last executing test programs:

4m47.056006624s ago: executing program 2 (id=465):
r0 = socket(0x11, 0x80a, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000040)) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2d, 0x40, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)

4m46.914020825s ago: executing program 2 (id=468):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)={0x2, 0x4, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x6}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x8, @loopback, 0xfffffffa}}]}, 0x70}, 0x1, 0x7}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000002000000000000000000850000009b0000001801000020207025000000000020202c7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4m46.813349117s ago: executing program 2 (id=469):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x84)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100))

4m46.157509311s ago: executing program 2 (id=472):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{}, [@netrom, @netrom, @netrom, @bcast, @netrom, @remote, @bcast, @rose]}, &(0x7f0000000000)=0x48)
ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000180)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x2, 0x44})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x1, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6, @in6=@private0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r9, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000180)}, 0x20)
unshare(0xc040480)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
preadv(r11, 0x0, 0x0, 0x0, 0x0)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4060800)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x214, 0x30, 0xffff, 0x0, 0x0, {}, [{0x200, 0x1, [@m_police={0x1fc, 0x3fff, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0xe, 0x1, 0x0, {0x7, 0x1, 0x401, 0x7, 0x4c01, 0x6}, {0x8, 0x0, 0x4, 0x8, 0x7, 0xffff6b32}, 0x1, 0x401, 0xffffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]]}, {0x165, 0x6, "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"}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x24000801}, 0x0)

4m45.815449243s ago: executing program 2 (id=476):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070226bd7000fedbdf25010000001c000480050003000100000005000351d534bd44a78453000500000008000100030000000800020002000000a24379a2764f7438eb5481fb9feaa3d7eedab62634d0dcbdc3224cc4496de0bd9e801755c5ad6e7c2456c113281c02000000000000006590e3fdc14a49a70142a666071b9ab80641eb16c72e243c84afd2"], 0x40}}, 0x4008080)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94)

4m45.369032556s ago: executing program 2 (id=483):
r0 = socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
tee(r1, r3, 0x8f5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000044)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000303a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
r8 = socket(0x8000000010, 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
write(r8, &(0x7f00000002c0)="fc0000001c00", 0x6)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000200001030000000000800000020000000000000102000000080018004e214e213166"], 0x24}}, 0x44004)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

4m30.316005217s ago: executing program 32 (id=483):
r0 = socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
tee(r1, r3, 0x8f5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000044)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000303a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
r8 = socket(0x8000000010, 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
write(r8, &(0x7f00000002c0)="fc0000001c00", 0x6)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000200001030000000000800000020000000000000102000000080018004e214e213166"], 0x24}}, 0x44004)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m30.113926205s ago: executing program 1 (id=1725):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4)

2m29.9563016s ago: executing program 1 (id=1727):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xff}]}}}]}, 0x40}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

2m29.368040409s ago: executing program 1 (id=1730):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000080)={0x6, 'sit0\x00', {0xf}, 0x6})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x5}, [@CGW_CS_CRC8={0x11e, 0x6, {0xfc, 0x0, 0x3, 0x0, 0xff, "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", 0x0, "5c8d58752a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, "0000000000800008"}, 0x1}}]}, 0x14c}}, 0x20000880)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x28, 0x5, 0x2e8113f0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80)

2m28.898167268s ago: executing program 1 (id=1737):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4)

2m28.718637789s ago: executing program 1 (id=1740):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0xf14, 0xfffff000, 0x8, 0x330, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5058b292eac8ba88a36aa1d7ee244885b5bb9fa6935849e6098ed884e7cb51726b360", 0x50}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4040800)
recvmsg$qrtr(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x8, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x3, 0x3, 0x0, 0x9, 0x4, 0x20, 0x4}], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

2m28.471819068s ago: executing program 1 (id=1742):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000001d40)={0x1, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, @link_local}]})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x4000)

2m13.397186293s ago: executing program 33 (id=1742):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000001d40)={0x1, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, @link_local}]})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x4000)

11.763255036s ago: executing program 4 (id=2883):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r2}, 0x18)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0xa, 0x577687f6, 0x83, 0x2004, r3, 0x8bf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x4, 0x7, 0x200, 0x4, 0x4b, 0x8}}) (async)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x4, 0x7, 0x200, 0x4, 0x4b, 0x8}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x27, 0x487, 0x81, 0x1b0e95b5}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d022bbd7000fedbdf2501000000050005000c00000008000400ffff00000800030006000000050006"], 0x34}}, 0x4000) (async)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d022bbd7000fedbdf2501000000050005000c00000008000400ffff00000800030006000000050006"], 0x34}}, 0x4000)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xcc, 0xd, 0x5, 0x101, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x1}, [@generic="0e0b196b6e8e64c279d67f53c5092f1cebe8c8e17802b80289ecafa709c8fb19980ad94e4f557988825e2425cd51649adfb53bb7f0bc3c7713c24c91d7c9a190da7e27c290ea6016341a5d26df3401dd4fc36cc1905fee64a58346ba6685c81b45154c5975f74eb1609d7b8f9820f23743db8b13cd5e515abcc54fe8baa318072d639b7a0bca6a713d7590092bb18c9206300f471c32b41555751393a8fee2a8d1db9c1b8a9f109d97d4ae762c3f", @typed={0x8, 0x2c, 0x0, 0x0, @fd=r9}]}, 0xcc}, 0x1, 0x0, 0x0, 0x404c001}, 0x4020018)
socketpair(0x28, 0x5, 0x2e8113f0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@dellink={0x78, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MTU={0x8, 0x4, 0x7ff}, @IFLA_MAP={0x24, 0xe, {0x7, 0x7fffffffffffffff, 0x7, 0x949, 0x8, 0xd9}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x80) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@dellink={0x78, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MTU={0x8, 0x4, 0x7ff}, @IFLA_MAP={0x24, 0xe, {0x7, 0x7fffffffffffffff, 0x7, 0x949, 0x8, 0xd9}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x80)

4.204130872s ago: executing program 0 (id=2932):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'macvtap0\x00', 0x2}, 0x18)

4.199478462s ago: executing program 4 (id=2885):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', r1, 0x0, 0x0, 0xe, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty}})
r2 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) (async)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8)
bind$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

3.758993763s ago: executing program 0 (id=2934):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x40, 0x9, 0xffffffff, 0x25dfdbfb, {0x2}, [@typed={0x8, 0x10c, 0x0, 0x0, @u32=0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0xfffffff8, 0x7f, &(0x7f0000000640)=""/127, 0x41100, 0x47, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x3, 0x3}, 0x10, 0x2c2d2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1]}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4)
socket(0x1d, 0x2, 0x6)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1ff, 0x10}, 0xc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e22, @multicast1}, 'team_slave_0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r8, &(0x7f00000041c0)=ANY=[@ANYBLOB="000086dd000011000000000000006e711fbe0f982f0100000000000000120000000000000001ff02000000000000000000000000000187"], 0xfce)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a)
syz_emit_ethernet(0xa6, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbabbbbbb86dd6012000800703ae5fe8000000000000000000000000000bbff02000000000000000000004000000186009078ff00df281921d90a797e0000002aca7f50c372a60aa70500000000000000030055004023493b87aafaffffff3e12e5eeed8d384643ab6498ffffffff23732472eefa45ad96579269748e44afc5538a3c3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736be4606cc7db5bea66691b0fc5c18a6476ff7b83b218bb6764ef25bd74fbce1af7a344d08937f47a9127b9bcc619568eba45391e1a9872aff6b6335022a48250da60545a317bfe87e56765e8773ca61c77ff35b4b38bead1bec8ee4e4238b00cc51d9105a1dd9e45c8e1f547a46217ac4641539429645b1d3b33e44ea6c51abe38f57a13de688fd8689c1088baa948b0063df47e0d607a80ad229e550ee95f"], 0x0)

3.656831273s ago: executing program 5 (id=2936):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x80, @empty=0xcf050000}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003c00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) (async)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x234, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5bc}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffa564}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x88}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffeffff}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x41001}, 0x8000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1, &(0x7f0000001a80)=[{0x10, 0x1, 0xc}], 0x10}}], 0x1, 0x4004804)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe7, 0x7a}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x20000841) (async)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) (async)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
sendmsg$nl_route(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x4201, 0x80}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)

3.474664442s ago: executing program 5 (id=2938):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4004040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

3.319314711s ago: executing program 6 (id=2939):
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x5}, 0x10}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x800, 0x2f, 0x3, 0x7fffffff, 0x1, 0xffffffffffffff81, 0x80000000}, &(0x7f0000000200)={0xffffffffcc6f1de5, 0xb, 0x401, 0x6, 0x2, 0x40, 0x6b30, 0x3}, &(0x7f0000000280)={0x5, 0x46af, 0x4e9d3466, 0xb, 0x3, 0x7, 0xfffffffffffffff9, 0x1}, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000300)={[0x3]}, 0x8})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
epoll_create1(0x80000)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0620, 0x0)
socket(0x10, 0x803, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

3.315319767s ago: executing program 5 (id=2940):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x3, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd700005000000020000000900010073797a30000000000900030073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
recvmsg$can_raw(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000440)=""/216, 0xd8}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/38, 0x26}], 0x8}, 0x1021)
socket$nl_route(0x10, 0x3, 0x0)

3.291889892s ago: executing program 0 (id=2941):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r1=>0x0, 0x4, 0x8, 0xa1, 0x200, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7, 0x40, 0x5, 0x7}}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xd, 0x0, 0x80}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x4, 0x1, 0x5}, {0x3, 0x2, 0x0, 0x4}, {0x4, 0x4, 0x10, 0xc}, {0x4, 0x4, 0x6, 0xc}, {0x4, 0x4, 0x8, 0x1}, {0x4, 0x2, 0x0, 0xb}], 0x10, 0x6}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x19, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff8}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @func, @map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, &(0x7f0000000280), 0x0, 0x9, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xc, 0xe, 0x200}, 0x10, 0x13d23, r3, 0x5, &(0x7f0000000880)=[r4], &(0x7f00000008c0)=[{0x1, 0x5, 0x2, 0x1}, {0x3, 0x5, 0xd, 0xa}, {0x0, 0x2, 0x10, 0x3}, {0x3, 0x5, 0x6, 0x1}, {0x0, 0x3, 0xa, 0x6}]}, 0x94)

3.222405025s ago: executing program 4 (id=2942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@setlink={0x30, 0x13, 0x1, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4c00, 0x7920}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0008cd}, 0x20048000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x16, &(0x7f00000002c0)=@raw=[@jmp={0x5, 0x1, 0xd, 0xa, 0x9, 0x172, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x526}}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x66, &(0x7f0000000380)=""/102, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x7, 0x0, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000400)=[0x1, r5, r6, 0x1, r7], &(0x7f00000004c0)=[{0x2, 0x1, 0x4, 0x2}, {0x1, 0x1, 0x4}, {0x6, 0x2, 0x6}, {0x0, 0x4, 0x7, 0xb}, {0x0, 0x3, 0x10}, {0x2, 0x5, 0x10, 0xc}, {0x5, 0x5, 0x3, 0x9}, {0x2, 0x1, 0x0, 0x9}, {0x0, 0x5, 0x3, 0xb}, {0x5, 0x5, 0xd, 0xb}], 0x10, 0x3ff}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r8, @ANYBLOB="44000280400001002400010071756575655f696400000000000000000000000000000800010000000000080005000300030000000800040095ea000808000600", @ANYRES32=r2], 0x60}, 0x1, 0x400000000000000}, 0x40010)

3.1155847s ago: executing program 0 (id=2944):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x128, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x5}, 0x400c001)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)

3.114572721s ago: executing program 5 (id=2945):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x4040000) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_int(r2, 0x29, 0x49, 0x0, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0)

3.094218051s ago: executing program 4 (id=2946):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400})
close(r0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

2.9136918s ago: executing program 5 (id=2947):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) (async)
r3 = socket$rxrpc(0x21, 0x2, 0xa) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}]}, &(0x7f0000000480)=0x10) (async)
getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f0000000040)) (async)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$nfc_llcp(r5, 0x118, 0x6, 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, &(0x7f0000000140)) (async)
r6 = socket$isdn(0x22, 0x2, 0x25)
close(r6)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000140)=[0x2, 0x3], 0x2) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b~', 0x2}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
vmsplice(r7, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7e7ed", 0x3}], 0x1, 0xa) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmmsg$unix(r11, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)="9b24212663582669ff93559c81e7390c43ab5e9ad97f02df5ddbbc0eec00767fa8fea21bc4cded3e3517d365b633150219800805b8d7d4c9aecbac265295ec29ca45ade3671f5bcf7e8506678002173ff639e2cedb84d36c90e544533f57652300024284ff12c00cbb432cb00ae3564b835c547139cc72ddf4f9f210c66a4d5c3a", 0x81}], 0x1, 0x0, 0x0, 0x2008000}}, {{0x0, 0x30, &(0x7f0000001480)=[{&(0x7f0000001200)="91", 0x1}, {0x0}, {&(0x7f0000001280)="c51f", 0x2}], 0x3, 0x0, 0x0, 0x4}}], 0x2, 0x45)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x8080) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

2.91050021s ago: executing program 4 (id=2948):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x2290)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0) (async)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x4, &(0x7f0000000100)="8d839cb3", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x10000a, 0x3, 0x3ff, 0x8}}}}]}, 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r13=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, r13, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, r13, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x11dc0, &(0x7f0000000300)=ANY=[], 0x0) (async)
syz_emit_ethernet(0x11dc0, &(0x7f0000000300)=ANY=[], 0x0)
socket$inet(0x2, 0x3, 0x2)

2.907327628s ago: executing program 3 (id=2949):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
readv(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14)
write$cgroup_int(r3, 0x0, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911021000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r7)
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8084)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d809}, 0x24000000)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r12, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES8=r10], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r10, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r12, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r13 = syz_init_net_socket$ax25(0x3, 0x0, 0xc4)
ioctl$sock_ax25_SIOCDELRT(r13, 0x890c, &(0x7f0000000080)={@null, @null, 0x6, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

2.802614333s ago: executing program 5 (id=2950):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="b47e9ade0e48a039358cab2d95bc783804ccffaddb1a8174f869d160682ccb6fa64d855c3047421d20aaf4cb4bf4fe27fb2fec444360aa82bbb8af080be37fd79b8497ba5e0685001f3851a8c6239fa6e9f652b759b8eb4254d8d36d928e90de1ba8d699359ae77b71baf1976a2f007e99a9321ae825e91b1c1c6f241b4c7aa24e5a85119004af5eb1d48a171dc889e976eb3512f579335aaaf0fe39aa7afce51b29bfad8c80e879b7fb5ac67b87add9742928bf9b8c9399", 0xb8}, {&(0x7f00000000c0)="dc056b4674642dccf1f8a58e1a408d88575c0e9ad023916b5550e6617b5b5cdf2259be4e349679d3ac5b3e4a01bb5e93e1c4a5a90f2600a5259d32e96b632d5c60387feffb0601e9250f4e16eabb35c8f349f73a1978dd20145550aeb183aded972b1d1702356623da812ef6429f549bc4623ce2927a454aabf8f9d8e81f2a0e120378e946d93163b09efe0db8fd52ae4eaa486936a43d3d5e52a9cb25cbfc703e4685a38a8789fb", 0xa8}, {&(0x7f0000000240)="9aeea53e3dd506d04e0f1c74a72b4c249d379585e8d8a467ee0a86d2ca1abdaeca4d2a4d25bbaff5306551a9006f891c9c569150c1357528c87ef92835643b254a9483627df7d13d428f83fc0447a26f7e41c8ab283cc35cccb5743767cd1f8c48a8b87336332378a7e29e3653b31a21621ac02c92b97620051498812695bb618e5aee25e0d778d111385c11d9c46028aef236f24255edbee46d0836d9fb9c73ceeb28eba9b2faea013cd7c122a3ddd2f92fcd12ea941a30fc97842a42bf598cf8ffca7316f3c1313c6d3733b8ba5bcd8e9462ab8b2c4c569d1f773cd7c200738d30442a491c103016c0", 0xea}, {&(0x7f0000000380)="c8e8583683eb07e49f6a84001db53e1c4ba7f3e200b1772906fabfbea8568637d68b015e9257779fa602d240f55ca2d1d7738e42bee2895134cda38eea3972170d7a67318605da56309f2ecdcbeae8635f750e1cbc8ee3f8875814ceb1744cdf8e1d27689f6d56d01085", 0x6a}], 0x4, 0x6, 0x8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/time_for_children\x00')
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c)
recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)=""/223, 0xdf}, {0x0}], 0x2}, 0x80000001}, {{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002040), 0x0, &(0x7f0000001ac0)=""/198, 0xc6}, 0x3}], 0x2, 0x40, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r7, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r7, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x9}, 0x90)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xe9, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0xe9, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}, "16ba1c33be9e3dd3131be124c53e53318de1d162ab4fbabe06a1e9f68c1783e3d351cbb0bf403bd6834b6fdc7eda0ee6797bfe8ae0ebf63b261eb393477f9774ff8a67fe4ee77684611cb9c39ea69a988e7238549b785ac1fbc2ceafd33b693f436ca0badb6d2a7ab27686aa6d35873bf773115f39feedf5814bd61b03685822564f3a6a540acc1600d9f85df98e910d3e141b34c2b8451a4e347d8f35be138666044d448dd6037badf771f6d0167fc826b5914e00b0ebf6065066494321d927dedd6c9535fe41ec19498b71671fed94e71c2e880c19052418f6465fe4"}}}}}}}}, 0x123)
r9 = socket(0x8, 0x3, 0x0)
unshare(0x2000000)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000007bc0))
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0)
getsockname$packet(r9, 0x0, 0x0)

