last executing test programs:

12.77505612s ago: executing program 0 (id=3168):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b00)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3, 0x0, 0x0, 0x1}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x108}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
unshare(0x8040480)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000fcfffff7000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000004000000c30000000000000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0xc2, &(0x7f00000002c0)=""/194, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
close(0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
recvmsg$unix(r2, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x30}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r8, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x28, 0x0, 0x0, 0xeffff00e}, {0x6}]}, 0x10)
write$tun(r9, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a00fa006200000b21"], 0x2a)
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xcba}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5656}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000085)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b160000000000000000020000085c00048028000180080001006f7366001c0002800800014000000004052402000c000000080001400000000a30000180080001006e6174002400028008000140000000000800034000000014080002400000000208000540000000000900010073797a30000000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="3c000000400007012bbd7000fedbdf25037c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0x0, @ANYBLOB="04000800080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

12.181703818s ago: executing program 0 (id=3174):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) (async, rerun: 64)
r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="900000001404886a2cb4a41e8047cda679e87cdea5b043d93c36e034f7bd2c81a15b1138334f5aa1a8aaa80eef875bc5a3b7a13f4f42cad718c8aa834b59c968ac1c0c3c0f87a9421a6c0d007ecf29f932bc447ecd750cb0dfb57600ebdeabf85c1af80b67c03b95b302b0c7c096396aed16f090c972b52015dc6d4b055d9474261c0362ed219d", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf25030000000800020002000000080002000600000005000500070000000800040056be0000080003000100000008000300040000003c00068008000300e000000108000300ac14143f060005004e240000060005004e200000060005004e230000080006003e000000060005004e23000005000500030000000500050034000000"], 0x90}, 0x1, 0x0, 0x0, 0x20000890}, 0x40010) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0xfe61, 0x3, 0x4000000}) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x174, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xe8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff904}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9ee}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x87}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x800}, 0x40800) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

6.981796282s ago: executing program 3 (id=3223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}, 0x2}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0x1}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)

6.670725976s ago: executing program 3 (id=3226):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair(0x3, 0x800, 0x6, &(0x7f0000000080)) (async)
socketpair(0x3, 0x800, 0x6, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8}, @val={0xc, 0x99, {0x7fff, 0x13}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x880)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022bf80"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, r4, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x8}, @void, @void}}}, 0x1c}}, 0xc0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000d0eafa576f63998d0c2f8fd1de3b32756e0a5d4b016f0a29043951185aa545ca28f2", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}}, 0x800)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20010}, 0x48090) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20010}, 0x48090)

6.659127448s ago: executing program 1 (id=3227):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x44, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x300, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) (async)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async)
sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x110}, 0x2, 0x0, 0x0, 0x4004004}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xd1, 0x0, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x133c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1310, 0x3, 0x0, 0x1, [{0x130c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1300, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "0557d83e60799e3dc45bea6dda1717377deb79a53034ff505527049e9792ac5e0f217ced458d7ccfaeea9dff9f4ab17b5c4af39673e6d2e959dae6afa9ba69b6af68c2bf5977211c58f3d05352eb3051f997616072aac6f5dbc35edd6de55e007648e45a6b2a8bbfd028507bccbe450355e0f26a617a46198322878c8298d75dc86ffcd5ce4e02"}, @NFTA_DATA_VALUE={0x4a, 0x1, "0d72a29b8bed3bd833bf07d5442dcfabbe4dcd53c720f417d4f63031bb1b8fa4a4515c5227328d0adc4b78a3e3306857891210f43c4e9ccbe7b695167e5570054794e47a2224"}, @NFTA_DATA_VALUE={0x3b, 0x1, "33924c0fa5e7d30ee024a694b20a4f2e00c5664c045188a600fabca5220c55f6985066cdfa318327a6361e1930a90629f35030bec06d2c"}, @NFTA_DATA_VALUE={0xb4, 0x1, "092c7f645f0c2e525bbbdb920210ddfa9bf7a475e9a43dd4307d68ba71c1309625b3a163ffc90a557ea75f1671f44c562c10e9477319fc7870a8708804cf21658979abc3374f0d5abe681a69b890ffc13f900299020a3d5a7ab9237fb4fcf6703ec8dd7868c46a6bff8886afbec2060313abb4e7c0ba404f4179f81c9a18073785d58b70795bf6ecfb65eb6959eb07220dc2638bacdf2a479a0ffc77100a5ab544f0e3d7ecd439d668834736f8f8b406"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "92823a1b02a4a3ca71392e8f5e8033db4347d72d45e491414328abdf7a6c99b13d857a579ffafbb96d9eeb3bb3fc069ff4791567f3c7b1de3b1e3d6380714bd3acbb6343917ef94723f8"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1364}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000090000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x89, &(0x7f0000000400)=""/137, 0x0, 0x65}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000001c0)=0x3) (async)
ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x80000008}, {0x6, 0xb, 0x6, 0x4}]})
r7 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r7, 0x0) (async)
r8 = socket(0x10, 0x5, 0x6)
connect$vsock_stream(r8, &(0x7f0000000080), 0x10) (async)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00')
ioctl$F2FS_IOC_FLUSH_DEVICE(r9, 0x4008f50a, 0x0)
sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async)
accept4$unix(r7, 0x0, 0x0, 0x0)

