last executing test programs:

17.820777318s ago: executing program 1 (id=4791):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\"'], 0x8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010089"], 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x90)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000010280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf25020000000500010066"], 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x20000800)

17.420710785s ago: executing program 4 (id=4802):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x60}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)

17.240677973s ago: executing program 4 (id=4806):
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfe, {0x0, 0x0, 0x0, r2, {0xd}, {0xffff}, {0x7, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x3, {0xa, 0x4e23, 0x7, @mcast1, 0x5}}}, 0x32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x8009)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

17.12843s ago: executing program 4 (id=4810):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r6, 0x107, 0x11, 0x0, &(0x7f0000000140))
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00}', @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
sendmmsg$inet(r16, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="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", 0x137}, {&(0x7f00000007c0)="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", 0xde5}], 0x4}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x40000041)
splice(r15, 0x0, r14, 0x0, 0x10000008ebc, 0x0)
splice(r13, 0x0, r16, 0x0, 0x8000000000025a5, 0x0)
setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000)
recvmsg$unix(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=<r19=>0x0)
sendmsg$NFC_CMD_DEV_UP(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r18, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r19], 0x1c}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x20040800)

16.891985333s ago: executing program 4 (id=4816):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket(0x15, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x2a, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbe}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r1, r1, r1, r1], &(0x7f0000000700)=[{0x1, 0x2, 0x7, 0x1}, {0x1, 0x2, 0x7, 0x4}, {0x0, 0x2, 0x6, 0xa}, {0x5, 0x3, 0xc, 0x3}], 0x10, 0xc}, 0x94) (async)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
recvmmsg(r4, 0x0, 0x0, 0x40000000, 0x0) (async)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000140))
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003001000000008000500cbf739743f76a1c35d1a89b0f1c50b15df9d4d50ff53aa0d9be76e793d67c30acd505cc87855e4276e7739e67daf90781907482819d16fa1371d8e29a593ce0f5cad05000000bf54b6e538b6ec61fdbf647089678e621a63eaeb295fdc888390a189943d4d80cfb154ba0afe5c03554d2c7ee6feae2a9d0798ff0f41163584a77e5133ccd91feaa9f5ba54368acdcd66cf", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 64)
r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r10=>0x0}) (rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe00000020000000000000000000000000000000000000000000000000000000800000000000000000a00102000000000", @ANYBLOB="0000000000000000010000000000000000010000000000000000000000000000000000000000000009"], 0xb8}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r7, 0x7, 0x104, 0xfffffffe}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.874763546s ago: executing program 1 (id=4817):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x2)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x9)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x10)

16.780008798s ago: executing program 4 (id=4820):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x24040800)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94)
ioctl(r1, 0x9, &(0x7f0000000140)="cbb26a92608fcfef049a514a970aebf111737d712dd405650a262505dc3b6db7a6b19df4a39214cdb3f4f262197bd6dddbb38842be3c0e94dc745f71327d66858d9b6c6e7746da4644a503106ee6f4f278e0a2bc0f9a6e14f46683e474ce3dbb8dce73917fc212790f6638c1b6852160fba048d427bb981ce7c6ffe87309b5d04ae4a4c1eb48acfe2eb7e9118108951115d115f5a0949d0b1938b4172530be0d8f326413243842a5e7a77aac3b843d01a6d8783ea368e3b86f51bd019edf867bc24a756fcc8b94e2f20f42f93a40e901a429188d8cf1cd8551ad06621ac8011ac93748e2dc98cc1ca9e350cd609316c2a83a61eb")

16.740882464s ago: executing program 4 (id=4821):
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r0=>0x0, 0xab, "3a785b4b338b2bfff4034497d57423e59032172a3c9e87c2bf5a06c0be0126bd7fb1e2196c520c1ecf3c59ca3e7ff4d69c93bf7004d8c7889d4acd9d72e100436a5ccaf143800471aaad90c851d84e5d64127a45f6f7cdcb490d37e66218cf0a71333075ee5450b2d4ad275bf6035e70f0e734113012a05d0b4145b05673070fc242ca0628a214b2cc03071c685c56f87403fbe13f7d94ff21f1ad54e8e27fbc84a0135a4fd42b6704ed38"}, &(0x7f00000000c0)=0xb3)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r0, 0x2}, 0x8)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r0, 0xfffffff9}, 0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r0, 0x6}, 0x8)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r2, &(0x7f00000001c0)="a2a0ada1cfe9fe1623ac598b8dba732aee162d8d0673103558ad20e6922796b42151e71fe3698107907ce9725fc6f33c0bde87256069e8d017aa923a7da60d3c605cf11b9bbcc7d664b84929feecc48e77f0a062c6ac4830db9ea3cf4e2632562447f947c88a61ee44124cd5c56a30cd7b5e7c204110a76e", 0x78, 0x10000800, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={<r3=>r0, 0x1}, &(0x7f0000000280)=0x8)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x150, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x0, 0x4, 0x2, 0x7, 0x3], 0x3, 0x4}}}, @common=@set={{0x40}, {{0x4, [0x5, 0x7, 0x1, 0x7, 0x4, 0x1], 0x1, 0x5}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x2, 0x1, [0x31, 0x40, 0x21, 0x39, 0x0, 0x9, 0x1, 0x2f, 0x36, 0x40, 0x1e, 0x9, 0x32, 0x13, 0x1f, 0x31], 0x0, 0x0, 0x8d8}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x86c, 0x420, 0x1, 0x8f2}}, @common=@ttl={{0x28}, {0x2, 0x9}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffa}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0xceb9], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x7, 0x4, 0x3, 0x4, 0x4], 0x5, 0x5}, {0x1, [0x0, 0x2, 0x2, 0x3, 0x2], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000780)={r0, 0x5}, &(0x7f00000007c0)=0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000840)={0x0, <r6=>0x0}, &(0x7f0000000880)=0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=<r7=>0x0, &(0x7f0000000900)=0x4)
sendmsg$nl_xfrm(r5, &(0x7f0000000b00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)=@polexpire={0x178, 0x1b, 0x20, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private1, @in=@multicast2, 0x4e22, 0x9, 0x4e24, 0x6, 0xa, 0x20, 0x20, 0x16, 0x0, r6}, {0x4, 0xffffffffffffff1b, 0x4, 0x20000, 0x1, 0x4, 0x9, 0x101}, {0x6, 0x1, 0x9}, 0x7f, 0x6e6bb2, 0x0, 0x1, 0x3}, 0xf0}, [@policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e24, 0x9, 0x4e20, 0x0, 0xa, 0x110, 0xa0, 0x3c, r7, 0xee00}, {0x9b0, 0x1, 0x6a57, 0x8, 0x84, 0x6000000000000, 0x30dc, 0x9a77}, {0x401, 0x101, 0x10000, 0xfffffffffffffacc}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x3}}, @policy_type={0xa}]}, 0x178}, 0x1, 0x0, 0x0, 0x80001}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000b40)=0xffffffffffffffff, 0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000b80)={0x1f, 0x9, @any, 0x6, 0x2}, 0xe)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000bc0)={'wpan0\x00'})
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
write$nci(r9, &(0x7f0000000c40)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x7, {{0x1, 0xffffffff, 0xc2, "89fad84868338962e6f197509c0a38cd79599da177584bd52d3668fd63bf73202b1a93d133fd958d423f7d5ee58040693c0a86aa719872563920f3f9b8977b95de2b9c18a8a8372b9208c3e629ae646042a25a258a97abbfe5ddcf4c4166c4cc1393741195b89dbc705a645ed79c060dd5f040286ec65722e69718ef7fdea185fc72c1627a580e0f64220ad403de635992b53f347a2e662b5e2ba5e3677df5add32007c0412d3014b6d58177a840309473c4bd9be95b97b3468e28a2c1450122a946"}, {0x5e, 0x4, 0xb1, 0x0, 0x10, 0xff}}}, 0xd6)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000e40)=@get={0x1, &(0x7f0000000d40)=""/229, 0x3})
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000e80)={r3, 0x8f, 0x4, 0x4, 0x5, 0xffff, 0x8f44, 0xbe3, {<r10=>r0, @in6={{0xa, 0x4e24, 0x7, @private0, 0x7fffffff}}, 0x4, 0x200, 0x0, 0x400}}, &(0x7f0000000f40)=0xb0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000f80)={r10, 0x7ff, 0x7fff}, 0x8)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r8)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r11, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r12, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r5, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0, 0x0], 0x0, 0xbf, &(0x7f00000011c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xef, 0x8, 0x8, &(0x7f0000001280)}}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001400))

16.69828933s ago: executing program 1 (id=4822):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x6, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x6, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) (async)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) (async)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) (async)

16.575862491s ago: executing program 0 (id=4824):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pi6   \x00'}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0xd, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10)

16.451698587s ago: executing program 0 (id=4826):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e0000000c0001800800", @ANYRES32], 0x20}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x4, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x502}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r3, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)

16.344547733s ago: executing program 0 (id=4827):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x50000}, 0xc090) (async, rerun: 64)
sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x100, 0x7, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x22}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10000080}, 0x40050) (async, rerun: 64)
r8 = socket(0x11, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) (async)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0xc9ba, 0x4) (async, rerun: 64)
vmsplice(r3, &(0x7f0000000600)=[{&(0x7f0000000400)="de16e27eec9db98ded5ed9976439254d3cee0b880ae9416a32c535af64b3e5d686fc7c9277a88e79eb503b48bdac2e1b41e85ce30d1b35cb666f3c46218afa8ca620b5b95b2992b2ce09f1be9c5330dbc8d0eb802707f118eb33e06ba69f75a51c72ff28bd1f0d38d23891fec284ed738792a7cdc190877c79250da10cd9c9aee2436fc64c15d00c8e98ea7b820a01b44825b3cdd7cd67a8fbaac6b36876fd4eb749282638953bccd4672db0afe2b076569162d9e39b05", 0xb7}, {&(0x7f0000000680)="de1f63a93780bd88bac9ec1c4bd8d2a192c86447bbc72032cbdefc3ede3a6020ac4c3504836daf717489fcc3fb68bc74b21c990fcb25e97b3b59fd2fc20695f2639dee551f7ffe3c0bf70a6092368ad71b913d905c2ec773d19bc1321e8308d5297e090e8a9b55ac3e54ad6a1fc501e38d92547eb72fc025702cdcb2eb27a3be43e8be4b026cd5461b9ac158791c6cafb6176eda5bcd0b04c0a524c016e3aaf5b01281c9145861240053ed23dc3220c7", 0xb0}, {&(0x7f0000000880)="ca96df0308df59bb21f08b8820cc62917896134dcfa0724075e2defc78f4b794fd2f9d79d3a810566d96ecb92d6e2ea162a737a8056753c14342118ed497819cfb3af698773ebcf353e186791cd77814d548136c974b2b7615f13bbc6d719670f08dc67bb17b5ec25c79c0ace3a267791f8f883ba319e9e4c3adc44c2ca56cfa9df3a36ad55d70558181fd3a10809d83b8f6c3600f23e78a2189a3550434f60816c1abef2eec4650824820eeeac0efeeba33f6610a429a2033abcfa3f346e9f7e9fefe5af98c00b2d53aa23f73bc2b7b4afb183f385b27c45fb83a4c3b2d4bf3802d1589", 0xe4}, {&(0x7f0000000ac0)="5cb149d4d14d32f4b1ee9239e3ed83ac43de4d0441838c154ca71750466cac0b3c2f8d0ef75577a2cbc9a01cdc7f9a5602499adcdcc468890fbf94d7fcaab2ad8e7640484e38be15418f8ad6bd2e8c033ae91f65f5abeb0b81d23d700793868e5ab35c2e446f3f3d2112a1566897a0fbdc018bb4bf0a1a99fd0149cfa514640dbb", 0x81}], 0x4, 0x6) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r9 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8881}], 0x1, 0x20006850) (async, rerun: 32)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10000) (rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) (async)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000007b3c1d80ae4760d73b4785fed265af10d8b7a4efc4e7b92e24a8a095913c3cfaad4e75becd390d1fb3a67b190cfb456318e5f5a3a78a9b7f11955366a9c0e979478a5a3dfd4fa95aaf367fe4a2def662ad948430027cab", @ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=r10, @ANYBLOB="0a003400018b8512e26b5415d8004c00008000000000000000ac0f00"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40040d0)

16.321111818s ago: executing program 1 (id=4828):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r1, 0x0, 0x7}, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004600070128bd70000000200001000800d847608a000004800400070000006a3b9d24b38636a2853205caf194a29e59711b79cac59fd3c3c4cd30004ba3526112"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x70}}, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x4004010)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r9=>0x0})
sendmsg$can_raw(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r9}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x40)

16.27385227s ago: executing program 0 (id=4829):
unshare(0x20400)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000180), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0)

16.200086281s ago: executing program 0 (id=4830):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async)
listen(r0, 0x50) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000900)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "6c4be731237f7bf2a98eae51d1772489e48e4f20a8"}}]}, @TIPC_NLA_NET={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004000) (async)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x330, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x24c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "0806678bdb032f1b6428f533e9721bac2e548ec698c37c110b69adf071f504fdb4f1a261262e7fcd54b8d23a7472c60b7945e528531712bbf996b7fcd27e05c952be7fe93cb4a9f444caba987366a33a6d8d15040b964d1ed53682bed0b7141b7911bf1c52b9e6ea949bc90c636cf0d9a51abbd5bd117ecc0695ed749f3cca528440775639b5143168a49cadbc9afc9b4c6aa409f31a83daba8b3cb8193735925a01af766d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "269b0df2fa0c7207f1195a017a61a16452526700121d95b7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x43, 0x3, "6f8a89fb00ee6ba67411c90aec3496b10bfcd174d2eb670503f188a96d8af742a3bef3fa7c61e8268b6dfa8d829fb6502ca9dececc71c5408beaa431d5b9ce"}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "95a6a1c2d67a3822a9aa5cee2a290e7f3ed0a84edc77b1ba3fbe7285dfa4282f155f341fda2328f3bd425c8cb873edb3668176d424854546138b0dc00ec5ca2d65d44e02db456ab0ef9227bd8032f92efc5e2fc9944bb7afb426f7bd84fef716f55ff7c120dd3d1ee3a115fe81e7fc8029d0eee38fb1386e6c009b799d3bd8d1c92945e6a2395f0a41c967c9b1e20481fba7f7bc2a2244652607bdcd55e42d29db5c47c277d9d4c5d7fae18ce1defe1b32593fb0880bf8a9d0e7"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "59721d2db84bb51e55c0d63132195132280a2bc29a4101e0c2"}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe0000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80}}, {0x20, 0x2, @in6={0xa, 0xffff, 0x0, @private0, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x47}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5c33}]}]}, 0x330}}, 0x811) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) (async)
sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000)

16.038015646s ago: executing program 2 (id=4834):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x2000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0xfff8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1, 0x1}, {0x7, 0x5}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8d0)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4)

16.017685115s ago: executing program 2 (id=4835):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000020000000000071103600000000009500000400000000002aabd7aaa555fea83c128df1256810c7040392245369618c9e613e7c7920c0c62dfb85ee3dbd29e0302c7ca52c42d50e29800abe9793cc5f5ad336516b3aea4dace002319e82e69e9b0ac7aaff2218ee0c7c0f13185e3b592907e9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0x10001, {{0xa, 0x4e21, 0x9, @empty, 0xfc}}, {{0xa, 0x4e23, 0x8, @mcast2, 0x800}}}, 0x108) (async)
r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000000c0)=0x74, &(0x7f0000000100)=0x4)

15.990606682s ago: executing program 2 (id=4836):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1)
r1 = socket$kcm(0x10, 0x2, 0x0)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000405000300070000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

15.86388135s ago: executing program 2 (id=4837):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x4}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000680), 0x2000006c, r2}, 0x38)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={<r3=>r1, 0x2, 0xb8d, 0x7})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000800000001800000e161000020000000", @ANYRES32=r2, @ANYBLOB="020000bc00000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="030000000200"/28], 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00'})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r7 = socket$inet(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000001c0)=0x144, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000000)=0x7d, 0x4)
recvfrom$inet(r8, 0x0, 0x0, 0x2043, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48)

15.690921366s ago: executing program 2 (id=4838):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x50d51000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
getpeername$netrom(r1, 0x0, &(0x7f0000000300))
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xe1, 0x2)
getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4)

15.624081236s ago: executing program 3 (id=4839):
r0 = socket(0x1a, 0x3, 0x9575)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x1d0) (async)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000200)=0x1020d0, 0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x40040) (async)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x72, 0x72, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x2, 0x1}]}, @union={0x2, 0x2, 0x0, 0x5, 0x1, 0xd46d, [{0x0, 0x3, 0x2}, {0xa, 0x4, 0x93c}]}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x3, 0x3}], "a4fa"}, @const={0x8, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000580)=""/4096, 0x90, 0x1000, 0x0, 0x7ff, 0x10000}, 0x28) (async)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001640)={0x0, 0x8000, 0x8}, 0xc) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000016c0)}, 0x20) (async)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000017c0)={0x0, 0xf, 0x20}, 0xc) (async)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001840)=@generic={&(0x7f0000001800)='./file0\x00', 0x0, 0x8}, 0x18)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@base={0xf, 0x6, 0x0, 0x9, 0x800, 0xffffffffffffffff, 0xe8b5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x7, &(0x7f0000000380)=@raw=[@alu={0x4, 0x1, 0x6, 0x2, 0x5, 0xfffffffffffffff4, 0x4}, @ldst={0x1, 0x1, 0x2, 0x2, 0x8, 0x30, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @func, @map_fd={0x18, 0xa, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0xad, 0x8f, &(0x7f0000000400)=""/143, 0x40f00, 0xa, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000015c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001600)={0x5, 0xb, 0x5b800000, 0x9a}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001900)=[r6, r7, r8, r9, r10, r11], &(0x7f0000001940)=[{0x3, 0x3, 0x6, 0x8}], 0x10, 0x5}, 0x94)
getsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001b40)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x320, 0xf0, 0xffffffff, 0x320, 0x208, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, &(0x7f0000001ac0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xffffffff], 'veth1_to_bridge\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x3b, 0x0, 0x1, 0x1}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv4=@broadcast, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1c}, @icmp_id=0x65, @icmp_id=0x64}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0x800000ff, 0xffffffff, 0xffffffff], [0x4d21607959bd9365, 0x0, 0xffffff00, 0xffffffff], 'gretap0\x00', 'wg2\x00', {}, {}, 0x2b, 0x5, 0x5, 0x12}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x21, 0x80}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e22, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @port=0x4e21, @gre_key}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0xff, 0x0, 0xffffff00], 'veth0_to_batadv\x00', 'geneve0\x00', {}, {0xff}, 0x0, 0x64, 0x6, 0x45}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x1, 0x40, 0x7c, 0xfc01, 0x80, 0x4a2}}, @common=@hl={{0x28}, {0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@mcast2, @ipv4=@empty, @port=0x4e24, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000002200)={'syztnl2\x00', &(0x7f0000002140)={'ip_vti0\x00', <r12=>0x0, 0x8000, 0x10, 0xdff1, 0x0, {{0x26, 0x4, 0x0, 0x2c, 0x98, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xce, [@rand_addr=0x64010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x7, 0x4d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x2b, 0x8c, [@local, @multicast1, @multicast1, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xb3, [@remote, @remote]}, @ssrr={0x89, 0x2b, 0x30, [@empty, @private=0xa010101, @broadcast, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @multicast1, @multicast2]}]}}}}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x58, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
bind$nfc_llcp(r0, &(0x7f0000002340)={0x27, 0x0, 0x1, 0x3, 0x8, 0x6, "0f376c50f6636118eeefebaf749ac447e4b02c82205ec69c5137c3e89ab349a81f9247ba3f4b09ba643b97b5c21c44c0bb8d9afb7a321a19c84949f744abf5", 0x22}, 0x60) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$rds(r3, &(0x7f0000002840)={&(0x7f00000023c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002400)=""/98, 0x62}, {&(0x7f0000002480)=""/57, 0x39}, {&(0x7f00000024c0)=""/98, 0x62}, {&(0x7f0000002540)=""/94, 0x5e}, {&(0x7f00000025c0)=""/150, 0x96}, {&(0x7f0000002680)=""/33, 0x21}], 0x6, &(0x7f00000027c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x9}, &(0x7f0000002740)=0x8, &(0x7f0000002780)=0x10, 0xe, 0xff, 0x3, 0x7, 0x25, 0x7fff}}], 0x58}, 0x40260c0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r13, 0xc0109414, &(0x7f0000002880)={0x868, 0x7fffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
readv(r8, &(0x7f000000f480)=[{&(0x7f000000f280)=""/35, 0x23}, {&(0x7f000000f2c0)=""/61, 0x3d}, {&(0x7f000000f300)=""/185, 0xb9}, {&(0x7f000000f3c0)=""/50, 0x32}, {&(0x7f000000f400)=""/27, 0x1b}, {&(0x7f000000f440)=""/17, 0x11}], 0x6)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f000000f500)=@assoc_value={0x0, 0x7f6}, 0x8) (async)
connect$inet6(r0, &(0x7f000000f540)={0xa, 0x4e23, 0x1, @remote, 0x5}, 0x1c)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

