monitoring is disabled
[  542.325775][T29213] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4303'.
[  542.345931][T29205] bond11 (unregistering): Released all slaves
[  542.384667][T29196] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  542.387641][T29197] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  542.419574][T29203] IPv6: sit1: Disabled Multicast RS
[  542.436919][T29203] sit1: entered allmulticast mode
[  542.566794][T29208] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.606499][T29230] netlink: 'syz.5.4306': attribute type 1 has an invalid length.
[  542.630173][T29193] tipc: Resetting bearer <eth:syzkaller0>
[  542.646606][T29230] netlink: 'syz.5.4306': attribute type 1 has an invalid length.
[  542.677051][T29230] netlink: 'syz.5.4306': attribute type 1 has an invalid length.
[  542.694035][T29193] tipc: Disabling bearer <eth:syzkaller0>
[  542.699348][T29230] netlink: 'syz.5.4306': attribute type 1 has an invalid length.
[  542.715729][T29230] netlink: 'syz.5.4306': attribute type 1 has an invalid length.
[  542.737248][T29227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4305'.
[  543.002414][T29247] xfrm2: entered promiscuous mode
[  543.008975][T29247] xfrm2: entered allmulticast mode
[  543.370178][T29267] bond11: option xmit_hash_policy: invalid value (64)
[  543.380262][T29267] bond11 (unregistering): Released all slaves
[  543.528420][T29275] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  543.581838][T29275] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  543.806849][T29289] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  543.852985][T29292] openvswitch: netlink: IP tunnel dst address not specified
[  544.320714][T29313] netlink: 'syz.6.4327': attribute type 11 has an invalid length.
[  544.412280][T29311] team0 (unregistering): Port device team_slave_0 removed
[  544.458350][T29323] xt_hashlimit: size too large, truncated to 1048576
[  544.489723][T29311] team0 (unregistering): Port device team_slave_1 removed
[  544.513188][T29312] syzkaller0: entered promiscuous mode
[  544.523487][T29312] syzkaller0: entered allmulticast mode
[  544.694228][T29330] IPv6: Can't replace route, no match found
[  544.720606][T29332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.149495][T29358] sctp: [Deprecated]: syz.3.4339 (pid 29358) Use of int in maxseg socket option.
[  545.149495][T29358] Use struct sctp_assoc_value instead
[  545.494473][T29375] __nla_validate_parse: 11 callbacks suppressed
[  545.494493][T29375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4343'.
[  545.555554][T29375] netlink: 50 bytes leftover after parsing attributes in process `syz.0.4343'.
[  545.594923][T29375] netlink: 50 bytes leftover after parsing attributes in process `syz.0.4343'.
[  545.654087][T29384] netlink: 288 bytes leftover after parsing attributes in process `syz.5.4342'.
[  545.854963][T29391] validate_nla: 65 callbacks suppressed
[  545.854982][T29391] netlink: 'syz.3.4347': attribute type 1 has an invalid length.
[  545.859491][T29395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4346'.
[  545.937019][T29395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4346'.
[  546.000751][T29401] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4346'.
[  546.205040][T29418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4354'.
[  546.478637][T29431] netlink: 'syz.1.4358': attribute type 2 has an invalid length.
[  546.508951][T29431] netlink: 'syz.1.4358': attribute type 8 has an invalid length.
[  546.533245][T29431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4358'.
[  546.555473][T29436] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4360'.
[  546.996149][T29469] vlan3: entered allmulticast mode
[  547.827434][T29518] netlink: 'syz.3.4379': attribute type 9 has an invalid length.
[  547.883396][T29525] Cannot find add_set index 0 as target
[  547.898225][T29525] Cannot find add_set index 0 as target
[  547.904510][T29525] Cannot find add_set index 0 as target
[  547.916403][T29525] Cannot find add_set index 0 as target
[  547.933985][T29528] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  547.977531][T29525] Cannot find add_set index 0 as target
[  547.992622][T29525] Cannot find add_set index 0 as target
[  548.016724][T29525] Cannot find add_set index 0 as target
[  548.032910][T29525] Cannot find add_set index 0 as target
[  548.056740][T29525] Cannot find add_set index 0 as target
[  548.070549][T29525] Cannot find add_set index 0 as target
[  548.330576][T29559] IPVS: length: 219 != 8
[  548.679143][T29575] team0: Device ip6gre1 is of different type
[  549.031588][T29580] team0: Port device dummy0 removed
[  549.152200][T29595] syzkaller0: entered promiscuous mode
[  549.158164][T29595] syzkaller0: entered allmulticast mode
[  549.589230][T29616] netlink: set zone limit has 4 unknown bytes
[  551.590008][T29651] __nla_validate_parse: 9 callbacks suppressed
[  551.590024][T29651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4402'.
[  551.681187][T29651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4402'.
[  551.776634][T23037] wlan1: Trigger new scan to find an IBSS to join
[  551.942888][T29666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4405'.
[  551.979481][T29676] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4409'.
[  552.015514][T29671] syzkaller1: entered promiscuous mode
[  552.021798][T29671] syzkaller1: entered allmulticast mode
[  552.261155][T29692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4413'.
[  552.336986][T29692] bond0: entered promiscuous mode
[  552.345533][T29692] bond_slave_0: entered promiscuous mode
[  552.358274][T29692] bond_slave_1: entered promiscuous mode
[  552.373315][T29700] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  552.374429][T29692] bridge_slave_1: entered promiscuous mode
[  552.414087][T29692] bond0: left promiscuous mode
[  552.419777][T29692] bond_slave_0: left promiscuous mode
[  552.426786][T29692] bond_slave_1: left promiscuous mode
[  552.446961][T29692] bridge_slave_1: left promiscuous mode
[  552.658340][T29711] lo: left promiscuous mode
[  552.663192][T29711] tunl0: left promiscuous mode
[  552.677338][T29711] gre0: left promiscuous mode
[  552.698652][T29711] gretap0: left promiscuous mode
[  552.717084][T29711] erspan0: left promiscuous mode
[  552.745592][T29711] ip_vti0: left promiscuous mode
[  553.048969][T29732] netlink: 'syz.6.4423': attribute type 7 has an invalid length.
[  553.202627][T29711] batadv_slave_0: left promiscuous mode
[  553.223852][T29711] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.867513][   T51] block nbd2: Possible stuck request ffff888026308000: control (read@0,1024B). Runtime 60 seconds
[  553.882372][   T51] block nbd2: Possible stuck request ffff888026308200: control (read@1024,1024B). Runtime 60 seconds
[  553.893978][   T51] block nbd2: Possible stuck request ffff888026308400: control (read@2048,1024B). Runtime 60 seconds
[  553.905636][   T51] block nbd2: Possible stuck request ffff888026308600: control (read@3072,1024B). Runtime 60 seconds
[  553.934462][T29754] netlink: 'syz.1.4424': attribute type 3 has an invalid length.
[  554.019266][T29758] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4424'.