2.729529965s ago: executing program 0 (id=2951):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400})
syz_emit_ethernet(0xde, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000500", 0xa8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, [{0x18, 0xf, "00000000e50053bff4db7fb81947a98ef6c30aef8bffd4310d8c8cfbdfdcf5ad49792ea9afa9553dcd662ba253fb01a9bda9916838f848a6e18c02bf95848d398ec9dba34d082016dcb10b44b93da65d02ba88666428204a908ad971d0047aabc2491e667b9900"/118}, {0x18, 0x4, "a78ce54006598080a8030037004023493b87aafaffffffffffffff237324"}]}}}}}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x6, "d9deea2a"}]}}}}}}}}, 0x0) (rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

2.556388173s ago: executing program 4 (id=2952):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500000000", @ANYRES32=0x0, @ANYBLOB="080000000000e4a91c0012656300000ceb0b0001008728db"], 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0xffffffd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18)
socket(0x1, 0x4, 0x40) (async)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c004642", @ANYRES16=0x0, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r3 = gettid()
syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/mnt\x00') (async)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf253100000008000100520000000c009900ff0f000037000000080001007a0000000c0099007f0100001a00000008005200", @ANYRES32=0x0, @ANYBLOB="08000300109cfcdb663dddcf85dc6626a0b548cf277b8812e6b6272bc46b7c40d5fbf878f2e74de9da3d59d5e0a891132cf0d50899180daf35dff1df0f9c70a7d988dca989477cbce5dba8b41e56", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x2400c041}, 0x10000) (async)
recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) (async)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async)
r4 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x400001, 0x2}}, 0x10, 0x0}, 0x4800) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f00000000c0)=0x101, 0x12) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000003c0)={0x1c652f085f92f51a}) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x39, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) (async)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0)

2.202724627s ago: executing program 6 (id=2953):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'tunl0\x00', 0x2000})
listen(r0, 0x8000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'})
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
close(0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004090}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, 0x0}], 0x1, 0x4000080)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x9)
r6 = socket(0x1e, 0x6, 0xfffffffd)
setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x80000001, 0x4)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
shutdown(0xffffffffffffffff, 0x1)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x4004092)

1.265695452s ago: executing program 0 (id=2954):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$unix(0x1, 0x1, 0x0)
unshare(0x600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000900)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c000)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r2}, 0x18)

1.126987745s ago: executing program 3 (id=2955):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}}}, 0x5)
getsockopt$sock_cred(r0, 0x20, 0x4d, 0x0, 0x0)

847.306983ms ago: executing program 3 (id=2956):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYRES64=r3], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5b7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x19}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYBLOB="d695962b1159b1be0ab01d84368c8a970163d155b49d6d3941ff71b210463adfb33c58db6ad1816196318b98ef7e420db78f760f0ce89bbfb4532f2c3ca75ed9e5fcdacf2cd758329ddd1b41f710d3e54a2aade4d73e713a2b3d2ae63c3d3c56aafc32b22ff062693afa612d0000000000000000ca9bb3c8a2e5da73cf2dd439e6e037b10306"], &(0x7f0000000100)='GPL\x00', 0x10000, 0x0, 0x0, 0xf7f663a21c5d56ec, 0x84, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1000000004000020080000000500000000000000fcedb736a910577d51431fbeac8ce62052adfa79b7c0ba47e1bf64f01b62cb9ad9d1b0d16051ca6ec2719a65261afdd12631a49dff9f475e9d746f0dce01dee7aaca0dc2382a810e", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000508caf8000004000000000000000000", @ANYRESHEX=r4, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000300), &(0x7f0000000240)=r6}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="62914307a06e68afab18325662ad7938bcaf27d0478f8f82691b3259a74669185679865c39eb95899f175ae3d4c9e3661c2d312a7919c03ca1930b2f9b7a", @ANYRES64=0x0], 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4b00000046777c957df28dac58f25c6c88ad1873fcbc49204f55a2e4a9b2e3a8037a8f38b6504490332d210d62a4268b88ee011cc65dfc6213a84566aee83350125c89cbc35b3c331214314d7dd9b42e4349afd9467c42b67e3a93f5044e96d007da3e2469f1584ec8e1d1a582dee1a73e26c9af28b50385a9a78776214ded753df85b070c16ef5d322c91f67920d71f787478a44eed3781b07390", @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf250500000028000180060001007564703a73797a32000000001400028008000400020000000800020003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002000)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f00000000e655de98000000194bcf9bdab31fbcd5481e34ff7761b705a801acda0bf61fc08166659d4430c155366211ba41fe26fdb7384abb28f64f3cc277b9e7c30100000000000000efd1a25fc85949303d565f5dd243425489f397e7e87ef409ae5a42050000000000000400ef37da956af6eb0413f8f1a3d1198179e3023ea38755945c75a1afb7e32eb0a437adde7cb351081dd9295d780c4a278720302c86129caa3622f63423033942897cc803b6b377e8fa2e498cf6628d60a89ac0d058478e00000000000000000000000000000000e343935a0f74fa2d4e418402651e71610cbda55bad78567d982600b776d2dedb6f428648743c242aa3e479ccba7a74c976e5ff5891c9955d030ce45ca6f9606949bae76aff4340084d6e39c8e5cf0160b1ca6ff2e1d900fbd41fd609a56abb4217be73c57cd941ff03afde075d29c0fb27a70686f0f072cbf96ef0dc3a6ee5a7e68dfee57d3f548b24005ec453ba8c2f60a085e688bc665b25f8a9f3b01c01205a96d35b86f0b467e27a2901ee4a118a15a2ce3f96c37bbacbe3c4c93edf84ae8ed0452d17a83f349b2b20bb068bf25ca8e1e31472db3dc616a6cbe1fb774b6f3b400866", @ANYRES32=r7, @ANYRESOCT=r1, @ANYRES64=0x0], 0x20)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff03000008000900010000f308000700030000001400"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="48000000020603010000000000000000000000000d000300686173683a6e657400000000050004000000000005000500050000000400078005000500020000000500010006000000d2e4f158810ea52fad1a2424356345e1a7855882931ed986e64e6dd1aef4e92cccfbc67088e55dd7"], 0x48}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

619.657962ms ago: executing program 6 (id=2957):
bpf$PROG_LOAD(0x5, &(0x7f0000003480)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) (async)
r2 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
r4 = socket(0x2, 0x2, 0x1)
bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x810, r6, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x3f8, 0x2e0, 0x2e0, 0x3f8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xc}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x4d}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x5}, {0xffffffffffffffff, 0x1, 0x7}, 0x2, 0x5be}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528)

568.291007ms ago: executing program 3 (id=2958):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1000) (async)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000001"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000001"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f00000004c0)=0x7, 0x4) (async)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f00000004c0)=0x7, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000180001002abd7000070000001d0104000800050003fe060515000400030000c007020000304c54129c755b180400000012520d8e710b61d5daf56046619e5de6df5fc92216a7d756861015ed83f315a49fa73e5d8ccc955fb0b4675f808084a9d4fb3bd43ac6bf2ad079155ebdd7545b"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000480)=0x7f, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000020101010000000000000000020000050c002d800800020005000000180002801400018008000100640101e3070002"], 0x38}, 0x1, 0x0, 0x0, 0x14001084}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x2, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1ff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x2, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1ff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r7, 0x3c, 0xad, 0x9, 0x2, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x40, 0xd, 0x7}})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

491.603727ms ago: executing program 6 (id=2959):
syz_emit_ethernet(0x60, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x52, 0x68, 0x0, 0x4, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x3e, 0x0, @gue={{0x1, 0x1, 0x1, 0x0, 0x0, @void}, "56a5063740fae4a28b885a899e787d774e5f288318c7d318479401284793ce76b4951e55b30526d78f71ccc756d3efd51cea"}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x40002b9, 0xf, 0x8, 0x289, 0xe3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xcc}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

377.148433ms ago: executing program 6 (id=2960):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) (async)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x627, 0x10102, 0x0)

213.610961ms ago: executing program 6 (id=2961):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r1) (async)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xd335}], 0x2, 0x2120, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

98.961686ms ago: executing program 3 (id=2962):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x394}}, 0x40)

0s ago: executing program 3 (id=2963):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000081019078a81e0001ac1414aa030490781209183f2500000000650000000100007f0000017f00000100186371ae9b1c03"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

kernel console output (not intermixed with test programs):