15.524526515s ago: executing program 2 (id=4840):
r0 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
write$tun(r1, &(0x7f0000000900)={@val={0x0, 0x8809}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mcast2, @remote, @dev={0xfe, 0x80, '\x00', 0x26}}}, 0x38)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000002800018014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfe, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x20000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xac, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffc0}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x12c}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r7 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x10001, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000003b5588000008000d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

15.52376224s ago: executing program 3 (id=4841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100001070000000000da04fbc564068b5b2119d4bcb60000000a0000000c0002006e6c3830323131007d1696bb2ed33b5c7ab0188bdc65c018beeb70f84d420d9377e4101e4f70de40ba04e83922dc41ff8abdaab27d8062cdc91975502262a5e9de6a77f9f2f5bd9a66ade069c42535175bd73798df920574c9577a"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x100}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async)
sendmsg$netlink(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x45}, 0x24044005)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r1, 0xfffff000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r4, 0x8) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8) (async)
recvmmsg(r0, &(0x7f0000001000), 0x0, 0x0, 0x0) (async)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000180)=""/221, 0xdd})

15.49441487s ago: executing program 3 (id=4842):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x84, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xfff1, 0xffff}, {0xb, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000000, 0xffffffffffffffff, 0x1ff, 0xfffffffc, 0x81, {0x81, 0x0, 0x8, 0x3ff, 0x4, 0xb}, {0x28, 0x2, 0x4, 0x4000, 0x5, 0x4}, 0x2, 0x6, 0x80000001}}]}]}}]}, 0x84}}, 0x4000) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r2, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) (async)
sendmmsg$sock(r2, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000140)="bd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)="b9", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0)
shutdown(r2, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000440), 0x10) (async)
listen(r5, 0x0) (async)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1)
r7 = accept4$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) (async)
recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) (async)
close(0x4) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001880)={0x18, 0x2f, 0x1, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0xe9, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')

15.408241479s ago: executing program 1 (id=4843):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x272b5c0fc5d95318, 0x11, r1, 0x9610c000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', 0x0, r1, 0x2, 0x4}, 0x50)

15.352500182s ago: executing program 3 (id=4844):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="3019", 0x2}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

15.31652973s ago: executing program 3 (id=4845):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x10011, 0x2, 0x2, 0x7, 0xc}, 0x20)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r1, 0x8b32, &(0x7f0000000040))

15.314826633s ago: executing program 0 (id=4846):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88}, 0x880)

15.309028584s ago: executing program 1 (id=4847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0900000000000003000000100000000823fdff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000006c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14040000}, 0x0)
unshare(0x20040600)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0)
recvmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000340)="0d838f36c2bcfb30588ce4d8894e38db8051d07a357e952705e7100bd09fe8d9e90856f6aeb68903a7aa6f417c74e22242f16f7f988f1668f1325c9d903ecb3305f2566101cd4b1c1e370d3efe0184432fd585b5caee10472add584b34f4e65b909105fc53b01436914a74d0b0eb91d313cb8c7cde39cc532b0b4f8e04bab5e20004fe9299ceb5c792f2ac8bbf481fbe8691448d5884919b64b982ac9d1c4bcbb537b7a15835a81163edbf8781e639d8c071d420b591d225e32c47", &(0x7f0000000100)=@tcp6=r3, 0x4}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYRES16=r4], 0x27)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32=r1, @ANYBLOB="080003001900000008000100", @ANYRES32=r1, @ANYBLOB="08001b5000000047"], 0x44}}, 0x0)

15.176195539s ago: executing program 3 (id=4848):
r0 = socket(0x29, 0x1, 0x1)
syz_emit_ethernet(0x86, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500007800081e002b019078ac1e0001ac1414aa04009078030000004700000000000000000100000a010102ac1494bb44340001ac1414aa0000000005bfecef51e22159f3ab73fe7f7f00000100000000ac141400000000000000000000000000ac14140000000000ffffffff00000000861100000000000200097bd145f94862b0000000"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e80)=ANY=[], 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x58, 0x32, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc88f}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e80)=ANY=[@ANYBLOB="6259000010008d8425bbe5ad600227665881ab002d84543180e2ccacfd2e014069d4f428f7061f5052143c5aa63d658c20727b3645e016d386651903574d375630a554089f03f105e2216225d8441ad8256a64fad3d7e8cba41e9b6337a59606f2c69ea97263fe838452784d0d939678ee82751ca26964df2a036ff68f7356fab3210d58606bdf3a3fed2662e101412ea5ba54d746d8a272db37d9ffdf7211f9c472d34ce4a543243917b55b56e11363f6c43799719d6bbac89bd24beac6ce32ed9287d0b8b17a3a0d7ba82822a6dce4a98956b7c9e9494ea296cf6ee389fb979a4969b550e736d0", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x2400c840)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000a00000a64000000060a01010000060080000000020000004000048034000180090001007866726d0000000024000280080002400000000605000308000000000800024000005e14395e0440000000050900010073797a30000000000900010073797a3000000000140000001180010000000000000000000000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x48050)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x3a)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x4}}, 0x10)
sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x10}, 0x1c)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="280000001814000100fe8000000000000000000000000000aa0000000000000000000000000000005a2e6f1e251324eb52b3318049295052d63f767723a129649e7fd98c146098288e41f019a63ca09f610ce450690b4a35ec8e0833b1f7036a54f87567549b4dc11c44e1c60306ab58c78b8329cfcfee83e9b4ac4582674527d80bc7fa96530ae920f1b6af5e9ed48441b9cfc37f945d1825204644959ea0d4a778395d27816b1b0f9b43d3effe947c1394c0f8df163616b839aa6701355c398ad17e3f4aaf764da94dcebcacb3837edf3ba0a6906b5510bccf68089c7f387a1bedbb4ed07978eb931fce4099b7cd658c575cd92f42114bd4403ec34b"], 0x28}], 0x1}, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmmsg(r9, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10a1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}, {&(0x7f0000000580)="d7fd47525d119d70ec75fb369b8c58aec108c6af1deb42a033f5c1ef34ba36674d1228b121e9c8b954fec682ee9c247789740bcee60fdd99dada9aeea99ca7ec2a52c7ff66c96230e72e95c051f70885199ddf9cde329beae53ad227844861c959c933aed0012ecdb410c6fd3a63b9fb8aa30e29d28f3a5465932ac7de48a8335ae9487283ef32b1bc01c35d0daa204a04d003d52c23113f4f6951dc59038e39837283b5213d8d1bf209fa3ccf1becc1a8005b905e4f2ba7c31099809bb4fc11e8652aba20a4f697", 0xc8}, {&(0x7f0000000780)="363f58af72f1ae1cb089389534b3a17450cb86303f52fe65930f32f4a1a7a95d074ae8328cef90ec2eade2cacb33ae7e393df4bd111db2b12823757099197ae9f4395cd250e8085308bed580b902bb2f1e1a16c983ea444aea15e5ae31ef50a99ae748d918732d7f5ed22eef54065a50038a914e136739cc4f260feb5a42416c4eee92c79a0abe52727520f1458cd6e3f24d1e5aa799de8a44a90fba6a4cea25663e9605a80a271300ef09129bafcf0b3a5c296c65549161448ee8699ba1207ef53577ffd0834a62d7f962a46d2c9c614fa8d56217cb83", 0xd7}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000d40)="bdaaff410d4e842a653cd3b6a7b697526a8e32593fe996d190c4f722b89486c4d816cdc932e51dd5e4c52a8387b94d348e733d0233489d1c55f3934f3af863d22724d21510c08df9f53f62a7c57bda2d5f50c89a87d09951707c6c47283b1250c44b639714b6cbe032b2682bc8fbf515054f4a22867b2c53916fc509b7b71798b61e2ead5f5aeedb37125c4a582ce27212d2114b6238c6e53807cab9c286c8db8a52d4b629a5a678ea9bde80787769206c811bdf62962ee57917280ed9d8765da10f5088dd5c54a17c", 0xc9}, {&(0x7f0000000980)="c861738494c26ae7d1625b9636d49d21476ad5a02f47952d486437d46d4f32a5972e8112d44fe592d33277d29b1e718320af83c50bc5d4e8d3781a3571dd37056437be29a43ec855f98d365e75a218aa1f497f3fede17cddc93102e4eebb99b9e4fff250dcd238ff5f73c8df5f3deba4d3cfb75a365bdfede0ef73a97689cc6c313eb5455ecba7764d264f64e7cda34ae43c3cae5c63cb20c177ab4ff6066a1c67e5790cf0c1ad4856fd45a0e325c60aeea48b809507a1c0d7b276a04c300320", 0xc0}], 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18)

1.146478855s ago: executing program 32 (id=4821):
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r0=>0x0, 0xab, "3a785b4b338b2bfff4034497d57423e59032172a3c9e87c2bf5a06c0be0126bd7fb1e2196c520c1ecf3c59ca3e7ff4d69c93bf7004d8c7889d4acd9d72e100436a5ccaf143800471aaad90c851d84e5d64127a45f6f7cdcb490d37e66218cf0a71333075ee5450b2d4ad275bf6035e70f0e734113012a05d0b4145b05673070fc242ca0628a214b2cc03071c685c56f87403fbe13f7d94ff21f1ad54e8e27fbc84a0135a4fd42b6704ed38"}, &(0x7f00000000c0)=0xb3)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r0, 0x2}, 0x8)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r0, 0xfffffff9}, 0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r0, 0x6}, 0x8)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r2, &(0x7f00000001c0)="a2a0ada1cfe9fe1623ac598b8dba732aee162d8d0673103558ad20e6922796b42151e71fe3698107907ce9725fc6f33c0bde87256069e8d017aa923a7da60d3c605cf11b9bbcc7d664b84929feecc48e77f0a062c6ac4830db9ea3cf4e2632562447f947c88a61ee44124cd5c56a30cd7b5e7c204110a76e", 0x78, 0x10000800, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={<r3=>r0, 0x1}, &(0x7f0000000280)=0x8)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x150, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x0, 0x4, 0x2, 0x7, 0x3], 0x3, 0x4}}}, @common=@set={{0x40}, {{0x4, [0x5, 0x7, 0x1, 0x7, 0x4, 0x1], 0x1, 0x5}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x2, 0x1, [0x31, 0x40, 0x21, 0x39, 0x0, 0x9, 0x1, 0x2f, 0x36, 0x40, 0x1e, 0x9, 0x32, 0x13, 0x1f, 0x31], 0x0, 0x0, 0x8d8}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x86c, 0x420, 0x1, 0x8f2}}, @common=@ttl={{0x28}, {0x2, 0x9}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffa}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0xceb9], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x7, 0x4, 0x3, 0x4, 0x4], 0x5, 0x5}, {0x1, [0x0, 0x2, 0x2, 0x3, 0x2], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000780)={r0, 0x5}, &(0x7f00000007c0)=0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000840)={0x0, <r6=>0x0}, &(0x7f0000000880)=0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=<r7=>0x0, &(0x7f0000000900)=0x4)
sendmsg$nl_xfrm(r5, &(0x7f0000000b00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)=@polexpire={0x178, 0x1b, 0x20, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private1, @in=@multicast2, 0x4e22, 0x9, 0x4e24, 0x6, 0xa, 0x20, 0x20, 0x16, 0x0, r6}, {0x4, 0xffffffffffffff1b, 0x4, 0x20000, 0x1, 0x4, 0x9, 0x101}, {0x6, 0x1, 0x9}, 0x7f, 0x6e6bb2, 0x0, 0x1, 0x3}, 0xf0}, [@policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e24, 0x9, 0x4e20, 0x0, 0xa, 0x110, 0xa0, 0x3c, r7, 0xee00}, {0x9b0, 0x1, 0x6a57, 0x8, 0x84, 0x6000000000000, 0x30dc, 0x9a77}, {0x401, 0x101, 0x10000, 0xfffffffffffffacc}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x3}}, @policy_type={0xa}]}, 0x178}, 0x1, 0x0, 0x0, 0x80001}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000b40)=0xffffffffffffffff, 0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000b80)={0x1f, 0x9, @any, 0x6, 0x2}, 0xe)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000bc0)={'wpan0\x00'})
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
write$nci(r9, &(0x7f0000000c40)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x7, {{0x1, 0xffffffff, 0xc2, "89fad84868338962e6f197509c0a38cd79599da177584bd52d3668fd63bf73202b1a93d133fd958d423f7d5ee58040693c0a86aa719872563920f3f9b8977b95de2b9c18a8a8372b9208c3e629ae646042a25a258a97abbfe5ddcf4c4166c4cc1393741195b89dbc705a645ed79c060dd5f040286ec65722e69718ef7fdea185fc72c1627a580e0f64220ad403de635992b53f347a2e662b5e2ba5e3677df5add32007c0412d3014b6d58177a840309473c4bd9be95b97b3468e28a2c1450122a946"}, {0x5e, 0x4, 0xb1, 0x0, 0x10, 0xff}}}, 0xd6)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000e40)=@get={0x1, &(0x7f0000000d40)=""/229, 0x3})
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000e80)={r3, 0x8f, 0x4, 0x4, 0x5, 0xffff, 0x8f44, 0xbe3, {<r10=>r0, @in6={{0xa, 0x4e24, 0x7, @private0, 0x7fffffff}}, 0x4, 0x200, 0x0, 0x400}}, &(0x7f0000000f40)=0xb0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000f80)={r10, 0x7ff, 0x7fff}, 0x8)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r8)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r11, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r12, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r5, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0, 0x0], 0x0, 0xbf, &(0x7f00000011c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xef, 0x8, 0x8, &(0x7f0000001280)}}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001400))

129.49526ms ago: executing program 33 (id=4846):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88}, 0x880)

88.980968ms ago: executing program 34 (id=4847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0900000000000003000000100000000823fdff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000006c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14040000}, 0x0)
unshare(0x20040600)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0)
recvmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000340)="0d838f36c2bcfb30588ce4d8894e38db8051d07a357e952705e7100bd09fe8d9e90856f6aeb68903a7aa6f417c74e22242f16f7f988f1668f1325c9d903ecb3305f2566101cd4b1c1e370d3efe0184432fd585b5caee10472add584b34f4e65b909105fc53b01436914a74d0b0eb91d313cb8c7cde39cc532b0b4f8e04bab5e20004fe9299ceb5c792f2ac8bbf481fbe8691448d5884919b64b982ac9d1c4bcbb537b7a15835a81163edbf8781e639d8c071d420b591d225e32c47", &(0x7f0000000100)=@tcp6=r3, 0x4}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYRES16=r4], 0x27)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32=r1, @ANYBLOB="080003001900000008000100", @ANYRES32=r1, @ANYBLOB="08001b5000000047"], 0x44}}, 0x0)

61.87015ms ago: executing program 35 (id=4840):
r0 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
write$tun(r1, &(0x7f0000000900)={@val={0x0, 0x8809}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mcast2, @remote, @dev={0xfe, 0x80, '\x00', 0x26}}}, 0x38)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000002800018014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfe, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x20000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xac, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffc0}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x12c}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r7 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x10001, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000003b5588000008000d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

0s ago: executing program 36 (id=4848):
r0 = socket(0x29, 0x1, 0x1)
syz_emit_ethernet(0x86, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500007800081e002b019078ac1e0001ac1414aa04009078030000004700000000000000000100000a010102ac1494bb44340001ac1414aa0000000005bfecef51e22159f3ab73fe7f7f00000100000000ac141400000000000000000000000000ac14140000000000ffffffff00000000861100000000000200097bd145f94862b0000000"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e80)=ANY=[], 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x58, 0x32, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc88f}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e80)=ANY=[@ANYBLOB="6259000010008d8425bbe5ad600227665881ab002d84543180e2ccacfd2e014069d4f428f7061f5052143c5aa63d658c20727b3645e016d386651903574d375630a554089f03f105e2216225d8441ad8256a64fad3d7e8cba41e9b6337a59606f2c69ea97263fe838452784d0d939678ee82751ca26964df2a036ff68f7356fab3210d58606bdf3a3fed2662e101412ea5ba54d746d8a272db37d9ffdf7211f9c472d34ce4a543243917b55b56e11363f6c43799719d6bbac89bd24beac6ce32ed9287d0b8b17a3a0d7ba82822a6dce4a98956b7c9e9494ea296cf6ee389fb979a4969b550e736d0", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x2400c840)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000a00000a64000000060a01010000060080000000020000004000048034000180090001007866726d0000000024000280080002400000000605000308000000000800024000005e14395e0440000000050900010073797a30000000000900010073797a3000000000140000001180010000000000000000000000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x48050)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x3a)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x4}}, 0x10)
sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x10}, 0x1c)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x28}], 0x1}, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmmsg(r9, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10a1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}, {&(0x7f0000000580)="d7fd47525d119d70ec75fb369b8c58aec108c6af1deb42a033f5c1ef34ba36674d1228b121e9c8b954fec682ee9c247789740bcee60fdd99dada9aeea99ca7ec2a52c7ff66c96230e72e95c051f70885199ddf9cde329beae53ad227844861c959c933aed0012ecdb410c6fd3a63b9fb8aa30e29d28f3a5465932ac7de48a8335ae9487283ef32b1bc01c35d0daa204a04d003d52c23113f4f6951dc59038e39837283b5213d8d1bf209fa3ccf1becc1a8005b905e4f2ba7c31099809bb4fc11e8652aba20a4f697", 0xc8}, {&(0x7f0000000780)="363f58af72f1ae1cb089389534b3a17450cb86303f52fe65930f32f4a1a7a95d074ae8328cef90ec2eade2cacb33ae7e393df4bd111db2b12823757099197ae9f4395cd250e8085308bed580b902bb2f1e1a16c983ea444aea15e5ae31ef50a99ae748d918732d7f5ed22eef54065a50038a914e136739cc4f260feb5a42416c4eee92c79a0abe52727520f1458cd6e3f24d1e5aa799de8a44a90fba6a4cea25663e9605a80a271300ef09129bafcf0b3a5c296c65549161448ee8699ba1207ef53577ffd0834a62d7f962a46d2c9c614fa8d56217cb83", 0xd7}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000d40)="bdaaff410d4e842a653cd3b6a7b697526a8e32593fe996d190c4f722b89486c4d816cdc932e51dd5e4c52a8387b94d348e733d0233489d1c55f3934f3af863d22724d21510c08df9f53f62a7c57bda2d5f50c89a87d09951707c6c47283b1250c44b639714b6cbe032b2682bc8fbf515054f4a22867b2c53916fc509b7b71798b61e2ead5f5aeedb37125c4a582ce27212d2114b6238c6e53807cab9c286c8db8a52d4b629a5a678ea9bde80787769206c811bdf62962ee57917280ed9d8765da10f5088dd5c54a17c", 0xc9}, {&(0x7f0000000980)="c861738494c26ae7d1625b9636d49d21476ad5a02f47952d486437d46d4f32a5972e8112d44fe592d33277d29b1e718320af83c50bc5d4e8d3781a3571dd37056437be29a43ec855f98d365e75a218aa1f497f3fede17cddc93102e4eebb99b9e4fff250dcd238ff5f73c8df5f3deba4d3cfb75a365bdfede0ef73a97689cc6c313eb5455ecba7764d264f64e7cda34ae43c3cae5c63cb20c177ab4ff6066a1c67e5790cf0c1ad4856fd45a0e325c60aeea48b809507a1c0d7b276a04c300320", 0xc0}], 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18)

kernel console output (not intermixed with test programs):