[  554.091439][T29758] xt_policy: output policy not valid in PREROUTING and INPUT
[  554.737051][T23035] wlan1: Trigger new scan to find an IBSS to join
[  555.657741][T29731] ipvlan2: entered promiscuous mode
[  555.668252][T23037] wlan1: Creating new IBSS network, BSSID 00:00:00:00:07:00
[  555.681635][T23054] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.691249][T23054] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.748845][T23054] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.761792][T29732] netlink: 'syz.6.4423': attribute type 7 has an invalid length.
[  555.774955][T23054] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.823999][T29768] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4428'.
[  556.006891][T29772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4429'.
[  556.044723][T29778] IPv6: NLM_F_CREATE should be specified when creating new route
[  556.203704][T29781] batadv_slave_0: entered promiscuous mode
[  556.249663][T29781] batadv_slave_0: left promiscuous mode
[  556.281974][T29790] tipc: Started in network mode
[  556.295329][T29790] tipc: Node identity 1efa3dda8cf3, cluster identity 4711
[  556.315957][T29790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.419897][T29790] netlink: 'syz.0.4433': attribute type 2 has an invalid length.
[  556.494014][T29797] syzkaller0: entered promiscuous mode
[  556.524850][T29797] syzkaller0: entered allmulticast mode
[  556.544914][T29797] tipc: Resetting bearer <eth:syzkaller0>
[  556.585919][T29814] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  556.609597][T29810] team_slave_0: entered promiscuous mode
[  556.615800][T29810] team_slave_1: entered promiscuous mode
[  556.650249][T29810] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  556.667164][T29810] team0: Device macvlan2 is already an upper device of the team interface
[  556.680918][T29810] team_slave_0: left promiscuous mode
[  556.686456][T29810] team_slave_1: left promiscuous mode
[  556.749786][T29789] tipc: Resetting bearer <eth:syzkaller0>
[  556.831030][T29827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4443'.
[  558.592906][T29789] tipc: Disabling bearer <eth:syzkaller0>
[  558.606059][ T5879] tipc: Node number set to 2450079194
[  559.337862][T29889] xt_cluster: node mask cannot exceed total number of nodes
[  559.346586][T29884] ipvlan3: entered promiscuous mode
[  559.449002][T29893] : entered promiscuous mode
[  559.549661][T29898] netlink: 'syz.1.4459': attribute type 1 has an invalid length.
[  559.608324][T29898] bond5: (slave veth7): Enslaving as an active interface with a down link
[  559.779585][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[  559.962738][T29921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4467'.
[  559.992962][T29924] netlink: 'syz.6.4468': attribute type 1 has an invalid length.
[  560.045860][T29930] netlink: 'syz.1.4469': attribute type 24 has an invalid length.
[  560.143070][T29932] No such timeout policy "syz0"
[  560.227333][T29941] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4472'.
[  560.237647][T29942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4473'.
[  560.291957][T29947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4475'.
[  560.415649][T29953] IPv6: sit1: Disabled Multicast RS
[  560.447256][T29953] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4474'.
[  560.473667][T29955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4475'.
[  560.839025][T29978] netlink: 'syz.1.4480': attribute type 1 has an invalid length.
[  560.859448][T29976] syzkaller0: entered promiscuous mode
[  560.865138][T29976] syzkaller0: entered allmulticast mode
[  560.879748][T29981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.903968][T29983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4480'.
[  560.965914][T29988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'.
[  561.105486][T29998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4482'.
[  561.116063][T29990] bond11 (unregistering): Released all slaves
[  561.142382][T30000] nbd: couldn't find a device at index 0
[  561.207405][T29988] bond6 (unregistering): Released all slaves
[  561.272200][T29971] tipc: Resetting bearer <eth:syzkaller0>
[  561.387792][T29971] tipc: Disabling bearer <eth:syzkaller0>
[  561.444443][    T9] IPVS: starting estimator thread 0...
[  561.567690][T30013] IPVS: using max 55 ests per chain, 132000 per kthread
[  562.819526][T30113] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  562.827840][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  562.828232][T30114] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  562.964303][T30117] __nla_validate_parse: 7 callbacks suppressed
[  562.964316][T30117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4506'.
[  563.058295][T30122] ip6gre1: entered allmulticast mode
[  563.113225][T30124] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  563.277539][T30131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4512'.
[  564.549209][T30021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  565.097212][   T30] audit: type=1800 audit(1770366743.138:11): pid=30140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4515" name="memory.events" dev="tmpfs" ino=1577 res=0 errno=0
[  565.263468][T30166] IPv6: sit2: Disabled Multicast RS
[  565.368126][T30166] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4520'.
[  565.419956][T30173] syzkaller0: entered promiscuous mode
[  565.425502][T30173] syzkaller0: entered allmulticast mode
[  565.833509][T30187] sctp: [Deprecated]: syz.5.4525 (pid 30187) Use of struct sctp_assoc_value in delayed_ack socket option.
[  565.833509][T30187] Use struct sctp_sack_info instead
[  566.225936][T30213] syzkaller0: entered promiscuous mode
[  566.244523][T30213] syzkaller0: entered allmulticast mode
[  566.417514][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.593849][T30233] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4535'.
[  566.977755][T30254] netlink: 'syz.1.4539': attribute type 1 has an invalid length.
[  567.026869][T30254] netlink: 'syz.1.4539': attribute type 4 has an invalid length.
[  567.058360][T30254] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4539'.
[  567.263249][T30273] sctp: [Deprecated]: syz.1.4543 (pid 30273) Use of int in max_burst socket option deprecated.
[  567.263249][T30273] Use struct sctp_assoc_value instead
[  567.395058][T30280] delete_channel: no stack
[  567.413739][T30280] xt_NFQUEUE: number of total queues is 0
[  567.420842][T30282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4546'.
[  567.585714][T30288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4548'.
[  567.624671][T30288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  567.699674][T30296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4549'.
[  567.711628][T30298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4552'.
[  567.722985][T30288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  567.763129][T30302] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4549'.
[  567.836396][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  567.844543][    C1] lec:lec_tx_timeout: lec0
[  567.889412][T30296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.911931][T30296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.925742][T30308] xt_TCPMSS: Only works on TCP SYN packets
[  567.932485][T30296] bond0 (unregistering): Released all slaves
[  568.385726][T30333] netlink: 'syz.0.4560': attribute type 6 has an invalid length.
[  568.406145][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4559'.
[  568.506736][T30340] netlink: 'syz.0.4560': attribute type 6 has an invalid length.
[  568.632332][T30344] netlink: 'syz.5.4564': attribute type 21 has an invalid length.
[  568.999232][T30371] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  569.040663][T30377] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  569.088795][T30373] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4575'.
[  569.348274][T30391] lo: entered promiscuous mode
[  569.359558][T30391] tunl0: entered promiscuous mode
[  569.373723][T30391] gre0: entered promiscuous mode
[  569.394278][T30397] xt_CT: You must specify a L4 protocol and not use inversions on it
[  569.406327][T30391] gretap0: entered promiscuous mode
[  569.416059][T30391] erspan0: entered promiscuous mode
[  569.429713][T30391] ip_vti0: entered promiscuous mode
[  569.449078][T30394] netlink: 'syz.6.4581': attribute type 30 has an invalid length.