T12303] delete_channel: no stack
[  277.707736][T12334] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  277.731692][T12346] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  277.751062][T12346] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  277.835401][T12348] bridge5: entered allmulticast mode
[  277.922088][T12357] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1667'.
[  278.052611][T12364] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  278.093549][T12368] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  278.139025][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'.
[  278.184837][ T7593] IPVS: ip_vs_send_async error -101
[  278.264468][ T5834] block nbd2: Receive control failed (result -32)
[  278.343747][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  278.447659][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1675'.
[  278.520604][T12386] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1675'.
[  278.545691][T12386] unsupported nlmsg_type 40
[  278.624898][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'.
[  278.861154][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'.
[  278.970981][T12411] macvlan5: entered promiscuous mode
[  278.983904][T12411] bond0: entered promiscuous mode
[  278.989179][T12411] macvlan5: entered allmulticast mode
[  279.004603][T12411] bond0: entered allmulticast mode
[  279.028855][T12411] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  279.060727][T12411] bond0: left allmulticast mode
[  279.074700][T12411] bond0: left promiscuous mode
[  279.139978][T12409] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  279.195571][T12429] netlink: 'syz.5.1687': attribute type 1 has an invalid length.
[  279.218732][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'.
[  279.436838][T12437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1689'.
[  279.515052][T12445] macvtap1: entered promiscuous mode
[  279.520438][T12445] macvtap1: entered allmulticast mode
[  279.548488][T12445] netdevsim netdevsim5 netdevsim1: entered promiscuous mode
[  279.571323][T12445] netdevsim netdevsim5 netdevsim1: entered allmulticast mode
[  279.612848][T12445] team0: Device macvtap1 failed to register rx_handler
[  279.623299][T12445] netdevsim netdevsim5 netdevsim1: left allmulticast mode
[  279.640008][T12445] netdevsim netdevsim5 netdevsim1: left promiscuous mode
[  279.691926][T12455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1694'.
[  279.782952][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'.
[  280.157513][T12188] udevd[12188]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  280.766936][T12508] batadv_slave_1: entered promiscuous mode
[  281.519849][T12507] batadv_slave_1: left promiscuous mode
[  281.671213][T12533] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004
[  281.925823][T12546] IPVS: set_ctl: invalid protocol: 59 172.20.20.60:20000
[  281.994216][T12543] net_ratelimit: 45 callbacks suppressed
[  281.994241][T12543] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  282.998013][T12578] sit0: left promiscuous mode
[  283.307684][T12578] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  283.338093][T12578] bond1: left promiscuous mode
[  283.362233][T12590] __nla_validate_parse: 2 callbacks suppressed
[  283.362252][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1728'.
[  283.413169][T12578] bond5: left promiscuous mode
[  283.443881][   T37] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.476385][   T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.634169][   T37] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.644214][   T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.653233][   T37] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.679192][   T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.692557][   T37] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.702682][   T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.722404][T12595] wireguard0: entered promiscuous mode
[  283.734032][T12595] wireguard0: entered allmulticast mode
[  283.755093][T12595] team0: Device wireguard0 is of different type
[  283.934307][T12617] netlink: 'syz.3.1735': attribute type 1 has an invalid length.
[  284.003935][T12617] 8021q: adding VLAN 0 to HW filter on device bond4
[  284.196638][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'.
[  284.205897][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'.
[  284.221556][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'.
[  284.245194][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'.
[  284.591966][T12657] netlink: 'syz.1.1742': attribute type 1 has an invalid length.
[  284.709933][T12661] gretap2: entered allmulticast mode
[  284.735192][T12661] bond3: (slave gretap2): making interface the new active one
[  284.764896][T12661] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  284.827008][T12666] sit0: entered promiscuous mode
[  284.832419][T12666] netlink: 'syz.3.1747': attribute type 1 has an invalid length.
[  284.851689][T12666] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1747'.
[  285.344672][T12684] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  285.421116][T12686] netlink: 'syz.4.1752': attribute type 11 has an invalid length.
[  285.684883][T12697] sctp: [Deprecated]: syz.4.1754 (pid 12697) Use of int in maxseg socket option.
[  285.684883][T12697] Use struct sctp_assoc_value instead
[  285.793058][T12701] FAULT_INJECTION: forcing a failure.
[  285.793058][T12701] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  285.806603][T12701] CPU: 1 UID: 0 PID: 12701 Comm: syz.3.1757 Not tainted syzkaller #0 PREEMPT(full) 
[  285.806632][T12701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  285.806646][T12701] Call Trace:
[  285.806654][T12701]  <TASK>
[  285.806664][T12701]  dump_stack_lvl+0xe8/0x150
[  285.806698][T12701]  should_fail_ex+0x414/0x560
[  285.806739][T12701]  prepare_alloc_pages+0x22b/0x650
[  285.806775][T12701]  __alloc_frozen_pages_noprof+0x123/0x370
[  285.806806][T12701]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  285.806837][T12701]  ? lruvec_stat_mod_folio+0x6f/0x2e0
[  285.806868][T12701]  ? policy_nodemask+0x27c/0x720
[  285.806900][T12701]  alloc_pages_mpol+0x232/0x4a0
[  285.806933][T12701]  vma_alloc_folio_noprof+0xe4/0x200
[  285.806964][T12701]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  285.807006][T12701]  folio_prealloc+0x30/0x180
[  285.807029][T12701]  do_wp_page+0x1231/0x5810
[  285.807070][T12701]  ? ___pte_offset_map+0x29/0x240
[  285.807114][T12701]  ? __pfx_do_wp_page+0x10/0x10
[  285.807141][T12701]  ? do_raw_spin_lock+0x121/0x290
[  285.807174][T12701]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  285.807216][T12701]  handle_mm_fault+0x14c5/0x32b0
[  285.807247][T12701]  ? __pte_offset_map_lock+0x13e/0x210
[  285.807294][T12701]  ? handle_mm_fault+0xdb/0x32b0
[  285.807336][T12701]  ? __pfx_handle_mm_fault+0x10/0x10
[  285.807369][T12701]  ? follow_page_pte+0xd03/0x13e0
[  285.807410][T12701]  ? __pfx_follow_page_pte+0x10/0x10
[  285.807454][T12701]  __get_user_pages+0x1650/0x29f0
[  285.807521][T12701]  __gup_longterm_locked+0xde4/0x1660
[  285.807566][T12701]  ? sanity_check_pinned_pages+0x1241/0x1300
[  285.807611][T12701]  gup_fast_fallback+0x1d26/0x2290
[  285.807682][T12701]  ? __pfx_gup_fast_fallback+0x10/0x10
[  285.807708][T12701]  ? ____sys_recvmsg+0x1c9/0x460
[  285.807736][T12701]  ? __x64_sys_recvmsg+0x198/0x260
[  285.807762][T12701]  ? do_syscall_64+0xec/0xf80
[  285.807786][T12701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.807814][T12701]  ? pin_user_pages_fast+0x4d/0xb0
[  285.807846][T12701]  iov_iter_extract_pages+0x35f/0x5e0
[  285.807884][T12701]  extract_iter_to_sg+0xe46/0x24e0
[  285.807925][T12701]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  285.807952][T12701]  ? rcu_is_watching+0x15/0xb0
[  285.807980][T12701]  ? trace_kmalloc+0x1f/0xb0
[  285.808000][T12701]  ? sock_kmalloc+0xd6/0x160
[  285.808034][T12701]  ? __asan_memset+0x22/0x50
[  285.808070][T12701]  af_alg_get_rsgl+0x436/0x810
[  285.808116][T12701]  skcipher_recvmsg+0x3d1/0x11d0
[  285.808147][T12701]  ? aa_sk_perm+0x7ee/0x920
[  285.808188][T12701]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  285.808212][T12701]  ? __lock_acquire+0x6b6/0x2cf0
[  285.808236][T12701]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  285.808255][T12701]  ? security_socket_recvmsg+0x7e/0x2e0
[  285.808288][T12701]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  285.808315][T12701]  sock_recvmsg+0x22c/0x270
[  285.808354][T12701]  ____sys_recvmsg+0x1c9/0x460
[  285.808394][T12701]  ? __pfx_____sys_recvmsg+0x10/0x10
[  285.808440][T12701]  ? import_iovec+0x74/0xa0
[  285.808471][T12701]  ___sys_recvmsg+0x1b5/0x510
[  285.808498][T12701]  ? get_pid_task+0x20/0x1f0
[  285.808532][T12701]  ? __pfx____sys_recvmsg+0x10/0x10
[  285.808567][T12701]  ? __fget_files+0x2a/0x420
[  285.808623][T12701]  ? __fget_files+0x3a0/0x420
[  285.808663][T12701]  __x64_sys_recvmsg+0x198/0x260
[  285.808696][T12701]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  285.808737][T12701]  ? __pfx_ksys_write+0x10/0x10
[  285.808772][T12701]  do_syscall_64+0xec/0xf80
[  285.808798][T12701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.808819][T12701]  ? trace_irq_disable+0x37/0x100
[  285.808856][T12701]  ? clear_bhb_loop+0x60/0xb0
[  285.808883][T12701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.808904][T12701] RIP: 0033:0x7f884998f749
[  285.808924][T12701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.808942][T12701] RSP: 002b:00007f884a910038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  285.808965][T12701] RAX: ffffffffffffffda RBX: 00007f8849be5fa0 RCX: 00007f884998f749
[  285.808981][T12701] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  285.808999][T12701] RBP: 00007f884a910090 R08: 0000000000000000 R09: 0000000000000000
[  285.809012][T12701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  285.809024][T12701] R13: 00007f8849be6038 R14: 00007f8849be5fa0 R15: 00007ffc38d293f8
[  285.809062][T12701]  </TASK>
[  286.569252][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1764'.
[  286.901479][T12737] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1769'.
[  287.222160][T12755] batadv0: mtu less than device minimum
[  287.398651][T12761] Bluetooth: MGMT ver 1.23
[  287.569815][T12768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1776'.
[  287.724323][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'.
[  287.761190][T12772] macvlan5: entered promiscuous mode
[  287.770702][T12772] bond0: entered promiscuous mode
[  287.777598][T12772] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  287.801131][T12774] rdma_op ffff888029dc99f0 conn xmit_rdma 0000000000000000
[  287.884140][T12779] netlink: 'syz.3.1781': attribute type 32 has an invalid length.
[  287.892509][T12781] netlink: 'syz.0.1782': attribute type 10 has an invalid length.
[  287.945007][T12779] bond5: option coupled_control: invalid value (12)
[  287.966088][T12779] bond5 (unregistering): Released all slaves
[  288.203937][T12790] nbd4: detected capacity change from 0 to 63
[  288.210526][T12791] block nbd4: NBD_DISCONNECT
[  288.225705][T12791] block nbd4: Disconnected due to user request.
[  288.243230][T12791] block nbd4: shutting down sockets
[  288.261720][    C1] blk_print_req_error: 138 callbacks suppressed
[  288.261745][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.278149][    C1] buffer_io_error: 138 callbacks suppressed
[  288.278171][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[  288.296553][    C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.306172][    C1] Buffer I/O error on dev nbd4, logical block 1, async page read
[  288.314101][    C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.324086][    C1] Buffer I/O error on dev nbd4, logical block 2, async page read
[  288.331952][    C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.341515][    C1] Buffer I/O error on dev nbd4, logical block 3, async page read
[  288.349459][T12188] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.393592][T12188] Buffer I/O error on dev nbd4, logical block 0, async page read
[  288.431195][T12188] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.447981][T12188] Buffer I/O error on dev nbd4, logical block 1, async page read
[  288.463778][T12188] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.484180][T12188] Buffer I/O error on dev nbd4, logical block 2, async page read
[  288.492074][T12188] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.522105][T12188] Buffer I/O error on dev nbd4, logical block 3, async page read
[  288.538105][T12188] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.557808][T12188] Buffer I/O error on dev nbd4, logical block 0, async page read
[  288.578428][T12188] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  288.608466][T12188] Buffer I/O error on dev nbd4, logical block 1, async page read
[  288.637024][T12188] ldm_validate_partition_table(): Disk read failed.
[  288.658851][T12188] Dev nbd4: unable to read RDB block 0
[  288.681329][T12188]  nbd4: unable to read partition table
[  288.712417][T12188] ldm_validate_partition_table(): Disk read failed.
[  288.734465][T12188] Dev nbd4: unable to read RDB block 0
[  288.740736][T12188]  nbd4: unable to read partition table
[  288.788213][T12829] __nla_validate_parse: 2 callbacks suppressed
[  288.788234][T12829] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1793'.
[  289.320228][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1802'.
[  289.398885][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'.
[  289.410177][T12856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1799'.
[  289.454711][T12863] netlink: 'syz.5.1804': attribute type 11 has an invalid length.
[  289.760790][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1811'.
[  289.778112][T12881] vlan2: entered promiscuous mode
[  289.783339][T12881] gretap0: entered promiscuous mode
[  289.904598][T12869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.176944][T12887] netlink: 'syz.0.1812': attribute type 10 has an invalid length.
[  290.185658][T12887] netlink: 'syz.0.1812': attribute type 10 has an invalid length.
[  290.202572][T12887] dummy0: entered promiscuous mode
[  290.210015][T12887] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  290.235496][T12887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.308924][T12887] syzkaller0: entered promiscuous mode
[  290.314684][T12887] syzkaller0: entered allmulticast mode
[  290.321195][T12887] tipc: Resetting bearer <eth:syzkaller0>
[  290.344071][T12886] tipc: Resetting bearer <eth:syzkaller0>
[  290.447053][T12899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.611267][T12901] netlink: 'syz.4.1816': attribute type 10 has an invalid length.
[  292.054531][T12886] tipc: Disabling bearer <eth:syzkaller0>
[  292.066381][T12901] team0: Device ipvlan1 failed to register rx_handler
[  292.225403][T12918] netlink: 'syz.0.1820': attribute type 1 has an invalid length.
[  292.290935][T12918] bond5: entered promiscuous mode
[  292.297193][T12918] 8021q: adding VLAN 0 to HW filter on device bond5
[  292.329003][T12927] 8021q: adding VLAN 0 to HW filter on device bond5
[  292.349670][T12927] bond5: (slave gre2): The slave device specified does not support setting the MAC address
[  292.360984][T12927] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  292.397190][T12927] bond5: (slave gre2): making interface the new active one
[  292.406133][T12937] netlink: 'syz.4.1824': attribute type 13 has an invalid length.
[  292.415916][T12927] gre2: entered promiscuous mode
[  292.423507][T12927] bond5: (slave gre2): Enslaving as an active interface with an up link
[  292.606718][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'.
[  292.698119][T12940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1825'.
[  293.271241][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1830'.
[  293.300850][T12957] netlink: 'syz.5.1830': attribute type 21 has an invalid length.
[  293.500469][T12962] netlink: 'syz.5.1832': attribute type 13 has an invalid length.
[  293.517787][T12962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1832'.
[  293.539466][T12962] netlink: 'syz.5.1832': attribute type 3 has an invalid length.
[  293.549737][T12965] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1833'.
[  293.565785][T12965] netlink: 'syz.4.1833': attribute type 1 has an invalid length.
[  293.657262][T12968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.741107][T12970] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  293.822365][T12972] 8021q: VLANs not supported on ip6_vti0
[  293.916499][T12983] __nla_validate_parse: 2 callbacks suppressed
[  293.916520][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'.
[  293.956736][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'.
[  294.949739][T13014] netlink: 'syz.4.1847': attribute type 1 has an invalid length.
[  295.015840][T13014] bond7: entered promiscuous mode