 0] type 2 family 0 port 6081 - 0
[  261.718515][T16351] ip6tnl2: entered promiscuous mode
[  261.745065][T16158] batman_adv: batadv0: Interface deactivated: netdevsim0
[  261.776640][T16158] batman_adv: batadv0: Removing interface: netdevsim0
[  261.793250][T16158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  261.809378][T16158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.834384][T16348] syzkaller0: entered promiscuous mode
[  261.842191][T16348] syzkaller0: entered allmulticast mode
[  261.977116][T16368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  262.053036][T16158] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  262.070718][T16158] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  262.102488][T16158] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  262.122632][T16158] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  262.137504][T16379] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.150216][T16381] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.303577][T16158] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.311130][T16394] xt_policy: neither incoming nor outgoing policy selected
[  262.345732][T16158] 8021q: adding VLAN 0 to HW filter on device team0
[  262.363386][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.370565][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.394095][T14288] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.401275][T14288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.730178][T16419] bond0 (unregistering): Released all slaves
[  262.954166][T16439] __nla_validate_parse: 27 callbacks suppressed
[  262.954184][T16439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2965'.
[  262.970370][ T5844] Bluetooth: hci5: command tx timeout
[  263.100865][T16158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.166964][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'.
[  263.176115][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'.
[  263.195052][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'.
[  263.210382][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'.
[  263.233952][T16158] veth0_vlan: entered promiscuous mode
[  263.260404][T16158] veth1_vlan: entered promiscuous mode
[  263.301117][T16158] veth0_macvtap: entered promiscuous mode
[  263.317235][T16158] veth1_macvtap: entered promiscuous mode
[  263.383176][T16158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.422029][T16158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.474097][T14288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.495977][T14288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.516402][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2971'.
[  263.539750][T16466] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2973'.
[  263.556079][T14288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.640897][T14288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.835889][T14288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.858063][T14288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.958880][T16485] validate_nla: 1 callbacks suppressed
[  263.958898][T16485] netlink: 'syz.4.2978': attribute type 10 has an invalid length.
[  263.959991][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.001230][T16485] bridge0: port 1(dummy0) entered disabled state
[  264.040857][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.056764][T16485] dummy0: left allmulticast mode
[  264.074439][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'.
[  264.081347][T16485] dummy0: left promiscuous mode
[  264.085558][T16505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2983'.
[  264.092197][T16485] bridge0: port 1(dummy0) entered disabled state
[  264.112531][T16485] dummy0: entered promiscuous mode
[  264.121350][T16485] team0: Port device dummy0 added
[  264.139977][T16498] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  264.148787][T16489] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  264.289479][ T8658] IPVS: starting estimator thread 0...
[  264.326282][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'.
[  264.390291][T16523] IPVS: using max 33 ests per chain, 79200 per kthread
[  264.451188][T16534] IPVS: length: 248 != 24
[  264.524884][T16538] veth0_to_team: entered promiscuous mode
[  264.676504][T16546] gre0: left promiscuous mode
[  264.709758][T16546] veth0_to_team: left promiscuous mode
[  264.715489][T16546] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  264.783778][T16546] bond0: left promiscuous mode
[  264.812928][T16546] bond2: left promiscuous mode
[  264.830577][T16546] bridge2: left promiscuous mode
[  264.873204][T16546] macvlan3: left promiscuous mode
[  264.898004][T16546] geneve2: left promiscuous mode
[  264.915755][T16546] gretap1: left promiscuous mode
[  264.984821][ T6350] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  265.018599][ T6350] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0
[  265.043374][ T6350] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.052605][ T5844] Bluetooth: hci5: command tx timeout
[  265.109601][ T6350] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  265.122505][ T6350] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0
[  265.142763][ T6350] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.247606][ T6350] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  265.277457][ T6350] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0
[  265.321228][ T6350] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.339918][ T6350] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  265.360454][ T6350] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0
[  265.379074][ T6350] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.431945][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  265.444882][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  265.452764][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  265.461330][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  265.468481][   T30] audit: type=1804 audit(1766002491.748:5): pid=16575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3001" name="/newroot/597/cgroup.controllers" dev="tmpfs" ino=3046 res=1 errno=0
[  265.491852][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  265.505259][   T30] audit: type=1800 audit(1766002491.748:6): pid=16575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3001" name="cgroup.controllers" dev="tmpfs" ino=3046 res=0 errno=0
[  265.801732][T16594] netlink: 'syz.2.3007': attribute type 1 has an invalid length.
[  265.977162][T16594] 8021q: adding VLAN 0 to HW filter on device bond6
[  266.082427][T16597] 8021q: adding VLAN 0 to HW filter on device bond6
[  266.106490][T16597] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  266.138143][T16597] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  266.195552][T16600] veth9: entered promiscuous mode
[  266.204973][T16600] bond6: (slave veth9): Enslaving as an active interface with a down link
[  266.235382][T16606] 8021q: adding VLAN 0 to HW filter on device bond6
[  266.280856][T16569] wg1 speed is unknown, defaulting to 1000
[  266.473835][T16622] IPVS: length: 124 != 8
[  266.515077][T16622] bridge0: entered allmulticast mode
[  266.711734][T16569] chnl_net:caif_netlink_parms(): no params data found
[  266.789460][T16569] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.796629][T16569] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.804619][T16569] bridge_slave_0: entered allmulticast mode
[  266.812681][T16569] bridge_slave_0: entered promiscuous mode
[  266.820995][T16569] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.828115][T16569] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.835902][T16569] bridge_slave_1: entered allmulticast mode
[  266.843127][T16569] bridge_slave_1: entered promiscuous mode
[  266.878242][T16569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.891154][T16569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.922572][T16569] team0: Port device team_slave_0 added
[  266.931881][T16569] team0: Port device team_slave_1 added
[  266.959598][T16569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.966546][T16569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.993130][T16569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.005432][T16569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.012567][T16569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.038748][T16569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.081838][T16569] hsr_slave_0: entered promiscuous mode
[  267.088148][T16569] hsr_slave_1: entered promiscuous mode
[  267.094411][T16569] debugfs: 'hsr0' already exists in 'hsr'
[  267.100253][T16569] Cannot create hsr debugfs directory
[  267.119486][ T5844] Bluetooth: hci5: command tx timeout
[  267.249602][T16569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.260653][T16569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.271073][T16569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  267.376642][T16569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.399744][T16569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.411505][T16569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  267.598876][ T5844] Bluetooth: hci2: command tx timeout
[  267.727147][T16569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.737805][T16569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.765565][T16569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  267.800193][T16683] xt_ipcomp: unknown flags 1D
[  267.846800][T16685] netlink: 'syz.0.3026': attribute type 6 has an invalid length.
[  267.864629][T16687] xt_hashlimit: overflow, try lower: 3/0
[  267.887025][T16569] bond0: (slave netdevsim0): Releasing backup interface
[  267.907798][T16569] bond0: (slave netdevsim0): the permanent HWaddr of slave - 52:ef:95:80:65:c8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  267.934994][T16569] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[  267.948456][T16569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.959461][T16569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.970056][T16569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  268.000267][T16693] netlink: 'syz.3.3029': attribute type 83 has an invalid length.
[  268.133732][T16569] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  268.144779][T16569] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  268.154729][T16569] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  268.165299][T16569] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  268.237293][T16569] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.258203][T16569] 8021q: adding VLAN 0 to HW filter on device team0
[  268.270507][T14303] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.277592][T14303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.293599][T14288] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.300808][T14288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.473422][T16569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.751526][T16716] __nla_validate_parse: 7 callbacks suppressed
[  268.751543][T16716] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3031'.
[  268.819574][T16569] veth0_vlan: entered promiscuous mode
[  268.863981][T16569] veth1_vlan: entered promiscuous mode
[  268.975050][T16569] veth0_macvtap: entered promiscuous mode
[  269.003585][T16569] veth1_macvtap: entered promiscuous mode
[  269.041055][T16569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.066099][T16569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.154340][T16732] team_slave_0: entered promiscuous mode
[  269.160343][T16732] team_slave_1: entered promiscuous mode
[  269.176094][T16732] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  269.184307][T16732] team0: Device macvtap1 is already an upper device of the team interface
[  269.195353][T16732] team_slave_0: left promiscuous mode
[  269.200811][T16732] team_slave_1: left promiscuous mode
[  269.250862][T16738] netlink: 'syz.0.3042': attribute type 1 has an invalid length.
[  269.255876][T14288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.270473][T14288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.315448][T14288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.336799][T14288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.451567][T16749] netlink: 'syz.3.3045': attribute type 2 has an invalid length.
[  269.574185][T14303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.618796][T14303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.680193][ T5844] Bluetooth: hci2: command tx timeout
[  269.734457][T14288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.754414][T14288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.073762][T16791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.652256][T16814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3056'.
[  270.714275][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  270.737423][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  270.747280][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  270.756007][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  270.764232][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  270.806598][T16789] wg1 speed is unknown, defaulting to 1000
[  270.944521][T16829] gtp0: entered promiscuous mode
[  271.055546][T16831] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  271.079029][T16831] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  271.200126][T16840] x_tables: ip6_tables: mh match: only valid for protocol 135
[  271.236561][T16816] wg1 speed is unknown, defaulting to 1000
[  271.333231][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3067'.
[  271.343208][T16847] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3067'.
[  271.463514][T16853] sctp: [Deprecated]: syz.1.3068 (pid 16853) Use of int in max_burst socket option.
[  271.463514][T16853] Use struct sctp_assoc_value instead
[  271.536141][T16855] netlink: 'syz.2.3069': attribute type 21 has an invalid length.
[  271.765148][ T5841] Bluetooth: hci2: command tx timeout
[  271.928279][T16881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3073'.
[  271.981493][T16816] chnl_net:caif_netlink_parms(): no params data found
[  272.316899][T16909] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  272.406362][T16816] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.433157][T16816] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.449314][T16816] bridge_slave_0: entered allmulticast mode
[  272.464173][T16816] bridge_slave_0: entered promiscuous mode
[  272.492719][T16816] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.501595][T16816] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.520751][T16816] bridge_slave_1: entered allmulticast mode
[  272.528498][T16816] bridge_slave_1: entered promiscuous mode
[  272.536691][T16924] openvswitch: netlink: IP tunnel dst address not specified
[  272.545516][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'.
[  272.631054][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3085'.
[  272.651908][T16928] veth0: entered promiscuous mode
[  272.758024][T16816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.783929][T16816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.808755][ T5841] Bluetooth: hci4: command tx timeout
[  272.972676][T16816] team0: Port device team_slave_0 added
[  273.009514][T16816] team0: Port device team_slave_1 added
[  273.100119][T16959] netlink: 'syz.2.3090': attribute type 16 has an invalid length.
[  273.117081][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'.
[  273.186326][T16816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.217748][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.251933][T16816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.263312][T16974] veth0: entered promiscuous mode
[  273.280472][T16816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.321528][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.360612][T16816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.394972][ T1920] IPVS: starting estimator thread 0...
[  273.488789][T16982] IPVS: using max 29 ests per chain, 69600 per kthread
[  273.555921][T16971] veth0: left promiscuous mode
[  273.574044][T16816] hsr_slave_0: entered promiscuous mode
[  273.590009][T16816] hsr_slave_1: entered promiscuous mode
[  273.611700][T16816] debugfs: 'hsr0' already exists in 'hsr'
[  273.637777][T16816] Cannot create hsr debugfs directory
[  273.693120][T16993] pim6reg: entered allmulticast mode
[  273.732378][T16991] syzkaller0: entered promiscuous mode
[  273.737896][T16991] syzkaller0: entered allmulticast mode
[  273.745557][T16993] pim6reg: left allmulticast mode
[  273.784186][T16996] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3098'.
[  273.833820][T17006] netlink: 'syz.3.3101': attribute type 1 has an invalid length.
[  273.839048][ T5841] Bluetooth: hci2: command tx timeout
[  273.907817][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3102'.
[  273.983313][T17012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3103'.
[  274.009499][T17014] netlink: 'syz.1.3104': attribute type 1 has an invalid length.
[  274.073396][T17014] bond9 (unregistering): Released all slaves
[  274.144476][T16979] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  274.173516][T16979] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  274.264731][T17023] netlink: 'syz.3.3106': attribute type 1 has an invalid length.
[  274.308139][T16979] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  274.336669][T16979] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  274.402950][T16816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  274.433114][T16816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  274.457422][T17027] netlink: 'syz.3.3109': attribute type 21 has an invalid length.
[  274.466944][T17027] netlink: 'syz.3.3109': attribute type 22 has an invalid length.
[  274.480713][T16816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  274.491351][T17027] netlink: 'syz.3.3109': attribute type 23 has an invalid length.
[  274.503190][T17027] netlink: 'syz.3.3109': attribute type 25 has an invalid length.
[  274.511587][T17027] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3109'.
[  274.527648][T16816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  274.696163][T16979] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  274.719037][T16979] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  274.795873][T16979] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  274.809974][T16979] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  274.810207][T16816] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.826508][T17040] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3111'.
[  274.840206][T17040] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3111'.
[  274.851349][T17040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3111'.
[  274.884206][T16979] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  274.893565][ T5841] Bluetooth: hci4: command tx timeout
[  274.900079][T16979] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  274.913967][T16816] 8021q: adding VLAN 0 to HW filter on device team0
[  274.935505][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.942730][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.961342][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.968570][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.226452][T17060] netlink: 'syz.3.3114': attribute type 9 has an invalid length.
[  275.253069][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'.
[  275.324134][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'.
[  275.342544][T17073] netlink: 'syz.1.3118': attribute type 11 has an invalid length.
[  275.355020][T17073] netlink: 'syz.1.3118': attribute type 11 has an invalid length.
[  275.379669][T17073] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3118'.
[  275.553051][T16816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.645687][T16816] veth0_vlan: entered promiscuous mode
[  275.677739][T16816] veth1_vlan: entered promiscuous mode
[  275.741352][T16816] veth0_macvtap: entered promiscuous mode
[  275.774482][T16816] veth1_macvtap: entered promiscuous mode
[  275.900799][T16816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.964647][T16816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.051317][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.079428][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.127780][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.148300][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.456783][ T6399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.501802][ T6399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.577341][ T6399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.585997][ T6399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.765593][T17136] netlink: 'syz.2.3131': attribute type 30 has an invalid length.
[  276.800100][ T6399] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  276.816771][ T6399] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  276.835299][ T6399] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.850807][ T6399] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.862439][T17138] netlink: 'syz.1.3132': attribute type 11 has an invalid length.
[  277.571154][ T5832] syz_tun (unregistering): left allmulticast mode
[  277.632161][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  277.641694][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  277.650045][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  277.658041][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  277.669195][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  278.033251][T17154] wg1 speed is unknown, defaulting to 1000
[  278.046667][T17178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.166345][T17185] Unsupported ieee802154 address type: 0
[  278.470325][T17154] chnl_net:caif_netlink_parms(): no params data found
[  278.592711][ T6548] IPVS: starting estimator thread 0...
[  278.604755][T17221] Cannot find set identified by id 0 to match
[  278.709426][T17223] IPVS: using max 29 ests per chain, 69600 per kthread
[  278.767475][T17154] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.778727][T17154] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.785990][T17154] bridge_slave_0: entered allmulticast mode
[  278.822003][T17154] bridge_slave_0: entered promiscuous mode
[  278.836808][T17154] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.853122][T17154] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.863651][T17154] bridge_slave_1: entered allmulticast mode
[  278.872257][T17154] bridge_slave_1: entered promiscuous mode
[  278.998362][T17231] syzkaller0: entered promiscuous mode
[  279.004307][T17231] syzkaller0: entered allmulticast mode
[  279.025380][T17154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.091669][T17154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.124603][T17245] __nla_validate_parse: 40 callbacks suppressed
[  279.124624][T17245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3165'.
[  279.759291][ T5844] Bluetooth: hci1: command tx timeout
[  280.365646][T17154] team0: Port device team_slave_0 added
[  280.391798][T17154] team0: Port device team_slave_1 added
[  280.494079][T17154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.501869][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.530048][T17154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.573555][T17154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.608778][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.648267][T17154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.702918][T17266] openvswitch: netlink: IP tunnel dst address not specified