[  569.669570][T30413] netlink: 51 bytes leftover after parsing attributes in process `syz.5.4585'.
[  569.847272][T30424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4588'.
[  569.897951][T30427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4590'.
[  569.965285][T30435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4593'.
[  569.978355][T30434] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4592'.
[  570.130601][T30445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4597'.
[  570.166753][T30445] bridge_slave_0: left allmulticast mode
[  570.173178][T30445] bridge_slave_0: left promiscuous mode
[  570.194252][T30445] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.271473][T30443] netem: unknown loss type 0
[  570.279693][T30443] netem: change failed
[  570.399465][T30463] netlink: 'syz.6.4599': attribute type 1 has an invalid length.
[  570.408237][T30463] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4599'.
[  570.603665][T30475] netlink: 'syz.6.4604': attribute type 9 has an invalid length.
[  570.717939][T30481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4605'.
[  571.056537][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.069657][T30509] x_tables: duplicate underflow at hook 2
[  572.417435][T10889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.673099][T30479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  573.948117][T30545] __nla_validate_parse: 1 callbacks suppressed
[  573.948134][T30545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4619'.
[  573.981940][T30543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4618'.
[  573.989230][T30537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4619'.
[  574.171739][T30555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  574.349459][T30555] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.400481][T30577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.431616][T30577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.440205][T30561] ip_vti0: entered promiscuous mode
[  574.451163][T30577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.475124][T30581] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4626'.
[  574.479737][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4623'.
[  574.494829][T30583] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4627'.
[  574.506917][T30581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4626'.
[  574.515508][T30577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.551671][T30581] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4626'.
[  574.557704][T30577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.575046][T30581] netlink: 'syz.5.4626': attribute type 3 has an invalid length.
[  574.587374][T30577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.609763][T30581] netlink: 'syz.5.4626': attribute type 2 has an invalid length.
[  574.637062][T30581] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4626'.
[  574.666981][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.676505][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.888068][T30601] netlink: 'syz.6.4631': attribute type 2 has an invalid length.
[  574.902191][T30601] netlink: 'syz.6.4631': attribute type 8 has an invalid length.
[  574.926398][T30601] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4631'.
[  575.758963][T30649] netlink: 'syz.1.4639': attribute type 24 has an invalid length.
[  576.088848][T30666] gre1: entered promiscuous mode
[  576.098594][T30666] gre1: entered allmulticast mode
[  577.008763][T30733] netlink: 'syz.0.4658': attribute type 4 has an invalid length.
[  577.042228][T30734] netlink: 'syz.0.4658': attribute type 4 has an invalid length.
[  577.123284][T30738] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  577.140321][T30738] bond3 (unregistering): Released all slaves
[  577.166022][T30735] bridge_slave_1: entered allmulticast mode
[  577.250940][T30747] syzkaller0: entered promiscuous mode
[  577.264562][T30747] syzkaller0: entered allmulticast mode
[  577.365119][T30757] net_ratelimit: 5 callbacks suppressed
[  577.365138][T30757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.408166][T30752] gre1: entered promiscuous mode
[  577.438547][T30752] gre1: entered allmulticast mode
[  577.610484][ T8540] lec:lec_start_xmit: lec0:No lecd attached
[  577.879995][T30777] delete_channel: no stack
[  578.337715][T24044] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  578.362052][T24044] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  578.373893][T30810] x_tables: unsorted entry at hook 1
[  578.413939][T24044] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  578.454296][T24044] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  578.964103][T30867] __nla_validate_parse: 12 callbacks suppressed
[  578.964122][T30867] netlink: 31 bytes leftover after parsing attributes in process `syz.6.4689'.
[  579.026934][T30868] xt_CT: You must specify a L4 protocol and not use inversions on it
[  579.378522][T30873] debugfs: 'K��u�cr��K:����̥�B����|����lS��-!' already exists in 'ieee80211'
[  579.804172][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805469a400: rx timeout, send abort
[  579.894633][T30922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4705'.
[  580.161562][T30938] netlink: 'syz.6.4707': attribute type 29 has an invalid length.
[  580.182680][T30938] netlink: 'syz.6.4707': attribute type 29 has an invalid length.
[  580.209963][T30938] netlink: 500 bytes leftover after parsing attributes in process `syz.6.4707'.
[  580.304294][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805469b000: rx timeout, send abort
[  580.312987][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805469a400: abort rx timeout. Force session deactivation
[  580.343622][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805469b000: connection exists (fe ff). last cmd: 20
[  580.502616][T30956] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4711'.
[  580.593601][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805469a800: rx timeout, send abort
[  580.657291][T30966] netlink: 'syz.0.4714': attribute type 1 has an invalid length.
[  580.890284][T30979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4717'.
[  581.001100][T30982] lo: entered promiscuous mode
[  581.030675][T30983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4720'.
[  581.074078][T30982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  581.101973][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805469a800: abort rx timeout. Force session deactivation
[  581.386450][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056487400: rx timeout, send abort
[  581.526435][T31018] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  581.631346][T31031] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  581.868273][T31044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4733'.
[  581.887899][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057bbd000: rx timeout, send abort
[  581.897726][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056487400: abort rx timeout. Force session deactivation
[  581.920093][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888057bbd000: connection exists (fe ff). last cmd: 20
[  582.015834][T31042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4732'.
[  582.032194][T10889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.092954][T31051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4735'.
[  582.170025][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055d89000: rx timeout, send abort
[  582.297537][T31063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4738'.