6.480806344s ago: executing program 3 (id=3229):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109540, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendto$packet(r3, &(0x7f0000000280)="0f", 0x1, 0x0, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88)
r5 = accept$alg(r3, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000022c0)={{r5}, "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"})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f00000002c0)=<r12=>0x0, &(0x7f0000000340)=0x4)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044883}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x10, 0x10}, {0x0, 0x6}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffeff, 0x6, 0x2, 0x3}, 0x3f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x94}}, 0x2)
close(r8)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0x6}, {0x0, 0x2}]}]}}, &(0x7f0000000640)=""/204, 0x3e, 0xcc, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x4005)

4.363773514s ago: executing program 3 (id=3238):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000110000000000000000000000850000000e000000180100f7db610e21988d9b00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff030000850000009b0000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.286180735s ago: executing program 1 (id=3239):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100}, 0x94)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r6, 0xd371f000)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r5, 0x12574000)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000000)={'sit0\x00'})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0xa6d63000)

4.281991838s ago: executing program 2 (id=3240):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$tipc(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000600)="034d5cdd", 0x4}, {&(0x7f00000006c0)="b324d9f1", 0x4}], 0x2, 0x0, 0x0, 0x4000001}, 0x400c1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)

4.239819621s ago: executing program 3 (id=3241):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x38, 0x18, 0x67, 0x0, 0x2, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, {[@generic={0x44, 0x4, "fff6"}]}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.030190551s ago: executing program 3 (id=3243):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000005f2dcfb28c54df3106", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e000100776972656775617264"], 0x44}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005040)=ANY=[@ANYBLOB="240000001a00010026bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="000000000800040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
write$tun(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000021"], 0xfce)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000005f2dcfb28c54df3106", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030099fa3a1c872f0000180012800e000100776972656775617264"], 0x44}}, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005040)=ANY=[@ANYBLOB="240000001a00010026bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="000000000800040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) (async)
write$tun(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000021"], 0xfce) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async)
write$tun(r0, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) (async)

4.017429603s ago: executing program 2 (id=3245):
pipe(&(0x7f0000000c00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0d00000000000000040000000240000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="000000000000000800000000000000000000000000000000000000005e0990d812510691bf0fb8dea2c6c5ca32b462a8be8fc98a1485f6737b3c76bf3cc245e8519db822304b4b7e3636b03b67bb6e1aa4b3980e28c6e444cc9d64862d3e309bf9ead664ce4ead2cd652d564c7898782be9cc548f26913bc572083cb91a49f98d8c0449d3863214f0e4abd226b37fc8898c0c730f97704d024f37da33128c54079eb659b8a0a0164911e55be1f6dcbf274649edb4c4b5f13d2f7c2665e7f7247aa8a8f6df272f43cf1282a752dd6276e7b09e2cc1bc4bc62d0a2f2b947e4085b1f2ff1daee3d91fca6ac49088191"], 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
listen(r4, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f00000002c0)=0x6, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f00000002c0)=0x6, 0x4)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xf78ca90776fd27ba}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xf78ca90776fd27ba}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x41}, 0x800)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
epoll_create(0x6)
socket$inet(0x2, 0x1, 0x0) (async)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) (async)
setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4)
shutdown(r8, 0x0)
recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async)
recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
unshare(0x26020480)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3b8, 0x20, 0x1e8, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.893391439s ago: executing program 0 (id=3177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30020000", @ANYRES16=r1, @ANYBLOB="00010bbd7000fbdbdf256500000008000400", @ANYRES32=r2, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044085)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0)
r4 = socket(0x2b, 0x80801, 0x1)
listen(r4, 0x8)
setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000680)=0x1, 0x4)
ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f00000004c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b9538000000000300060000000000020000000000000000090000000000000200010000000000000002fdff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r10, r7, 0x25, 0x0, @void}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r9}, &(0x7f0000000400), &(0x7f0000000440)=r10}, 0x20)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000480)=r10, 0x4)