[  280.734287][T17154] hsr_slave_0: entered promiscuous mode
[  280.759971][T17154] hsr_slave_1: entered promiscuous mode
[  280.768978][T17154] debugfs: 'hsr0' already exists in 'hsr'
[  280.775378][T17154] Cannot create hsr debugfs directory
[  280.845796][T17270] netlink: 18 bytes leftover after parsing attributes in process `syz.4.3174'.
[  280.857510][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'.
[  280.998026][T17282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3178'.
[  281.206119][T17295] xt_recent: Unsupported userspace flags (000000b1)
[  281.248303][T17154] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.265295][T17154] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.330121][T17301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3185'.
[  281.402436][T17154] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.428925][T17154] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.447170][T17310] netlink: 'syz.4.3189': attribute type 1 has an invalid length.
[  281.534186][T17154] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.547278][T17154] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.567793][T17315] netlink: 'syz.0.3190': attribute type 58 has an invalid length.
[  281.585563][T17315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3190'.
[  281.622384][T17154] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.636890][T17154] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.847584][ T5844] Bluetooth: hci1: command tx timeout
[  281.943651][T17332] batman_adv: batadv0: Adding interface: dummy0
[  281.955761][T17332] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.003063][T17332] batman_adv: batadv0: Interface activated: dummy0
[  282.035834][T17333] batadv0: mtu less than device minimum
[  282.068386][T17333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  282.080219][T17333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  282.092029][T17333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  282.103848][T17333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  282.115599][T17333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  282.127468][T17333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  282.139322][T17333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  282.185435][T17336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3196'.
[  282.275308][T17338] x_tables: duplicate underflow at hook 3
[  282.301076][T17341] gretap1: entered promiscuous mode
[  282.349062][T17336] macvlan2: entered promiscuous mode
[  282.355403][T17336] macvlan2: entered allmulticast mode
[  282.372971][T17154] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  282.384161][T17154] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  282.418747][T17154] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  282.441667][T17340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3197'.
[  282.460048][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3197'.
[  282.461628][T17154] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  282.740564][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3204'.
[  282.762818][T17154] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.850672][T17154] 8021q: adding VLAN 0 to HW filter on device team0
[  282.915236][T14289] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.922422][T14289] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.983442][T14289] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.990668][T14289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.042527][T17377] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  283.651189][T17154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.799364][T17422] tc_dump_action: action bad kind
[  283.864092][T17154] veth0_vlan: entered promiscuous mode
[  283.892288][T17154] veth1_vlan: entered promiscuous mode
[  283.919116][ T5844] Bluetooth: hci1: command tx timeout
[  283.944724][T17154] veth0_macvtap: entered promiscuous mode
[  283.957818][T17154] veth1_macvtap: entered promiscuous mode
[  284.022265][T17154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.053054][T17154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.086319][T14295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.116034][T14295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.146964][T17441] net_ratelimit: 12 callbacks suppressed
[  284.146982][T17441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.168784][T14295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.181712][T14295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.196661][T17440] netlink: 'syz.0.3226': attribute type 5 has an invalid length.
[  284.213993][T14295] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.248178][T14295] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.281737][T14295] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.308693][T14295] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  284.390106][T17451] wireguard0: entered promiscuous mode
[  284.402665][T17451] wireguard0: entered allmulticast mode
[  284.420036][T17451] team0: Device wireguard0 is of different type
[  284.484028][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.498190][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.578060][ T4468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.604709][ T4468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.392806][T17509] __nla_validate_parse: 5 callbacks suppressed
[  285.392824][T17509] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3245'.
[  285.413996][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3246'.
[  285.532653][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3247'.
[  285.804189][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  285.816077][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  285.824625][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  285.832814][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  285.836596][T17535] openvswitch: netlink: EtherType 50a is less than min 600
[  285.841234][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  285.931640][T17539] IPv6: NLM_F_REPLACE set, but no existing node found!
[  285.998812][ T5841] Bluetooth: hci1: command tx timeout
[  286.134928][T17555] xt_l2tp: missing protocol rule (udp|l2tpip)
[  286.146460][T17555] : renamed from hsr0 (while UP)
[  286.207746][T17533] wg1 speed is unknown, defaulting to 1000
[  286.214800][T17543] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  286.505946][T17533] chnl_net:caif_netlink_parms(): no params data found
[  286.718897][T17533] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.728995][T17533] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.739229][T17533] bridge_slave_0: entered allmulticast mode
[  286.747158][T17533] bridge_slave_0: entered promiscuous mode
[  286.789760][T17595] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3270'.
[  286.821506][T17533] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.838030][T17533] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.845646][T17533] bridge_slave_1: entered allmulticast mode
[  286.855361][T17533] bridge_slave_1: entered promiscuous mode
[  286.930422][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3271'.
[  286.970494][T17601] netlink: 'syz.3.3273': attribute type 13 has an invalid length.
[  287.000678][T17533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.013259][T17601] netlink: 'syz.3.3273': attribute type 13 has an invalid length.
[  287.014288][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'.
[  287.033102][T17533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.052408][T17605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.081869][T17605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.116795][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'.
[  287.232695][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3276'.
[  287.243760][T17533] team0: Port device team_slave_0 added
[  287.263435][T17533] team0: Port device team_slave_1 added
[  287.295186][T17624] netlink: 'syz.4.3278': attribute type 32 has an invalid length.
[  287.326541][T17627] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3280'.
[  287.337079][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3278'.
[  287.401707][T17624] bond2: option coupled_control: invalid value (110)
[  287.408974][T17632] delete_channel: no stack
[  287.422260][T17624] bond2 (unregistering): Released all slaves
[  287.451938][T17631] netlink: 'syz.3.3281': attribute type 10 has an invalid length.
[  287.464744][T17631] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  287.477562][T17533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.484976][T17533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.519824][T17533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.539301][T17630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.571347][T17533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.591477][T17533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.649542][T17636] netlink: 'syz.4.3283': attribute type 6 has an invalid length.
[  287.661464][T17533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.699918][T17639] netlink: 'syz.4.3283': attribute type 6 has an invalid length.
[  287.824354][T17533] hsr_slave_0: entered promiscuous mode
[  287.832357][T17533] hsr_slave_1: entered promiscuous mode
[  287.844139][T17533] debugfs: 'hsr0' already exists in 'hsr'
[  287.850660][T17533] Cannot create hsr debugfs directory
[  287.851423][T17646] netlink: 'syz.1.3285': attribute type 21 has an invalid length.
[  287.883729][T17646] netlink: 'syz.1.3285': attribute type 22 has an invalid length.
[  287.892635][T17646] netlink: 'syz.1.3285': attribute type 23 has an invalid length.
[  287.908335][T17646] netlink: 'syz.1.3285': attribute type 25 has an invalid length.
[  287.920584][ T5841] Bluetooth: hci0: command tx timeout
[  288.124883][T17533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.253305][T17533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.342119][T17533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.429750][T17533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.748048][T17533] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  288.780267][T17533] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  288.798105][T17533] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  288.867869][T17533] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  288.889487][T17687] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  288.909074][T17687] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  288.934166][T17687] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  289.063444][T17701] team0: Cannot enslave team device to itself
[  289.141251][T17533] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.180527][T17533] 8021q: adding VLAN 0 to HW filter on device team0
[  289.243867][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.251086][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.294719][T14295] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.301941][T14295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.481218][   T36] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  289.543747][   T36] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  289.590456][   T36] bond0: now running without any active interface!
[  289.652069][T17721] erspan0: entered promiscuous mode
[  289.835215][T17732] 8021q: adding VLAN 0 to HW filter on device bond1
[  289.870080][T17733] bond1: (slave geneve2): making interface the new active one
[  289.887301][T17733] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  289.937263][T17533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.000124][ T5841] Bluetooth: hci0: command tx timeout
[  290.028846][T17533] veth0_vlan: entered promiscuous mode
[  290.051804][T17533] veth1_vlan: entered promiscuous mode
[  290.358084][T17533] veth0_macvtap: entered promiscuous mode
[  290.378169][T17533] veth1_macvtap: entered promiscuous mode
[  290.441206][T17533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.472964][T17533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.508358][ T3472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.544454][ T3472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.571048][ T3472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.588327][ T3472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.690694][T17786] ipt_REJECT: TCP_RESET invalid for non-tcp
[  290.732069][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.746896][T17786] ipt_REJECT: TCP_RESET invalid for non-tcp
[  290.752980][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.833424][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.853727][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.086167][T17808] __nla_validate_parse: 13 callbacks suppressed
[  291.086185][T17808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3333'.
[  291.156037][T17814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3336'.
[  291.215729][T17812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.235759][T17814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3336'.
[  291.238114][T17812] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  291.265968][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'.
[  291.518413][T16563] udevd[16563]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  291.581870][T17842] xt_hashlimit: overflow, rate too high: 0
[  291.666870][T17841] xt_limit: Overflow, try lower: 604147548/4200216962
[  291.708214][T17852] Cannot find add_set index 0 as target
[  291.793435][T17856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3347'.
[  291.814362][T17859] sctp: [Deprecated]: syz.0.3348 (pid 17859) Use of struct sctp_assoc_value in delayed_ack socket option.
[  291.814362][T17859] Use struct sctp_sack_info instead
[  291.850708][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3347'.
[  291.902015][T17861] Cannot find add_set index 0 as target
[  292.082716][ T5841] Bluetooth: hci0: command tx timeout
[  292.094244][T17872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'.
[  292.279570][T17884] validate_nla: 6 callbacks suppressed
[  292.279586][T17884] netlink: 'syz.1.3355': attribute type 24 has an invalid length.
[  292.353446][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3356'.
[  292.507491][T17898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3357'.
[  292.556637][T17894] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.564349][T17894] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.637218][T17912] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3359'.
[  292.658240][T17894] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  292.846617][T17917] netlink: 'syz.0.3363': attribute type 1 has an invalid length.
[  292.874886][T17917] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.970410][T17924] pim6reg1: entered promiscuous mode
[  292.975737][T17924] pim6reg1: entered allmulticast mode
[  293.133214][T17942] syzkaller0: entered promiscuous mode
[  293.144018][T17942] syzkaller0: entered allmulticast mode
[  293.365955][T17960] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.373860][T17955] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  293.397842][T17955] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  293.551066][T17971] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  293.583622][ T3472] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.616610][ T3472] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.651605][ T3472] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.661181][ T3472] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.745730][T17980] veth1_to_bond: entered promiscuous mode
[  293.755085][T17981] netlink: 'syz.3.3381': attribute type 21 has an invalid length.
[  293.765262][T17978] veth1_to_bond: left promiscuous mode
[  293.796260][T17981] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  294.005496][T17999] netlink: 'syz.3.3389': attribute type 39 has an invalid length.
[  294.156910][T18016] netlink: 'syz.4.3393': attribute type 4 has an invalid length.
[  294.160864][ T5841] Bluetooth: hci0: command tx timeout
[  294.170887][T18010] syzkaller0: entered promiscuous mode
[  294.196909][T18010] syzkaller0: entered allmulticast mode
[  294.213749][T18021] netlink: 'syz.4.3393': attribute type 4 has an invalid length.
[  294.305115][T18006] syzkaller0: entered promiscuous mode
[  294.319756][T18006] syzkaller0: entered allmulticast mode
[  295.762782][T18048] bridge0: port 3(veth0_to_bridge) entered blocking state
[  295.796000][T18048] bridge0: port 3(veth0_to_bridge) entered disabled state
[  295.804001][T18048] veth0_to_bridge: entered allmulticast mode
[  295.811950][T18048] veth0_to_bridge: entered promiscuous mode
[  295.989925][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  295.996591][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  296.383370][T18086] __nla_validate_parse: 15 callbacks suppressed
[  296.383387][T18086] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3415'.
[  296.432080][T18086] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3415'.
[  296.515776][ T8658] hid-generic 0005:FFFF:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  296.645706][T18106] netlink: 'syz.2.3417': attribute type 63 has an invalid length.
[  296.682517][T18103] fido_id[18103]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory
[  296.794050][T18110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  297.152780][T18128] syzkaller0: create flow: hash 3668687240 index 1
[  297.242944][T18133] netlink: 'syz.2.3426': attribute type 3 has an invalid length.
[  297.323305][T18137] geneve2: entered promiscuous mode
[  297.362027][T18128] syzkaller0: delete flow: hash 3668687240 index 1
[  297.560780][T18145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3429'.
[  297.747677][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3429'.
[  317.121628][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.563355][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.657896][T18168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3436'.
[  378.803046][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3436'.
[  378.871329][T18183] : entered promiscuous mode
[  378.876300][T18181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3438'.
[  378.915731][T18183] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3439'.
[  379.086426][T18199] netlink: 'syz.3.3443': attribute type 4 has an invalid length.
[  379.101811][T18201] openvswitch: netlink: Unknown key attributes 2
[  379.247277][T18210] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3447'.
[  379.268310][T18210] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3447'.
[  379.290337][T18210] netlink: 'syz.0.3447': attribute type 5 has an invalid length.
[  379.298078][T18210] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3447'.
[  379.311962][T18213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3449'.
[  379.511104][T18232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3455'.
[  379.653260][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3458'.
[  379.700783][T18245] netlink: 'syz.4.3460': attribute type 2 has an invalid length.
[  379.709626][T18245] netlink: 'syz.4.3460': attribute type 1 has an invalid length.
[  379.719810][T18245] netlink: 'syz.4.3460': attribute type 1 has an invalid length.
[  379.727624][T18245] netlink: 'syz.4.3460': attribute type 2 has an invalid length.
[  379.992009][T18249] gtp0: entered promiscuous mode
[  379.996069][T18255] netlink: 'syz.3.3463': attribute type 33 has an invalid length.
[  380.008650][T18249] gtp0: entered allmulticast mode
[  380.120055][T18259] netlink: 'syz.4.3465': attribute type 1 has an invalid length.
[  380.240254][T18267] netlink: 'syz.4.3468': attribute type 2 has an invalid length.
[  380.241450][T18266] syzkaller0: entered promiscuous mode
[  380.254327][T18266] syzkaller0: entered allmulticast mode
[  380.584116][T18289] syzkaller0: entered promiscuous mode
[  380.658639][T18289] syzkaller0: entered allmulticast mode
[  381.307720][T18321] netlink: 'syz.1.3485': attribute type 5 has an invalid length.
[  381.335949][T18321] IPVS: set_ctl: invalid protocol: 212 172.20.20.187:20002
[  381.711089][T18346] Cannot find add_set index 0 as target
[  382.415059][T18393] nbd: must specify an index to disconnect
[  382.584570][T18408] openvswitch: netlink: Flow key attr not present in new flow.
[  382.588079][T18402] bond2: (slave bridge2): making interface the new active one
[  382.600810][T18402] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  382.617927][T18407] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  382.630369][T18407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.702673][T18413] openvswitch: netlink: Flow key attr not present in new flow.
[  383.197144][T18443] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.537154][T18456] "syz.0.3528" (18456) uses obsolete ecb(arc4) skcipher
[  383.643508][T18475] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  384.002395][T18498] syzkaller0: entered promiscuous mode
[  384.007976][T18498] syzkaller0: entered allmulticast mode
[  384.478905][ T5841] Bluetooth: hci0: command tx timeout
[  384.607606][T18545] __nla_validate_parse: 13 callbacks suppressed
[  384.607625][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'.
[  384.612450][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3557'.
[  384.659847][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3557'.
[  384.751045][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3559'.
[  384.824094][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3557'.
[  385.178930][T18588] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3568'.
[  385.252059][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'.
[  385.281924][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'.
[  385.310445][T18596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3569'.
[  385.368974][T18602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3570'.
[  385.453754][T18610] nbd: illegal input index -8454144
[  385.820076][T18639] validate_nla: 5 callbacks suppressed
[  385.820093][T18639] netlink: 'syz.4.3579': attribute type 1 has an invalid length.
[  385.911586][T18639] bond4: entered promiscuous mode
[  385.916780][T18639] bond4: entered allmulticast mode
[  385.922686][T18639] 8021q: adding VLAN 0 to HW filter on device bond4
[  386.370445][T18455] udevd[18455]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  386.416834][T18455] udevd[18455]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  386.481500][T18678] bond1: option lp_interval: invalid value (0)
[  386.488857][T18678] bond1: option lp_interval: allowed values 1 - 2147483647
[  386.550365][T18678] bond1 (unregistering): Released all slaves
[  386.679958][T18699] chnl_net:caif_netlink_parms(): no params data found
[  386.847231][T18706] netlink: 'syz.1.3599': attribute type 8 has an invalid length.
[  386.869644][T18706] nft_compat: unsupported protocol 0
[  387.085886][T18719] netlink: 'syz.2.3605': attribute type 1 has an invalid length.
[  387.400603][T18716] wg1 speed is unknown, defaulting to 1000
[  388.098909][T18757] netlink: 'syz.0.3618': attribute type 32 has an invalid length.
[  388.178362][T18757] bond2: option coupled_control: invalid value (64)
[  388.222123][T18757] bond2 (unregistering): Released all slaves
[  388.231837][T18767] netlink: 'syz.2.3621': attribute type 1 has an invalid length.
[  388.555499][T18787] netlink: 'syz.0.3629': attribute type 282 has an invalid length.
[  388.676607][T18795] netlink: 'syz.2.3633': attribute type 12 has an invalid length.