[  582.319481][T31063] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.508527][T31086] syz.0.4743: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  582.544631][T31086] CPU: 0 UID: 0 PID: 31086 Comm: syz.0.4743 Not tainted syzkaller #0 PREEMPT(full) 
[  582.544666][T31086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  582.544680][T31086] Call Trace:
[  582.544688][T31086]  <TASK>
[  582.544697][T31086]  dump_stack_lvl+0xe8/0x150
[  582.544729][T31086]  warn_alloc+0x249/0x340
[  582.544748][T31086]  ? stack_trace_save+0xa9/0x100
[  582.544774][T31086]  ? __pfx_warn_alloc+0x10/0x10
[  582.544797][T31086]  ? kasan_save_track+0x4f/0x80
[  582.544812][T31086]  ? kasan_save_track+0x3e/0x80
[  582.544828][T31086]  ? __kasan_kmalloc+0x93/0xb0
[  582.544844][T31086]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  582.544860][T31086]  ? xskq_create+0x56/0x170
[  582.544878][T31086]  ? xsk_setsockopt+0x54c/0x990
[  582.544903][T31086]  ? do_sock_setsockopt+0x17c/0x1b0
[  582.544926][T31086]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  582.544950][T31086]  ? do_syscall_64+0xe2/0xf80
[  582.544973][T31086]  __vmalloc_node_range_noprof+0x132/0x1730
[  582.545027][T31086]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  582.545055][T31086]  ? __kasan_kmalloc+0x93/0xb0
[  582.545081][T31086]  vmalloc_user_noprof+0xad/0xe0
[  582.545101][T31086]  ? xskq_create+0xbf/0x170
[  582.545120][T31086]  xskq_create+0xbf/0x170
[  582.545142][T31086]  xsk_init_queue+0xad/0x110
[  582.545173][T31086]  xsk_setsockopt+0x54c/0x990
[  582.545203][T31086]  ? __pfx_xsk_setsockopt+0x10/0x10
[  582.545230][T31086]  ? __pfx_aa_sk_perm+0x10/0x10
[  582.545257][T31086]  ? aa_sock_opt_perm+0xff/0x1a0
[  582.545284][T31086]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  582.545304][T31086]  ? __pfx_xsk_setsockopt+0x10/0x10
[  582.545333][T31086]  do_sock_setsockopt+0x17c/0x1b0
[  582.545363][T31086]  __x64_sys_setsockopt+0x13d/0x1b0
[  582.545394][T31086]  do_syscall_64+0xe2/0xf80
[  582.545413][T31086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.545431][T31086]  ? trace_irq_disable+0x37/0x100
[  582.545450][T31086]  ? clear_bhb_loop+0x60/0xb0
[  582.545474][T31086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.545493][T31086] RIP: 0033:0x7fd098f9aeb9
[  582.545512][T31086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.545530][T31086] RSP: 002b:00007fd099dfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  582.545551][T31086] RAX: ffffffffffffffda RBX: 00007fd099215fa0 RCX: 00007fd098f9aeb9
[  582.545566][T31086] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  582.545579][T31086] RBP: 00007fd099008c1f R08: 0000000000000004 R09: 0000000000000000
[  582.545591][T31086] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  582.545607][T31086] R13: 00007fd099216038 R14: 00007fd099215fa0 R15: 00007ffcd96fbbd8
[  582.545641][T31086]  </TASK>
[  582.736337][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms
[  582.738593][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055d89000: abort rx timeout. Force session deactivation
[  582.741359][    C1] lec:lec_tx_timeout: lec0
[  582.761838][T31086] Mem-Info:
[  582.843621][T31086] active_anon:6717 inactive_anon:0 isolated_anon:0
[  582.843621][T31086]  active_file:3270 inactive_file:40114 isolated_file:0
[  582.843621][T31086]  unevictable:768 dirty:58 writeback:0
[  582.843621][T31086]  slab_reclaimable:12638 slab_unreclaimable:122248
[  582.843621][T31086]  mapped:41740 shmem:1362 pagetables:1426
[  582.843621][T31086]  sec_pagetables:0 bounce:0
[  582.843621][T31086]  kernel_misc_reclaimable:0
[  582.843621][T31086]  free:1270031 free_pcp:13053 free_cma:0
[  582.889771][T31086] Node 0 active_anon:26868kB inactive_anon:0kB active_file:13080kB inactive_file:160252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:166960kB dirty:232kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15680kB pagetables:5560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  582.922513][T31086] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  582.952710][T31086] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  583.004358][T31086] lowmem_reserve[]: 0 2494 2495 2495 2495
[  583.028341][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056f1e400: rx timeout, send abort
[  583.047362][T31086] Node 0 DMA32 free:1160832kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26968kB inactive_anon:0kB active_file:13080kB inactive_file:160252kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:34028kB local_pcp:14820kB free_cma:0kB
[  583.102092][T31086] lowmem_reserve[]: 0 0 1 1 1
[  583.108153][T31086] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  583.172549][T31100] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.174277][T31086] lowmem_reserve[]:
[  583.179910][T31100] bridge0: port 2(bridge_slave_1) entered listening state
[  583.180870][T31086]  0
[  583.184010][T31100] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.191427][T31086]  0
[  583.193523][T31100] bridge0: port 1(bridge_slave_0) entered listening state
[  583.201678][T31086]  0 0 0
[  583.221505][T31086] Node 1 Normal free:3904060kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19260kB local_pcp:12060kB free_cma:0kB
[  583.273198][T31106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.280196][T31086] lowmem_reserve[]: 0 0 0 0 0
[  583.311942][T31086] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  583.324238][T31100] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.348050][T31086] Node 0 DMA32: 7546*4kB (UM) 6347*8kB (UM) 3116*16kB (UM) 424*32kB (UM) 111*64kB (UME) 178*128kB (UM) 162*256kB (UME) 48*512kB (UM) 113*1024kB (UME) 51*2048kB (UM) 171*4096kB (UM) = 1160896kB
[  583.381082][T31100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  583.416402][T31086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  583.450908][T31086] Node 1 Normal: 173*4kB (UE) 47*8kB (UME) 45*16kB (UME) 80*32kB (UME) 27*64kB (UME) 9*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3904060kB
[  583.537620][    C0] vcan0: j1939_tp_rxtimer: 0xffff888059055000: rx timeout, send abort
[  583.545886][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056f1e400: abort rx timeout. Force session deactivation
[  583.559125][T31086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  583.572320][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059055000: connection exists (fe ff). last cmd: 20
[  583.583540][T31086] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  583.595690][T31116] bridge0: the hash_elasticity option has been deprecated and is always 16
[  583.616721][T31086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  583.631658][T31086] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  583.641233][T31086] 44742 total pagecache pages
[  583.648293][T31086] 0 pages in swap cache
[  583.652500][T31086] Free swap  = 124996kB
[  583.656728][T31086] Total swap = 124996kB
[  583.660983][T31086] 2097051 pages RAM
[  583.664799][T31086] 0 pages HighMem/MovableOnly
[  583.746883][T31086] 426624 pages reserved
[  583.751089][T31086] 0 pages cma reserved
[  583.822287][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056f1f400: rx timeout, send abort
[  583.880853][T31131] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  583.940036][   T51] block nbd2: Possible stuck request ffff888026308000: control (read@0,1024B). Runtime 90 seconds
[  583.947106][T31135] syzkaller1: entered promiscuous mode
[  583.951069][   T51] block nbd2: Possible stuck request ffff888026308200: control (read@1024,1024B). Runtime 90 seconds
[  583.956508][T31135] syzkaller1: entered allmulticast mode
[  583.972808][   T51] block nbd2: Possible stuck request ffff888026308400: control (read@2048,1024B). Runtime 90 seconds
[  583.983874][   T51] block nbd2: Possible stuck request ffff888026308600: control (read@3072,1024B). Runtime 90 seconds
[  584.330587][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056f1f400: abort rx timeout. Force session deactivation
[  584.615939][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056f1f800: rx timeout, send abort
[  584.903059][T31195] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003
[  585.029215][T31204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4773'.
[  585.059788][T31206] sctp: [Deprecated]: syz.1.4774 (pid 31206) Use of int in maxseg socket option.