3.553878724s ago: executing program 2 (id=3246):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000200), 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400})
close(r8)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}], 0x1, 0x40800) (async)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}], 0x1, 0x40800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r9, 0x8b2a, &(0x7f0000000040))
writev(r7, &(0x7f0000000100), 0x0) (async)
writev(r7, &(0x7f0000000100), 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r6, 0x218, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x6]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r6, 0x218, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x6]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @empty, @val={@void}, {@ipv4={0x6000, @tipc={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0x2}}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @empty, @val={@void}, {@ipv4={0x6000, @tipc={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0x2}}}}}}}}}, 0x0)

3.322456338s ago: executing program 2 (id=3248):
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x20048840) (async)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f000d"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x812, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x24, 0x7e, @random="11355cd8957e3b180d4876752de2830b532af4b0b5df21ba227bd692bed57792"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008041) (async, rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async, rerun: 64)
r7 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20008810}, 0x24000000) (async)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$XFS_IOC_GETBMAP(r9, 0xc0205826, &(0x7f0000000140)={0x1, 0x7ff, 0x3, 0xffffffff, 0x2e41b929}) (async)
close(r2)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)

2.353317218s ago: executing program 4 (id=3251):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}, 0x2}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0x1}, {0x0, 0x1}}}, 0x20}, 0x1, 0x0, 0x0, 0x44060}, 0x98)

2.165049644s ago: executing program 4 (id=3252):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc4) (async)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000280)=0x58, 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0x80000000, 0x9, 0x3, 0x5, 0x80000000, 0xdf, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) (rerun: 64)

1.770262318s ago: executing program 4 (id=3253):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000000)=0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", "33681901"}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff000010001800ffffffffffffff80000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afffffff8000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40040)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x100}, 0x0)

1.135539763s ago: executing program 1 (id=3254):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0x5, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r1}]}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.124201308s ago: executing program 2 (id=3255):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0xfff, 0x7, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000100)={0xa, 0x4e25, 0x10003ff, @loopback={0xff00000000000000}, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x250}}], 0x1, 0x4004804)
recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

1.06227147s ago: executing program 4 (id=3256):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000087000000850000000f0000009500"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=<r1=>0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES8=r1, @ANYRESOCT=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket(0x8, 0x0, 0x8000)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000340)="4700000001003f", 0x7)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffff000000000100000085000000360000001800000003000000000000000300000095000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
getsockopt(r9, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400))
sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000020901030000000000000005100002000c000280050001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4)
write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
socket$nl_route(0x10, 0x3, 0x0)

1.061644488s ago: executing program 0 (id=3257):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e40)={0xffffffffffffffff, 0xe0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000001c40)=[{}], 0x8, 0x10, &(0x7f0000001c80), &(0x7f0000001cc0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000001d00)}}, 0x10)
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x9, @void}, 0x10)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000140)=0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x400010, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}, 0x2}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0x1}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"af521bae85d1f276f3b54aa572fd0799", 0x0, <r7=>0x0, {0x1, 0x5}, {0x101}, 0xfffffffffffffffb, [0x0, 0x8, 0x1, 0x6, 0x8, 0x7fffffffffffffff, 0x5, 0x81, 0x8000, 0x2a40, 0x6, 0xdd, 0x8, 0x0, 0x5, 0x5]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001780)={<r8=>0x0, 0x2, 0x0, [0x0, 0x2, 0x9, 0x3], [0x1, 0x0, 0x927, 0xda3b, 0xfffffffffffffa82, 0x7, 0x31, 0xfff, 0xf3, 0x7, 0x0, 0x2aae, 0x8, 0x36, 0xffffffffffff0001, 0x9, 0x2, 0x10000, 0x9fb, 0xe862, 0x2, 0x6, 0xfe04, 0x3282, 0xfffffffffffffc00, 0x1, 0x876, 0x9000000, 0x6, 0x3, 0x401, 0xef0e, 0xffdc, 0x8, 0x4, 0x8000000000000001, 0x5, 0x3be022f2, 0xc, 0x200, 0x100, 0x3d, 0xff, 0x70, 0xff, 0xb1, 0x1a1, 0x5, 0x5, 0x9, 0x56f9, 0x8, 0xca85, 0x8, 0x101, 0x9, 0x8, 0x7, 0x10001, 0x80000000, 0x6, 0x11e, 0x5, 0x5, 0x7, 0x9, 0xfff, 0x81, 0x2, 0x2, 0x6, 0x6, 0x800, 0x100000000, 0x101, 0x101, 0x9, 0xf, 0x1, 0x4, 0xf, 0x7, 0x4, 0x9, 0x0, 0x400, 0x2, 0x86f1, 0xffff, 0x4, 0x3, 0x2, 0x5, 0x8, 0x5, 0xf, 0x9, 0x1, 0x3, 0xfffffffffffffffd, 0x1, 0x9, 0x4, 0xba8, 0x7, 0x7, 0x8001, 0x3, 0x8001, 0x0, 0x80, 0x6, 0x6, 0x7, 0x37d, 0x3, 0x6, 0x5, 0x4, 0x4, 0x6]})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000380)={0x674de5137c90d5c9, 0x3, {0x5, @usage=0x9, 0x0, 0x9, 0x9, 0x759f, 0x4, 0x5, 0x4, @usage=0xffffffffffff6267, 0xfffffff8, 0x6, [0x9, 0x100000001, 0x3, 0x6, 0x81, 0xfffffffeffffffff]}, {0x10000, @usage=0x6, r8, 0x8, 0x8000, 0x80000001, 0x7, 0xe82, 0x81, @struct={0x0, 0x9}, 0x2, 0x41e3, [0x7, 0x30, 0x500000, 0x6, 0x9, 0xca7]}, {0xffffffff00000000, @usage=0x8, <r9=>0x0, 0xd144, 0x5, 0x9, 0x9, 0x80000000, 0x2, @usage=0x1, 0x7f, 0x6, [0x5, 0x8000, 0xfff, 0xff, 0x7, 0x1]}, {0x8000, 0x4}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000780)={{r1}, r7, 0x8, @unused=[0xfffffffffffff6d5, 0x4, 0x290, 0x25], @devid=r9})
socket$l2tp(0x2, 0x2, 0x73)