[  388.723060][T18795] bond2: option primary_reselect: invalid value (255)
[  388.733440][T18795] bond2 (unregistering): Released all slaves
[  388.813495][T18803] xt_limit: Overflow, try lower: 271964/0
[  388.874717][T18803] bond1: entered allmulticast mode
[  388.881723][T18803] 8021q: adding VLAN 0 to HW filter on device bond1
[  389.004337][T18813] netlink: 'syz.3.3639': attribute type 4 has an invalid length.
[  389.328678][T18817] team_slave_0: entered allmulticast mode
[  389.346323][T18817] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  389.427145][T18823] bond1 (unregistering): Released all slaves
[  389.730673][T18848] __nla_validate_parse: 18 callbacks suppressed
[  389.730692][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3651'.
[  389.750256][T18848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3651'.
[  389.761068][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3651'.
[  389.762823][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3649'.
[  389.770263][T18848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3651'.
[  389.918097][T18857] netlink: 'syz.1.3654': attribute type 12 has an invalid length.
[  389.931728][T18855] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3653'.
[  390.093865][T18874] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3657'.
[  390.104528][T18874] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  390.158179][T18867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.167006][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3660'.
[  390.177788][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'.
[  390.277952][T18889] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3663'.
[  390.315523][T18867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.381572][T14301] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  390.407894][T14301] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  390.495502][T18867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.514753][T14301] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  390.531830][T14301] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  390.547079][T18900] netlink: 'syz.3.3668': attribute type 2 has an invalid length.
[  390.671871][T18867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.716281][T18910] sctp: [Deprecated]: syz.1.3670 (pid 18910) Use of int in maxseg socket option.
[  390.716281][T18910] Use struct sctp_assoc_value instead
[  390.862478][T18913] validate_nla: 1 callbacks suppressed
[  390.862495][T18913] netlink: 'syz.1.3672': attribute type 1 has an invalid length.
[  390.897535][   T80] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.985025][ T1154] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.016923][ T1154] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.140542][T18913] 8021q: adding VLAN 0 to HW filter on device bond1
[  391.170981][T18917] vlan2: entered allmulticast mode
[  391.194151][T18917] veth1: entered allmulticast mode
[  391.216677][T18917] bond1: (slave vlan2): making interface the new active one
[  391.232052][T18917] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  391.262903][ T1154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.282844][T18930] xt_hashlimit: invalid interval
[  391.488221][T18940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.633733][T18948] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  391.650407][T18948] bridge0: port 3(ipvlan2) entered blocking state
[  391.656984][T18948] bridge0: port 3(ipvlan2) entered disabled state
[  391.665945][T18948] ipvlan2: entered allmulticast mode
[  391.671558][T18948] bridge0: entered allmulticast mode
[  391.691761][T18948] ipvlan2: left allmulticast mode
[  391.696811][T18948] bridge0: left allmulticast mode
[  391.943079][T18964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.012404][T18977] block nbd2: Unsupported socket: should be TCP or UNIX.
[  392.182296][T18987] xt_hashlimit: size too large, truncated to 1048576
[  392.343195][T19000] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  392.357226][T19000] 0ªî{X¹¦: entered allmulticast mode
[  392.363519][T19000] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  392.365535][T19003] netlink: 'syz.4.3698': attribute type 2 has an invalid length.
[  392.508946][T19007] nbd2: detected capacity change from 0 to 63
[  392.516351][T19011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.520328][T19008] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  392.534994][T18455] block nbd2: Send control failed (result -32)
[  392.539925][ T5841] block nbd2: Receive control failed (result -32)
[  392.592492][T18455] block nbd2: Request send failed, requeueing
[  392.613671][   T25] block nbd2: Dead connection, failed to find a fallback
[  392.623487][T18455] block nbd2: Dead connection, failed to find a fallback
[  392.631310][   T25] block nbd2: shutting down sockets
[  392.637010][   T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.647069][   T25] Buffer I/O error on dev nbd2, logical block 0, async page read
[  392.655128][T18455] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.665253][T18455] Buffer I/O error on dev nbd2, logical block 1, async page read
[  392.673517][T18455] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.683815][T18455] Buffer I/O error on dev nbd2, logical block 2, async page read
[  392.692263][T18455] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.701560][T18455] Buffer I/O error on dev nbd2, logical block 3, async page read
[  392.709678][T18455] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.720231][T18455] Buffer I/O error on dev nbd2, logical block 0, async page read
[  392.729880][T18455] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.739497][T18455] Buffer I/O error on dev nbd2, logical block 1, async page read
[  392.747364][T18455] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.756661][T18455] Buffer I/O error on dev nbd2, logical block 2, async page read
[  392.764792][T18455] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.774082][T18455] Buffer I/O error on dev nbd2, logical block 3, async page read
[  392.782446][T18455] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.792164][T18455] Buffer I/O error on dev nbd2, logical block 0, async page read
[  392.800614][T18455] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.809952][T18455] Buffer I/O error on dev nbd2, logical block 1, async page read
[  392.820821][T18455] ldm_validate_partition_table(): Disk read failed.
[  392.829780][T18455] Dev nbd2: unable to read RDB block 0
[  392.838138][T18455]  nbd2: unable to read partition table
[  392.863977][T18455] ldm_validate_partition_table(): Disk read failed.
[  392.903116][T18455] Dev nbd2: unable to read RDB block 0
[  392.920936][T18455]  nbd2: unable to read partition table
[  393.912932][T19092] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  394.136603][T19112] tipc: Started in network mode
[  394.146706][T19112] tipc: Node identity f2bc1b75d104, cluster identity 4711
[  394.156805][T19112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  394.170776][T19112] syzkaller0: entered promiscuous mode
[  394.177484][T19112] syzkaller0: entered allmulticast mode
[  394.191177][T19108] netlink: 'syz.2.3729': attribute type 11 has an invalid length.
[  394.217480][T19112] tipc: Resetting bearer <eth:syzkaller0>
[  394.251902][T19110] tipc: Resetting bearer <eth:syzkaller0>
[  394.314604][T19110] tipc: Disabling bearer <eth:syzkaller0>
[  394.529750][T19135] netlink: 'syz.0.3739': attribute type 7 has an invalid length.
[  394.555089][T19135] netlink: 'syz.0.3739': attribute type 8 has an invalid length.
[  394.779334][T19161] __nla_validate_parse: 18 callbacks suppressed
[  394.779348][T19161] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3746'.
[  394.897828][T19108] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  394.904069][T19108] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  394.934607][T19108] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  394.940929][T19108] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  395.185268][T19171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.194271][T19172] syzkaller0: entered promiscuous mode
[  395.224539][T19172] syzkaller0: entered allmulticast mode
[  395.259826][T19172] tipc: Resetting bearer <eth:syzkaller0>
[  395.296280][T19172] tipc: Disabling bearer <eth:syzkaller0>
[  395.312679][T19186] xt_nat: multiple ranges no longer supported
[  395.533278][T19206] xt_limit: Overflow, try lower: 271964/0
[  395.553054][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3762'.
[  395.981233][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'.
[  396.010478][T19241] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  396.072509][T19254] tipc: Started in network mode
[  396.077409][T19254] tipc: Node identity 00000000000000000000ffffac1e0103, cluster identity 4711
[  396.095459][T19254] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  396.412739][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'.
[  396.459179][T19286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3783'.
[  396.511083][T19289] netlink: 'syz.1.3784': attribute type 12 has an invalid length.
[  396.516668][T19290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3785'.
[  396.523608][T19289] netlink: 'syz.1.3784': attribute type 32 has an invalid length.
[  396.611635][T19294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3787'.
[  396.623264][T19294] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3787'.
[  396.696969][T19301] openvswitch: netlink: Message has 8 unknown bytes.
[  396.716828][T19301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.789202][T19305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3789'.
[  396.818911][T19305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3789'.
[  396.852753][T19305] gretap0: entered promiscuous mode
[  396.869184][T19305] batadv_slave_1: entered promiscuous mode
[  396.876376][T19305] batadv_slave_1: left promiscuous mode
[  396.891723][T19305] gretap0: left promiscuous mode
[  396.982709][T19321] netlink: 'syz.2.3794': attribute type 1 has an invalid length.
[  397.096791][T19333] bond2: (slave bridge5): making interface the new active one
[  397.111243][T19333] bond2: (slave bridge5): Enslaving as an active interface with an up link
[  397.134804][T19337] netlink: 'syz.1.3797': attribute type 10 has an invalid length.
[  397.154478][T19337] bond0: (slave wlan1): Opening slave failed
[  397.175568][T19321] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  397.289371][T19333] macvlan2: entered promiscuous mode
[  397.319885][T19333] macvlan2: entered allmulticast mode
[  397.332376][T19333] bond2: entered promiscuous mode
[  397.364683][T19333] bridge5: entered promiscuous mode
[  397.371731][T19333] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  397.379804][T19333] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  397.404379][T19333] bond2: left promiscuous mode
[  397.410253][T19333] bridge5: left promiscuous mode
[  397.455812][T19359] openvswitch: netlink: Flow actions attr not present in new flow.
[  397.552777][T19362] netlink: 'syz.3.3806': attribute type 9 has an invalid length.
[  397.933278][T19387] macvlan2: entered promiscuous mode
[  398.114656][T19403] netlink: 'syz.2.3821': attribute type 1 has an invalid length.
[  398.178349][T19403] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  398.191179][T19403] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  398.201657][T19403] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  398.270998][T19404] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  398.285398][T19404] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  398.603497][T19434] netlink: 'syz.3.3829': attribute type 7 has an invalid length.
[  398.611660][T19434] netlink: 'syz.3.3829': attribute type 8 has an invalid length.
[  400.167597][T19466] syzkaller1: entered promiscuous mode
[  400.182278][T19466] syzkaller1: entered allmulticast mode
[  400.200655][T19468] __nla_validate_parse: 9 callbacks suppressed
[  400.200671][T19468] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3840'.
[  400.473611][T19429] wg1 speed is unknown, defaulting to 1000
[  401.439111][T19526] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3857'.
[  401.498911][T19526] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  401.581832][T19537] xt_recent: Unsupported userspace flags (000000b1)
[  401.852878][T19546] veth0: entered promiscuous mode
[  401.860685][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3860'.
[  401.864357][T19546] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3862'.
[  401.895440][T19546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3862'.
[  402.294634][T19582] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3869'.
[  402.324786][T19582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3869'.
[  402.464192][T19591] netlink: 'syz.0.3868': attribute type 3 has an invalid length.
[  402.472421][T19591] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3868'.
[  402.564807][T19599] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3874'.
[  402.582224][T19599] Bluetooth: MGMT ver 1.23
[  403.057766][T19637] netlink: 'syz.1.3885': attribute type 10 has an invalid length.
[  403.085058][T19637] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  403.095625][T19639] netlink: 'syz.4.3886': attribute type 2 has an invalid length.
[  403.109209][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3886'.
[  403.151083][T19633] veth5: entered promiscuous mode
[  403.217743][T19645] openvswitch: netlink: Flow actions attr not present in new flow.
[  403.389398][T19659] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  403.747539][T19689] netlink: 'syz.1.3900': attribute type 9 has an invalid length.
[  403.878958][T19697] syzkaller1: entered promiscuous mode
[  403.884537][T19697] syzkaller1: entered allmulticast mode
[  404.209798][T19719] netlink: 'syz.2.3910': attribute type 11 has an invalid length.
[  404.357932][T19726] bond4 (unregistering): Released all slaves
[  404.767348][T19740] syzkaller0: entered promiscuous mode
[  404.777087][T19740] syzkaller0: entered allmulticast mode
[  404.822786][T19744] veth5: entered allmulticast mode
[  404.873656][T19753] netlink: 'syz.3.3922': attribute type 22 has an invalid length.
[  404.943691][T19753] openvswitch: netlink: Key 6 has unexpected len 214 expected 2
[  440.011490][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  474.888832][T19782] veth0: entered promiscuous mode
[  474.902796][T19779] __nla_validate_parse: 13 callbacks suppressed
[  474.902814][T19779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'.
[  474.932774][T19777] x_tables: duplicate underflow at hook 3
[  474.981781][T19776] veth0: left promiscuous mode
[  475.224207][T19811] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3940'.
[  475.283850][T19816] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3941'.
[  475.319180][T19816] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3941'.
[  475.350546][T19816] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3941'.
[  475.536265][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'.
[  475.596582][T19849] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3951'.
[  475.747237][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3954'.
[  476.046050][T19885] netlink: 'syz.1.3962': attribute type 1 has an invalid length.
[  476.059866][T19885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3962'.
[  476.084952][T19885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3962'.
[  476.353616][T19910] netlink: 'syz.3.3968': attribute type 5 has an invalid length.
[  476.694392][T19930] º
: renamed from veth1_vlan (while UP)
[  477.134201][T19958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  477.177276][T19963] netlink: 'syz.0.3983': attribute type 1 has an invalid length.
[  477.202498][T19963] netlink: 'syz.0.3983': attribute type 3 has an invalid length.
[  477.237513][T19966] netlink: 'syz.4.3984': attribute type 10 has an invalid length.
[  477.249479][T19966] team0: entered promiscuous mode
[  477.254674][T19966] team_slave_0: entered promiscuous mode
[  477.265686][T19966] team_slave_1: entered promiscuous mode
[  477.283338][T19966] bridge0: port 3(team0) entered blocking state
[  477.290052][T19966] bridge0: port 3(team0) entered disabled state
[  477.296619][T19966] team0: entered allmulticast mode
[  477.303716][T19966] team_slave_0: entered allmulticast mode
[  477.310179][T19966] team_slave_1: entered allmulticast mode
[  477.321831][T19966] bridge0: port 3(team0) entered blocking state
[  477.328220][T19966] bridge0: port 3(team0) entered forwarding state
[  477.376047][T19966] bridge0: entered allmulticast mode
[  477.439217][T19974] can: request_module (can-proto-0) failed.
[  477.967183][T20014] hsr_slave_0 (unregistering): left promiscuous mode
[  478.212871][T20048] netlink: 'syz.3.4012': attribute type 1 has an invalid length.
[  478.271751][T20046] bond3: option mode: invalid value (133)
[  478.285400][T20046] bond3 (unregistering): Released all slaves
[  478.357246][T20048] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  478.595035][T20069] syzkaller0: entered promiscuous mode
[  478.612125][T20069] syzkaller0: entered allmulticast mode
[  478.733038][T20079] tipc: Started in network mode
[  478.737925][T20079] tipc: Node identity , cluster identity 4711
[  478.760139][T20079] tipc: Failed to obtain node identity
[  478.771153][T20079] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  478.865890][T20081] syzkaller0: entered promiscuous mode
[  478.889102][T20081] syzkaller0: entered allmulticast mode
[  479.330818][T20117] netlink: 'syz.1.4029': attribute type 1 has an invalid length.
[  480.761099][T20133] netlink: 'syz.0.4030': attribute type 1 has an invalid length.
[  480.913965][T20145] __nla_validate_parse: 17 callbacks suppressed
[  480.913983][T20145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4032'.
[  482.168818][T20156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4037'.
[  482.186626][T20156] sctp: [Deprecated]: syz.4.4037 (pid 20156) Use of struct sctp_assoc_value in delayed_ack socket option.
[  482.186626][T20156] Use struct sctp_sack_info instead
[  482.338092][T20177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4040'.
[  482.448718][T20185] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  482.477412][T20190] netlink: 'syz.4.4044': attribute type 21 has an invalid length.
[  482.485979][T20190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4044'.
[  482.523463][T20193] netlink: 'syz.1.4042': attribute type 3 has an invalid length.
[  482.531803][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4042'.
[  482.554636][T20195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  482.561945][T20195] IPv6: NLM_F_CREATE should be set when creating new route
[  482.569209][T20195] IPv6: NLM_F_CREATE should be set when creating new route
[  482.576543][T20195] IPv6: NLM_F_CREATE should be set when creating new route
[  482.585762][T20195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  482.737139][T20196] ip6t_REJECT: ECHOREPLY is not supported
[  483.147369][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4046'.
[  483.150777][T20191] bridge0: port 3(team0) entered disabled state
[  483.162754][T20191] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.170589][T20191] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.213677][T20201] netlink: 900 bytes leftover after parsing attributes in process `syz.0.4045'.
[  483.431372][T20233] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  483.454930][T20205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  483.468299][T20205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.567716][T20218] syzkaller1: entered promiscuous mode
[  483.574518][T20218] syzkaller1: entered allmulticast mode
[  483.631116][ T4200] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.642789][ T4200] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.652691][ T4200] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.662443][ T4200] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.705939][ T4200] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.715388][ T4200] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.724457][ T4200] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.734084][ T4200] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.753765][T20241] bond0: (slave rose0): Error: Device can not be enslaved while up
[  484.062989][T20272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4062'.
[  484.212143][T20276] veth0_to_bond: entered allmulticast mode
[  484.484792][T20294] bond5: option mode: invalid value (10)
[  484.500610][T20294] bond5 (unregistering): Released all slaves
[  484.673989][T20302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4072'.
[  484.757773][T20310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4074'.
[  484.775939][T20311] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  485.303884][T20351] syzkaller0: entered allmulticast mode
[  485.572986][T20371] sctp: [Deprecated]: syz.4.4093 (pid 20371) Use of int in max_burst socket option deprecated.
[  485.572986][T20371] Use struct sctp_assoc_value instead
[  485.707520][T20381] netlink: 'syz.3.4098': attribute type 1 has an invalid length.
[  485.772126][T20378] nbd3: detected capacity change from 0 to 127
[  485.780024][ T5841] block nbd3: Receive control failed (result -32)
[  485.909272][T20399] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  486.074505][T20407] netlink: 'syz.3.4105': attribute type 1 has an invalid length.
[  486.095903][T20412] __nla_validate_parse: 6 callbacks suppressed
[  486.095929][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4106'.
[  486.137893][T20412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4106'.
[  486.156413][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4105'.
[  486.273170][T20407] 8021q: adding VLAN 0 to HW filter on device bond2
[  486.297572][T20412] bridge0: port 3(ipvlan2) entered blocking state
[  486.304482][T20412] bridge0: port 3(ipvlan2) entered disabled state
[  486.312048][T20412] ipvlan2: entered allmulticast mode
[  486.317551][T20412] bridge0: entered allmulticast mode
[  486.326047][T20412] ipvlan2: left allmulticast mode
[  486.331448][T20412] bridge0: left allmulticast mode
[  486.375090][T20427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4110'.
[  486.410113][T20410] 8021q: adding VLAN 0 to HW filter on device bond3
[  486.417464][T20428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4110'.
[  486.522671][T20437] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  486.581048][T20441] netlink: 'syz.3.4114': attribute type 178 has an invalid length.
[  486.613551][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4115'.
[  486.648794][T20443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4115'.
[  486.696929][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'.
[  486.816184][T20451] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4118'.
[  486.823137][T20458] netlink: 'syz.1.4121': attribute type 1 has an invalid length.
[  486.834679][T20451] openvswitch: netlink: Flow actions attr not present in new flow.
[  486.856871][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4121'.
[  487.014526][T20469] bridge_slave_1: left allmulticast mode
[  487.034618][T20469] bridge_slave_1: left promiscuous mode
[  487.049079][T20469] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.070726][T20475] tls_set_device_offload: netdev not found
[  487.220495][T20469] bridge_slave_0: left allmulticast mode
[  487.226486][T20469] bridge_slave_0: left promiscuous mode