[  585.059788][T31206] Use struct sctp_assoc_value instead
[  585.116063][    C0] vcan0: j1939_tp_rxtimer: 0xffff888078d3a400: rx timeout, send abort
[  585.124406][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056f1f800: abort rx timeout. Force session deactivation
[  585.145869][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888078d3a400: connection exists (fe ff). last cmd: 20
[  585.160695][T31206] netlink: 'syz.1.4774': attribute type 12 has an invalid length.
[  585.179097][T31206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4774'.
[  585.198624][T31206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4774'.
[  585.273189][T31221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4778'.
[  585.300566][T31216] bridge_slave_1: entered allmulticast mode
[  585.395840][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056f1e000: rx timeout, send abort
[  585.411339][T31230] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4782'.
[  585.435592][T31230] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4782'.
[  585.450911][T31230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4782'.
[  585.476842][T31234] xt_hashlimit: max too large, truncated to 1048576
[  585.525403][T31234] netlink: 'syz.0.4783': attribute type 2 has an invalid length.
[  585.563655][T31234] �9: entered promiscuous mode
[  585.670168][T24049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  585.714381][T31250] veth0: entered promiscuous mode
[  585.765254][T31249] veth0: left promiscuous mode
[  585.856794][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.865491][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.904133][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056f1e000: abort rx timeout. Force session deactivation
[  586.182969][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031898c00: rx timeout, send abort
[  586.239337][T31277] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  586.618873][T31305] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4800'.
[  586.631732][T31297] syzkaller0: entered promiscuous mode
[  586.637451][T31297] syzkaller0: entered allmulticast mode
[  586.664045][T31308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4804'.
[  586.682680][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057222000: rx timeout, send abort
[  586.691764][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031898c00: abort rx timeout. Force session deactivation
[  586.722171][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888057222000: connection exists (fe ff). last cmd: 20
[  586.769535][T31305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4800'.
[  586.816618][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.825261][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.972136][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031898000: rx timeout, send abort
[  587.480522][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031898000: abort rx timeout. Force session deactivation
[  587.776672][T24049] wlan1: Trigger new scan to find an IBSS to join
[  588.422113][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.430409][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.439228][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.447414][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.388083][T31374] netlink: 'syz.5.4818': attribute type 4 has an invalid length.
[  589.604529][T31385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.625564][T31385] syzkaller0: entered promiscuous mode
[  589.650664][T31385] syzkaller0: entered allmulticast mode
[  589.683681][T31385] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  589.794502][T31385] tipc: Resetting bearer <eth:syzkaller0>
[  589.809171][T31397] sit0: Caught tx_queue_len zero misconfig
[  590.018663][T31406] syzkaller0: entered promiscuous mode
[  590.024274][T31406] syzkaller0: entered allmulticast mode
[  590.086656][T31384] tipc: Resetting bearer <eth:syzkaller0>
[  590.149433][T31415] __nla_validate_parse: 4 callbacks suppressed
[  590.149454][T31415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4828'.
[  590.172910][T31384] tipc: Disabling bearer <eth:syzkaller0>
[  590.431645][T31423] pim6reg1: entered promiscuous mode
[  590.437828][T31423] pim6reg1: entered allmulticast mode
[  590.770072][T31457] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4839'.
[  590.822061][T23038] wlan1: Trigger new scan to find an IBSS to join
[  590.868251][T31464] xt_hashlimit: size too large, truncated to 1048576
[  590.973157][T31469] netlink: 'syz.0.4840': attribute type 1 has an invalid length.
[  591.134544][T31478] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4842'.
[  591.170558][T31478] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4842'.
[  591.214351][T31475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4841'.
[  591.299256][T31488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  591.461290][T31497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4846'.
[  591.620197][T31510] x_tables: unsorted entry at hook 2
[  591.790947][T31454] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0
[  591.808754][T31516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4852'.
[  591.829721][T31516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4852'.
[  592.089928][T31540] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4858'.
[  592.275673][T31553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.349950][T31555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.518220][T31559] bond6 (unregistering): Released all slaves
[  592.759423][T31589] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4870'.
[  593.064738][T31609] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  593.146611][T31609] team1: entered promiscuous mode
[  593.151780][T31609] team1: entered allmulticast mode
[  593.785232][T23038] wlan1: Creating new IBSS network, BSSID 66:db:28:15:f8:21
[  593.912971][T31673] netlink: 'syz.1.4891': attribute type 6 has an invalid length.
[  594.388636][T31708] syzkaller0: entered promiscuous mode
[  594.394441][T31708] syzkaller0: entered allmulticast mode
[  594.455191][T31708] macsec1: entered promiscuous mode
[  594.608265][T31720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.030602][T31740] xt_hashlimit: size too large, truncated to 1048576
[  595.296794][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.305220][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.313710][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.322160][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.330620][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.339057][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.347476][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.355854][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.364380][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.142542][T31791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4915'.
[  596.142542][T31787] __nla_validate_parse: 6 callbacks suppressed
[  596.142559][T31787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4915'.
[  596.803469][T31783] kthread_run failed with err -4
[  597.301905][T31825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4926'.
[  597.368973][T31830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4926'.
[  597.471768][T31833] netlink: 'syz.6.4928': attribute type 1 has an invalid length.
[  597.481386][T31833] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4928'.
[  597.491483][T31833] netlink: 658 bytes leftover after parsing attributes in process `syz.6.4928'.
[  597.502964][T31833] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4928'.
[  597.725407][T31855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4934'.
[  598.413839][T31898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4941'.
[  598.603357][T31907] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4943'.
[  598.857134][T31926] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  598.922559][T31925] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  598.945410][T31932] netlink: 'syz.1.4950': attribute type 25 has an invalid length.
[  599.003801][T31936] netlink: 'syz.6.4951': attribute type 10 has an invalid length.
[  599.634223][T31991] bond0: entered allmulticast mode
[  599.654277][T31991] bond_slave_0: entered allmulticast mode
[  599.684373][T31991] bond_slave_1: entered allmulticast mode
[  600.062563][T32012] netlink: 'syz.5.4971': attribute type 4 has an invalid length.
[  600.434120][T32036] net_ratelimit: 29 callbacks suppressed
[  600.434140][T32036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.475330][T32039] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  600.625710][T32046] netlink: 'syz.5.4982': attribute type 21 has an invalid length.
[  600.661017][T32046] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  600.674801][T32046] bond11 (unregistering): Released all slaves
[  600.830757][T32056] netlink: 'syz.1.4983': attribute type 11 has an invalid length.
[  600.880743][T32056] netlink: 'syz.1.4983': attribute type 11 has an invalid length.
[  600.880742][T23032] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  600.880791][T23032] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  600.933140][T23032] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  600.941803][T23032] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  600.986685][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.995569][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.003974][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.012362][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.020742][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.029244][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.037634][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.046018][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.172466][T32080] netlink: 'syz.1.4988': attribute type 2 has an invalid length.
[  601.208689][T32082] SET target dimension over the limit!