824.742178ms ago: executing program 2 (id=3258):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x6, 0x8, 0xc97, 0xdd43, 0x8, 0x3c, 0xfffffbfffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff25, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB='\x00\x00\b\x00', @ANYRES32, @ANYBLOB="0e001b00006e0400"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

785.082448ms ago: executing program 1 (id=3259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8ffffff}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4203}, 0x94)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
close(r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000000d0a010100a3f8a723688863df3d3f6b"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r4, &(0x7f0000000000), 0x0}, 0x20)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140)
r5 = socket(0x29, 0x5, 0x0)
sendmmsg$inet(r5, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000100000063012d000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

682.379632ms ago: executing program 4 (id=3260):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}, 0x2}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0x1}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (fail_nth: 5)

680.94178ms ago: executing program 0 (id=3261):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x5, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@mask_fadd={0x58, 0x114, 0x8, {{0xdaf, 0x5}, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x8, 0x27, 0x4}}], 0x58, 0x20004000}, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f000001010000000100520bffb30000"], 0x14)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}}], 0x1, 0x880)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r6)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x1, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x8, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0x3, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb92, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x494, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0xffffffff, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x64}}, 0x40000)

246.693279ms ago: executing program 1 (id=3262):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x400c800)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b114", 0x2) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2120, 0x0) (async)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xd4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xfffffffffffffc3e, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x104}}, 0x2000c800) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}}, 0x20004015)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) (async)
sendto$inet(r4, 0x0, 0x0, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, 0x0, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
poll(&(0x7f0000000640), 0x0, 0x7) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lc\x00', 0x1, 0x8000a7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0xe0, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040}, 0x40880)

124.859316ms ago: executing program 4 (id=3263):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x40)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c081}, 0x4000804) (async)
getsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0))
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r9, &(0x7f0000000280)="96fa2c0bff", 0x5)
close(r8) (async)
close(r9) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12e6afd7f3e8450e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(r0, r7, 0x0, 0x20000000002)

78.908339ms ago: executing program 1 (id=3264):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a)
listen(r0, 0x28)
accept$inet(r0, 0x0, 0x0)
shutdown(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000002040)=""/4118, 0x1016}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1f, 0x2040, 0x0)

0s ago: executing program 0 (id=3265):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x5802}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

DOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  338.040858][    C1] lec:lec_tx_timeout: lec0
[  338.046254][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  339.600737][T13346] syzkaller1: entered promiscuous mode
[  339.606366][T13346] syzkaller1: entered allmulticast mode
[  339.904378][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'.
[  339.953772][T13384] netlink: 'syz.1.2051': attribute type 10 has an invalid length.
[  340.005823][T13390] netlink: 'syz.1.2051': attribute type 10 has an invalid length.
[  340.068182][T13390] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  340.106429][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'.
[  340.187650][T13393] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.497059][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2057'.
[  340.543703][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'.
[  340.618427][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'.
[  340.679076][T13411] team0: left promiscuous mode
[  340.701660][T13411] team_slave_0: left promiscuous mode
[  340.707425][T13411] team_slave_1: left promiscuous mode
[  340.741846][T13411] bridge1: left promiscuous mode
[  340.756983][T13411] bridge0: port 3(team0) entered disabled state
[  340.782988][T13411] bridge_slave_0: left allmulticast mode
[  340.809344][T13411] bridge_slave_0: left promiscuous mode
[  340.825846][T13411] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.864543][T13411] bridge_slave_1: left allmulticast mode
[  340.891697][T13411] bridge_slave_1: left promiscuous mode
[  340.911834][T13411] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.941432][T13411] team_slave_0: left allmulticast mode
[  340.949196][T13411] team0: Port device team_slave_0 removed
[  340.956277][T13411] team_slave_1: left allmulticast mode
[  340.968922][T13411] team0: Port device team_slave_1 removed
[  340.976435][T13411] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.985423][T13411] bridge1: left allmulticast mode
[  340.992485][T13411] team0: Port device bridge1 removed
[  340.999770][T13411] team0: Port device bridge3 removed
[  341.006853][T13411] bond0: (slave gretap1): Releasing active interface
[  341.016833][T13411] team0: Port device bridge5 removed
[  341.025171][T13411] bond2: (slave vti0): Releasing backup interface
[  341.031837][T13411] vti0: left promiscuous mode
[  341.058467][T13414] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  341.139675][T13424] lo speed is unknown, defaulting to 1000
[  341.267866][T13438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  341.275465][T13438] IPv6: NLM_F_CREATE should be set when creating new route
[  341.415270][T13440] netlink: 'syz.4.2067': attribute type 1 has an invalid length.
[  341.432647][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2067'.
[  341.446236][T13440] netlink: 'syz.4.2067': attribute type 1 has an invalid length.
[  341.736394][   T30] audit: type=1804 audit(1771655513.527:3): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2074" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2112 res=1 errno=0
[  341.799285][   T30] audit: type=1800 audit(1771655513.557:4): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2074" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2112 res=0 errno=0
[  341.894939][   T30] audit: type=1800 audit(1771655513.587:5): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2073" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2209 res=0 errno=0
[  342.019222][ T8747] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  342.076574][ T8747] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  342.103575][ T8747] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  342.112890][ T8747] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  342.207209][T13470] netlink: 'syz.1.2078': attribute type 1 has an invalid length.
[  342.222827][T13468] netlink: 'syz.2.2079': attribute type 1 has an invalid length.
[  342.245053][T13471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2078'.
[  342.278018][T13468] bond4: entered promiscuous mode
[  342.288152][T13468] 8021q: adding VLAN 0 to HW filter on device bond4
[  342.361237][T13471] bond3: (slave bridge4): making interface the new active one
[  342.369968][T13471] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  342.394924][T13472] bond3: (slave bridge5): Enslaving as an active interface with a down link
[  342.432208][T13468] bond4: (slave bridge9): making interface the new active one
[  342.462539][T13468] bridge9: entered promiscuous mode
[  342.491335][T13468] bridge9: left promiscuous mode
[  342.616978][T13486] lo speed is unknown, defaulting to 1000
[  342.655142][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'.
[  342.802970][T13490] hsr_slave_1 (unregistering): left promiscuous mode
[  342.803343][T13502] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2087'.