[  295.020953][T13014] bond7: entered allmulticast mode
[  295.026981][T13014] 8021q: adding VLAN 0 to HW filter on device bond7
[  295.967359][T13018] macvlan4: entered promiscuous mode
[  295.972731][T13018] macvlan4: entered allmulticast mode
[  295.987007][T13018] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  296.045097][T13014] bridge6: entered allmulticast mode
[  296.150999][T13023] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1848'.
[  296.174702][T13023] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1848'.
[  296.255289][T13026] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1850'.
[  297.086532][T13057] 8021q: VLANs not supported on ip_vti0
[  297.411552][T13074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1861'.
[  297.543303][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'.
[  297.552832][T13087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1866'.
[  297.618121][T13090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1865'.
[  297.693135][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'.
[  297.820293][T13104] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.322774][T13131] netlink: 'syz.3.1877': attribute type 1 has an invalid length.
[  298.509244][T13134] netlink: 'syz.4.1878': attribute type 22 has an invalid length.
[  298.555919][T13134] netlink: 'syz.4.1878': attribute type 22 has an invalid length.
[  298.879832][T13163] bond0: (slave rose0): Error: Device can not be enslaved while up
[  298.888713][T13163] macsec0: entered promiscuous mode
[  298.895088][T13163] macsec0: left promiscuous mode
[  298.958107][T13159] __nla_validate_parse: 3 callbacks suppressed
[  298.958129][T13159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1883'.
[  299.239223][T13175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1888'.
[  299.252977][T13175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1888'.
[  299.427576][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1890'.
[  299.565459][T13188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1891'.
[  299.574758][T13188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1891'.
[  299.781986][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.792606][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.801197][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.812897][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.824476][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.981050][T13200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1896'.
[  300.069006][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'.
[  300.258291][T13193] chnl_net:caif_netlink_parms(): no params data found
[  300.446191][T13193] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.454571][T13193] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.468074][T13193] bridge_slave_0: entered allmulticast mode
[  300.477852][T13193] bridge_slave_0: entered promiscuous mode
[  300.501644][T13193] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.519476][T13193] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.535739][T13193] bridge_slave_1: entered allmulticast mode
[  300.566323][T13193] bridge_slave_1: entered promiscuous mode
[  300.678863][T13193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.706774][T13193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.895089][T13193] team0: Port device team_slave_0 added
[  300.926538][T13193] team0: Port device team_slave_1 added
[  301.027085][T13237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1905'.
[  301.142241][T13193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.173465][T13193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.262504][T13193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.292473][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'.
[  301.308136][T13193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.334860][T13193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.383778][T13193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.541195][T13193] hsr_slave_0: entered promiscuous mode
[  301.549884][T13193] hsr_slave_1: entered promiscuous mode
[  301.556738][T13193] debugfs: 'hsr0' already exists in 'hsr'
[  301.569338][T13193] Cannot create hsr debugfs directory
[  301.594869][T13233] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  301.864641][ T5834] Bluetooth: hci6: command tx timeout
[  301.958980][T13269] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  302.464256][T13293] wg1 speed is unknown, defaulting to 1000
[  302.482974][T13293] wg1 speed is unknown, defaulting to 1000
[  302.517485][T13293] wg1 speed is unknown, defaulting to 1000
[  302.557551][T13193] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  302.578093][T13293] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  302.686301][T13193] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  302.693306][T13293] wg1 speed is unknown, defaulting to 1000
[  302.720400][T13293] wg1 speed is unknown, defaulting to 1000
[  302.727285][T13193] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  302.777701][T13193] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  302.803849][T13293] wg1 speed is unknown, defaulting to 1000
[  302.859779][T13293] wg1 speed is unknown, defaulting to 1000
[  302.883127][T13293] wg1 speed is unknown, defaulting to 1000
[  302.926837][T13293] wg1 speed is unknown, defaulting to 1000
[  302.948784][T13293] wg1 speed is unknown, defaulting to 1000
[  303.326809][T13193] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.443024][T13193] 8021q: adding VLAN 0 to HW filter on device team0
[  303.475956][T13328] wg1 speed is unknown, defaulting to 1000
[  303.568447][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.575824][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.596444][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.603725][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.817692][T13349] netlink: 'syz.0.1930': attribute type 58 has an invalid length.
[  303.953899][ T5834] Bluetooth: hci6: command tx timeout
[  304.340128][T13367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.385095][T13367] syzkaller0: entered promiscuous mode
[  304.390657][T13367] syzkaller0: entered allmulticast mode
[  304.457322][T13369] syzkaller0: entered promiscuous mode
[  304.477013][T13369] syzkaller0: entered allmulticast mode
[  304.558780][T13193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.945367][T13394] __nla_validate_parse: 5 callbacks suppressed
[  304.945384][T13394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1943'.
[  305.017190][T13193] veth0_vlan: entered promiscuous mode
[  305.043062][T13193] veth1_vlan: entered promiscuous mode
[  305.062623][T13395] xfrm0 speed is unknown, defaulting to 1000
[  305.103151][T13395] xfrm0 speed is unknown, defaulting to 1000
[  305.116255][T13193] veth0_macvtap: entered promiscuous mode
[  305.125377][T13366] tipc: Resetting bearer <eth:syzkaller0>
[  305.148411][T13366] tipc: Disabling bearer <eth:syzkaller0>
[  305.167840][T13193] veth1_macvtap: entered promiscuous mode
[  305.174210][T13395] xfrm0 speed is unknown, defaulting to 1000
[  305.215402][T13193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.246882][T13193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.279764][ T3561] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.316196][ T3561] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.341152][ T3561] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.397955][ T3561] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.447368][T13403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1946'.
[  305.525091][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'.
[  305.700615][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.744682][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.836080][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.853742][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.935269][T13424] netlink: 'syz.0.1951': attribute type 1 has an invalid length.
[  305.964614][T13424] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1951'.
[  305.977480][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1949'.
[  306.002776][T13423] v: entered promiscuous mode
[  306.011734][T13423] v: left promiscuous mode
[  306.034315][ T5834] Bluetooth: hci6: command tx timeout
[  306.061208][T13395] infiniband syz1: set active
[  306.067263][T13395] infiniband syz1: added xfrm0
[  306.135193][   T10] xfrm0 speed is unknown, defaulting to 1000
[  306.156848][T13395] RDS/IB: syz1: added
[  306.175094][T13395] smc: adding ib device syz1 with port count 1
[  306.197464][T13395] smc:    ib device syz1 port 1 has no pnetid
[  306.218350][ T5973] xfrm0 speed is unknown, defaulting to 1000
[  306.228609][T13395] xfrm0 speed is unknown, defaulting to 1000
[  306.668422][T13443] wg1 speed is unknown, defaulting to 1000
[  307.191774][T13443] xfrm0 speed is unknown, defaulting to 1000
[  307.300653][T13452] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1956'.
[  307.329118][T13454] syzkaller1: entered promiscuous mode
[  307.358825][T13453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1958'.
[  307.369926][T13454] syzkaller1: entered allmulticast mode
[  308.105696][ T5834] Bluetooth: hci6: command tx timeout
[  308.122305][T13395] xfrm0 speed is unknown, defaulting to 1000
[  308.578390][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1963'.
[  308.895915][T13473] team0: Mode changed to "activebackup"
[  308.988581][T13473] ip6tnl0: Caught tx_queue_len zero misconfig
[  309.527537][T13395] xfrm0 speed is unknown, defaulting to 1000
[  310.408754][T13395] xfrm0 speed is unknown, defaulting to 1000
[  310.536962][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1970'.
[  311.091087][T13395] xfrm0 speed is unknown, defaulting to 1000
[  311.446422][T13505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1973'.
[  311.545411][T13505] bridge3: entered promiscuous mode
[  311.550704][T13505] bridge3: entered allmulticast mode
[  311.624877][T13395] xfrm0 speed is unknown, defaulting to 1000
[  311.715073][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1973'.
[  312.209985][T13395] xfrm0 speed is unknown, defaulting to 1000
[  312.268261][T13512] xt_CT: You must specify a L4 protocol and not use inversions on it
[  312.676641][T13395] xfrm0 speed is unknown, defaulting to 1000
[  313.030771][T13395] xfrm0 speed is unknown, defaulting to 1000
[  313.255646][T13395] xfrm0 speed is unknown, defaulting to 1000
[  313.537999][T13483] wg1 speed is unknown, defaulting to 1000
[  313.781604][T13510] wg1 speed is unknown, defaulting to 1000
[  313.791136][T13514] netlink: 'syz.5.1975': attribute type 1 has an invalid length.
[  314.005681][T13517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  314.012987][T13517] IPv6: NLM_F_CREATE should be set when creating new route
[  314.020903][T13517] IPv6: NLM_F_CREATE should be set when creating new route
[  314.065802][T13517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  314.163229][T13514] bond4: entered promiscuous mode
[  314.180275][T13514] 8021q: adding VLAN 0 to HW filter on device bond4
[  314.240324][T13516] 8021q: adding VLAN 0 to HW filter on device bond4
[  314.251443][T13516] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  314.276861][T13516] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  314.322097][T13516] bond4: (slave wireguard0): making interface the new active one
[  314.331803][T13516] wireguard0: entered promiscuous mode
[  314.349628][T13516] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  314.390308][T13500] wg1 speed is unknown, defaulting to 1000
[  314.439072][T13517] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[  314.481426][T13517] bond4: (slave wireguard1): Enslaving as a backup interface with an up link
[  314.826600][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1976'.
[  314.971613][T13522] IPVS: sh: FWM 3 0x00000003 - no destination available
[  316.207585][T13550] 8021q: VLANs not supported on vxcan1
[  316.248569][T13548] wg1 speed is unknown, defaulting to 1000
[  316.256466][T13548] xfrm0 speed is unknown, defaulting to 1000
[  316.285721][T13554] sch_fq: defrate 4294967293 ignored.
[  316.390353][T13560] bond0: Caught tx_queue_len zero misconfig
[  316.470619][T13565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1988'.
[  316.606302][T13568] wg1 speed is unknown, defaulting to 1000
[  316.711315][T13573] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1991'.
[  316.737353][T13568] xfrm0 speed is unknown, defaulting to 1000
[  317.203188][T13583] netlink: 'syz.4.1993': attribute type 4 has an invalid length.
[  317.749464][T13593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'.
[  318.241945][T13617] batadv0: mtu less than device minimum
[  318.324518][T13618] bond8: option arp_all_targets: invalid value (129)
[  318.333423][T13618] bond8 (unregistering): Released all slaves
[  318.588800][T13630] wg1 speed is unknown, defaulting to 1000
[  318.668615][T13630] xfrm0 speed is unknown, defaulting to 1000
[  318.728623][T13642] netlink: 'syz.5.2008': attribute type 2 has an invalid length.
[  318.766539][T13642] !��9: entered promiscuous mode
[  318.789653][T13642] netlink: 'syz.5.2008': attribute type 2 has an invalid length.
[  318.816154][T13642] !��9: left promiscuous mode
[  319.079545][T13648] wg1 speed is unknown, defaulting to 1000
[  319.092760][T13646] IPVS: set_ctl: invalid protocol: 30739 3.0.0.0:512
[  319.103002][T13646] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  319.110594][T13646] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  319.253568][T13648] xfrm0 speed is unknown, defaulting to 1000
[  319.750635][T13668] wg1 speed is unknown, defaulting to 1000
[  319.807138][T13668] xfrm0 speed is unknown, defaulting to 1000
[  319.870648][T13671] lo: entered allmulticast mode
[  319.884397][T13671] lo: left allmulticast mode
[  319.923434][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2013'.
[  320.377028][T13692] syzkaller0: entered promiscuous mode
[  320.383568][T13692] syzkaller0: entered allmulticast mode
[  320.818372][T13699] syz.6.2020 (13699) used obsolete PPPIOCDETACH ioctl
[  321.054876][T13701] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2021'.
[  321.076156][T13701] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  321.846399][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2025'.
[  321.893899][T13716] netlink: 'syz.6.2025': attribute type 1 has an invalid length.
[  321.903710][T13716] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2025'.
[  322.347880][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  322.416409][T13735] xt_hashlimit: max too large, truncated to 1048576
[  322.673402][T13741] team0 (unregistering): Port device team_slave_0 removed
[  322.688816][T13741] team0 (unregistering): Port device team_slave_1 removed
[  322.715314][T13740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2032'.
[  322.890044][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2034'.
[  322.902642][T13751] bridge_slave_0: default FDB implementation only supports local addresses
[  322.936020][T13752] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2036'.
[  323.144969][T13762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2037'.
[  323.704717][T13783] dvmrp1: tun_chr_ioctl cmd 1074025677
[  323.710465][T13783] dvmrp1: linktype set to 804
[  323.748539][T13783] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode
[  323.755958][T13783] mac80211_hwsim hwsim18 syzkaller0: left allmulticast mode
[  323.766288][T13783] dvmrp1: tun_chr_ioctl cmd 1074025677
[  323.774352][T13783] dvmrp1: linktype set to 804
[  323.779644][T13785] dvmrp1: tun_chr_ioctl cmd 1074025673
[  324.097367][T13796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2046'.
[  324.109697][T13796] openvswitch: netlink: Duplicate or invalid key (type 0).
[  324.117204][T13796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.127306][T13796] netlink: 'syz.5.2046': attribute type 83 has an invalid length.
[  324.360003][T13800] ip6t_rpfilter: unknown options
[  324.785604][T13821] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2056'.
[  325.100739][T13843] netlink: 'syz.4.2061': attribute type 1 has an invalid length.
[  325.154032][T13843] netlink: 'syz.4.2061': attribute type 1 has an invalid length.
[  325.251972][T13847] netlink: 'syz.6.2062': attribute type 4 has an invalid length.
[  325.293365][T13847] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2062'.
[  325.501173][T13852] veth7: entered promiscuous mode
[  325.951805][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2070'.
[  326.889008][T13907] FAULT_INJECTION: forcing a failure.
[  326.889008][T13907] name failslab, interval 1, probability 0, space 0, times 1
[  327.018988][T13914] __nla_validate_parse: 2 callbacks suppressed
[  327.019010][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2083'.
[  327.037027][T13907] CPU: 0 UID: 0 PID: 13907 Comm: syz.3.2081 Not tainted syzkaller #0 PREEMPT(full) 