[  487.238471][T20469] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.672613][T20477] bridge0: port 3(team0) entered blocking state
[  487.679017][T20477] bridge0: port 3(team0) entered forwarding state
[  487.686215][T20477] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.693392][T20477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  487.700872][T20477] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.708030][T20477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.784721][T20482] netlink: 'syz.2.4129': attribute type 1 has an invalid length.
[  487.832363][T20484] : renamed from hsr0
[  487.950952][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  487.963523][    C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1c used by aa:aa:aa:aa:aa:1c detected!
[  488.079128][T20508] netlink: 'syz.2.4139': attribute type 21 has an invalid length.
[  488.130122][T20504] netlink: 'syz.1.4137': attribute type 1 has an invalid length.
[  488.189452][T20508] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  488.221515][T20508] bond4 (unregistering): Released all slaves
[  488.487102][T20523] netlink: 'syz.4.4144': attribute type 9 has an invalid length.
[  488.514302][T20523] netlink: 'syz.4.4144': attribute type 11 has an invalid length.
[  488.539073][T20523] netlink: 'syz.4.4144': attribute type 12 has an invalid length.
[  488.842777][T20545] netlink: zone id is out of range
[  488.847934][T20545] netlink: zone id is out of range
[  488.859526][T20545] netlink: zone id is out of range
[  488.875120][T20545] netlink: zone id is out of range
[  488.886260][T20545] netlink: zone id is out of range
[  488.908646][T20545] netlink: zone id is out of range
[  488.913786][T20545] netlink: zone id is out of range
[  488.961788][T20545] netlink: zone id is out of range
[  488.978581][T20545] netlink: zone id is out of range
[  488.983721][T20545] netlink: zone id is out of range
[  489.061501][T20572] xt_TCPMSS: Only works on TCP SYN packets
[  489.437482][T20602] bond0: (slave dummy0): Releasing backup interface
[  489.450902][T20602] bond0: (slave batadv0): Releasing backup interface
[  489.465802][T20602] veth0_to_bridge: left allmulticast mode
[  489.472972][T20602] veth0_to_bridge: left promiscuous mode
[  489.480667][T20602] bridge0: port 3(veth0_to_bridge) entered disabled state
[  489.491414][T20602] bridge_slave_0: left allmulticast mode
[  489.497087][T20602] bridge_slave_0: left promiscuous mode
[  489.503360][T20602] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.513353][T20602] bridge_slave_1: left allmulticast mode
[  489.519921][T20602] bridge_slave_1: left promiscuous mode
[  489.525620][T20602] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.536348][T20602] bond0: (slave bond_slave_0): Releasing backup interface
[  489.545372][T20602] bond0: (slave bond_slave_1): Releasing backup interface
[  489.555157][T20602] team0: Port device team_slave_0 removed
[  489.564323][T20602] team0: Port device team_slave_1 removed
[  489.571778][T20602] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.580094][T20602] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.603107][T20605] veth1: entered allmulticast mode
[  490.086458][T20645] blkio.reset_stats is deprecated
[  490.088033][T20640] netlink: 'syz.3.4180': attribute type 11 has an invalid length.
[  490.187039][ T3871] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  490.207958][ T3871] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  490.275890][T20640] gtp0: entered promiscuous mode
[  490.287265][T20640] gtp0: entered allmulticast mode
[  490.320132][ T3871] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  490.332953][ T3871] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  490.362310][T20660] netlink: 'syz.1.4186': attribute type 4 has an invalid length.
[  490.389712][T20657] netlink: 'syz.4.4185': attribute type 1 has an invalid length.
[  490.529974][T20663] 8021q: adding VLAN 0 to HW filter on device bond6
[  490.551374][T20663] bond5: (slave bond6): making interface the new active one
[  490.562141][T20670] netlink: 'syz.3.4188': attribute type 10 has an invalid length.
[  490.565920][T20663] bond5: (slave bond6): Enslaving as an active interface with an up link
[  490.811217][T20685] Bluetooth: hci0: Opcode 0x080f failed: -22
[  491.603034][T20731] netlink: 'syz.0.4208': attribute type 21 has an invalid length.
[  491.629967][T20731] __nla_validate_parse: 16 callbacks suppressed
[  491.629985][T20731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4208'.
[  491.697809][T20739] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  491.732353][T20742] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  491.880308][T20754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4212'.
[  491.964795][T20759] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4214'.
[  492.094456][T20771] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4216'.
[  492.111654][T20772] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4216'.
[  492.116935][T20773] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  492.323494][T20215] IPVS: starting estimator thread 0...
[  492.339121][T20791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4222'.
[  492.378890][T20791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4222'.
[  492.396195][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4222'.
[  492.406038][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4222'.
[  492.418753][T20793] IPVS: using max 28 ests per chain, 67200 per kthread
[  492.566953][T20811] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  492.568990][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4225'.
[  492.796857][T20833] gtp0: entered promiscuous mode
[  492.805906][T20833] gtp0: entered allmulticast mode
[  492.916077][T20843] C: renamed from lo
[  493.004658][T20838] syzkaller0: entered promiscuous mode
[  493.011570][T20838] syzkaller0: entered allmulticast mode
[  493.218172][T20864] Bluetooth: MGMT ver 1.23
[  493.285072][T20869] validate_nla: 6 callbacks suppressed
[  493.285089][T20869] netlink: 'syz.1.4241': attribute type 15 has an invalid length.
[  493.307307][T20869] netlink: 'syz.1.4241': attribute type 1 has an invalid length.
[  494.879135][T20908] sctp: [Deprecated]: syz.2.4253 (pid 20908) Use of struct sctp_assoc_value in delayed_ack socket option.
[  494.879135][T20908] Use struct sctp_sack_info instead
[  495.027589][T20914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  495.066354][T20913] tipc: Disabling bearer <eth:syzkaller0>
[  495.131555][T20915] netlink: 'syz.1.4255': attribute type 5 has an invalid length.
[  495.701631][T20961] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode
[  495.715717][T20961] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode
[  495.749293][T20964] dvmrp0: entered allmulticast mode
[  495.768815][T20964] dvmrp0: left allmulticast mode
[  495.971594][T20978] netlink: 'syz.4.4272': attribute type 32 has an invalid length.
[  496.207463][T20997] netlink: 'syz.1.4278': attribute type 11 has an invalid length.
[  496.256158][T20998] net_ratelimit: 57 callbacks suppressed
[  496.256176][T20998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  496.460833][T21017] syzkaller0: entered promiscuous mode
[  496.469415][T21017] syzkaller0: entered allmulticast mode
[  496.585058][T21027] netlink: 'syz.4.4290': attribute type 1 has an invalid length.
[  496.597311][T21027] netlink: 'syz.4.4290': attribute type 3 has an invalid length.
[  496.957816][T21058] __nla_validate_parse: 41 callbacks suppressed
[  496.957833][T21058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4296'.
[  497.006980][T21062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4296'.
[  497.260138][T21081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4302'.
[  497.272764][T21082] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4300'.
[  497.281807][T21081] nbd: must specify at least one socket
[  497.419189][T21093] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4304'.
[  497.426068][T21094] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4305'.
[  497.437836][T21094] netem: invalid attributes len -24
[  497.478054][T21094] netem: change failed
[  497.631925][T21107] netlink: 'syz.3.4310': attribute type 83 has an invalid length.
[  497.873890][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4316'.
[  497.912735][T21131] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4318'.
[  498.166907][T21151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4327'.
[  498.187668][T21144] bond4: entered allmulticast mode
[  498.270584][T21159] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4325'.
[  498.470693][T21176] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  498.572917][T21187] xt_CONNSECMARK: invalid mode: 0
[  498.617413][T21195] delete_channel: no stack
[  499.129301][T21227] netlink: 'syz.1.4347': attribute type 18 has an invalid length.
[  499.533365][T21252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  499.818898][T21268] macsec2: entered promiscuous mode
[  499.894702][T21278] pim6reg1: entered promiscuous mode
[  499.901303][T21278] pim6reg1: entered allmulticast mode
[  500.221921][T21301] chnl_net:caif_netlink_parms(): no params data found
[  500.369928][T21312] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  501.328312][T21379] ip6gre1: entered allmulticast mode
[  501.454369][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  501.872403][T21421] netlink: 'syz.2.4404': attribute type 1 has an invalid length.
[  501.881626][T21421] netlink: 'syz.2.4404': attribute type 2 has an invalid length.
[  501.900378][T21421] netlink: 'syz.2.4404': attribute type 1 has an invalid length.
[  501.922497][T21421] netlink: 'syz.2.4404': attribute type 2 has an invalid length.
[  502.364198][T21446] netlink: 'syz.0.4410': attribute type 10 has an invalid length.
[  502.374171][T21446] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  502.403143][T21446] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  502.446353][T21452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.485516][T21453] netlink: 'syz.3.4411': attribute type 1 has an invalid length.
[  502.536095][T21453] 8021q: adding VLAN 0 to HW filter on device bond5
[  502.549632][T21453] bond4: (slave bond5): making interface the new active one
[  502.557691][T21453] bond4: (slave bond5): Enslaving as an active interface with an up link
[  502.583623][T21459] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  502.601167][T21459] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  503.264573][T21495] net veth1_virt_wifi .: renamed from virt_wifi0
[  503.469678][T21511] __nla_validate_parse: 16 callbacks suppressed
[  503.469694][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4428'.
[  503.544790][T21515] netlink: 'syz.2.4430': attribute type 4 has an invalid length.
[  503.556982][T21514] netlink: 'syz.0.4429': attribute type 1 has an invalid length.
[  503.584643][T21514] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4429'.
[  503.653459][T21520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.041995][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4438'.
[  504.366114][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4444'.
[  504.370531][T21565] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20003
[  504.404907][T21566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.457067][T21574] netlink: 'syz.3.4448': attribute type 1 has an invalid length.
[  504.781558][T21574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4448'.
[  504.826197][T21602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4456'.
[  504.842201][T21602] netlink: 'syz.1.4456': attribute type 3 has an invalid length.
[  505.002003][T21619] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4460'.
[  505.045869][T21623] syz.2.4461: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  505.105326][T21623] CPU: 0 UID: 0 PID: 21623 Comm: syz.2.4461 Not tainted syzkaller #0 PREEMPT(full) 
[  505.105352][T21623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  505.105369][T21623] Call Trace:
[  505.105379][T21623]  <TASK>
[  505.105387][T21623]  dump_stack_lvl+0x189/0x250
[  505.105414][T21623]  ? __pfx_dump_stack_lvl+0x10/0x10
[  505.105433][T21623]  ? __pfx__printk+0x10/0x10
[  505.105453][T21623]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  505.105478][T21623]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  505.105501][T21623]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  505.105527][T21623]  warn_alloc+0x214/0x310
[  505.105555][T21623]  ? __pfx_warn_alloc+0x10/0x10
[  505.105586][T21623]  ? __get_vm_area_node+0x28f/0x300
[  505.105606][T21623]  ? hash_ipportnet_create+0x358/0xfe0
[  505.105632][T21623]  __vmalloc_node_range_noprof+0x690/0x12d0
[  505.105653][T21623]  ? __alloc_frozen_pages_noprof+0x9f/0x370
[  505.105710][T21623]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  505.105733][T21623]  ? hash_ipportnet_create+0x358/0xfe0
[  505.105757][T21623]  ? rcu_is_watching+0x15/0xb0
[  505.105775][T21623]  ? hash_ipportnet_create+0x358/0xfe0
[  505.105798][T21623]  __kvmalloc_node_noprof+0x670/0x910
[  505.105819][T21623]  ? hash_ipportnet_create+0x358/0xfe0
[  505.105841][T21623]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  505.105860][T21623]  ? hash_ipportnet_create+0x2fe/0xfe0
[  505.105889][T21623]  hash_ipportnet_create+0x358/0xfe0
[  505.105919][T21623]  ? __nla_parse+0x40/0x60
[  505.105939][T21623]  ? __pfx_hash_ipportnet_create+0x10/0x10
[  505.105962][T21623]  ip_set_create+0xa97/0x1940
[  505.105986][T21623]  ? ip_set_create+0x4a2/0x1940
[  505.106021][T21623]  ? __pfx_ip_set_create+0x10/0x10
[  505.106089][T21623]  nfnetlink_rcv_msg+0xb4d/0x1130
[  505.106111][T21623]  ? unwind_get_return_address+0x4d/0x90
[  505.106129][T21623]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  505.106150][T21623]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  505.106192][T21623]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  505.106266][T21623]  netlink_rcv_skb+0x208/0x470
[  505.106285][T21623]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  505.106309][T21623]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  505.106338][T21623]  ? bpf_lsm_capable+0x9/0x20
[  505.106354][T21623]  ? security_capable+0x7e/0x2e0
[  505.106384][T21623]  nfnetlink_rcv+0x282/0x2590
[  505.106407][T21623]  ? __local_bh_enable_ip+0x12d/0x1c0
[  505.106423][T21623]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  505.106446][T21623]  ? __dev_queue_xmit+0x289/0x3140
[  505.106463][T21623]  ? __dev_queue_xmit+0x289/0x3140
[  505.106481][T21623]  ? __dev_queue_xmit+0x1955/0x3140
[  505.106496][T21623]  ? do_syscall_64+0xfa/0xf80
[  505.106523][T21623]  ? __dev_queue_xmit+0x289/0x3140
[  505.106545][T21623]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  505.106573][T21623]  ? __pfx___dev_queue_xmit+0x10/0x10
[  505.106599][T21623]  ? ref_tracker_free+0x63a/0x7d0
[  505.106618][T21623]  ? __asan_memcpy+0x40/0x70
[  505.106637][T21623]  ? __pfx_ref_tracker_free+0x10/0x10
[  505.106673][T21623]  ? skb_clone+0x246/0x3a0
[  505.106693][T21623]  ? __netlink_deliver_tap+0x807/0x850
[  505.106715][T21623]  ? netlink_deliver_tap+0x2e/0x1b0
[  505.106737][T21623]  ? netlink_deliver_tap+0x2e/0x1b0
[  505.106762][T21623]  netlink_unicast+0x82f/0x9e0
[  505.106794][T21623]  ? __pfx_netlink_unicast+0x10/0x10
[  505.106819][T21623]  ? netlink_sendmsg+0x642/0xb30
[  505.106833][T21623]  ? skb_put+0x11b/0x210
[  505.106857][T21623]  netlink_sendmsg+0x805/0xb30
[  505.106883][T21623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  505.106904][T21623]  ? aa_sock_msg_perm+0xf1/0x1b0
[  505.106923][T21623]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  505.106943][T21623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  505.106964][T21623]  __sock_sendmsg+0x21c/0x270
[  505.106987][T21623]  ____sys_sendmsg+0x505/0x820
[  505.107023][T21623]  ? __pfx_____sys_sendmsg+0x10/0x10
[  505.107056][T21623]  ? import_iovec+0x74/0xa0
[  505.107085][T21623]  ___sys_sendmsg+0x21f/0x2a0
[  505.107111][T21623]  ? __pfx____sys_sendmsg+0x10/0x10
[  505.107141][T21623]  ? futex_wait+0x285/0x360
[  505.107188][T21623]  ? __fget_files+0x2a/0x420
[  505.107202][T21623]  ? __fget_files+0x3a0/0x420
[  505.107228][T21623]  __x64_sys_sendmsg+0x19b/0x260
[  505.107255][T21623]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  505.107296][T21623]  ? do_syscall_64+0xbe/0xf80
[  505.107320][T21623]  do_syscall_64+0xfa/0xf80
[  505.107340][T21623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.107356][T21623]  ? clear_bhb_loop+0x60/0xb0
[  505.107377][T21623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.107392][T21623] RIP: 0033:0x7fd72a38f749
[  505.107408][T21623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.107422][T21623] RSP: 002b:00007fd72b2e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  505.107440][T21623] RAX: ffffffffffffffda RBX: 00007fd72a5e6090 RCX: 00007fd72a38f749
[  505.107451][T21623] RDX: 0000000000004020 RSI: 0000200000000040 RDI: 0000000000000004
[  505.107461][T21623] RBP: 00007fd72a413f91 R08: 0000000000000000 R09: 0000000000000000
[  505.107471][T21623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  505.107480][T21623] R13: 00007fd72a5e6128 R14: 00007fd72a5e6090 R15: 00007fff4eccc098
[  505.107510][T21623]  </TASK>
[  505.107600][T21623] Mem-Info:
[  505.149804][T21631] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  505.161990][T21630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4463'.
[  505.166097][T21623] active_anon:3944 inactive_anon:0 isolated_anon:0
[  505.166097][T21623]  active_file:2756 inactive_file:40027 isolated_file:0
[  505.166097][T21623]  unevictable:768 dirty:28 writeback:0
[  505.166097][T21623]  slab_reclaimable:13591 slab_unreclaimable:130405
[  505.166097][T21623]  mapped:28853 shmem:1374 pagetables:1210
[  505.166097][T21623]  sec_pagetables:0 bounce:0
[  505.166097][T21623]  kernel_misc_reclaimable:0
[  505.166097][T21623]  free:1285953 free_pcp:15796 free_cma:0
[  505.399566][T21641] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4463'.
[  505.430296][T21631] bond4 (unregistering): Released all slaves
[  505.441139][T21641] netlink: 'syz.3.4463': attribute type 2 has an invalid length.
[  505.445112][T21623] Node 0 active_anon:19876kB inactive_anon:0kB active_file:11024kB inactive_file:159908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131712kB dirty:112kB writeback:0kB shmem:7860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16672kB pagetables:4784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  505.750063][T21623] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  505.842861][T21623] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  505.976808][T21623] lowmem_reserve[]: 0 2504 2504 2504 2504
[  506.008734][T21623] Node 0 DMA32 free:1240240kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26504kB inactive_anon:0kB active_file:11024kB inactive_file:159908kB unevictable:1536kB writepending:128kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:30120kB local_pcp:14136kB free_cma:0kB
[  506.078993][T21623] lowmem_reserve[]: 0 0 0 0 0
[  506.101173][T21623] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  506.188129][T21623] lowmem_reserve[]: 0 0 0 0 0
[  506.205180][T21623] Node 1 Normal free:3887860kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20544kB local_pcp:8544kB free_cma:0kB
[  506.245400][T21623] lowmem_reserve[]: 0 0 0 0 0
[  506.251388][T21623] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  506.264863][T21623] Node 0 DMA32: 984*4kB (U) 106*8kB (UME) 82*16kB (ME) 571*32kB (UME) 88*64kB (UM) 39*128kB (UME) 386*256kB (UME) 303*512kB (UM) 191*1024kB (UME) 15*2048kB (UM) 177*4096kB (UM) = 1240240kB
[  506.312372][T21623] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  506.347705][T21623] Node 1 Normal: 161*4kB (UE) 46*8kB (UME) 36*16kB (UME) 112*32kB (UME) 35*64kB (UME) 10*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3887860kB
[  506.366532][T21623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  506.384263][T21623] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  506.394208][T21623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  506.404649][T21623] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  506.467008][T21623] 44178 total pagecache pages
[  506.489067][T21623] 0 pages in swap cache
[  506.493251][T21623] Free swap  = 124996kB
[  506.497564][T21623] Total swap = 124996kB
[  506.502578][T21623] 2097051 pages RAM
[  506.515042][T21623] 0 pages HighMem/MovableOnly
[  506.520267][T21623] 424280 pages reserved
[  506.524501][T21623] 0 pages cma reserved
[  506.559957][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  506.668050][T21674] bridge0: entered promiscuous mode
[  506.673434][T21674] bridge0: entered allmulticast mode
[  506.685835][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4476'.
[  506.873465][T21688] netlink: 'syz.2.4479': attribute type 10 has an invalid length.
[  506.978694][T21700] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  507.242398][T21721] netlink: 'syz.1.4489': attribute type 1 has an invalid length.
[  507.953226][T21781] gtp1: entered promiscuous mode
[  508.235329][T21792] Cannot find add_set index 0 as target
[  508.241548][T21794] Cannot find add_set index 0 as target
[  508.546163][T21810] __nla_validate_parse: 11 callbacks suppressed
[  508.546181][T21810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4512'.
[  508.767677][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4523'.
[  508.943933][T21851] netlink: 'syz.1.4527': attribute type 10 has an invalid length.
[  509.207069][T21867] veth0_macvtap: left promiscuous mode
[  509.397563][T21885] netlink: 'syz.0.4539': attribute type 33 has an invalid length.
[  509.411859][T21883] tipc: Invalid UDP bearer configuration
[  509.411911][T21883] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  509.528649][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4540'.
[  509.638944][T21902] xt_hashlimit: size too large, truncated to 1048576
[  509.949983][T21935] netlink: 'syz.1.4555': attribute type 2 has an invalid length.
[  509.969370][T21933] netlink: 'syz.1.4555': attribute type 2 has an invalid length.
[  509.974829][T21934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4556'.
[  509.989541][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4555'.
[  510.001370][T21935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4555'.
[  510.096720][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4557'.
[  510.267636][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4565'.
[  510.345505][T21968] openvswitch: netlink: IP tunnel dst address not specified
[  510.466482][T21984] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4570'.
[  510.564253][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4573'.
[  510.576350][T21994] team0: Device ipvlan1 failed to register rx_handler
[  510.711772][T21999] syzkaller0: entered promiscuous mode
[  510.717708][T21999] syzkaller0: entered allmulticast mode
[  510.783460][T22006] ieee802154 phy0 wpan0: encryption failed: -22
[  510.973561][T22019] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  510.986065][T14301] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  511.012360][T14301] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  511.059409][T14301] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  511.068226][T14301] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  511.216354][T22033] syzkaller1: entered promiscuous mode
[  511.233765][T22033] syzkaller1: entered allmulticast mode
[  511.605732][T22068] openvswitch: netlink: IP tunnel dst address not specified
[  511.619301][T22068] xt_hashlimit: size too large, truncated to 1048576