[  342.821727][T13502] netlink: 'syz.3.2087': attribute type 1 has an invalid length.
[  342.865075][T13482] syzkaller0: entered promiscuous mode
[  342.874487][T13482] syzkaller0: entered allmulticast mode
[  342.986656][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2087'.
[  343.035921][T13506] bond6: (slave veth3): Enslaving as an active interface with a down link
[  343.060864][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  343.068984][    C1] lec:lec_tx_timeout: lec0
[  343.074352][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  343.134655][T13511] bond6: (slave veth5): Enslaving as an active interface with a down link
[  343.145763][T13502] 8021q: adding VLAN 0 to HW filter on device bond6
[  343.652539][T13537] sctp: [Deprecated]: syz.1.2098 (pid 13537) Use of int in maxseg socket option.
[  343.652539][T13537] Use struct sctp_assoc_value instead
[  343.766188][T13548] lo speed is unknown, defaulting to 1000
[  344.658383][T13574] bond0: Caught tx_queue_len zero misconfig
[  344.751438][T13586] netlink: 'syz.1.2107': attribute type 1 has an invalid length.
[  344.932411][T13594] __nla_validate_parse: 4 callbacks suppressed
[  344.932434][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'.
[  345.001142][T13574] bond4 (unregistering): Released all slaves
[  345.053617][T13596] lo speed is unknown, defaulting to 1000
[  345.188606][T13594] hsr_slave_1 (unregistering): left promiscuous mode
[  345.225581][T13606] vlan0: entered promiscuous mode
[  345.230851][T13606] veth0: entered promiscuous mode
[  345.254588][T13614] xt_time: unknown flags 0xf4
[  345.262954][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'.
[  345.283160][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'.
[  345.332141][T13614] netlink: 'syz.0.2115': attribute type 6 has an invalid length.
[  345.428185][T13618] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  345.441160][ T8775] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  345.487131][ T8775] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  345.532155][ T8775] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  345.576015][ T8775] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  345.630193][T13628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2117'.
[  345.728349][T13622] lo speed is unknown, defaulting to 1000
[  345.735539][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2121'.
[  346.022157][T13642] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  346.199119][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'.
[  346.242775][T13651] raw_sendmsg: syz.3.2127 forgot to set AF_INET. Fix it!
[  346.251813][T13649] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2126'.
[  346.381960][T13649] vlan2: entered allmulticast mode
[  346.476723][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'.
[  346.706971][T13671] vlan3: entered allmulticast mode
[  346.714762][T13671] team_slave_1: entered allmulticast mode
[  346.728903][T13673] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  346.924012][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'.
[  346.965285][T13683] tipc: Enabled bearer <eth:vlan0>, priority 0
[  347.011714][T13683] batadv_slave_0: entered promiscuous mode
[  347.032370][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'.
[  347.047895][T13682] batadv_slave_0: left promiscuous mode
[  347.351760][T13701] netlink: 'syz.0.2141': attribute type 1 has an invalid length.
[  348.035945][T13726] vxcan2: entered allmulticast mode
[  348.090897][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  348.099005][    C1] lec:lec_tx_timeout: lec0
[  348.104463][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  348.318612][   T30] audit: type=1107 audit(1771655520.107:6): pid=13755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  349.223716][T13798] pimreg: entered allmulticast mode
[  349.433154][T13798] pimreg: left allmulticast mode
[  350.134345][T13846] __nla_validate_parse: 20 callbacks suppressed
[  350.134367][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2175'.
[  350.169417][   T30] audit: type=1804 audit(1771655521.937:7): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2172" name="/newroot/445/memory.events" dev="tmpfs" ino=2289 res=1 errno=0
[  350.448855][T13861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.532761][T13854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.561552][T13852] vlan3: entered allmulticast mode
[  350.567446][T13852] bond5: entered allmulticast mode
[  350.600887][T13851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.704285][T13864] bridge0: port 1(batadv2) entered blocking state
[  350.732167][T13864] bridge0: port 1(batadv2) entered disabled state
[  350.738881][T13864] batadv2: entered allmulticast mode
[  350.771931][T13864] batadv2: entered promiscuous mode
[  351.017631][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2182'.