[  327.037056][T13907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  327.037083][T13907] Call Trace:
[  327.037092][T13907]  <TASK>
[  327.037101][T13907]  dump_stack_lvl+0xe8/0x150
[  327.037134][T13907]  should_fail_ex+0x414/0x560
[  327.037180][T13907]  should_failslab+0xa8/0x100
[  327.037209][T13907]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  327.037243][T13907]  ? __alloc_skb+0x190/0x720
[  327.037266][T13907]  ? __alloc_skb+0x1d5/0x720
[  327.037287][T13907]  ? __local_bh_enable_ip+0xd0/0x130
[  327.037319][T13907]  ? __alloc_skb+0x190/0x720
[  327.037344][T13907]  __alloc_skb+0x1d5/0x720
[  327.037364][T13907]  ? netlink_autobind+0xdb/0x300
[  327.037392][T13907]  ? netlink_autobind+0x2c2/0x300
[  327.037425][T13907]  netlink_sendmsg+0x5c6/0xb30
[  327.037464][T13907]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.037497][T13907]  ? aa_sock_msg_perm+0xf1/0x1b0
[  327.037525][T13907]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  327.037544][T13907]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.037574][T13907]  __sock_sendmsg+0x21c/0x270
[  327.037608][T13907]  ____sys_sendmsg+0x505/0x820
[  327.037641][T13907]  ? __pfx_____sys_sendmsg+0x10/0x10
[  327.037676][T13907]  ? import_iovec+0x74/0xa0
[  327.037704][T13907]  ___sys_sendmsg+0x21f/0x2a0
[  327.037732][T13907]  ? __pfx____sys_sendmsg+0x10/0x10
[  327.037794][T13907]  ? __fget_files+0x2a/0x420
[  327.037818][T13907]  ? __fget_files+0x3a0/0x420
[  327.037853][T13907]  __x64_sys_sendmsg+0x19b/0x260
[  327.037882][T13907]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  327.037918][T13907]  ? __pfx_ksys_write+0x10/0x10
[  327.037949][T13907]  do_syscall_64+0xec/0xf80
[  327.037973][T13907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.037992][T13907]  ? trace_irq_disable+0x37/0x100
[  327.038018][T13907]  ? clear_bhb_loop+0x60/0xb0
[  327.038041][T13907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.038063][T13907] RIP: 0033:0x7f884998f749
[  327.038082][T13907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.038101][T13907] RSP: 002b:00007f884a910038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  327.038128][T13907] RAX: ffffffffffffffda RBX: 00007f8849be5fa0 RCX: 00007f884998f749
[  327.038143][T13907] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  327.038155][T13907] RBP: 00007f884a910090 R08: 0000000000000000 R09: 0000000000000000
[  327.038167][T13907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.038178][T13907] R13: 00007f8849be6038 R14: 00007f8849be5fa0 R15: 00007ffc38d293f8
[  327.038209][T13907]  </TASK>
[  327.358408][T13914] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2083'.
[  327.445406][T13916] bond6: entered promiscuous mode
[  327.450504][T13916] bond6: entered allmulticast mode
[  327.457287][T13916] 8021q: adding VLAN 0 to HW filter on device bond6
[  327.497913][T13923] veth0_to_team: entered promiscuous mode
[  327.555109][T13929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2086'.
[  327.727502][T13929] wg1 speed is unknown, defaulting to 1000
[  327.760659][T13929] xfrm0 speed is unknown, defaulting to 1000
[  327.776558][T13940] netlink: 'syz.6.2089': attribute type 9 has an invalid length.
[  327.795111][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'.
[  327.881874][T13941] vlan0: entered allmulticast mode
[  327.888156][T13941] bond8: entered allmulticast mode
[  328.451445][T13965] netlink: 'syz.0.2097': attribute type 1 has an invalid length.
[  328.551849][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'.
[  328.686095][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'.
[  329.472509][T13999] netlink: 'syz.6.2107': attribute type 1 has an invalid length.
[  329.473033][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'.
[  329.533052][T13999] 8021q: adding VLAN 0 to HW filter on device bond1
[  329.680374][T14005] netlink: 'syz.0.2109': attribute type 2 has an invalid length.
[  329.741961][T14005] �9: entered promiscuous mode
[  329.810164][T13999] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[  329.830878][T13999] bond1: (slave wlan0): Enslaving as an active interface with a down link
[  329.852657][T14001] bridge2: entered allmulticast mode
[  330.082094][T14015] netlink: 'syz.3.2113': attribute type 1 has an invalid length.
[  330.127318][T14015] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2113'.
[  330.326428][T14027] bond5 (unregistering): Released all slaves
[  330.386177][T14031] 8021q: VLANs not supported on lo
[  330.594574][T14041] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2121'.
[  330.603668][T14041] openvswitch: netlink: Flow key attr not present in new flow.
[  330.791253][T14039] wg1: entered promiscuous mode
[  330.800334][T14039] wg1: entered allmulticast mode
[  331.001530][T14056] vlan0: entered allmulticast mode
[  331.010551][T14056] bridge_slave_0: entered allmulticast mode
[  331.174128][T14062] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2129'.
[  331.193333][T14062] netlink: 'syz.5.2129': attribute type 10 has an invalid length.
[  331.215473][T14062] team0: Device dummy0 is up. Set it down before adding it as a team port
[  331.269927][T14062] netlink: 'syz.5.2129': attribute type 10 has an invalid length.
[  331.372399][T14062] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  331.591597][T14076] syzkaller0: entered promiscuous mode
[  331.617013][T14076] syzkaller0: entered allmulticast mode
[  331.646545][T14079] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  331.757143][T14086] block nbd3: Unsupported socket: should be TCP or UNIX.
[  332.040578][T14094] __nla_validate_parse: 1 callbacks suppressed
[  332.040599][T14094] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2139'.
[  332.072997][T14096] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2140'.
[  332.124009][T14094] bond0: entered promiscuous mode
[  332.136350][T14094] batadv0: entered promiscuous mode
[  332.162466][T14094] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  332.189074][T14094] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  332.214854][T14094] 8021q: adding VLAN 0 to HW filter on device hsr1
[  332.254169][T14094] bond0: left promiscuous mode
[  332.276288][T14094] batadv0: left promiscuous mode
[  332.673874][T14108] netlink: 'syz.4.2143': attribute type 39 has an invalid length.
[  333.449790][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'.
[  333.477032][T14128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  333.484369][T14128] IPv6: NLM_F_CREATE should be set when creating new route
[  333.509644][T14128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  333.516985][T14128] IPv6: NLM_F_CREATE should be set when creating new route
[  334.073947][T14164] openvswitch: netlink: Key type 121 is out of range max 32
[  334.099291][T14165] openvswitch: netlink: Key type 121 is out of range max 32
[  334.287652][T14172] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2159'.
[  334.589289][T14183] wg1 speed is unknown, defaulting to 1000
[  334.605588][T14183] xfrm0 speed is unknown, defaulting to 1000
[  334.701391][T14193] wg1 speed is unknown, defaulting to 1000
[  334.942130][T14201] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2167'.
[  334.985877][T14193] xfrm0 speed is unknown, defaulting to 1000
[  335.059286][T14205] syzkaller1: entered promiscuous mode
[  335.065156][T14205] syzkaller1: entered allmulticast mode
[  336.262166][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2175'.
[  336.291813][T14238] openvswitch: netlink: Key type 132 is out of range max 32
[  336.534165][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2177'.
[  336.590204][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  336.948605][T14264] FAULT_INJECTION: forcing a failure.
[  336.948605][T14264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  337.011192][T14264] CPU: 0 UID: 0 PID: 14264 Comm: syz.0.2181 Not tainted syzkaller #0 PREEMPT(full) 
[  337.011223][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  337.011236][T14264] Call Trace:
[  337.011244][T14264]  <TASK>
[  337.011253][T14264]  dump_stack_lvl+0xe8/0x150
[  337.011294][T14264]  should_fail_ex+0x414/0x560
[  337.011333][T14264]  _copy_to_user+0x31/0xb0
[  337.011369][T14264]  simple_read_from_buffer+0xe1/0x170
[  337.011402][T14264]  proc_fail_nth_read+0x1b3/0x220
[  337.011427][T14264]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  337.011453][T14264]  ? rw_verify_area+0x2a6/0x4d0
[  337.011484][T14264]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  337.011509][T14264]  vfs_read+0x200/0xa30
[  337.011528][T14264]  ? fdget_pos+0x247/0x320
[  337.011559][T14264]  ? __pfx___mutex_lock+0x10/0x10
[  337.011588][T14264]  ? __pfx_vfs_read+0x10/0x10
[  337.011610][T14264]  ? __fget_files+0x2a/0x420
[  337.011647][T14264]  ? __fget_files+0x3a0/0x420
[  337.011673][T14264]  ? __fget_files+0x2a/0x420
[  337.011711][T14264]  ksys_read+0x145/0x250
[  337.011734][T14264]  ? __pfx_ksys_read+0x10/0x10
[  337.011769][T14264]  do_syscall_64+0xec/0xf80
[  337.011794][T14264]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.011814][T14264]  ? trace_irq_disable+0x37/0x100
[  337.011842][T14264]  ? clear_bhb_loop+0x60/0xb0
[  337.011869][T14264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.011890][T14264] RIP: 0033:0x7f94de38e15c
[  337.011909][T14264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  337.011928][T14264] RSP: 002b:00007f94df2fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  337.011951][T14264] RAX: ffffffffffffffda RBX: 00007f94de5e5fa0 RCX: 00007f94de38e15c
[  337.011967][T14264] RDX: 000000000000000f RSI: 00007f94df2fc0a0 RDI: 0000000000000004
[  337.011980][T14264] RBP: 00007f94df2fc090 R08: 0000000000000000 R09: 0000000000000000
[  337.011994][T14264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.012006][T14264] R13: 00007f94de5e6038 R14: 00007f94de5e5fa0 R15: 00007ffc06bf3128
[  337.012043][T14264]  </TASK>
[  337.273694][ T6594] wg1 speed is unknown, defaulting to 1000
[  337.520829][T14281] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  337.620614][T14281] bond7 (unregistering): Released all slaves
[  338.011671][T14288] wg1 speed is unknown, defaulting to 1000
[  338.093876][T14288] xfrm0 speed is unknown, defaulting to 1000
[  338.738945][T14332] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2198'.
[  338.812775][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2198'.
[  339.195529][T14350] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2202'.
[  339.207101][T14350] netlink: 'syz.6.2202': attribute type 7 has an invalid length.
[  339.223826][T14350] netlink: 'syz.6.2202': attribute type 8 has an invalid length.
[  339.233411][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2202'.
[  339.324955][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2202'.
[  339.349708][T14350] netlink: 'syz.6.2202': attribute type 18 has an invalid length.
[  339.423726][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2202'.
[  339.505135][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2202'.
[  339.521328][T14350] netlink: 'syz.6.2202': attribute type 18 has an invalid length.
[  339.544066][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2202'.
[  339.614890][ T4150] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  339.624034][ T5846] Bluetooth: hci6: command 0x0405 tx timeout
[  339.642705][ T4150] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  339.758248][ T4150] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  339.787261][ T7593] IPVS: ip_vs_send_async error -101
[  339.801094][ T4150] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  339.888265][T14343] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  340.364007][T14370] wg1 speed is unknown, defaulting to 1000
[  340.371730][T14370] xfrm0 speed is unknown, defaulting to 1000
[  340.644680][T14381] netlink: 'syz.5.2209': attribute type 1 has an invalid length.
[  340.661456][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  340.914856][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'.
[  340.964283][T14382] wg1 speed is unknown, defaulting to 1000
[  340.980671][T14382] xfrm0 speed is unknown, defaulting to 1000
[  340.987222][T14384] ip6gre0: Caught tx_queue_len zero misconfig
[  340.993350][T14384] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  342.559566][T14413] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  342.749777][T14422] openvswitch: netlink: Multiple metadata blocks provided
[  343.248461][T14438] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.339112][T14438] batman_adv: batadv0: Removing interface: batadv_slave_1
[  343.456699][T14449] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  343.577684][T14452] netlink: 'syz.3.2227': attribute type 1 has an invalid length.
[  343.606671][T14451] tipc: Started in network mode
[  343.612895][T14451] tipc: Node identity 7233fed69278, cluster identity 4711
[  343.627269][T14451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.645876][T14451] syzkaller0: entered promiscuous mode
[  343.650153][T14456] netlink: 'syz.5.2230': attribute type 10 has an invalid length.
[  343.651899][T14451] syzkaller0: entered allmulticast mode
[  343.708591][T14451] tipc: Resetting bearer <eth:syzkaller0>
[  343.728352][T14450] tipc: Resetting bearer <eth:syzkaller0>
[  343.764552][T14450] tipc: Disabling bearer <eth:syzkaller0>
[  344.082949][T14469] __nla_validate_parse: 5 callbacks suppressed
[  344.082970][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'.
[  344.180001][   T30] audit: type=1804 audit(1768791785.190:2): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2233" name="/newroot/56/memory.events" dev="tmpfs" ino=310 res=1 errno=0
[  344.224013][   T30] audit: type=1800 audit(1768791785.190:3): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2233" name="memory.events" dev="tmpfs" ino=310 res=0 errno=0
[  344.249885][   T30] audit: type=1804 audit(1768791785.220:4): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2233" name="/newroot/56/memory.events" dev="tmpfs" ino=310 res=1 errno=0
[  344.401785][T14477] netlink: 'syz.4.2234': attribute type 33 has an invalid length.
[  344.437207][T14477] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2234'.
[  344.595317][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2237'.
[  345.012733][T14494] netlink: 'syz.6.2240': attribute type 1 has an invalid length.
[  345.109674][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2240'.
[  345.279278][T14501] wg1 speed is unknown, defaulting to 1000
[  345.306223][T14505] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  345.355307][T14501] xfrm0 speed is unknown, defaulting to 1000
[  345.454126][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2243'.
[  345.693986][T14519] veth1_vlan: left promiscuous mode
[  345.704079][T14519] veth1_vlan: entered promiscuous mode
[  345.713739][T14519] veth1_vlan: entered allmulticast mode
[  345.842370][T14525] netlink: 'syz.6.2250': attribute type 1 has an invalid length.
[  345.862023][T14525] netlink: 'syz.6.2250': attribute type 2 has an invalid length.
[  345.976085][T14529] netlink: 'syz.4.2251': attribute type 1 has an invalid length.
[  345.990561][T14529] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2251'.
[  346.010402][T14529] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2251'.
[  346.045649][T14529] netlink: 'syz.4.2251': attribute type 1 has an invalid length.
[  346.461178][T14538] netlink: set zone limit has 4 unknown bytes
[  346.735024][T14559] netlink: 'syz.5.2257': attribute type 1 has an invalid length.
[  346.816143][T14559] 8021q: adding VLAN 0 to HW filter on device bond5
[  346.879929][T14559] 8021q: adding VLAN 0 to HW filter on device bond5
[  346.901853][T14559] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  346.956327][T14559] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  347.088321][T14578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2257'.
[  347.147602][T14568] mac80211_hwsim hwsim18 wlan0: left allmulticast mode
[  347.174794][T14568] bond5: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  347.288227][T14585] netlink: 'syz.6.2262': attribute type 2 has an invalid length.
[  347.340776][ T5913] wg1 speed is unknown, defaulting to 1000
[  347.393990][T14591] netlink: 'syz.6.2262': attribute type 2 has an invalid length.
[  347.625284][T14605] netlink: 'syz.6.2264': attribute type 15 has an invalid length.
[  347.799035][T14609] lo: entered allmulticast mode
[  347.876798][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2266'.
[  348.196936][T14629] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2269'.
[  348.251014][T14608] lo: left allmulticast mode
[  348.549782][T14637] geneve0: entered promiscuous mode
[  348.558201][T14637] geneve0: entered allmulticast mode
[  348.594689][T14640] wg1 speed is unknown, defaulting to 1000
[  348.603095][T14640] xfrm0 speed is unknown, defaulting to 1000
[  348.918276][T14649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.961294][ T5834] Bluetooth: hci6: link tx timeout