[  601.380993][T32095] syzkaller0: entered promiscuous mode
[  601.387867][T32095] syzkaller0: entered allmulticast mode
[  601.542294][T32108] __nla_validate_parse: 9 callbacks suppressed
[  601.542314][T32108] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4996'.
[  601.715523][T32115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4997'.
[  601.937632][T32135] netlink: 'syz.6.5002': attribute type 1 has an invalid length.
[  602.018759][T32117] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.111708][T32135] bond3: entered promiscuous mode
[  602.125352][T32135] 8021q: adding VLAN 0 to HW filter on device bond3
[  602.141866][T32137] syzkaller0: entered promiscuous mode
[  602.148140][T32137] syzkaller0: entered allmulticast mode
[  602.186846][T32149] bond3: (slave bridge5): making interface the new active one
[  602.194642][T32149] bridge5: entered promiscuous mode
[  602.205529][T32149] bridge5: left promiscuous mode
[  602.428432][T32159] netlink: 'syz.6.5007': attribute type 2 has an invalid length.
[  602.448194][T32162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5008'.
[  602.470557][T32162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5008'.
[  602.483649][T32159] netlink: 'syz.6.5007': attribute type 3 has an invalid length.
[  602.644741][T32175] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5011'.
[  602.729103][T32183] mac80211_hwsim hwsim58 wlan0: Caught tx_queue_len zero misconfig
[  602.797241][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5014'.
[  603.254522][T32215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5020'.
[  603.272562][T32215] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  603.343372][T32215] batman_adv: batadv0: Removing interface: batadv_slave_1
[  603.459749][T32222] syzkaller1: entered promiscuous mode
[  603.465415][T32222] syzkaller1: entered allmulticast mode
[  603.537185][T32225] netlink: 'syz.0.5024': attribute type 1 has an invalid length.
[  603.566294][T32225] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5024'.
[  603.694583][T32231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5025'.
[  603.715245][T32231] bridge: RTM_NEWNEIGH with invalid ether address
[  603.775032][T32237] tap0: tun_chr_ioctl cmd 1074025672
[  603.800060][T32237] tap0: ignored: set checksum disabled
[  603.807990][T32237] netlink: 348 bytes leftover after parsing attributes in process `syz.5.5027'.
[  603.817297][T32238] bridge: RTM_NEWNEIGH with invalid ether address
[  603.912145][T32248] xt_cluster: node mask cannot exceed total number of nodes
[  604.164023][T32259] netlink: 'syz.0.5032': attribute type 30 has an invalid length.
[  604.205948][T24049] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  604.224564][T24049] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  604.259642][T24049] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  604.281162][T24049] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  604.433239][T32278] netlink: 'syz.0.5038': attribute type 1 has an invalid length.
[  604.742172][T32297] netlink: 'syz.1.5041': attribute type 1 has an invalid length.
[  605.300837][T32339] xt_limit: Overflow, try lower: 604147548/4200216962
[  605.333581][T32342] syzkaller1: entered promiscuous mode
[  605.355206][T32342] syzkaller1: entered allmulticast mode
[  605.527858][T32350] net_ratelimit: 68 callbacks suppressed
[  605.527878][T32350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.346308][T32411] netlink: 'syz.1.5066': attribute type 1 has an invalid length.
[  606.363370][T32410] netlink: 'syz.6.5067': attribute type 3 has an invalid length.
[  606.397429][T32410] netlink: 'syz.6.5067': attribute type 2 has an invalid length.
[  606.468620][T32411] netlink: 'syz.1.5066': attribute type 1 has an invalid length.
[  606.481243][T32411] netlink: 'syz.1.5066': attribute type 2 has an invalid length.
[  606.839481][T32439] __nla_validate_parse: 9 callbacks suppressed
[  606.839500][T32439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5070'.
[  606.898271][T32439] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5070'.
[  606.987530][T32454] syz.6.5073 (32454) used obsolete PPPIOCDETACH ioctl
[  607.241366][T32453] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5072'.
[  607.282217][T32442] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5072'.
[  607.454766][T32476] "syz.5.5078" (32476) uses obsolete ecb(arc4) skcipher
[  607.502212][T23044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  607.538331][T23044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  607.575537][T23044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  607.616769][T24044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  607.630960][T32482] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5081'.
[  607.677869][T32484] ipvlan0: entered promiscuous mode
[  607.717923][T32486] tc_dump_action: action bad kind
[  607.732358][T32486] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5084'.
[  607.766594][T32486] openvswitch: netlink: Missing key (keys=40, expected=80)
[  607.820902][T32495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5087'.
[  608.070771][T32518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.081498][T32518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.258987][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.492666][T32544] netlink: zone id is out of range
[  608.508518][T32544] netlink: zone id is out of range
[  608.537564][T32546] netlink: set zone limit has 4 unknown bytes
[  608.912637][T32566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5102'.
[  608.937949][T32565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5102'.
[  608.959866][T32565] validate_nla: 1 callbacks suppressed
[  608.959885][T32565] netlink: 'syz.0.5102': attribute type 26 has an invalid length.
[  609.134916][T32581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5106'.
[  609.177029][T32581] openvswitch: netlink: Key type 48 is out of range max 32
[  609.233451][T32587] netlink: 'syz.5.5107': attribute type 1 has an invalid length.
[  609.498623][T32602] bond4: Removing last ns target with arp_interval on
[  609.659217][T32621] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  609.800480][T32627] bond6: Unable to set up delay as MII monitoring is disabled
[  609.810374][T32627] bond6 (unregistering): Released all slaves
[  610.069405][T32647] : entered promiscuous mode
[  610.445336][T32678] syzkaller0: entered promiscuous mode
[  610.459835][T32678] syzkaller0: entered allmulticast mode
[  611.010320][T32715] netlink: 'syz.5.5136': attribute type 29 has an invalid length.
[  611.608747][T32753] syzkaller0: entered promiscuous mode
[  611.614300][T32753] syzkaller0: entered allmulticast mode
[  611.664863][T32756] netlink: 'syz.1.5148': attribute type 2 has an invalid length.
[  611.945091][  T309] __nla_validate_parse: 22 callbacks suppressed
[  611.945109][  T309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5151'.
[  612.169993][  T321] netlink: 'syz.6.5154': attribute type 1 has an invalid length.
[  612.754262][  T363] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  612.868920][  T373] netlink: 'syz.0.5164': attribute type 1 has an invalid length.
[  612.900458][  T363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5162'.
[  612.934505][  T373] netlink: 'syz.0.5164': attribute type 1 has an invalid length.
[  612.991093][  T373] netlink: 'syz.0.5164': attribute type 1 has an invalid length.
[  612.997359][  T375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5164'.
[  613.047682][  T373] netlink: 'syz.0.5164': attribute type 2 has an invalid length.
[  613.050117][  T380] IPv6: NLM_F_CREATE should be specified when creating new route
[  613.061240][  T373] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5164'.
[  613.075684][  T380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5166'.