[  351.190510][ T8775] batman_adv: batadv2: IGMP Querier appeared
[  351.196918][ T8775] batman_adv: batadv2: MLD Querier appeared
[  351.719851][T13913] vlan0: entered allmulticast mode
[  351.729890][T13913] hsr0: entered allmulticast mode
[  351.771464][T13913] hsr_slave_0: entered allmulticast mode
[  351.804191][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'.
[  351.842369][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'.
[  352.034168][T13934] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2198'.
[  352.307277][T13950] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2205'.
[  352.444651][T13956] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  353.121092][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  353.129302][    C1] lec:lec_tx_timeout: lec0
[  353.134576][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  353.389610][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'.
[  353.441469][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2218'.
[  353.611928][T14014] netlink: 'syz.3.2220': attribute type 1 has an invalid length.
[  353.807623][T14014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2220'.
[  354.112081][T14038] netlink: 'syz.0.2227': attribute type 72 has an invalid length.
[  354.195384][T14045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2229'.
[  354.224690][T14046] sctp: [Deprecated]: syz.2.2229 (pid 14046) Use of struct sctp_assoc_value in delayed_ack socket option.
[  354.224690][T14046] Use struct sctp_sack_info instead
[  354.260466][T14046] sctp: [Deprecated]: syz.2.2229 (pid 14046) Use of struct sctp_assoc_value in delayed_ack socket option.
[  354.260466][T14046] Use struct sctp_sack_info instead
[  354.277903][T14048] vlan4: entered promiscuous mode
[  354.337607][T14056] xt_TCPMSS: Only works on TCP SYN packets
[  354.526116][T14067] netlink: 'syz.3.2236': attribute type 58 has an invalid length.
[  354.554978][T14071] FAULT_INJECTION: forcing a failure.
[  354.554978][T14071] name failslab, interval 1, probability 0, space 0, times 0
[  354.571645][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.1.2235 Not tainted syzkaller #0 PREEMPT(full) 
[  354.571675][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  354.571688][T14071] Call Trace:
[  354.571696][T14071]  <TASK>
[  354.571705][T14071]  dump_stack_lvl+0xe8/0x150
[  354.571741][T14071]  should_fail_ex+0x412/0x560
[  354.571771][T14071]  should_failslab+0xa8/0x100
[  354.571798][T14071]  __kmalloc_noprof+0xe8/0x760
[  354.571820][T14071]  ? tls_decrypt_sg+0x6ef/0x3160
[  354.571853][T14071]  tls_decrypt_sg+0x6ef/0x3160
[  354.571880][T14071]  ? skb_copy_bits+0x81f/0x8f0
[  354.571927][T14071]  ? skb_copy_header+0x2e/0x2c0
[  354.571957][T14071]  ? __pfx_tls_decrypt_sg+0x10/0x10
[  354.571984][T14071]  ? skb_copy_header+0x2e/0x2c0
[  354.572014][T14071]  ? tls_strp_load_anchor_with_queue+0x1e6/0x370
[  354.572046][T14071]  ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10
[  354.572086][T14071]  ? tls_strp_msg_load+0x375/0x790
[  354.572119][T14071]  ? tls_rx_rec_wait+0x24b/0xad0
[  354.572153][T14071]  tls_rx_one_record+0x22e/0x1960
[  354.572195][T14071]  ? __pfx_tls_rx_rec_wait+0x10/0x10
[  354.572220][T14071]  ? sk_psock_get+0x2ab/0x340
[  354.572246][T14071]  ? __pfx_tls_rx_one_record+0x10/0x10
[  354.572276][T14071]  ? tls_sw_recvmsg+0x191/0x18b0
[  354.572315][T14071]  tls_sw_recvmsg+0xa97/0x18b0
[  354.572377][T14071]  ? __pfx_tls_sw_recvmsg+0x10/0x10
[  354.572404][T14071]  ? aa_sk_perm+0x120/0x960
[  354.572429][T14071]  ? aa_sk_perm+0x82d/0x960
[  354.572455][T14071]  ? __pfx_tls_sw_recvmsg+0x10/0x10
[  354.572482][T14071]  inet6_recvmsg+0x247/0x6c0
[  354.572504][T14071]  ? __pfx_aa_sk_perm+0x10/0x10
[  354.572529][T14071]  ? __pfx_inet6_recvmsg+0x10/0x10
[  354.572562][T14071]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  354.572583][T14071]  ? security_socket_recvmsg+0x7e/0x2c0
[  354.572615][T14071]  sock_recvmsg+0x105/0x270
[  354.572644][T14071]  sock_read_iter+0x251/0x320
[  354.572667][T14071]  ? __pfx_sock_read_iter+0x10/0x10
[  354.572712][T14071]  do_iter_readv_writev+0x619/0x8c0
[  354.572739][T14071]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  354.572767][T14071]  ? bpf_lsm_file_permission+0x9/0x20
[  354.572790][T14071]  ? security_file_permission+0x75/0x260
[  354.572824][T14071]  ? rw_verify_area+0x2a6/0x4d0
[  354.572848][T14071]  vfs_readv+0x288/0x840
[  354.572884][T14071]  ? __pfx_vfs_readv+0x10/0x10
[  354.572943][T14071]  ? __fget_files+0x2a/0x420
[  354.572976][T14071]  ? __fget_files+0x3a0/0x420
[  354.573004][T14071]  ? __fget_files+0x2a/0x420
[  354.573041][T14071]  do_readv+0x154/0x2e0
[  354.573069][T14071]  ? __pfx_do_readv+0x10/0x10
[  354.573107][T14071]  do_syscall_64+0x14d/0xf80
[  354.573137][T14071]  ? trace_irq_disable+0x3b/0x150
[  354.573166][T14071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.573187][T14071]  ? clear_bhb_loop+0x40/0x90