[  348.967411][ T5834] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  350.192633][T14677] __nla_validate_parse: 4 callbacks suppressed
[  350.192652][T14677] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2282'.
[  350.405477][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2284'.
[  350.424232][T14681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.480430][T14681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.551316][T14687] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2286'.
[  350.696807][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'.
[  350.881077][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'.
[  351.023924][ T5846] Bluetooth: hci6: command 0x0405 tx timeout
[  351.408917][T14725] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2297'.
[  351.456746][T14723] wg1 speed is unknown, defaulting to 1000
[  351.484492][T14723] xfrm0 speed is unknown, defaulting to 1000
[  351.761477][T14743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.783552][T14743] netlink: zone id is out of range
[  351.792753][T14743] netlink: zone id is out of range
[  351.810614][T14745] netlink: 'syz.3.2302': attribute type 1 has an invalid length.
[  351.931015][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2303'.
[  352.015508][T14745] 8021q: adding VLAN 0 to HW filter on device bond5
[  352.092623][T14749] bond5: (slave syz_tun): making interface the new active one
[  352.118908][T14749] bond5: (slave syz_tun): Enslaving as an active interface with an up link
[  352.555776][T14751] bond5 (unregistering): (slave syz_tun): Releasing active interface
[  352.567184][T14751] bond5 (unregistering): Released all slaves
[  352.589578][T14766] netlink: 'syz.6.2307': attribute type 4 has an invalid length.
[  352.932210][T14781] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.2311'.
[  353.690785][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2322'.
[  353.801266][ T5913] IPVS: starting estimator thread 0...
[  353.897853][T14826] wg1 speed is unknown, defaulting to 1000
[  353.913749][T14827] IPVS: using max 32 ests per chain, 76800 per kthread
[  353.956723][T14826] xfrm0 speed is unknown, defaulting to 1000
[  354.113667][T14839] netlink: 'syz.3.2323': attribute type 2 has an invalid length.
[  354.340068][T14834] wg1 speed is unknown, defaulting to 1000
[  354.570245][T14850] wg1 speed is unknown, defaulting to 1000
[  354.861427][T14866] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.2334'.
[  354.883552][T14866] netlink: Unknown conntrack attr (type=2304, max=9)
[  354.944089][T14830] wg1 speed is unknown, defaulting to 1000
[  355.188512][T14834] xfrm0 speed is unknown, defaulting to 1000
[  355.426085][T14882] netlink: 'syz.4.2339': attribute type 1 has an invalid length.
[  355.470384][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2340'.
[  355.507620][T14882] 8021q: adding VLAN 0 to HW filter on device bond9
[  355.562081][T14884] 8021q: adding VLAN 0 to HW filter on device bond6
[  355.596710][T14887] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.610922][T14887] bond6: (slave bond0): Enslaving as an active interface with an up link
[  355.770875][T14889] bond6 (unregistering): (slave bond0): Releasing backup interface
[  355.781294][T14889] bond6 (unregistering): Released all slaves
[  355.835989][T14850] xfrm0 speed is unknown, defaulting to 1000
[  356.134017][T14905] ipvlan3: entered promiscuous mode
[  356.140814][T14905] bridge0: port 1(ipvlan3) entered blocking state
[  356.148235][T14905] bridge0: port 1(ipvlan3) entered disabled state
[  356.155918][T14905] ipvlan3: entered allmulticast mode
[  356.161419][T14905] bridge0: entered allmulticast mode
[  356.180207][T14905] ipvlan3: left allmulticast mode
[  356.186463][T14905] bridge0: left allmulticast mode
[  356.272991][T14830] xfrm0 speed is unknown, defaulting to 1000
[  356.565059][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'.
[  356.590355][T14909] syzkaller0: entered promiscuous mode
[  356.596648][T14909] syzkaller0: entered allmulticast mode
[  357.166657][T14916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2346'.
[  358.978105][T14923] netlink: 'syz.5.2349': attribute type 3 has an invalid length.
[  359.031317][T14924] netlink: 'syz.5.2349': attribute type 1 has an invalid length.
[  359.274212][T14932] netlink: 'syz.0.2352': attribute type 1 has an invalid length.
[  359.368137][T14936] FAULT_INJECTION: forcing a failure.
[  359.368137][T14936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.411307][T14936] CPU: 0 UID: 0 PID: 14936 Comm: syz.3.2353 Not tainted syzkaller #0 PREEMPT(full) 
[  359.411337][T14936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  359.411351][T14936] Call Trace:
[  359.411359][T14936]  <TASK>
[  359.411369][T14936]  dump_stack_lvl+0xe8/0x150
[  359.411401][T14936]  should_fail_ex+0x414/0x560
[  359.411442][T14936]  _copy_from_user+0x2d/0xb0
[  359.411470][T14936]  __copy_msghdr+0x3c5/0x5b0
[  359.411501][T14936]  ___sys_sendmsg+0x1a5/0x2a0
[  359.411531][T14936]  ? __pfx____sys_sendmsg+0x10/0x10
[  359.411594][T14936]  ? __fget_files+0x2a/0x420
[  359.411626][T14936]  ? __fget_files+0x3a0/0x420
[  359.411664][T14936]  __x64_sys_sendmsg+0x19b/0x260
[  359.411695][T14936]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  359.411741][T14936]  ? __pfx_ksys_write+0x10/0x10
[  359.411775][T14936]  do_syscall_64+0xec/0xf80
[  359.411801][T14936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.411821][T14936]  ? trace_irq_disable+0x37/0x100
[  359.411848][T14936]  ? clear_bhb_loop+0x60/0xb0
[  359.411874][T14936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.411895][T14936] RIP: 0033:0x7f884998f749
[  359.411915][T14936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.411935][T14936] RSP: 002b:00007f884a910038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.411963][T14936] RAX: ffffffffffffffda RBX: 00007f8849be5fa0 RCX: 00007f884998f749
[  359.411980][T14936] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008
[  359.411993][T14936] RBP: 00007f884a910090 R08: 0000000000000000 R09: 0000000000000000
[  359.412006][T14936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.412018][T14936] R13: 00007f8849be6038 R14: 00007f8849be5fa0 R15: 00007ffc38d293f8
[  359.412052][T14936]  </TASK>
[  359.621545][T14940] lo: Caught tx_queue_len zero misconfig
[  359.809297][T14939] wg1 speed is unknown, defaulting to 1000
[  359.819539][T14939] xfrm0 speed is unknown, defaulting to 1000
[  359.856318][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'.
[  359.961406][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'.
[  360.670600][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2367'.
[  360.859463][T14991] FAULT_INJECTION: forcing a failure.
[  360.859463][T14991] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.879413][T14991] CPU: 0 UID: 0 PID: 14991 Comm: syz.5.2368 Not tainted syzkaller #0 PREEMPT(full) 
[  360.879439][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  360.879451][T14991] Call Trace:
[  360.879459][T14991]  <TASK>
[  360.879467][T14991]  dump_stack_lvl+0xe8/0x150
[  360.879498][T14991]  should_fail_ex+0x414/0x560
[  360.879535][T14991]  _copy_to_user+0x31/0xb0
[  360.879563][T14991]  simple_read_from_buffer+0xe1/0x170
[  360.879601][T14991]  proc_fail_nth_read+0x1b3/0x220
[  360.879626][T14991]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  360.879650][T14991]  ? rw_verify_area+0x2a6/0x4d0
[  360.879680][T14991]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  360.879702][T14991]  vfs_read+0x200/0xa30
[  360.879719][T14991]  ? fdget_pos+0x247/0x320
[  360.879757][T14991]  ? __pfx___mutex_lock+0x10/0x10
[  360.879785][T14991]  ? __pfx_vfs_read+0x10/0x10
[  360.879806][T14991]  ? __fget_files+0x2a/0x420
[  360.879837][T14991]  ? __fget_files+0x3a0/0x420
[  360.879863][T14991]  ? __fget_files+0x2a/0x420
[  360.879899][T14991]  ksys_read+0x145/0x250
[  360.879922][T14991]  ? __pfx_ksys_read+0x10/0x10
[  360.879956][T14991]  do_syscall_64+0xec/0xf80
[  360.879981][T14991]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.880001][T14991]  ? trace_irq_disable+0x37/0x100
[  360.880028][T14991]  ? clear_bhb_loop+0x60/0xb0
[  360.880054][T14991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.880074][T14991] RIP: 0033:0x7fad1b78e15c
[  360.880094][T14991] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  360.880114][T14991] RSP: 002b:00007fad1c6aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  360.880136][T14991] RAX: ffffffffffffffda RBX: 00007fad1b9e5fa0 RCX: 00007fad1b78e15c
[  360.880152][T14991] RDX: 000000000000000f RSI: 00007fad1c6aa0a0 RDI: 000000000000000a
[  360.880165][T14991] RBP: 00007fad1c6aa090 R08: 0000000000000000 R09: 0000000000000000
[  360.880178][T14991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.880190][T14991] R13: 00007fad1b9e6038 R14: 00007fad1b9e5fa0 R15: 00007ffe5eddbf38
[  360.880227][T14991]  </TASK>
[  360.880911][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2367'.
[  361.497860][T15009] netlink: 'syz.0.2373': attribute type 1 has an invalid length.
[  361.534981][T15012] openvswitch: netlink: Invalid VLAN frame
[  361.833187][T15026] wg1 speed is unknown, defaulting to 1000
[  361.856441][T15026] xfrm0 speed is unknown, defaulting to 1000
[  362.125135][T15041] bond5: option lacp_active: invalid value (8)
[  362.138343][T15041] bond5 (unregistering): Released all slaves
[  362.616471][T15061] IPv6: sit2: Disabled Multicast RS
[  362.627478][T15061] sit2: entered promiscuous mode
[  362.633532][T15061] sit2: entered allmulticast mode
[  362.647429][T15061] netlink: 'syz.0.2386': attribute type 23 has an invalid length.
[  362.681748][T15066] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2388'.
[  362.821669][T15063] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode
[  362.838064][T15063] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode
[  363.007401][T15079] netlink: 'syz.0.2392': attribute type 4 has an invalid length.
[  363.106839][T15081] wg1 speed is unknown, defaulting to 1000
[  363.115016][T15081] xfrm0 speed is unknown, defaulting to 1000
[  363.606937][T15107] netlink: 'syz.4.2399': attribute type 83 has an invalid length.
[  363.773406][T15115] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2402'.
[  363.829439][T15117] netlink: 'syz.0.2404': attribute type 9 has an invalid length.
[  363.872766][T15115] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2402'.
[  363.882279][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2402'.
[  363.923743][T15115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2402'.
[  363.978472][T15129] netlink: 'syz.3.2406': attribute type 13 has an invalid length.
[  364.144555][T15133] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  364.232279][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2403'.
[  364.243892][T15133] bond11 (unregistering): Released all slaves
[  364.397060][T15126] wg1 speed is unknown, defaulting to 1000
[  364.416100][T15126] xfrm0 speed is unknown, defaulting to 1000
[  364.429884][T15154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2410'.
[  364.484368][T15154] nbd: must specify at least one socket
[  364.509521][T15154] pim6reg: entered allmulticast mode
[  364.762666][T15146] lo speed is unknown, defaulting to 1000
[  364.798018][T15146] lo speed is unknown, defaulting to 1000
[  364.861808][T15146] lo speed is unknown, defaulting to 1000
[  364.902448][T15164] netlink: 'syz.4.2413': attribute type 1 has an invalid length.
[  364.920780][T15146] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  364.939107][T15164] ieee802154 phy1 wpan1: encryption failed: -90
[  365.210529][T15175] netlink: 47 bytes leftover after parsing attributes in process `syz.6.2416'.
[  365.240136][T15146] lo speed is unknown, defaulting to 1000
[  365.372484][T15182] netlink: 'syz.6.2416': attribute type 2 has an invalid length.
[  365.386007][T15146] lo speed is unknown, defaulting to 1000
[  365.401467][T15181] vxcan5: entered promiscuous mode
[  365.418559][T15146] lo speed is unknown, defaulting to 1000
[  365.433178][T15146] lo speed is unknown, defaulting to 1000
[  365.441767][T15146] lo speed is unknown, defaulting to 1000
[  365.450518][T15146] lo speed is unknown, defaulting to 1000
[  365.460295][T15146] lo speed is unknown, defaulting to 1000
[  365.499222][T15146] lo speed is unknown, defaulting to 1000
[  365.764315][T15197] sctp: [Deprecated]: syz.0.2422 (pid 15197) Use of struct sctp_assoc_value in delayed_ack socket option.
[  365.764315][T15197] Use struct sctp_sack_info instead
[  365.888713][T15198] wg1 speed is unknown, defaulting to 1000
[  365.962440][T15198] xfrm0 speed is unknown, defaulting to 1000
[  365.969102][T15197] wg1 speed is unknown, defaulting to 1000
[  365.988760][T15207] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.996544][T15207] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.010981][T15207] bridge0: entered allmulticast mode
[  366.035364][T15207] bridge_slave_1: left allmulticast mode
[  366.041165][T15207] bridge_slave_1: left promiscuous mode
[  366.053311][T15207] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.103047][T15212] __nla_validate_parse: 1 callbacks suppressed
[  366.103068][T15212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2425'.
[  366.122765][T15207] bridge_slave_0: left allmulticast mode
[  366.128818][T15207] bridge_slave_0: left promiscuous mode
[  366.144718][T15207] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.297435][T15205] wg1 speed is unknown, defaulting to 1000
[  366.326983][T15197] xfrm0 speed is unknown, defaulting to 1000
[  366.334337][T15198] lo speed is unknown, defaulting to 1000
[  366.685304][T15205] xfrm0 speed is unknown, defaulting to 1000
[  366.685456][T15197] lo speed is unknown, defaulting to 1000
[  367.097076][T15205] lo speed is unknown, defaulting to 1000
[  367.202111][T15231] wg1 speed is unknown, defaulting to 1000
[  367.232971][T15231] xfrm0 speed is unknown, defaulting to 1000
[  367.239160][    C0] vcan0: j1939_tp_rxtimer: 0xffff888087eac800: rx timeout, send abort
[  367.248411][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888087eac800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  367.450551][T15244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  367.803118][T15253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  367.908940][T15258] syzkaller0: entered promiscuous mode
[  367.915456][T15258] syzkaller0: entered allmulticast mode
[  368.024941][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2435'.
[  368.036981][T15260] netlink: 'syz.6.2435': attribute type 4 has an invalid length.
[  368.054040][T15260] netlink: 'syz.6.2435': attribute type 8 has an invalid length.
[  368.067130][T15260] netlink: 'syz.6.2435': attribute type 1 has an invalid length.
[  368.077555][T15231] lo speed is unknown, defaulting to 1000
[  368.104685][T15260] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2435'.
[  368.124281][T15260] NCSI netlink: No device for ifindex 0
[  368.827468][T15284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2440'.
[  368.850577][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2440'.
[  369.083516][T15296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2443'.
[  369.516697][T15304] netlink: 'syz.0.2445': attribute type 1 has an invalid length.
[  369.556675][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2445'.
[  369.604688][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'.
[  369.620730][T15304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2445'.
[  369.637566][T15315] pim6reg1: entered promiscuous mode
[  369.653467][T15315] pim6reg1: entered allmulticast mode
[  370.430701][T15313] delete_channel: no stack
[  372.003461][T15320] syzkaller0: entered promiscuous mode
[  372.012834][T15320] syzkaller0: entered allmulticast mode
[  372.031100][T15337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.042851][T15318] tipc: Resetting bearer <eth:syzkaller0>
[  372.126051][T15318] tipc: Disabling bearer <eth:syzkaller0>
[  372.175874][T15340] netlink: 8576 bytes leftover after parsing attributes in process `syz.4.2455'.
[  372.257493][T15342] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  372.399739][T15350] netlink: 'syz.0.2457': attribute type 6 has an invalid length.
[  372.507529][T15350] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  372.526246][T15350] bond7 (unregistering): Released all slaves
[  372.990266][T15367] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2462'.
[  373.417515][T15381] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2465'.
[  373.555238][T15384] netlink: 'syz.5.2466': attribute type 1 has an invalid length.
[  373.568870][T15381] netlink: 'syz.6.2465': attribute type 6 has an invalid length.
[  373.605799][T15381] netlink: 'syz.6.2465': attribute type 6 has an invalid length.
[  373.612987][T15386] wg1 speed is unknown, defaulting to 1000
[  373.624315][T15386] xfrm0 speed is unknown, defaulting to 1000
[  373.637761][T15389] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