[  613.134428][  T378] bond11: option all_slaves_active: invalid value (222)
[  613.169469][  T378] bond11 (unregistering): Released all slaves
[  613.194913][  T385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5168'.
[  613.378034][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  613.397787][  T393] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5171'.
[  613.468907][  T395] netlink: 'syz.1.5172': attribute type 12 has an invalid length.
[  613.480855][  T390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5170'.
[  613.490791][  T395] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5172'.
[  613.501061][  T395] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5172'.
[  613.531502][  T394] x_tables: ip_tables: icmp match: only valid for protocol 1
[  613.662219][  T408] tipc: Started in network mode
[  613.667373][  T408] tipc: Node identity f6caf1f2a6e6, cluster identity 4711
[  613.680481][  T408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  613.732598][  T408] +
: renamed from syzkaller0
[  613.745108][  T408] tipc: Disabling bearer <eth:syzkaller0>
[  614.019831][   T51] block nbd2: Possible stuck request ffff888026308000: control (read@0,1024B). Runtime 120 seconds
[  614.030917][   T51] block nbd2: Possible stuck request ffff888026308200: control (read@1024,1024B). Runtime 120 seconds
[  614.042723][   T51] block nbd2: Possible stuck request ffff888026308400: control (read@2048,1024B). Runtime 120 seconds
[  614.054525][   T51] block nbd2: Possible stuck request ffff888026308600: control (read@3072,1024B). Runtime 120 seconds
[  614.792125][  T471] veth1_macvtap: renamed from veth0_macvtap
[  614.816583][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.872919][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  614.889666][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  614.906457][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  614.926464][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  614.935530][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  615.078544][  T492] validate_nla: 2 callbacks suppressed
[  615.078565][  T492] netlink: 'syz.5.5195': attribute type 5 has an invalid length.
[  615.141422][  T496] sctp: [Deprecated]: syz.1.5196 (pid 496) Use of int in max_burst socket option.
[  615.141422][  T496] Use struct sctp_assoc_value instead
[  615.778364][T24044] wlan1: Trigger new scan to find an IBSS to join
[  615.961925][  T530] netlink: 'syz.0.5203': attribute type 9 has an invalid length.
[  616.012834][  T486] chnl_net:caif_netlink_parms(): no params data found
[  616.261861][  T486] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.277928][  T486] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.285286][  T486] bridge_slave_0: entered allmulticast mode
[  616.294223][  T486] bridge_slave_0: entered promiscuous mode
[  616.317142][  T486] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.356460][  T486] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.363769][  T486] bridge_slave_1: entered allmulticast mode
[  616.410207][  T486] bridge_slave_1: entered promiscuous mode
[  616.544485][  T486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  616.580217][   T31] INFO: task syz.4.3387:25253 blocked for more than 143 seconds.
[  616.589906][   T31]       Not tainted syzkaller #0
[  616.599023][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  616.611743][  T486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  616.621883][   T31] task:syz.4.3387      state:D stack:25792 pid:25253 tgid:25252 ppid:19070  task_flags:0x400140 flags:0x00080002
[  616.644333][   T31] Call Trace:
[  616.653986][  T565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.654446][   T31]  <TASK>
[  616.674412][  T565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.683332][  T565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.694245][   T31]  __schedule+0x14ea/0x5050
[  616.699703][T23044] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  616.702765][  T486] team0: Port device team_slave_0 added
[  616.718237][  T565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.726473][   T31]  ? __pfx___schedule+0x10/0x10
[  616.731587][   T31]  ? schedule+0x90/0x360
[  616.735848][   T31]  schedule+0x164/0x360
[  616.744177][  T486] team0: Port device team_slave_1 added
[  616.760854][  T565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.762558][   T31]  schedule_preempt_disabled+0x13/0x30
[  616.769667][  T565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.786758][   T31]  __mutex_lock+0x7fe/0x1300
[  616.791408][   T31]  ? __mutex_lock+0x5ac/0x1300
[  616.792023][  T565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.811044][   T31]  ? nfsd_nl_version_get_doit+0x17c/0xc40
[  616.820811][  T565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.826228][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  616.834466][  T565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.844281][  T486] batman_adv: batadv0: Adding interface: batadv_slave_0
[  616.847499][   T31]  ? __nlmsg_put+0xef/0x1b0
[  616.855822][   T31]  ? genlmsg_put+0x137/0x2e0
[  616.860965][   T31]  nfsd_nl_version_get_doit+0x17c/0xc40
[  616.862334][  T486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  616.869786][   T31]  ? kmem_cache_free+0x195/0x610
[  616.905604][   T31]  ? nlmon_xmit+0xb0/0x100
[  616.910874][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  616.917549][   T31]  ? dev_hard_start_xmit+0x78b/0x7f0
[  616.923011][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  616.928194][  T486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  616.929960][   T31]  ? __asan_memcpy+0x40/0x70
[  616.944169][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  616.951344][   T31]  ? __dev_queue_xmit+0x274/0x3850
[  616.956145][  T486] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.957720][   T31]  genl_rcv_msg+0x61c/0x7a0
[  616.964015][  T486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  616.968813][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  617.002383][T24454] Bluetooth: hci7: command tx timeout
[  617.012981][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  617.014076][  T486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  617.026340][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  617.035617][   T31]  netlink_rcv_skb+0x232/0x4b0
[  617.040536][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  617.045689][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  617.051256][   T31]  ? genl_rcv+0x19/0x40
[  617.055521][   T31]  ? down_read+0x272/0x2e0
[  617.060569][   T31]  ? genl_rcv+0xd/0x40
[  617.064731][   T31]  genl_rcv+0x28/0x40
[  617.068967][   T31]  netlink_unicast+0x80f/0x9b0
[  617.074022][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  617.079448][   T31]  ? __alloc_skb+0x193/0x390
[  617.084158][   T31]  ? netlink_sendmsg+0x650/0xb40
[  617.089582][   T31]  ? skb_put+0x11b/0x210
[  617.093917][   T31]  netlink_sendmsg+0x813/0xb40
[  617.098926][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  617.104302][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  617.109889][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  617.115261][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  617.121810][   T31]  ____sys_sendmsg+0xa68/0xad0
[  617.126818][   T31]  ? __might_fault+0xaf/0x130
[  617.131796][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  617.137475][   T31]  ? import_iovec+0x73/0xa0
[  617.142257][   T31]  ___sys_sendmsg+0x2a5/0x360
[  617.147409][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  617.152497][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  617.157842][   T31]  ? futex_wait+0x29a/0x380
[  617.162441][   T31]  ? __fget_files+0x2a/0x420
[  617.167332][   T31]  ? __fget_files+0x3a0/0x420
[  617.172117][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  617.177764][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  617.183380][   T31]  ? rcu_is_watching+0x15/0xb0