[  511.631779][T22070] sit1: entered promiscuous mode
[  511.637405][T22070] sit1: entered allmulticast mode
[  511.670374][T22074] netlink: 'syz.0.4602': attribute type 5 has an invalid length.
[  512.114029][T22102] block nbd4: Unsupported socket: should be TCP or UNIX.
[  512.194393][T22115] delete_channel: no stack
[  512.396383][T22127] netlink: 'syz.0.4621': attribute type 8 has an invalid length.
[  512.496602][ T5915] IPVS: starting estimator thread 0...
[  512.503338][T22130] xt_hashlimit: overflow, try lower: 3/0
[  512.564051][T22130] ieee802154 phy0 wpan0: encryption failed: -22
[  512.598714][T22134] IPVS: using max 40 ests per chain, 96000 per kthread
[  512.643957][T22130] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  512.665383][T22130] bond4 (unregistering): Released all slaves
[  512.755148][T22155] netlink: 'syz.4.4629': attribute type 1 has an invalid length.
[  513.356890][T22205] netlink: 'syz.2.4639': attribute type 18 has an invalid length.
[  513.684773][T22218] IPVS: Error connecting to the multicast addr
[  513.693455][T22218] siw: device registration error -23
[  513.719226][T22220] syzkaller1: tun_chr_ioctl cmd 1074025677
[  513.725624][T22220] syzkaller1: Refused to change device type
[  513.960484][T22234] __nla_validate_parse: 15 callbacks suppressed
[  513.960497][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4654'.
[  513.985632][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4655'.
[  514.025869][T22238] netlink: 'syz.4.4652': attribute type 2 has an invalid length.
[  514.755784][T22279] netlink: zone id is out of range
[  514.761498][T22279] netlink: zone id is out of range
[  514.766837][T22279] netlink: zone id is out of range
[  514.772408][T22279] netlink: zone id is out of range
[  514.777667][T22279] netlink: zone id is out of range
[  514.785493][T22279] netlink: zone id is out of range
[  514.792585][T22279] netlink: zone id is out of range
[  514.807882][T22279] netlink: zone id is out of range
[  514.910546][T22287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4671'.
[  514.987518][T22293] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4673'.
[  515.025923][T22299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4675'.
[  515.175924][T22303] netlink: 'syz.2.4678': attribute type 11 has an invalid length.
[  515.386974][T22322] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4682'.
[  515.418497][T22322] net_ratelimit: 52 callbacks suppressed
[  515.418515][T22322] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  515.461254][T22322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4682'.
[  515.476857][T22322] netlink: 'syz.2.4682': attribute type 1 has an invalid length.
[  515.703297][T22356] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4689'.
[  515.878724][T22372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  515.886014][T22372] IPv6: NLM_F_CREATE should be set when creating new route
[  516.016301][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4699'.
[  516.044353][T22383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4699'.
[  516.351265][T22406] syzkaller0: entered promiscuous mode
[  516.364776][T22406] syzkaller0: entered allmulticast mode
[  516.437419][T22416] warn_alloc: 1 callbacks suppressed
[  516.437431][T22416] syz.2.4712: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  516.496514][T22416] CPU: 0 UID: 0 PID: 22416 Comm: syz.2.4712 Not tainted syzkaller #0 PREEMPT(full) 
[  516.496540][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  516.496551][T22416] Call Trace:
[  516.496557][T22416]  <TASK>
[  516.496566][T22416]  dump_stack_lvl+0x189/0x250
[  516.496592][T22416]  ? __pfx_dump_stack_lvl+0x10/0x10
[  516.496611][T22416]  ? __pfx__printk+0x10/0x10
[  516.496641][T22416]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  516.496666][T22416]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  516.496693][T22416]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  516.496719][T22416]  warn_alloc+0x214/0x310
[  516.496747][T22416]  ? __pfx_warn_alloc+0x10/0x10
[  516.496778][T22416]  ? __get_vm_area_node+0x28f/0x300
[  516.496799][T22416]  ? xskq_create+0xbf/0x170
[  516.496822][T22416]  __vmalloc_node_range_noprof+0x690/0x12d0
[  516.496871][T22416]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  516.496895][T22416]  ? __kasan_kmalloc+0x93/0xb0
[  516.496920][T22416]  vmalloc_user_noprof+0xad/0xf0
[  516.496937][T22416]  ? xskq_create+0xbf/0x170
[  516.496951][T22416]  xskq_create+0xbf/0x170
[  516.496966][T22416]  xsk_init_queue+0xb0/0x110
[  516.496980][T22416]  xsk_setsockopt+0x57b/0x8d0
[  516.496994][T22416]  ? __pfx_xsk_setsockopt+0x10/0x10
[  516.497009][T22416]  ? __pfx_aa_sk_perm+0x10/0x10
[  516.497033][T22416]  ? aa_sock_opt_perm+0xff/0x1a0
[  516.497052][T22416]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  516.497072][T22416]  ? __pfx_xsk_setsockopt+0x10/0x10
[  516.497091][T22416]  do_sock_setsockopt+0x17c/0x1b0
[  516.497119][T22416]  __x64_sys_setsockopt+0x13f/0x1b0
[  516.497147][T22416]  do_syscall_64+0xfa/0xf80
[  516.497169][T22416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.497185][T22416]  ? clear_bhb_loop+0x60/0xb0
[  516.497202][T22416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.497217][T22416] RIP: 0033:0x7fd72a38f749
[  516.497232][T22416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  516.497247][T22416] RSP: 002b:00007fd72b306038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  516.497265][T22416] RAX: ffffffffffffffda RBX: 00007fd72a5e5fa0 RCX: 00007fd72a38f749
[  516.497276][T22416] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003
[  516.497285][T22416] RBP: 00007fd72a413f91 R08: 0000000000000004 R09: 0000000000000000
[  516.497295][T22416] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  516.497303][T22416] R13: 00007fd72a5e6038 R14: 00007fd72a5e5fa0 R15: 00007fff4eccc098
[  516.497329][T22416]  </TASK>
[  516.498066][T22416] Mem-Info:
[  516.762977][T22416] active_anon:3893 inactive_anon:0 isolated_anon:0
[  516.762977][T22416]  active_file:2756 inactive_file:40031 isolated_file:0
[  516.762977][T22416]  unevictable:768 dirty:58 writeback:0
[  516.762977][T22416]  slab_reclaimable:13763 slab_unreclaimable:131038
[  516.762977][T22416]  mapped:30872 shmem:1374 pagetables:1227
[  516.762977][T22416]  sec_pagetables:0 bounce:0
[  516.762977][T22416]  kernel_misc_reclaimable:0
[  516.762977][T22416]  free:1286055 free_pcp:13642 free_cma:0
[  516.834522][T22433] sctp: [Deprecated]: syz.4.4715 (pid 22433) Use of struct sctp_assoc_value in delayed_ack socket option.
[  516.834522][T22433] Use struct sctp_sack_info instead
[  516.838480][T22416] Node 0 active_anon:15548kB inactive_anon:0kB active_file:11024kB inactive_file:159924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123624kB dirty:236kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16508kB pagetables:4700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  516.884824][T22416] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  516.915278][T22416] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  516.947476][T22416] lowmem_reserve[]: 0 2504 2504 2504 2504
[  516.953363][T22416] Node 0 DMA32 free:1240708kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15560kB inactive_anon:0kB active_file:11024kB inactive_file:159932kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:34560kB local_pcp:17344kB free_cma:0kB
[  516.987339][T22416] lowmem_reserve[]: 0 0 0 0 0
[  516.992143][T22416] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  517.059489][T22416] lowmem_reserve[]: 0 0 0 0 0
[  517.076462][T22416] Node 1 Normal free:3887860kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20544kB local_pcp:8544kB free_cma:0kB
[  517.140539][T22416] lowmem_reserve[]: 0 0 0 0 0
[  517.153078][T22416] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  517.171718][T22416] Node 0 DMA32: 1115*4kB (UM) 260*8kB (UME) 79*16kB (ME) 550*32kB (UME) 98*64kB (UME) 37*128kB (UME) 387*256kB (UM) 302*512kB (UME) 191*1024kB (UM) 13*2048kB (UM) 178*4096kB (UM) = 1241404kB
[  517.191032][T22416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  517.202957][T22416] Node 1 Normal: 161*4kB (UE) 46*8kB (UME) 36*16kB (UME) 112*32kB (UME) 35*64kB (UME) 10*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3887860kB
[  517.225009][T22444] C: renamed from team_slave_0
[  517.230452][T22416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  517.240346][T22416] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  517.251522][T22444] netlink: 'syz.0.4718': attribute type 1 has an invalid length.
[  517.261331][T22444] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  517.282627][T22416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  517.292628][T22416] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  517.320238][T22416] 44160 total pagecache pages
[  517.325006][T22416] 0 pages in swap cache
[  517.329258][T22416] Free swap  = 124996kB
[  517.333476][T22416] Total swap = 124996kB
[  517.337691][T22416] 2097051 pages RAM
[  517.353996][T22416] 0 pages HighMem/MovableOnly
[  517.361740][T22416] 424280 pages reserved
[  517.367745][T22416] 0 pages cma reserved
[  517.445556][T22451] netlink: 'syz.4.4721': attribute type 1 has an invalid length.
[  517.850048][T22479] bond7: entered allmulticast mode
[  517.856596][T22479] 8021q: adding VLAN 0 to HW filter on device bond7
[  518.651010][T22550] netlink: 'syz.0.4751': attribute type 1 has an invalid length.
[  518.660201][T22550] netlink: 'syz.0.4751': attribute type 2 has an invalid length.
[  518.697608][T22554] netlink: 'syz.4.4753': attribute type 1 has an invalid length.
[  519.167351][T22561] __nla_validate_parse: 13 callbacks suppressed
[  519.167364][T22561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4755'.
[  519.239678][T22562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4755'.
[  519.426639][T22569] netlink: 'syz.3.4757': attribute type 12 has an invalid length.
[  519.557298][T22572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4758'.
[  519.674144][T22583] netlink: 'syz.2.4762': attribute type 2 has an invalid length.
[  519.724401][T22588] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4764'.
[  519.828159][T22597] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4766'.
[  519.882017][T22609] bridge_slave_0: invalid flags given to default FDB implementation
[  519.894541][T22609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4768'.
[  519.904182][T22609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4768'.
[  519.932377][T22609] ip6gretap0: entered promiscuous mode
[  519.954845][T22609] batadv_slave_1: entered promiscuous mode
[  519.961943][T22609] batadv_slave_1: left promiscuous mode
[  519.970546][T22609] ip6gretap0: left promiscuous mode
[  520.101755][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4771'.
[  520.139554][T22631] veth0: entered promiscuous mode
[  520.167908][T22629] veth0 (unregistering): left promiscuous mode
[  520.212937][T22629] bond1: (slave vlan2): Releasing active interface
[  520.273048][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4771'.
[  520.283439][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4771'.
[  520.414692][T22643] bridge_slave_0: invalid flags given to default FDB implementation
[  521.200954][T22684] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  521.213031][T22684] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  521.266530][T22684] bridge0: entered allmulticast mode
[  521.360736][T22697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.405370][T22698] bond8: invalid ARP target 0.0.0.0 specified for addition
[  521.413327][T22698] bond8: option arp_ip_target: invalid value (0)
[  521.431997][T22698] bond8 (unregistering): Released all slaves
[  521.622556][T22721] netlink: 'syz.0.4803': attribute type 1 has an invalid length.
[  521.699709][T22721] x_tables: ip_tables: icmp match: only valid for protocol 1
[  522.024794][T22755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  522.356021][T22785] x_tables: duplicate underflow at hook 2
[  522.377916][T22792] netlink: 'syz.1.4822': attribute type 1 has an invalid length.
[  523.055364][T22844] C: renamed from lo (while UP)
[  523.062920][T22844] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  523.079814][T22844] netlink: 'syz.2.4836': attribute type 1 has an invalid length.
[  523.088942][T22844] netlink: 'syz.2.4836': attribute type 1 has an invalid length.
[  523.096671][T22844] netlink: 'syz.2.4836': attribute type 4 has an invalid length.
[  523.137213][T22846] netlink: 'syz.2.4837': attribute type 8 has an invalid length.
[  523.151409][T22846] bond_slave_1: entered promiscuous mode
[  523.157262][T22846] bond_slave_1: left promiscuous mode
[  523.189386][T22847] openvswitch: netlink: IPv4 tunnel dst address is zero
[  523.418029][T22849] sctp: [Deprecated]: syz.2.4838 (pid 22849) Use of int in maxseg socket option.
[  523.418029][T22849] Use struct sctp_assoc_value instead
[  523.602738][T22856] netlink: 'syz.2.4840': attribute type 12 has an invalid length.
[  542.411337][ T5915] wg1 speed is unknown, defaulting to 1000
[  542.417734][ T5915] syz2: Port: 1 Link DOWN
[  542.422991][T14302] bridge_slave_0: left allmulticast mode
[  542.429603][T14302] bridge_slave_0: left promiscuous mode
[  542.436858][T14302] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.566891][T14302] ip6gretap0 (unregistering): left promiscuous mode
[  542.586477][T14302] bond3 (unregistering): (slave ip6gretap1): Releasing active interface
[  542.992871][T14302] bond0 (unregistering): left promiscuous mode
[  542.999545][T14302] bond_slave_1: left promiscuous mode
[  543.005096][T14302] bridge_slave_1: left promiscuous mode
[  543.011193][T14302] batadv0: left promiscuous mode
[  543.023326][T14302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  543.033446][T14302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  543.046569][T14302] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  543.056944][T14302] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  543.067900][T14302] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  543.083820][T14302] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  543.099899][T14302] bond0 (unregistering): Released all slaves
[  543.189864][T14302] bond1 (unregistering): Released all slaves
[  543.275850][T14302] bond2 (unregistering): Released all slaves
[  543.362832][T14302] bond3 (unregistering): Released all slaves
[  543.447356][T14302] bond4 (unregistering): Released all slaves
[  543.459942][T14302] bond5 (unregistering): Released all slaves
[  543.551932][T14302] bond6 (unregistering): Released all slaves
[  543.639679][T14302] bond7 (unregistering): Released all slaves
[  543.652418][T14302] bond8 (unregistering): (slave C): Releasing backup interface
[  543.660913][T14302] bond8 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed
[  543.672143][T14302] bond8 (unregistering): Released all slaves
[  543.772129][T14302] : left promiscuous mode
[  562.882520][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  583.362134][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  624.321707][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  678.729084][   T31] INFO: task kworker/0:13:6559 blocked for more than 143 seconds.
[  678.736915][   T31]       Not tainted syzkaller #0
[  678.742905][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  678.751690][   T31] task:kworker/0:13    state:D stack:22944 pid:6559  tgid:6559  ppid:2      task_flags:0x4208060 flags:0x00080000
[  678.763897][   T31] Workqueue: events rfkill_sync_work
[  678.769252][   T31] Call Trace:
[  678.772525][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  678.775456][   T31]  __schedule+0x14bc/0x5000
[  678.780122][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  678.785756][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  678.792610][   T31]  ? preempt_schedule+0xae/0xc0
[  678.797585][   T31]  ? preempt_schedule+0xae/0xc0
[  678.803314][   T31]  ? __pfx___schedule+0x10/0x10
[  678.808213][   T31]  ? schedule+0x91/0x360
[  678.849442][   T31]  schedule+0x165/0x360
[  678.853665][   T31]  schedule_preempt_disabled+0x13/0x30
[  678.867880][   T31]  __mutex_lock+0x7e6/0x1350
[  678.872651][   T31]  ? __mutex_lock+0x5bb/0x1350
[  678.877446][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  678.882923][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  678.887951][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  678.893237][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  678.899355][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  678.905712][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  678.911504][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  678.916611][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  678.922534][   T31]  rfkill_set_block+0x1d2/0x440
[  678.927396][   T31]  rfkill_sync_work+0x114/0x200
[  678.932284][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  678.937993][   T31]  process_scheduled_works+0xad1/0x1770
[  678.943689][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  678.949969][   T31]  worker_thread+0x8a0/0xda0
[  678.954580][   T31]  ? __kthread_parkme+0x7b/0x200
[  678.959888][   T31]  kthread+0x711/0x8a0
[  678.963989][   T31]  ? __pfx_worker_thread+0x10/0x10
[  678.969463][   T31]  ? __pfx_kthread+0x10/0x10
[  678.974080][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  678.979468][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  678.984674][   T31]  ? __pfx_kthread+0x10/0x10
[  678.989355][   T31]  ret_from_fork+0x599/0xb30
[  678.993949][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  678.999162][   T31]  ? __switch_to_asm+0x39/0x70
[  679.003931][   T31]  ? __switch_to_asm+0x33/0x70
[  679.008744][   T31]  ? __pfx_kthread+0x10/0x10
[  679.013323][   T31]  ret_from_fork_asm+0x1a/0x30
[  679.018074][   T31]  </TASK>
[  679.021250][   T31] INFO: task kworker/0:0:20216 blocked for more than 143 seconds.
[  679.029104][   T31]       Not tainted syzkaller #0
[  679.034033][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  679.043046][   T31] task:kworker/0:0     state:D stack:23992 pid:20216 tgid:20216 ppid:2      task_flags:0x4208060 flags:0x00080000
[  679.055089][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  679.061955][   T31] Call Trace:
[  679.065225][   T31]  <TASK>
[  679.068137][   T31]  __schedule+0x14bc/0x5000
[  679.072717][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  679.077912][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  679.084353][   T31]  ? preempt_schedule+0xae/0xc0
[  679.089246][   T31]  ? preempt_schedule+0xae/0xc0
[  679.094082][   T31]  ? __pfx___schedule+0x10/0x10
[  679.099039][   T31]  ? schedule+0x91/0x360
[  679.103267][   T31]  schedule+0x165/0x360
[  679.107404][   T31]  schedule_preempt_disabled+0x13/0x30
[  679.112935][   T31]  __mutex_lock+0x7e6/0x1350
[  679.117545][   T31]  ? __mutex_lock+0x5bb/0x1350
[  679.122914][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  679.129284][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  679.134326][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  679.140159][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  679.145870][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  679.151975][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  679.157687][   T31]  process_scheduled_works+0xad1/0x1770
[  679.163365][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  679.169499][   T31]  worker_thread+0x8a0/0xda0
[  679.174090][   T31]  kthread+0x711/0x8a0
[  679.178141][   T31]  ? __pfx_worker_thread+0x10/0x10
[  679.183358][   T31]  ? __pfx_kthread+0x10/0x10
[  679.187945][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  679.193194][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  679.198582][   T31]  ? __pfx_kthread+0x10/0x10
[  679.203184][   T31]  ret_from_fork+0x599/0xb30
[  679.207780][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  679.212951][   T31]  ? __switch_to_asm+0x39/0x70
[  679.217698][   T31]  ? __switch_to_asm+0x33/0x70
[  679.222567][   T31]  ? __pfx_kthread+0x10/0x10
[  679.227146][   T31]  ret_from_fork_asm+0x1a/0x30
[  679.231955][   T31]  </TASK>
[  679.234982][   T31] INFO: task syz.4.4821:22782 blocked for more than 143 seconds.
[  679.242870][   T31]       Not tainted syzkaller #0
[  679.247810][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  679.256620][   T31] task:syz.4.4821      state:D stack:25432 pid:22782 tgid:22782 ppid:16569  task_flags:0x400040 flags:0x00080002
[  679.268775][   T31] Call Trace:
[  679.272050][   T31]  <TASK>
[  679.274965][   T31]  __schedule+0x14bc/0x5000
[  679.279767][   T31]  ? lockdep_unlock+0x89/0x120
[  679.284547][   T31]  ? stack_trace_save+0x9c/0xe0
[  679.289551][   T31]  ? __pfx___schedule+0x10/0x10
[  679.294401][   T31]  ? schedule+0x91/0x360
[  679.298707][   T31]  schedule+0x165/0x360
[  679.302867][   T31]  schedule_timeout+0x9a/0x270
[  679.307612][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  679.313113][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  679.318301][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  679.323555][   T31]  ? wait_for_completion+0x267/0x5d0
[  679.328944][   T31]  wait_for_completion+0x2bf/0x5d0
[  679.334052][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  679.339728][   T31]  ? __flush_work+0xd2/0xbc0
[  679.344315][   T31]  ? __flush_work+0xd2/0xbc0
[  679.349016][   T31]  __flush_work+0x9b9/0xbc0
[  679.353520][   T31]  ? __flush_work+0xd2/0xbc0
[  679.358101][   T31]  ? __pfx___flush_work+0x10/0x10
[  679.364007][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  679.369511][   T31]  ? __pfx___cancel_work+0x10/0x10
[  679.374638][   T31]  ? nfc_genl_device_removed+0x23c/0x330
[  679.380323][   T31]  ? __cancel_work_sync+0x5c/0x110
[  679.385428][   T31]  __cancel_work_sync+0xbe/0x110
[  679.390654][   T31]  rfkill_unregister+0x92/0x220
[  679.395499][   T31]  nfc_unregister_device+0x96/0x2a0
[  679.400742][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  679.406446][   T31]  virtual_ncidev_close+0x56/0x90
[  679.411610][   T31]  __fput+0x44c/0xa70
[  679.415606][   T31]  task_work_run+0x1d4/0x260
[  679.420241][   T31]  ? __pfx_task_work_run+0x10/0x10
[  679.425341][   T31]  ? __se_sys_close_range+0x4ed/0x650
[  679.430836][   T31]  ? exit_to_user_mode_loop+0x55/0x4f0
[  679.436284][   T31]  exit_to_user_mode_loop+0xff/0x4f0
[  679.441607][   T31]  ? rcu_is_watching+0x15/0xb0
[  679.446357][   T31]  do_syscall_64+0x2e3/0xf80
[  679.451050][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.457102][   T31]  ? clear_bhb_loop+0x60/0xb0
[  679.461817][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.467693][   T31] RIP: 0033:0x7fb50438f749
[  679.472220][   T31] RSP: 002b:00007ffe2f027b18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  679.480657][   T31] RAX: 0000000000000000 RBX: 00007fb5045e7da0 RCX: 00007fb50438f749
[  679.488773][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  679.496749][   T31] RBP: 00007fb5045e7da0 R08: 000000000000021c R09: 0000001e2f027e0f
[  679.504889][   T31] R10: 00000000003ffbc0 R11: 0000000000000246 R12: 000000000007fb62
[  679.512974][   T31] R13: 00007fb5045e6090 R14: ffffffffffffffff R15: 00007ffe2f027c30
[  679.521101][   T31]  </TASK>
[  679.524123][   T31] INFO: task syz.2.4840:22856 blocked for more than 144 seconds.
[  679.533986][   T31]       Not tainted syzkaller #0
[  679.539369][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  679.548031][   T31] task:syz.2.4840      state:D stack:23576 pid:22856 tgid:22854 ppid:17533  task_flags:0x400140 flags:0x00080002
[  679.560246][   T31] Call Trace:
[  679.563536][   T31]  <TASK>
[  679.566464][   T31]  __schedule+0x14bc/0x5000