π�,���x���b�)%�	]�3D�L̥
[  373.799329][T15392] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2468'.
[  374.022890][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2469'.
[  374.122079][T15401] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.2471'.
[  374.232484][T15386] lo speed is unknown, defaulting to 1000
[  374.675063][T15414] wg1 speed is unknown, defaulting to 1000
[  374.682484][T15414] xfrm0 speed is unknown, defaulting to 1000
[  375.197636][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2479'.
[  375.275102][T15414] lo speed is unknown, defaulting to 1000
[  375.385308][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.806092][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'.
[  376.066723][T15462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2487'.
[  376.147018][T15466] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2488'.
[  376.497627][T15492] netlink: 'syz.0.2497': attribute type 11 has an invalid length.
[  376.746725][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.757016][ T3561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.221669][T15534] netlink: 'syz.0.2505': attribute type 39 has an invalid length.
[  377.378461][T15546] __nla_validate_parse: 4 callbacks suppressed
[  377.378481][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2507'.
[  377.527525][T15541] openvswitch: netlink: IP tunnel TTL not specified.
[  377.535293][T15552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.616609][T15552] netlink: 'syz.5.2509': attribute type 11 has an invalid length.
[  377.647017][T15558] netlink: 'syz.3.2511': attribute type 4 has an invalid length.
[  377.745754][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'.
[  377.796897][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2512'.
[  377.815897][T15567] netlink: 'syz.3.2511': attribute type 4 has an invalid length.
[  377.865642][T15567] xt_hashlimit: max too large, truncated to 1048576
[  377.916762][T15567] xt_CT: You must specify a L4 protocol and not use inversions on it
[  378.004375][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.035995][T15580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2515'.
[  378.066122][T15582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2515'.
[  378.103876][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.119122][T15585] netlink: 400 bytes leftover after parsing attributes in process `syz.6.2516'.
[  378.169718][T15574] wg1 speed is unknown, defaulting to 1000
[  378.187267][T15574] xfrm0 speed is unknown, defaulting to 1000
[  378.482520][T15594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2519'.
[  378.601601][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.819541][T15574] lo speed is unknown, defaulting to 1000
[  378.834293][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.843474][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.076193][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2524'.
[  379.176036][T15624] netlink: 'syz.6.2527': attribute type 1 has an invalid length.
[  379.201833][T15624] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2527'.
[  379.326072][T15630] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2529'.
[  379.785083][T15643] nbd: socks must be embedded in a SOCK_ITEM attr
[  380.064647][T15388] udevd[15388]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  380.246651][T15675] netlink: 'syz.0.2539': attribute type 1 has an invalid length.
[  380.271611][T15675] netlink: 'syz.0.2539': attribute type 2 has an invalid length.
[  380.287487][T15675] netlink: 'syz.0.2539': attribute type 1 has an invalid length.
[  380.308937][T15675] netlink: 'syz.0.2539': attribute type 3 has an invalid length.
[  380.594095][ T6714] net_ratelimit: 7 callbacks suppressed
[  380.594114][ T6714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.670882][T15663] wg1 speed is unknown, defaulting to 1000
[  380.763960][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.780522][T15663] xfrm0 speed is unknown, defaulting to 1000
[  380.803847][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.913824][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.923892][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.184079][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.311032][T15663] lo speed is unknown, defaulting to 1000
[  381.411616][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.616197][T15720] netlink: 'syz.3.2554': attribute type 13 has an invalid length.
[  381.943763][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.952368][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.509396][ T3561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.583477][T15764] __nla_validate_parse: 8 callbacks suppressed
[  382.583497][T15764] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2563'.
[  382.656404][T15772] wg1 speed is unknown, defaulting to 1000
[  382.691048][T15772] xfrm0 speed is unknown, defaulting to 1000
[  382.722633][   T30] audit: type=1800 audit(1768791823.730:5): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2563" name="memory.events" dev="tmpfs" ino=667 res=0 errno=0
[  382.757560][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2570'.
[  382.796296][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2567'.
[  383.034677][T15790] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2571'.
[  383.289643][T15772] lo speed is unknown, defaulting to 1000
[  383.341230][T15795] wg1 speed is unknown, defaulting to 1000
[  383.426838][T15795] xfrm0 speed is unknown, defaulting to 1000
[  383.728333][T15803] netlink: 'syz.0.2576': attribute type 11 has an invalid length.
[  383.788842][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  383.851159][T15800] wg1 speed is unknown, defaulting to 1000
[  383.965426][T15795] lo speed is unknown, defaulting to 1000
[  384.043374][T15807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2578'.
[  384.057739][T15800] xfrm0 speed is unknown, defaulting to 1000
[  384.406635][T15822] tunl0: Caught tx_queue_len zero misconfig
[  384.629092][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2581'.
[  384.895954][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2582'.
[  384.932556][T15836] gretap1: entered promiscuous mode
[  384.945546][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2582'.
[  385.019021][T15800] lo speed is unknown, defaulting to 1000
[  385.263288][T15847] netlink: 'syz.0.2586': attribute type 1 has an invalid length.
[  385.288247][T15847] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2586'.
[  385.624263][   T12] net_ratelimit: 1038 callbacks suppressed
[  385.624283][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.669028][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2590'.
[  385.704531][ T3742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.752427][T15868] lo: Caught tx_queue_len zero misconfig
[  385.774161][T15868] netlink: 'syz.3.2591': attribute type 14 has an invalid length.
[  385.783919][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.834572][T15870] netlink: 'syz.4.2592': attribute type 11 has an invalid length.
[  386.097408][T15875] sctp: [Deprecated]: syz.4.2593 (pid 15875) Use of struct sctp_assoc_value in delayed_ack socket option.
[  386.097408][T15875] Use struct sctp_sack_info instead
[  386.372653][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.394372][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.554135][T15898] bond11: Unable to set up delay as MII monitoring is disabled
[  386.574603][T15889] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  386.575732][T15900] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  386.590142][T15898] bond11 (unregistering): Released all slaves
[  386.888410][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.068685][T15926] wg1 speed is unknown, defaulting to 1000
[  387.077350][T15926] xfrm0 speed is unknown, defaulting to 1000
[  387.493903][T15947] netlink: 'syz.5.2613': attribute type 13 has an invalid length.
[  387.523717][T15947] netlink: 'syz.5.2613': attribute type 17 has an invalid length.
[  387.584544][T15947] erspan0: left allmulticast mode
[  387.608614][T15947] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.619369][T15947] 8021q: adding VLAN 0 to HW filter on device team0
[  387.630287][T15947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.648541][T15954] tipc: Enabling <eth:lo> not permitted
[  387.655585][T15954] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  387.664658][T15926] lo speed is unknown, defaulting to 1000
[  387.955926][T15974] netlink: 'syz.5.2619': attribute type 61 has an invalid length.
[  388.277039][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.474515][T15996] __nla_validate_parse: 8 callbacks suppressed
[  388.474534][T15996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2623'.
[  388.510622][T15996] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2623'.
[  388.520105][T15996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2623'.
[  388.715808][T16011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2627'.
[  388.767477][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2628'.
[  388.797238][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2628'.
[  388.808670][T16011] netlink: 'syz.4.2627': attribute type 1 has an invalid length.
[  388.826782][T16004] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2626'.
[  388.867420][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2628'.
[  388.915880][T16014] geneve2: entered promiscuous mode
[  388.921338][T16014] geneve2: entered allmulticast mode
[  388.928603][T16019] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2628'.
[  388.957353][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2626'.
[  389.141598][T16033] bond0: (slave rose0): Error: Device can not be enslaved while up
[  389.214598][T16034] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  389.243183][T16038] netlink: 'syz.5.2632': attribute type 2 has an invalid length.
[  389.271790][T16038] !��9: entered promiscuous mode
[  389.378116][T15388] udevd[15388]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  389.392795][T16043] ip6gre1: entered promiscuous mode
[  389.544041][  T209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.010703][T16064] wg1 speed is unknown, defaulting to 1000
[  390.048347][T16064] xfrm0 speed is unknown, defaulting to 1000
[  390.264529][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.438713][T16064] lo speed is unknown, defaulting to 1000
[  390.598138][T16072] veth0_to_team: invalid flags given to default FDB implementation
[  390.826778][ T3561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.480335][ T3742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.804754][T16086] wg1 speed is unknown, defaulting to 1000
[  391.825267][T16086] xfrm0 speed is unknown, defaulting to 1000
[  392.311383][T16086] lo speed is unknown, defaulting to 1000
[  392.769502][T16115] 0�X���: renamed from caif0
[  392.868448][T16115] 0�X���: entered allmulticast mode
[  392.895897][T16115] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  393.451594][T16144] netlink: 'syz.3.2664': attribute type 13 has an invalid length.
[  393.535202][T16152] __nla_validate_parse: 14 callbacks suppressed
[  393.535222][T16152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2665'.
[  393.572214][T16153] syzkaller0: entered promiscuous mode
[  393.582647][T16153] syzkaller0: entered allmulticast mode
[  393.636785][T16150] tipc: Failed to remove unknown binding: 66,0,0/0:864732166/864732167
[  393.646020][T16150] tipc: Failed to remove unknown binding: 66,0,0/0:864732166/864732167
[  393.808164][T16146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2663'.
[  393.838391][T16154] wg1 speed is unknown, defaulting to 1000
[  393.894538][T16154] xfrm0 speed is unknown, defaulting to 1000
[  393.965136][T16160] veth6: entered allmulticast mode
[  394.023850][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.034578][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.057730][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.213128][T16168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  394.243895][T16176] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.2670'.
[  394.301666][T16169] syzkaller0: entered promiscuous mode
[  394.329370][T16171] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2669'.
[  394.357988][T16169] syzkaller0: entered allmulticast mode
[  394.635328][T16168] tipc: Resetting bearer <eth:syzkaller0>
[  394.665036][  T209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.828149][T16183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.845932][ T6599] lo speed is unknown, defaulting to 1000
[  394.852261][ T6599] syz2: Port: 1 Link ACTIVE
[  394.861622][T16167] tipc: Resetting bearer <eth:syzkaller0>
[  394.901568][T16167] tipc: Disabling bearer <eth:syzkaller0>
[  394.925251][T16154] lo speed is unknown, defaulting to 1000
[  395.065793][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2676'.
[  395.082679][T16192] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2674'.
[  395.116132][T16199] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2677'.
[  395.140836][T16199] netlink: 'syz.0.2677': attribute type 4 has an invalid length.
[  395.156592][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'.
[  395.190855][T16205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.418024][T16211] netlink: 'syz.5.2680': attribute type 1 has an invalid length.
[  395.473624][T16213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'.
[  395.941334][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.973021][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.984959][T16236] netlink: 'syz.0.2689': attribute type 13 has an invalid length.
[  396.014408][T16236] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2689'.
[  396.024162][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.046434][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.064483][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.093255][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.109364][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.136100][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.163978][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.172445][T16230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.674964][T16255] netlink: 'syz.6.2694': attribute type 1 has an invalid length.
[  396.758677][T16255] bond2: entered promiscuous mode
[  396.765176][T16255] 8021q: adding VLAN 0 to HW filter on device bond2
[  397.301379][T16265] infiniband sy�: set active
[  397.353811][T16265] infiniband sy�: added bond_slave_0
[  397.421191][T16265] RDS/IB: sy�: added
[  397.425620][T16265] smc: adding ib device sy� with port count 1
[  397.432874][T16265] smc:    ib device sy� port 1 has no pnetid
[  397.548771][T16288] netlink: 'syz.0.2703': attribute type 4 has an invalid length.
[  397.572267][   T24] lo speed is unknown, defaulting to 1000
[  397.583776][   T24] syz2: Port: 1 Link DOWN
[  398.782171][T16292] __nla_validate_parse: 5 callbacks suppressed
[  398.782193][T16292] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2704'.
[  398.874982][T16331] wg1 speed is unknown, defaulting to 1000
[  398.883173][T16331] xfrm0 speed is unknown, defaulting to 1000
[  398.980146][T16336] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  399.017109][T16336] bond7 (unregistering): Released all slaves
[  399.408277][T16331] lo speed is unknown, defaulting to 1000
[  399.684136][T16368] tunl0: Caught tx_queue_len zero misconfig
[  399.988289][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2728'.
[  400.014500][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2728'.
[  400.293279][T16380] netlink: 212216 bytes leftover after parsing attributes in process `syz.4.2730'.
[  400.594546][T16388] netlink: 'syz.6.2732': attribute type 8 has an invalid length.
[  401.075549][T16403] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  401.224107][ T7593] IPVS: ip_vs_send_async error -101
[  401.588843][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2742'.
[  401.705131][ T1131] net_ratelimit: 1022 callbacks suppressed
[  401.705183][ T1131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.898765][T16429] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  402.024105][T16405] wg1 speed is unknown, defaulting to 1000
[  402.044220][T16405] xfrm0 speed is unknown, defaulting to 1000
[  402.275221][T16437] netlink: 'syz.0.2744': attribute type 2 has an invalid length.
[  402.320199][T16437] !: entered promiscuous mode
[  402.327921][T16435] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  402.366529][T16432] netlink: 'syz.5.2745': attribute type 2 has an invalid length.
[  402.381554][T16432] netlink: 'syz.5.2745': attribute type 1 has an invalid length.
[  402.431141][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2745'.
[  402.655030][T16447] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2748'.
[  402.840261][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2749'.
[  402.974681][T16450] syzkaller1: entered promiscuous mode
[  402.980241][T16450] syzkaller1: entered allmulticast mode
[  402.986750][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.087320][T16405] lo speed is unknown, defaulting to 1000
[  403.160877][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'.
[  403.213058][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2752'.
[  403.252978][T16459] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  403.265768][T16459] bond5 (unregistering): Released all slaves
[  403.590643][T16464] wg1 speed is unknown, defaulting to 1000
[  403.795027][T16464] xfrm0 speed is unknown, defaulting to 1000
[  404.034878][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2754'.
[  404.141586][T16477] dvmrp0: entered allmulticast mode
[  404.779498][T16464] lo speed is unknown, defaulting to 1000
[  404.905142][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.410841][T16508] vlan0: entered promiscuous mode
[  405.418389][T16508] bridge0: entered promiscuous mode
[  405.458024][T16505] wg1 speed is unknown, defaulting to 1000
[  405.486134][T16505] xfrm0 speed is unknown, defaulting to 1000
[  405.521924][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2763'.
[  405.611801][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2763'.
[  405.652181][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2763'.
[  405.691104][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2763'.
[  405.720196][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2763'.
[  405.760827][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2763'.
[  405.786145][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2763'.
[  405.814691][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2763'.
[  405.867379][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2763'.
[  406.184649][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.434923][T16514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.066836][T16505] lo speed is unknown, defaulting to 1000
[  407.124416][   T36] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  407.133359][   T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.163682][   T36] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  407.172712][   T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.196975][   T36] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  407.218614][   T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.243729][   T36] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  407.285845][   T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.460817][T16536] x_tables: duplicate underflow at hook 1
[  407.465893][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.495034][T16535] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  407.559052][T16540] FAULT_INJECTION: forcing a failure.
[  407.559052][T16540] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  407.608703][T16540] CPU: 1 UID: 0 PID: 16540 Comm: syz.0.2771 Not tainted syzkaller #0 PREEMPT(full) 
[  407.608734][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  407.608753][T16540] Call Trace:
[  407.608762][T16540]  <TASK>
[  407.608772][T16540]  dump_stack_lvl+0xe8/0x150
[  407.608805][T16540]  should_fail_ex+0x414/0x560
[  407.608846][T16540]  _copy_from_user+0x2d/0xb0
[  407.608882][T16540]  ___sys_sendmsg+0x158/0x2a0
[  407.608913][T16540]  ? __pfx____sys_sendmsg+0x10/0x10
[  407.608980][T16540]  ? __fget_files+0x2a/0x420
[  407.609007][T16540]  ? __fget_files+0x3a0/0x420
[  407.609045][T16540]  __x64_sys_sendmsg+0x19b/0x260
[  407.609076][T16540]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  407.609114][T16540]  ? __pfx_ksys_write+0x10/0x10
[  407.609148][T16540]  do_syscall_64+0xec/0xf80
[  407.609174][T16540]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.609194][T16540]  ? trace_irq_disable+0x37/0x100
[  407.609222][T16540]  ? clear_bhb_loop+0x60/0xb0
[  407.609248][T16540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.609273][T16540] RIP: 0033:0x7f94de38f749
[  407.609292][T16540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.609312][T16540] RSP: 002b:00007f94df2fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  407.609334][T16540] RAX: ffffffffffffffda RBX: 00007f94de5e5fa0 RCX: 00007f94de38f749
[  407.609350][T16540] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007
[  407.609364][T16540] RBP: 00007f94df2fc090 R08: 0000000000000000 R09: 0000000000000000
[  407.609377][T16540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.609389][T16540] R13: 00007f94de5e6038 R14: 00007f94de5e5fa0 R15: 00007ffc06bf3128
[  407.609424][T16540]  </TASK>
[  408.033009][T16548] netlink: 'syz.6.2773': attribute type 13 has an invalid length.
[  408.108065][T16545] bond3: option arp_validate: invalid value (18446744073491447809)
[  408.121463][T16545] bond3 (unregistering): Released all slaves
[  408.352064][T16553] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  408.745436][ T4150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.384417][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.810488][T16606] __nla_validate_parse: 141 callbacks suppressed
[  409.810509][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2790'.
[  409.827497][T16607] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2788'.
[  410.025846][ T3561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.047772][T16612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.131605][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2795'.
[  410.214869][   T30] audit: type=1800 audit(1768791851.230:6): pid=16627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2796" name="memory.events" dev="tmpfs" ino=2861 res=0 errno=0
[  410.497322][T16645] wg1 speed is unknown, defaulting to 1000
[  410.511437][T16645] xfrm0 speed is unknown, defaulting to 1000
[  410.532443][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'.
[  410.562951][T16646] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2802'.
[  410.591604][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'.
[  410.643896][T16646] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2802'.
[  410.661184][T16647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'.
[  410.670728][T16647] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2802'.
[  410.683246][T16647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'.
[  410.844229][T16661] netlink: 'syz.3.2806': attribute type 2 has an invalid length.
[  410.949368][T16661] �9: entered promiscuous mode
[  411.000910][T16645] lo speed is unknown, defaulting to 1000
[  411.318366][T16679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  411.340612][T16679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  411.504772][T16685] bond0: (slave rose0): Error: Device can not be enslaved while up
[  412.092233][T16717] bridge5: entered promiscuous mode
[  412.109602][T16717] bridge5: entered allmulticast mode
[  412.416052][T16732] netem: change failed
[  412.574754][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  412.587871][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  412.596966][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  412.607837][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  412.616996][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  412.711253][T16735] wg1 speed is unknown, defaulting to 1000
[  412.757977][T16735] xfrm0 speed is unknown, defaulting to 1000
[  413.048556][T16755] bridge8: the hash_elasticity option has been deprecated and is always 16
[  413.068141][T16755] bridge8: entered allmulticast mode
[  413.125156][T16748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  413.205780][T16741] wg1 speed is unknown, defaulting to 1000
[  413.226811][ T4150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.442747][T16741] xfrm0 speed is unknown, defaulting to 1000
[  413.455134][T16735] lo speed is unknown, defaulting to 1000
[  413.971886][T16741] lo speed is unknown, defaulting to 1000
[  414.014567][T16787] x_tables: duplicate underflow at hook 2
[  414.462290][T16735] chnl_net:caif_netlink_parms(): no params data found
[  414.504318][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.512792][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.638736][T16795] wg1 speed is unknown, defaulting to 1000
[  414.649250][T16790] wg1 speed is unknown, defaulting to 1000
[  414.667773][ T5834] Bluetooth: hci7: command tx timeout
[  414.682310][T16795] xfrm0 speed is unknown, defaulting to 1000
[  414.838205][T16793] delete_channel: no stack
[  414.847391][T16793] delete_channel: no stack
[  415.019659][T16735] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.027852][T16735] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.035732][T16735] bridge_slave_0: entered allmulticast mode
[  415.046892][T16735] bridge_slave_0: entered promiscuous mode
[  415.055608][T16790] xfrm0 speed is unknown, defaulting to 1000
[  415.064087][T16735] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.071341][T16735] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.084198][T16735] bridge_slave_1: entered allmulticast mode
[  415.108388][T16735] bridge_slave_1: entered promiscuous mode
[  415.144395][ T1082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.213268][T16735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.227134][T16735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.279611][T16735] team0: Port device team_slave_0 added
[  415.308655][T16735] team0: Port device team_slave_1 added
[  415.422539][T16790] lo speed is unknown, defaulting to 1000
[  415.429196][T16735] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.439284][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.467162][T16735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.479599][T16795] lo speed is unknown, defaulting to 1000
[  415.506362][T16735] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.523993][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.588893][T16735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.812711][T16735] hsr_slave_0: entered promiscuous mode
[  415.820641][T16735] hsr_slave_1: entered promiscuous mode
[  415.827652][T16735] debugfs: 'hsr0' already exists in 'hsr'
[  415.833525][T16735] Cannot create hsr debugfs directory
[  415.886517][T16820] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.896470][T16820] 8021q: adding VLAN 0 to HW filter on device team0
[  415.910719][T16820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  416.583805][T16832] __nla_validate_parse: 11 callbacks suppressed
[  416.583828][T16832] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2854'.
[  416.743757][ T5834] Bluetooth: hci7: command tx timeout