[  617.188456][   T31]  do_syscall_64+0xe2/0xf80
[  617.193052][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.199231][   T31]  ? trace_irq_disable+0x37/0x100
[  617.204265][   T31]  ? clear_bhb_loop+0x60/0xb0
[  617.209625][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.215535][   T31] RIP: 0033:0x7f6e9039aeb9
[  617.220337][   T31] RSP: 002b:00007f6e912cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  617.229068][   T31] RAX: ffffffffffffffda RBX: 00007f6e90615fa0 RCX: 00007f6e9039aeb9
[  617.237351][   T31] RDX: 0000000020044042 RSI: 0000200000000780 RDI: 0000000000000007
[  617.245424][   T31] RBP: 00007f6e90408c1f R08: 0000000000000000 R09: 0000000000000000
[  617.253624][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  617.261678][   T31] R13: 00007f6e90616038 R14: 00007f6e90615fa0 R15: 00007ffd7d1cc688
[  617.270046][   T31]  </TASK>
[  617.273207][   T31] 
[  617.273207][   T31] Showing all locks held in the system:
[  617.282380][   T31] 1 lock held by khungtaskd/31:
[  617.287984][   T31]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  617.302103][   T31] 1 lock held by dhcpcd/5490:
[  617.307888][   T31]  #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
[  617.317793][   T31] 2 locks held by getty/5582:
[  617.322608][   T31]  #0: ffff88814cfb60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  617.332753][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  617.343164][   T31] 2 locks held by syz.2.2608/18515:
[  617.348473][   T31]  #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  617.356803][   T31]  #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0
[  617.367449][   T31] 4 locks held by kworker/u8:17/23032:
[  617.372928][   T31]  #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  617.382945][   T31]  #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  617.391966][   T31]  #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30
[  617.401273][   T31]  #3: ffffffff8e626a28 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240
[  617.412261][   T31] 4 locks held by kworker/u8:24/23044:
[  617.418129][   T31]  #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  617.437699][   T31]  #1: ffffc9001c82fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  617.448895][   T31]  #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  617.458351][   T31]  #3: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  617.469494][   T31] 3 locks held by kworker/u8:32/23054:
[  617.474962][   T31]  #0: ffff888030f60148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  617.486940][   T31]  #1: ffffc9001c6dfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  617.500658][   T31]  #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  617.510279][   T31] 1 lock held by udevd/23321:
[  617.514944][   T31]  #0: ffff888140b41358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  617.524788][   T31] 2 locks held by syz.4.3387/25253:
[  617.530129][   T31]  #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  617.538403][   T31]  #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40
[  617.548836][   T31] 2 locks held by syz.3.4962/31976:
[  617.554055][   T31]  #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  617.562319][   T31]  #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0
[  617.572737][   T31] 2 locks held by syz-executor/486:
[  617.578168][   T31]  #0: ffffffff8ff0da58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  617.587832][   T31]  #1: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  617.597081][   T31] 
[  617.599468][   T31] =============================================
[  617.599468][   T31] 
[  617.608602][   T31] NMI backtrace for cpu 1
[  617.608620][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  617.608639][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  617.608650][   T31] Call Trace:
[  617.608656][   T31]  <TASK>
[  617.608664][   T31]  dump_stack_lvl+0xe8/0x150
[  617.608690][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  617.608713][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  617.608739][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  617.608762][   T31]  sys_info+0x135/0x170
[  617.608780][   T31]  watchdog+0xf90/0xfe0
[  617.608802][   T31]  ? watchdog+0x209/0xfe0
[  617.608825][   T31]  kthread+0x726/0x8b0
[  617.608847][   T31]  ? __pfx_watchdog+0x10/0x10
[  617.608864][   T31]  ? __pfx_kthread+0x10/0x10
[  617.608885][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  617.608900][   T31]  ? __pfx_kthread+0x10/0x10
[  617.608919][   T31]  ret_from_fork+0x51b/0xa40
[  617.608938][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  617.608951][   T31]  ? __switch_to+0xc82/0x1410
[  617.608975][   T31]  ? __pfx_kthread+0x10/0x10
[  617.608995][   T31]  ret_from_fork_asm+0x1a/0x30
[  617.609031][   T31]  </TASK>
[  617.609036][   T31] Sending NMI from CPU 1 to CPUs 0:
[  617.734680][    C0] NMI backtrace for cpu 0
[  617.734698][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  617.734715][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  617.734725][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  617.734745][    C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 12 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  617.734757][    C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242
[  617.734771][    C0] RAX: 000000000026f1d9 RBX: ffffffff8199570d RCX: 0000000080000001
[  617.734782][    C0] RDX: 0000000000000001 RSI: ffffffff8dcc99be RDI: ffffffff8c073a00
[  617.734792][    C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  617.734803][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70
[  617.734813][    C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000
[  617.734823][    C0] FS:  0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
[  617.734835][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  617.734845][    C0] CR2: 000055dd6715e950 CR3: 000000007d9f0000 CR4: 00000000003526f0
[  617.734858][    C0] Call Trace:
[  617.734865][    C0]  <TASK>
[  617.734872][    C0]  default_idle+0x9/0x20
[  617.734887][    C0]  default_idle_call+0x72/0xb0
[  617.734904][    C0]  do_idle+0x1bd/0x500
[  617.734918][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  617.734935][    C0]  ? __pfx_do_idle+0x10/0x10
[  617.734952][    C0]  cpu_startup_entry+0x43/0x60
[  617.734966][    C0]  rest_init+0x2de/0x300
[  617.734983][    C0]  start_kernel+0x380/0x3d0
[  617.735003][    C0]  x86_64_start_reservations+0x24/0x30
[  617.735020][    C0]  x86_64_start_kernel+0x143/0x1c0
[  617.735034][    C0]  common_startup_64+0x13e/0x147
[  617.735060][    C0]  </TASK>
[  617.922911][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  617.929794][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  617.938897][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  617.948954][   T31] Call Trace:
[  617.952225][   T31]  <TASK>
[  617.955144][   T31]  vpanic+0x1e0/0x670
[  617.959134][   T31]  panic+0xc5/0xd0
[  617.962880][   T31]  ? __pfx_panic+0x10/0x10
[  617.967315][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  617.972715][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  617.978939][   T31]  watchdog+0xfda/0xfe0
[  617.983134][   T31]  ? watchdog+0x209/0xfe0
[  617.987488][   T31]  kthread+0x726/0x8b0
[  617.991582][   T31]  ? __pfx_watchdog+0x10/0x10
[  617.996274][   T31]  ? __pfx_kthread+0x10/0x10
[  618.000886][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  618.006094][   T31]  ? __pfx_kthread+0x10/0x10
[  618.010702][   T31]  ret_from_fork+0x51b/0xa40
[  618.015315][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  618.020422][   T31]  ? __switch_to+0xc82/0x1410
[  618.025098][   T31]  ? __pfx_kthread+0x10/0x10
[  618.029769][   T31]  ret_from_fork_asm+0x1a/0x30
[  618.034540][   T31]  </TASK>
[  618.037903][   T31] Kernel Offset: disabled
[  618.042300][   T31] Rebooting in 86400 seconds..