[  679.571130][   T31]  ? __pfx___schedule+0x10/0x10
[  679.575987][   T31]  ? schedule+0x91/0x360
[  679.580440][   T31]  schedule+0x165/0x360
[  679.584605][   T31]  schedule_preempt_disabled+0x13/0x30
[  679.590218][   T31]  __mutex_lock+0x7e6/0x1350
[  679.594804][   T31]  ? __mutex_lock+0x5bb/0x1350
[  679.600511][   T31]  ? rfkill_register+0x37/0x8e0
[  679.605390][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  679.610516][   T31]  ? netdev_run_todo+0xe1b/0xea0
[  679.615460][   T31]  ? nl80211_common_reg_change_event+0x55d/0x6b0
[  679.622014][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  679.627299][   T31]  ? __queue_delayed_work+0x2a2/0x2d0
[  679.632818][   T31]  rfkill_register+0x37/0x8e0
[  679.637488][   T31]  wiphy_register+0x246a/0x2d20
[  679.642725][   T31]  ? __pfx_wiphy_register+0x10/0x10
[  679.647944][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  679.653520][   T31]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  679.659775][   T31]  ieee80211_register_hw+0x3473/0x40d0
[  679.665248][   T31]  ? ieee80211_register_hw+0x13f1/0x40d0
[  679.670910][   T31]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  679.676701][   T31]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  679.683183][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  679.689284][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  679.695625][   T31]  ? __hrtimer_setup+0x181/0x200
[  679.700597][   T31]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  679.706395][   T31]  mac80211_hwsim_new_radio+0x2f8b/0x5240
[  679.712272][   T31]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  679.718619][   T31]  ? __nla_validate_parse+0x2400/0x2d40
[  679.724179][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  679.729334][   T31]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  679.734434][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  679.740307][   T31]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  679.745846][   T31]  ? rcu_is_watching+0x15/0xb0
[  679.750837][   T31]  ? __nla_parse+0x40/0x60
[  679.755270][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  679.762123][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  679.767690][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  679.774032][   T31]  ? bpf_lsm_capable+0x9/0x20
[  679.779014][   T31]  ? security_capable+0x7e/0x2e0
[  679.783971][   T31]  genl_rcv_msg+0x60e/0x790
[  679.788522][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  679.793545][   T31]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  679.799288][   T31]  netlink_rcv_skb+0x208/0x470
[  679.804041][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  679.809239][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  679.814563][   T31]  ? down_read+0x274/0x2e0
[  679.819024][   T31]  ? genl_rcv+0xd/0x40
[  679.823087][   T31]  genl_rcv+0x28/0x40
[  679.827052][   T31]  netlink_unicast+0x82f/0x9e0
[  679.831980][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  679.837257][   T31]  ? netlink_sendmsg+0x642/0xb30
[  679.842681][   T31]  ? skb_put+0x11b/0x210
[  679.846955][   T31]  netlink_sendmsg+0x805/0xb30
[  679.851805][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.857110][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  679.862225][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  679.867510][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.872961][   T31]  __sock_sendmsg+0x21c/0x270
[  679.877633][   T31]  ____sys_sendmsg+0x505/0x820
[  679.882437][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  679.887719][   T31]  ? import_iovec+0x74/0xa0
[  679.892362][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  679.897053][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  679.902487][   T31]  ? futex_wake+0x4b2/0x560
[  679.907003][   T31]  ? __fget_files+0x2a/0x420
[  679.911664][   T31]  ? __fget_files+0x3a0/0x420
[  679.916349][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  679.921581][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  679.927067][   T31]  ? do_syscall_64+0xbe/0xf80
[  679.931905][   T31]  do_syscall_64+0xfa/0xf80
[  679.936399][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.942509][   T31]  ? clear_bhb_loop+0x60/0xb0
[  679.947179][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.953210][   T31] RIP: 0033:0x7fd72a38f749
[  679.957617][   T31] RSP: 002b:00007fd72b306038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  679.966636][   T31] RAX: ffffffffffffffda RBX: 00007fd72a5e5fa0 RCX: 00007fd72a38f749
[  679.974657][   T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000007
[  679.982795][   T31] RBP: 00007fd72a413f91 R08: 0000000000000000 R09: 0000000000000000
[  679.990917][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  679.999357][   T31] R13: 00007fd72a5e6038 R14: 00007fd72a5e5fa0 R15: 00007fff4eccc098
[  680.007353][   T31]  </TASK>
[  680.010679][   T31] INFO: task syz.1.4847:22879 blocked for more than 144 seconds.
[  680.018913][   T31]       Not tainted syzkaller #0
[  680.023854][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  680.032555][   T31] task:syz.1.4847      state:D stack:24456 pid:22879 tgid:22878 ppid:17154  task_flags:0x400140 flags:0x00080002
[  680.044601][   T31] Call Trace:
[  680.047869][   T31]  <TASK>
[  680.050937][   T31]  __schedule+0x14bc/0x5000
[  680.055466][   T31]  ? __pfx___schedule+0x10/0x10
[  680.060406][   T31]  ? schedule+0x91/0x360
[  680.064661][   T31]  schedule+0x165/0x360
[  680.068974][   T31]  schedule_preempt_disabled+0x13/0x30
[  680.074420][   T31]  __mutex_lock+0x7e6/0x1350
[  680.080076][   T31]  ? __mutex_lock+0x5bb/0x1350
[  680.084874][   T31]  ? genl_rcv_msg+0x10d/0x790
[  680.090781][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  680.095807][   T31]  ? stack_trace_save+0x9c/0xe0
[  680.100799][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  680.105726][   T31]  ? radix_tree_lookup+0x240/0x290
[  680.110984][   T31]  genl_rcv_msg+0x10d/0x790
[  680.115498][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.120552][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  680.125481][   T31]  netlink_rcv_skb+0x208/0x470
[  680.130480][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.135502][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  680.140886][   T31]  ? down_read+0x274/0x2e0
[  680.145302][   T31]  ? genl_rcv+0xd/0x40
[  680.149425][   T31]  genl_rcv+0x28/0x40
[  680.153403][   T31]  netlink_unicast+0x82f/0x9e0
[  680.158155][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  680.163826][   T31]  ? netlink_sendmsg+0x642/0xb30
[  680.169052][   T31]  ? skb_put+0x11b/0x210
[  680.173309][   T31]  netlink_sendmsg+0x805/0xb30
[  680.178059][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.183480][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  680.188668][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  680.193947][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.199621][   T31]  __sock_sendmsg+0x21c/0x270
[  680.204316][   T31]  __sys_sendto+0x3bd/0x520
[  680.208941][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  680.213970][   T31]  ? count_memcg_event_mm+0x21/0x260
[  680.219481][   T31]  ? exc_page_fault+0x82/0x100
[  680.224243][   T31]  __x64_sys_sendto+0xde/0x100
[  680.229226][   T31]  do_syscall_64+0xfa/0xf80
[  680.233738][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.239987][   T31]  ? clear_bhb_loop+0x60/0xb0
[  680.244670][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.250713][   T31] RIP: 0033:0x7f9354d915dc
[  680.255127][   T31] RSP: 002b:00007f9355bb7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  680.263736][   T31] RAX: ffffffffffffffda RBX: 00007f9355bb7fc0 RCX: 00007f9354d915dc
[  680.271754][   T31] RDX: 0000000000000020 RSI: 00007f9355bb8010 RDI: 0000000000000009
[  680.279875][   T31] RBP: 0000000000000000 R08: 00007f9355bb7f14 R09: 000000000000000c
[  680.287844][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009
[  680.295970][   T31] R13: 00007f9355bb7f68 R14: 00007f9355bb8010 R15: 0000000000000000
[  680.304037][   T31]  </TASK>
[  680.307070][   T31] INFO: task syz.0.4846:22882 blocked for more than 144 seconds.
[  680.315097][   T31]       Not tainted syzkaller #0
[  680.320360][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  680.329239][   T31] task:syz.0.4846      state:D stack:28280 pid:22882 tgid:22880 ppid:16816  task_flags:0x400040 flags:0x00080002
[  680.341344][   T31] Call Trace:
[  680.344615][   T31]  <TASK>
[  680.347533][   T31]  __schedule+0x14bc/0x5000
[  680.352196][   T31]  ? __pfx___schedule+0x10/0x10
[  680.357041][   T31]  ? schedule+0x91/0x360
[  680.361321][   T31]  schedule+0x165/0x360
[  680.365468][   T31]  schedule_preempt_disabled+0x13/0x30
[  680.371056][   T31]  __mutex_lock+0x7e6/0x1350
[  680.375634][   T31]  ? __mutex_lock+0x5bb/0x1350
[  680.380538][   T31]  ? genl_rcv_msg+0x10d/0x790
[  680.385208][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  680.390266][   T31]  ? radix_tree_lookup+0x240/0x290
[  680.395372][   T31]  genl_rcv_msg+0x10d/0x790
[  680.400012][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.405020][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  680.410104][   T31]  netlink_rcv_skb+0x208/0x470
[  680.414854][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.419903][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  680.425179][   T31]  ? down_read+0x274/0x2e0
[  680.429717][   T31]  ? genl_rcv+0xd/0x40
[  680.433787][   T31]  genl_rcv+0x28/0x40
[  680.437752][   T31]  netlink_unicast+0x82f/0x9e0
[  680.442679][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  680.447956][   T31]  ? netlink_sendmsg+0x642/0xb30
[  680.452958][   T31]  ? skb_put+0x11b/0x210
[  680.457208][   T31]  netlink_sendmsg+0x805/0xb30
[  680.462118][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.467734][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  680.472828][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  680.478102][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.483479][   T31]  __sock_sendmsg+0x21c/0x270
[  680.488148][   T31]  __sys_sendto+0x3bd/0x520
[  680.492802][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  680.497816][   T31]  ? count_memcg_event_mm+0x21/0x260
[  680.503271][   T31]  ? exc_page_fault+0x82/0x100
[  680.508029][   T31]  __x64_sys_sendto+0xde/0x100
[  680.512811][   T31]  do_syscall_64+0xfa/0xf80
[  680.517303][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.523664][   T31]  ? clear_bhb_loop+0x60/0xb0
[  680.528598][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.534483][   T31] RIP: 0033:0x7f4de9f915dc
[  680.538919][   T31] RSP: 002b:00007f4dead75ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  680.547312][   T31] RAX: ffffffffffffffda RBX: 00007f4dead75fc0 RCX: 00007f4de9f915dc
[  680.555417][   T31] RDX: 0000000000000024 RSI: 00007f4dead76010 RDI: 0000000000000004
[  680.563863][   T31] RBP: 0000000000000000 R08: 00007f4dead75f14 R09: 000000000000000c
[  680.571889][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  680.580009][   T31] R13: 00007f4dead75f68 R14: 00007f4dead76010 R15: 0000000000000000
[  680.587978][   T31]  </TASK>
[  680.591181][   T31] INFO: task syz.3.4848:22884 blocked for more than 145 seconds.
[  680.599075][   T31]       Not tainted syzkaller #0
[  680.603997][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  680.612798][   T31] task:syz.3.4848      state:D stack:28280 pid:22884 tgid:22883 ppid:16158  task_flags:0x400040 flags:0x00080002
[  680.624857][   T31] Call Trace:
[  680.628134][   T31]  <TASK>
[  680.631094][   T31]  __schedule+0x14bc/0x5000
[  680.635619][   T31]  ? __pfx___schedule+0x10/0x10
[  680.641756][   T31]  ? schedule+0x91/0x360
[  680.646039][   T31]  schedule+0x165/0x360
[  680.650416][   T31]  schedule_preempt_disabled+0x13/0x30
[  680.655871][   T31]  __mutex_lock+0x7e6/0x1350
[  680.660514][   T31]  ? __mutex_lock+0x5bb/0x1350
[  680.665287][   T31]  ? genl_rcv_msg+0x10d/0x790
[  680.670124][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  680.675157][   T31]  ? radix_tree_lookup+0x240/0x290
[  680.680416][   T31]  genl_rcv_msg+0x10d/0x790
[  680.684935][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.690018][   T31]  ? __lock_acquire+0x6b6/0x2cf0
[  680.694982][   T31]  netlink_rcv_skb+0x208/0x470
[  680.699898][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.704943][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  680.710395][   T31]  ? down_read+0x274/0x2e0
[  680.714800][   T31]  ? genl_rcv+0xd/0x40
[  680.718890][   T31]  genl_rcv+0x28/0x40
[  680.722857][   T31]  netlink_unicast+0x82f/0x9e0
[  680.727611][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  680.733048][   T31]  ? netlink_sendmsg+0x642/0xb30
[  680.737969][   T31]  ? skb_put+0x11b/0x210
[  680.742359][   T31]  netlink_sendmsg+0x805/0xb30
[  680.747112][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.752406][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  680.757327][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  680.762883][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.768202][   T31]  __sock_sendmsg+0x21c/0x270
[  680.773183][   T31]  __sys_sendto+0x3bd/0x520
[  680.777706][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  680.782764][   T31]  ? count_memcg_event_mm+0x21/0x260
[  680.788053][   T31]  ? exc_page_fault+0x82/0x100
[  680.792980][   T31]  __x64_sys_sendto+0xde/0x100
[  680.797744][   T31]  do_syscall_64+0xfa/0xf80
[  680.802461][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.808578][   T31]  ? clear_bhb_loop+0x60/0xb0
[  680.813264][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.819321][   T31] RIP: 0033:0x7f51de9915dc
[  680.823724][   T31] RSP: 002b:00007f51df74eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  680.832311][   T31] RAX: ffffffffffffffda RBX: 00007f51df74efc0 RCX: 00007f51de9915dc
[  680.840321][   T31] RDX: 0000000000000020 RSI: 00007f51df74f010 RDI: 0000000000000003
[  680.848280][   T31] RBP: 0000000000000000 R08: 00007f51df74ef14 R09: 000000000000000c
[  680.856400][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  680.864512][   T31] R13: 00007f51df74ef68 R14: 00007f51df74f010 R15: 0000000000000000
[  680.872522][   T31]  </TASK>
[  680.875562][   T31] 
[  680.875562][   T31] Showing all locks held in the system:
[  680.883777][   T31] 1 lock held by khungtaskd/31:
[  680.888908][   T31]  #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  680.898904][   T31] 5 locks held by kworker/u8:8/1154:
[  680.904235][   T31]  #0: ffff8880b893a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  680.914494][   T31]  #1: ffff8880b8924448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  680.923554][   T31]  #2: ffff8880b8925f98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[  680.932553][   T31]  #3: ffffffff99a80278 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540
[  680.942952][   T31]  #4: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390
[  680.952811][   T31] 2 locks held by getty/5591:
[  680.957481][   T31]  #0: ffff88814cef70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  680.967824][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  680.978183][   T31] 4 locks held by kworker/0:13/6559:
[  680.983611][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  680.994617][   T31]  #1: ffffc9000f18fb80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  681.007125][   T31]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  681.017309][   T31]  #3: ffff888052dbd100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  681.027030][   T31] 4 locks held by kworker/u8:41/14302:
[  681.032722][   T31]  #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  681.044000][   T31]  #1: ffffc9000d91fb80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  681.054618][   T31]  #2: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0
[  681.064434][   T31]  #3: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  681.074694][   T31] 3 locks held by kworker/0:0/20216:
[  681.080020][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  681.091114][   T31]  #1: ffffc9000e2f7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  681.104763][   T31]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  681.116208][   T31] 1 lock held by syz.4.4821/22782:
[  681.121542][   T31]  #0: ffff888052dbd100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  681.131601][   T31] 3 locks held by syz.2.4840/22856:
[  681.136814][   T31]  #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.145017][   T31]  #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  681.154139][   T31]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.164331][   T31] 2 locks held by syz.1.4847/22879:
[  681.169570][   T31]  #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.177749][   T31]  #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  681.186867][   T31] 2 locks held by syz.0.4846/22882:
[  681.192241][   T31]  #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.200469][   T31]  #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  681.209793][   T31] 2 locks held by syz.3.4848/22884:
[  681.215009][   T31]  #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.223432][   T31]  #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  681.232448][   T31] 2 locks held by syz-executor/22888:
[  681.237798][   T31]  #0: ffff8880326af118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.248021][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.258115][   T31] 2 locks held by syz-executor/22893:
[  681.263570][   T31]  #0: ffff88807b80d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.273720][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.284922][   T31] 2 locks held by syz-executor/22894:
[  681.290339][   T31]  #0: ffff88805e7fc918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.300488][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.310575][   T31] 2 locks held by syz-executor/22895:
[  681.315933][   T31]  #0: ffff88805e7fb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.325963][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.336259][   T31] 2 locks held by syz-executor/22896:
[  681.341785][   T31]  #0: ffff88805e7fa918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.351854][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.361964][   T31] 2 locks held by syz-executor/22898:
[  681.367321][   T31]  #0: ffff8880287d6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.377494][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.387538][   T31] 2 locks held by syz-executor/22903:
[  681.393042][   T31]  #0: ffff888033a90118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.403194][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.413136][   T31] 2 locks held by syz-executor/22904:
[  681.418780][   T31]  #0: ffff8880234bb918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.429017][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.438992][   T31] 2 locks held by syz-executor/22905:
[  681.444372][   T31]  #0: ffff888030559918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.454528][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.464630][   T31] 2 locks held by syz-executor/22906:
[  681.470069][   T31]  #0: ffff888030558118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.480404][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.490580][   T31] 2 locks held by syz-executor/22908:
[  681.495935][   T31]  #0: ffff888024559118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.505971][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.516037][   T31] 2 locks held by syz-executor/22913:
[  681.521798][   T31]  #0: ffff888023f79918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.531877][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.541949][   T31] 2 locks held by syz-executor/22914:
[  681.547299][   T31]  #0: ffff8880568e4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.557448][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.567415][   T31] 2 locks held by syz-executor/22915:
[  681.572920][   T31]  #0: ffff888028741918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.583100][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.593062][   T31] 2 locks held by syz-executor/22916:
[  681.598675][   T31]  #0: ffff888031532118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  681.608987][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  681.618991][   T31] 
[  681.621316][   T31] =============================================
[  681.621316][   T31] 
[  681.629947][   T31] NMI backtrace for cpu 0
[  681.629959][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  681.629970][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  681.629976][   T31] Call Trace:
[  681.629981][   T31]  <TASK>
[  681.629987][   T31]  dump_stack_lvl+0x189/0x250
[  681.630003][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  681.630014][   T31]  ? __pfx__printk+0x10/0x10
[  681.630034][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  681.630046][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  681.630056][   T31]  ? __pfx__printk+0x10/0x10
[  681.630071][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  681.630086][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  681.630097][   T31]  watchdog+0xf3c/0xf80
[  681.630112][   T31]  ? watchdog+0x1e2/0xf80
[  681.630126][   T31]  kthread+0x711/0x8a0
[  681.630140][   T31]  ? __pfx_watchdog+0x10/0x10
[  681.630151][   T31]  ? __pfx_kthread+0x10/0x10
[  681.630163][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  681.630174][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  681.630192][   T31]  ? __pfx_kthread+0x10/0x10
[  681.630203][   T31]  ret_from_fork+0x599/0xb30
[  681.630219][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  681.630238][   T31]  ? __switch_to_asm+0x39/0x70
[  681.630248][   T31]  ? __switch_to_asm+0x33/0x70
[  681.630258][   T31]  ? __pfx_kthread+0x10/0x10
[  681.630270][   T31]  ret_from_fork_asm+0x1a/0x30
[  681.630289][   T31]  </TASK>
[  681.630292][   T31] Sending NMI from CPU 0 to CPUs 1:
[  681.780126][    C1] NMI backtrace for cpu 1
[  681.780143][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  681.780162][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  681.780172][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  681.780197][    C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  681.780212][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[  681.780226][    C1] RAX: 6116c129caf98900 RBX: ffffffff8197438a RCX: 6116c129caf98900
[  681.780239][    C1] RDX: 0000000000000001 RSI: ffffffff8d76be8f RDI: ffffffff8bbfc660
[  681.780250][    C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3
[  681.780262][    C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70
[  681.780274][    C1] R13: 1ffff11003952b70 R14: 0000000000000001 R15: 0000000000000001
[  681.780285][    C1] FS:  0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000
[  681.780299][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  681.780310][    C1] CR2: 000055e7c8826f40 CR3: 000000000dd3a000 CR4: 00000000003526f0
[  681.780325][    C1] Call Trace:
[  681.780331][    C1]  <TASK>
[  681.780338][    C1]  default_idle+0x13/0x20
[  681.780360][    C1]  default_idle_call+0x73/0xb0
[  681.780383][    C1]  do_idle+0x1ea/0x520
[  681.780405][    C1]  ? ct_nmi_exit+0x14b/0x1d0
[  681.780427][    C1]  ? __pfx_do_idle+0x10/0x10
[  681.780451][    C1]  cpu_startup_entry+0x44/0x60
[  681.780467][    C1]  start_secondary+0x101/0x110
[  681.780488][    C1]  common_startup_64+0x13e/0x147
[  681.780514][    C1]  </TASK>
[  685.761740][ T1303] ieee802154 phy0 wpan0: encryption failed: -22