[  417.228480][T16840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.486742][T16735] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  417.534614][T16735] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  417.582874][T16735] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  417.595783][T16853] netlink: 'syz.4.2861': attribute type 9 has an invalid length.
[  417.615821][T16853] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2861'.
[  417.635651][T16735] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  418.002933][T16735] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.065790][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2863'.
[  418.099307][T16735] 8021q: adding VLAN 0 to HW filter on device team0
[  418.128829][T16883] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2865'.
[  418.138314][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2865'.
[  418.157622][T16883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.178402][T16885] FAULT_INJECTION: forcing a failure.
[  418.178402][T16885] name failslab, interval 1, probability 0, space 0, times 0
[  418.183991][T16883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.202003][T16885] CPU: 0 UID: 0 PID: 16885 Comm: syz.4.2866 Not tainted syzkaller #0 PREEMPT(full) 
[  418.202035][T16885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  418.202048][T16885] Call Trace:
[  418.202063][T16885]  <TASK>
[  418.202072][T16885]  dump_stack_lvl+0xe8/0x150
[  418.202105][T16885]  should_fail_ex+0x414/0x560
[  418.202145][T16885]  should_failslab+0xa8/0x100
[  418.202173][T16885]  __kmalloc_cache_noprof+0x84/0x700
[  418.202196][T16885]  ? nft_pernet+0x23/0x240
[  418.202218][T16885]  ? nft_netdev_hook_alloc+0x5a/0x570
[  418.202251][T16885]  nft_netdev_hook_alloc+0x5a/0x570
[  418.202282][T16885]  ? __nla_parse+0x40/0x60
[  418.202310][T16885]  nft_chain_parse_hook+0x979/0x1410
[  418.202353][T16885]  ? __pfx_nft_chain_parse_hook+0x10/0x10
[  418.202387][T16885]  ? nft_pernet+0x23/0x240
[  418.202420][T16885]  nf_tables_newchain+0xf8f/0x2750
[  418.202462][T16885]  ? __pfx_nf_tables_newchain+0x10/0x10
[  418.202519][T16885]  ? nfnl_pernet+0x23/0x240
[  418.202546][T16885]  ? nfnl_pernet+0x23/0x240
[  418.202583][T16885]  ? __nla_parse+0x40/0x60
[  418.202612][T16885]  nfnetlink_rcv+0x11d9/0x2590
[  418.202678][T16885]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  418.202723][T16885]  ? ref_tracker_free+0x63a/0x7d0
[  418.202774][T16885]  ? __netlink_deliver_tap+0x807/0x850
[  418.202801][T16885]  ? netlink_deliver_tap+0x2e/0x1b0
[  418.202847][T16885]  netlink_unicast+0x82f/0x9e0
[  418.202882][T16885]  ? __pfx_netlink_unicast+0x10/0x10
[  418.202909][T16885]  ? netlink_sendmsg+0x642/0xb30
[  418.202935][T16885]  ? skb_put+0x11b/0x210
[  418.202965][T16885]  netlink_sendmsg+0x805/0xb30
[  418.203006][T16885]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.203038][T16885]  ? aa_sock_msg_perm+0xf1/0x1b0
[  418.203076][T16885]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  418.203095][T16885]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.203129][T16885]  __sock_sendmsg+0x21c/0x270
[  418.203172][T16885]  ____sys_sendmsg+0x505/0x820
[  418.203207][T16885]  ? __pfx_____sys_sendmsg+0x10/0x10
[  418.203245][T16885]  ? import_iovec+0x74/0xa0
[  418.203282][T16885]  ___sys_sendmsg+0x21f/0x2a0
[  418.203313][T16885]  ? __pfx____sys_sendmsg+0x10/0x10
[  418.203380][T16885]  ? __fget_files+0x2a/0x420
[  418.203404][T16885]  ? __fget_files+0x3a0/0x420
[  418.203441][T16885]  __x64_sys_sendmsg+0x19b/0x260
[  418.203470][T16885]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  418.203506][T16885]  ? __pfx_ksys_write+0x10/0x10
[  418.203538][T16885]  do_syscall_64+0xec/0xf80
[  418.203569][T16885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.203590][T16885]  ? trace_irq_disable+0x37/0x100
[  418.203617][T16885]  ? clear_bhb_loop+0x60/0xb0
[  418.203641][T16885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.203660][T16885] RIP: 0033:0x7f285938f749
[  418.203679][T16885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.203697][T16885] RSP: 002b:00007f285a28b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.203719][T16885] RAX: ffffffffffffffda RBX: 00007f28595e5fa0 RCX: 00007f285938f749
[  418.203733][T16885] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007
[  418.203746][T16885] RBP: 00007f285a28b090 R08: 0000000000000000 R09: 0000000000000000
[  418.203758][T16885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.203770][T16885] R13: 00007f28595e6038 R14: 00007f28595e5fa0 R15: 00007ffe7488e6e8
[  418.203803][T16885]  </TASK>
[  418.284510][ T4150] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.542346][ T4150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.598850][ T4150] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.606095][ T4150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.826273][ T5834] Bluetooth: hci7: command tx timeout
[  418.951496][T16882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.974081][T16882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.988116][T16897] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2869'.
[  419.116560][T16735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.166825][T16900] wg1 speed is unknown, defaulting to 1000
[  419.189138][T16900] xfrm0 speed is unknown, defaulting to 1000
[  419.328045][T16735] veth0_vlan: entered promiscuous mode
[  419.363352][T16735] veth1_vlan: entered promiscuous mode
[  419.484488][T16735] veth0_macvtap: entered promiscuous mode
[  419.527023][T16735] veth1_macvtap: entered promiscuous mode
[  419.636306][T16735] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.647311][ T6714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.692274][T16735] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.720331][ T3742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.738587][ T3742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.763465][ T3742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.854016][T16900] lo speed is unknown, defaulting to 1000
[  419.854032][ T3742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.017293][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.037555][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.154721][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.166159][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.267803][  T209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.377452][T16930] netlink: 'syz.4.2877': attribute type 7 has an invalid length.
[  420.550646][T16934] netlink: 'syz.4.2878': attribute type 3 has an invalid length.
[  420.704228][T16942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2878'.
[  420.759306][T16942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2878'.
[  420.905021][ T5834] Bluetooth: hci7: command tx timeout
[  420.911068][ T1082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.967875][T16944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.128801][T16944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.222840][T16952] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2882'.
[  421.364999][T16944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.599493][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  421.609561][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  421.619026][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  421.632842][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  421.651016][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  421.706166][T16944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.855885][T16966] bridge0: port 1(macvtap1) entered blocking state
[  421.862610][T16966] bridge0: port 1(macvtap1) entered disabled state
[  421.924597][T16966] macvtap1: entered allmulticast mode
[  421.930054][T16966] bridge0: entered allmulticast mode
[  421.962196][T16966] macvtap1: left allmulticast mode
[  421.985799][T16966] bridge0: left allmulticast mode
[  422.211607][T16963] wg1 speed is unknown, defaulting to 1000
[  422.304882][ T1131] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.313183][T16963] xfrm0 speed is unknown, defaulting to 1000
[  422.375984][ T1131] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.441114][ T1131] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.551831][ T1131] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.647184][T16981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.677559][T16981] syzkaller0: entered promiscuous mode
[  422.693673][T16981] syzkaller0: entered allmulticast mode
[  422.707834][T16981] tipc: Resetting bearer <eth:syzkaller0>
[  422.735129][T16981] tipc: Resetting bearer <eth:syzkaller0>
[  422.907518][T16963] lo speed is unknown, defaulting to 1000
[  423.450260][T16963] chnl_net:caif_netlink_parms(): no params data found
[  423.491541][T16992] ip6gretap2: entered promiscuous mode
[  423.499447][T16992] ip6gretap2: entered allmulticast mode
[  423.517536][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'.
[  423.561341][T16990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.599340][T16990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.704263][ T5846] Bluetooth: hci3: command tx timeout
[  423.720766][T16963] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.743773][T16963] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.751451][T16963] bridge_slave_0: entered allmulticast mode
[  423.761500][T16963] bridge_slave_0: entered promiscuous mode
[  423.770362][ T6612] tipc: Node number set to 3763076822
[  423.779348][T16963] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.788386][T16963] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.796305][T16963] bridge_slave_1: entered allmulticast mode
[  423.804602][T16963] bridge_slave_1: entered promiscuous mode
[  423.861885][T16963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.880442][T16963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.933428][T16963] team0: Port device team_slave_0 added
[  423.947547][T16963] team0: Port device team_slave_1 added
[  423.979591][T17009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2897'.
[  423.990243][T17009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2897'.
[  424.001041][T17009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2897'.
[  424.021682][T16963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.030042][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.057751][T16963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.071110][T16963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.079932][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.107670][T16963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.208339][T16963] hsr_slave_0: entered promiscuous mode
[  424.215825][T16963] hsr_slave_1: entered promiscuous mode
[  424.227525][T16963] debugfs: 'hsr0' already exists in 'hsr'
[  424.233340][T16963] Cannot create hsr debugfs directory
[  424.367989][T17016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2900'.
[  424.676386][T17028] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  424.719551][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2902'.
[  424.846358][T17028] hsr_slave_1 (unregistering): left promiscuous mode
[  424.978888][T17040] netlink: 'syz.6.2904': attribute type 1 has an invalid length.
[  425.107466][T17044] netlink: 'syz.6.2906': attribute type 10 has an invalid length.
[  425.333473][T16963] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  425.374564][T16963] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  425.384923][  T209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.399724][T16963] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  425.431107][T16963] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  425.630237][T17064] wg1 speed is unknown, defaulting to 1000
[  425.657779][T17064] xfrm0 speed is unknown, defaulting to 1000
[  425.698995][T16963] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.751966][T16963] 8021q: adding VLAN 0 to HW filter on device team0
[  425.779465][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.786811][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.797910][ T5846] Bluetooth: hci3: command tx timeout
[  425.830592][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.837902][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.913335][T17069] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2913'.
[  425.989283][T17072] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2914'.
[  426.010677][T17072] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2914'.
[  426.025585][ T6714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.115040][T17073] netlink: 'syz.0.2914': attribute type 4 has an invalid length.
[  426.122843][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'.
[  426.348021][T16963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.468935][T17064] lo speed is unknown, defaulting to 1000
[  426.661214][T17067] ip6gre2: entered promiscuous mode
[  426.674853][ T4150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.089075][T17117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.097891][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.114761][T17117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.123199][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.132073][T17117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.140571][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.149774][T17117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.246627][T17116] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[  427.305766][T17116] veth3: left promiscuous mode
[  427.314349][T17116] bridge1: left promiscuous mode
[  427.323037][T17116] ip6erspan0: left promiscuous mode
[  427.329408][T17116] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode
[  427.337339][T17116] veth5: left promiscuous mode
[  427.346654][T17116] bond4: left promiscuous mode
[  427.351914][T17116] wireguard0: left promiscuous mode
[  427.360367][T17116] gretap1: left promiscuous mode
[  427.366480][T17116] geneve2: left promiscuous mode
[  427.388504][T16525] xfrm0 speed is unknown, defaulting to 1000
[  427.465081][T16963] veth0_vlan: entered promiscuous mode
[  427.530086][T16963] veth1_vlan: entered promiscuous mode
[  427.731905][T16963] veth0_macvtap: entered promiscuous mode
[  427.772563][T16963] veth1_macvtap: entered promiscuous mode
[  427.864259][ T5846] Bluetooth: hci3: command tx timeout
[  427.937657][T16963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.955199][T16963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.984330][ T3561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.054958][ T4150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.084992][ T4150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.130976][ T4150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.363243][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.381599][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.500196][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.522545][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.945151][T17159] __nla_validate_parse: 6 callbacks suppressed
[  428.945174][T17159] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2933'.
[  428.964347][T17161] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0
[  428.986881][T17159] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2933'.
[  429.044200][T17159] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2933'.
[  429.074228][T17159] netlink: 'syz.5.2933': attribute type 1 has an invalid length.
[  429.205022][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2934'.
[  429.390215][T17177] netlink: 'syz.6.2937': attribute type 3 has an invalid length.
[  429.429268][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2937'.
[  429.628200][T17185] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  429.771604][T17194] netlink: 'syz.3.2943': attribute type 9 has an invalid length.
[  429.810452][T17194] bridge5: entered promiscuous mode
[  429.833510][T17200] netlink: 'syz.0.2944': attribute type 10 has an invalid length.
[  429.927033][T17200] veth0_vlan: left promiscuous mode
[  429.937773][T17200] veth0_vlan: entered promiscuous mode
[  429.947176][ T5846] Bluetooth: hci3: command tx timeout
[  429.987786][T17200] team0: Device veth0_vlan failed to register rx_handler
[  430.428001][ T6714] net_ratelimit: 3463 callbacks suppressed
[  430.428022][ T6714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.444421][T17221] wg1 speed is unknown, defaulting to 1000
[  430.452096][T17221] xfrm0 speed is unknown, defaulting to 1000
[  430.730620][T17221] lo speed is unknown, defaulting to 1000
[  430.815715][T17239] wg1 speed is unknown, defaulting to 1000
[  430.837581][T17239] xfrm0 speed is unknown, defaulting to 1000
[  431.174740][T16526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.198356][T17241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.246076][T17239] lo speed is unknown, defaulting to 1000
[  431.304856][ T6613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.464334][T16525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.791728][T16525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.792870][ T6714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.801939][T16526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.871970][T17248] netlink: 'syz.0.2954': attribute type 1 has an invalid length.
[  431.898299][T17251] wg1 speed is unknown, defaulting to 1000
[  431.907613][T17251] xfrm0 speed is unknown, defaulting to 1000
[  432.108200][T17254] bond5: option arp_validate: invalid value (18446744073491447809)
[  432.119678][T17254] bond5 (unregistering): Released all slaves
[  432.289397][T17260] xt_bpf: check failed: parse error
[  432.355961][ T6613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.487727][T17251] lo speed is unknown, defaulting to 1000
[  432.557099][T17265] netlink: 'syz.3.2958': attribute type 2 has an invalid length.
[  432.795843][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2962'.
[  433.066783][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.067900][   T31] INFO: task syz.1.1742:12652 blocked for more than 143 seconds.
[  433.084147][   T31]       Not tainted syzkaller #0
[  433.089133][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  433.098452][   T31] task:syz.1.1742      state:D stack:25776 pid:12652 tgid:12649 ppid:5828   task_flags:0x400040 flags:0x00080002
[  433.110984][   T31] Call Trace:
[  433.114706][   T31]  <TASK>
[  433.117689][   T31]  __schedule+0x149b/0x4fd0
[  433.123405][   T31]  ? preempt_schedule_notrace+0x57/0x90
[  433.129261][   T31]  ? __pfx___schedule+0x10/0x10
[  433.135640][   T31]  ? schedule+0x91/0x360
[  433.140059][   T31]  schedule+0x165/0x360
[  433.144919][   T31]  schedule_preempt_disabled+0x13/0x30
[  433.150639][   T31]  __mutex_lock+0x7e6/0x1350
[  433.155910][   T31]  ? __mutex_lock+0x5bb/0x1350
[  433.160960][   T31]  ? nfsd_nl_threads_get_doit+0x1b6/0x6f0
[  433.167495][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  433.172795][   T31]  ? __nlmsg_put+0xef/0x1b0
[  433.178025][   T31]  ? genlmsg_put+0x137/0x2e0
[  433.182879][   T31]  nfsd_nl_threads_get_doit+0x1b6/0x6f0
[  433.188691][   T31]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  433.195756][   T31]  ? dev_hard_start_xmit+0x793/0x800
[  433.201227][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  433.207240][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  433.213530][   T31]  ? __dev_queue_xmit+0x280/0x3100
[  433.219741][   T31]  genl_rcv_msg+0x60e/0x790
[  433.225552][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  433.230932][   T31]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  433.257850][   T31]  ? __asan_memcpy+0x40/0x70
[  433.262800][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  433.285059][   T31]  netlink_rcv_skb+0x208/0x470
[  433.290162][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  433.295993][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  433.301506][   T31]  ? genl_rcv+0x19/0x40
[  433.306633][   T31]  ? down_read+0x274/0x2e0
[  433.311399][   T31]  ? genl_rcv+0xd/0x40
[  433.317827][   T31]  genl_rcv+0x28/0x40
[  433.321980][   T31]  netlink_unicast+0x82f/0x9e0
[  433.356967][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  433.374537][   T31]  ? netlink_sendmsg+0x642/0xb30
[  433.389960][   T31]  ? skb_put+0x11b/0x210
[  433.406249][   T31]  netlink_sendmsg+0x805/0xb30
[  433.425191][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  433.439541][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  433.459290][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  433.482279][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  433.503493][   T31]  __sock_sendmsg+0x21c/0x270
[  433.522086][   T31]  ____sys_sendmsg+0x505/0x820
[  433.545642][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  433.569904][   T31]  ? import_iovec+0x74/0xa0
[  433.587759][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  433.611022][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  433.638644][   T31]  ? futex_wait+0x285/0x360
[  433.659624][   T31]  ? __fget_files+0x2a/0x420
[  433.677550][   T31]  ? __fget_files+0x3a0/0x420
[  433.692379][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  433.712923][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  433.730102][   T31]  ? rcu_is_watching+0x15/0xb0
[  433.749299][   T31]  do_syscall_64+0xec/0xf80
[  433.763188][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.773816][   T31]  ? trace_irq_disable+0x37/0x100
[  433.784177][   T31]  ? clear_bhb_loop+0x60/0xb0
[  433.788928][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.803613][   T31] RIP: 0033:0x7f8e5b78f749
[  433.808573][   T31] RSP: 002b:00007f8e5c5cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  433.833693][   T31] RAX: ffffffffffffffda RBX: 00007f8e5b9e5fa0 RCX: 00007f8e5b78f749
[  433.841794][   T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000007
[  433.869677][   T31] RBP: 00007f8e5b813f91 R08: 0000000000000000 R09: 0000000000000000
[  433.883672][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  433.891745][   T31] R13: 00007f8e5b9e6038 R14: 00007f8e5b9e5fa0 R15: 00007ffeb3a8b958
[  433.914231][   T31]  </TASK>
[  433.947330][   T31] 
[  433.947330][   T31] Showing all locks held in the system:
[  433.965781][   T31] 3 locks held by kworker/u8:1/13:
[  433.970961][   T31] 1 lock held by khungtaskd/31:
[  433.986095][   T31]  #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  434.013734][   T31] 2 locks held by getty/5591:
[  434.024189][   T31]  #0: ffff88803057e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  434.052051][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  434.071617][   T31] 2 locks held by syz.2.483/7935:
[  434.103752][   T31]  #0: ffffffff8f379eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  434.130183][   T31]  #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660
[  434.163682][   T31] 2 locks held by syz.1.1742/12652:
[  434.168964][   T31]  #0: ffffffff8f379eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  434.203687][   T31]  #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0
[  434.234513][   T31] 3 locks held by syz.5.2950/17221:
[  434.239756][   T31]  #0: ffffffff8f304c30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[  434.273625][   T31]  #1: ffffffff8f312008 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x9e0
[  434.293648][   T31]  #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0
[  434.313644][   T31] 1 lock held by syz.4.2952/17232:
[  434.329118][   T31] 
[  434.331512][   T31] =============================================
[  434.331512][   T31] 
[  434.353664][   T31] NMI backtrace for cpu 1
[  434.353687][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  434.353710][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  434.353724][   T31] Call Trace:
[  434.353733][   T31]  <TASK>
[  434.353742][   T31]  dump_stack_lvl+0xe8/0x150
[  434.353784][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  434.353818][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  434.353855][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  434.353892][   T31]  sys_info+0x135/0x170
[  434.353920][   T31]  watchdog+0xf95/0xfe0
[  434.353955][   T31]  ? watchdog+0x20a/0xfe0
[  434.353993][   T31]  kthread+0x711/0x8a0
[  434.354025][   T31]  ? __pfx_watchdog+0x10/0x10
[  434.354053][   T31]  ? __pfx_kthread+0x10/0x10
[  434.354084][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  434.354107][   T31]  ? __pfx_kthread+0x10/0x10
[  434.354135][   T31]  ret_from_fork+0x510/0xa50
[  434.354158][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  434.354177][   T31]  ? __switch_to+0xc9e/0x1480
[  434.354211][   T31]  ? __pfx_kthread+0x10/0x10
[  434.354239][   T31]  ret_from_fork_asm+0x1a/0x30
[  434.354286][   T31]  </TASK>
[  434.354294][   T31] Sending NMI from CPU 1 to CPUs 0:
[  434.482299][    C0] NMI backtrace for cpu 0
[  434.482318][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  434.482338][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  434.482350][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  434.482376][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 11 0e 00 f3 0f 1e fa fb f4 <e9> 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  434.482393][    C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6
[  434.482409][    C0] RAX: 00000000001247b7 RBX: ffffffff8197149e RCX: 0000000080000001
[  434.482422][    C0] RDX: 0000000000000001 RSI: ffffffff8d793c31 RDI: ffffffff8bc086e0
[  434.482435][    C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  434.482449][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822d70
[  434.482463][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  434.482475][    C0] FS:  0000000000000000(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000
[  434.482490][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  434.482501][    C0] CR2: 00007effc83b6ad8 CR3: 00000000761b8000 CR4: 00000000003526f0
[  434.482517][    C0] Call Trace:
[  434.482526][    C0]  <TASK>
[  434.482532][    C0]  default_idle+0x13/0x20
[  434.482557][    C0]  default_idle_call+0x73/0xb0
[  434.482583][    C0]  do_idle+0x1be/0x4d0
[  434.482607][    C0]  ? __pfx_do_idle+0x10/0x10
[  434.482628][    C0]  ? do_idle+0xa/0x4d0
[  434.482648][    C0]  cpu_startup_entry+0x44/0x60
[  434.482667][    C0]  rest_init+0x2de/0x300
[  434.482701][    C0]  start_kernel+0x381/0x3d0
[  434.482726][    C0]  x86_64_start_reservations+0x24/0x30
[  434.482743][    C0]  x86_64_start_kernel+0x143/0x1c0
[  434.482760][    C0]  common_startup_64+0x13e/0x147
[  434.482794][    C0]  </TASK>
[  434.704834][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  434.711766][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  434.720924][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  434.731041][   T31] Call Trace:
[  434.734458][   T31]  <TASK>
[  434.737708][   T31]  vpanic+0x1e0/0x670
[  434.741760][   T31]  panic+0xb9/0xc0
[  434.745530][   T31]  ? __pfx_panic+0x10/0x10
[  434.749992][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  434.755409][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  434.761625][   T31]  watchdog+0xfdf/0xfe0
[  434.765836][   T31]  ? watchdog+0x20a/0xfe0
[  434.770221][   T31]  kthread+0x711/0x8a0
[  434.774344][   T31]  ? __pfx_watchdog+0x10/0x10
[  434.779069][   T31]  ? __pfx_kthread+0x10/0x10
[  434.783714][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  434.788961][   T31]  ? __pfx_kthread+0x10/0x10
[  434.793599][   T31]  ret_from_fork+0x510/0xa50
[  434.798240][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  434.803398][   T31]  ? __switch_to+0xc9e/0x1480
[  434.808225][   T31]  ? __pfx_kthread+0x10/0x10
[  434.812884][   T31]  ret_from_fork_asm+0x1a/0x30
[  434.817724][   T31]  </TASK>
[  434.821381][   T31] Kernel Offset: disabled
[  434.825723][   T31] Rebooting in 86400 seconds..