[  354.573213][T14071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.573234][T14071] RIP: 0033:0x7f190b99c629
[  354.573255][T14071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.573273][T14071] RSP: 002b:00007f190c8cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  354.573296][T14071] RAX: ffffffffffffffda RBX: 00007f190bc15fa0 RCX: 00007f190b99c629
[  354.573311][T14071] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  354.573325][T14071] RBP: 00007f190c8cc090 R08: 0000000000000000 R09: 0000000000000000
[  354.573337][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.573350][T14071] R13: 00007f190bc16038 R14: 00007f190bc15fa0 R15: 00007ffede699d88
[  354.573384][T14071]  </TASK>
[  355.254879][T14087] __nla_validate_parse: 3 callbacks suppressed
[  355.254900][T14087] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2242'.
[  355.335344][T14083] lo speed is unknown, defaulting to 1000
[  355.357825][T14080] lo speed is unknown, defaulting to 1000
[  355.385981][T14085] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2241'.
[  355.476553][T14095] vlan0: entered promiscuous mode
[  355.490519][T14095] bridge0: entered promiscuous mode
[  355.561361][T14095] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2243'.
[  355.779708][T14111] FAULT_INJECTION: forcing a failure.
[  355.779708][T14111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.803156][T14111] CPU: 1 UID: 0 PID: 14111 Comm: syz.4.2249 Not tainted syzkaller #0 PREEMPT(full) 
[  355.803188][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  355.803202][T14111] Call Trace:
[  355.803221][T14111]  <TASK>
[  355.803230][T14111]  dump_stack_lvl+0xe8/0x150
[  355.803267][T14111]  should_fail_ex+0x412/0x560
[  355.803298][T14111]  _copy_to_user+0x31/0xb0
[  355.803331][T14111]  simple_read_from_buffer+0xe1/0x170
[  355.803366][T14111]  proc_fail_nth_read+0x1bb/0x230
[  355.803399][T14111]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  355.803432][T14111]  ? rw_verify_area+0x2a6/0x4d0
[  355.803453][T14111]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  355.803484][T14111]  vfs_read+0x20c/0xa70
[  355.803503][T14111]  ? fdget_pos+0x246/0x320
[  355.803539][T14111]  ? __pfx___mutex_lock+0x10/0x10
[  355.803574][T14111]  ? __pfx_vfs_read+0x10/0x10
[  355.803596][T14111]  ? __fget_files+0x2a/0x420
[  355.803630][T14111]  ? __fget_files+0x3a0/0x420
[  355.803658][T14111]  ? __fget_files+0x2a/0x420
[  355.803697][T14111]  ksys_read+0x150/0x270
[  355.803721][T14111]  ? __pfx_ksys_read+0x10/0x10
[  355.803755][T14111]  do_syscall_64+0x14d/0xf80
[  355.803786][T14111]  ? trace_irq_disable+0x3b/0x150
[  355.803816][T14111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.803838][T14111]  ? clear_bhb_loop+0x40/0x90
[  355.803865][T14111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.803886][T14111] RIP: 0033:0x7f3519f5cece
[  355.803907][T14111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  355.803926][T14111] RSP: 002b:00007f351aed9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  355.803955][T14111] RAX: ffffffffffffffda RBX: 00007f351aeda6c0 RCX: 00007f3519f5cece
[  355.803971][T14111] RDX: 000000000000000f RSI: 00007f351aeda0a0 RDI: 0000000000000004
[  355.803984][T14111] RBP: 00007f351aeda090 R08: 0000000000000000 R09: 0000000000000000
[  355.803997][T14111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.804010][T14111] R13: 00007f351a216038 R14: 00007f351a215fa0 R15: 00007ffe0916a918
[  355.804047][T14111]  </TASK>
[  356.304346][T14120] netlink: 'syz.1.2250': attribute type 11 has an invalid length.
[  356.332270][T14120] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2250'.
[  356.366582][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'.
[  356.394187][T14129] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2254'.
[  356.518883][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'.
[  356.593547][T14138] vlan3: entered promiscuous mode
[  356.721988][T14151] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2260'.
[  356.853993][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'.
[  356.891143][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2256'.
[  357.559583][T14195] lo speed is unknown, defaulting to 1000
[  357.578826][T14196] vlan3: entered promiscuous mode
[  358.150947][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  358.159038][    C1] lec:lec_tx_timeout: lec0
[  358.165458][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  358.564994][T14245] vlan3: entered promiscuous mode
[  358.818153][T14254] lo speed is unknown, defaulting to 1000
[  359.085300][T14276] netlink: 'syz.4.2292': attribute type 2 has an invalid length.
[  359.122011][T14275] macsec1: entered promiscuous mode
[  359.128438][T14275] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  359.359367][T14270] syzkaller1: entered promiscuous mode
[  359.366101][T14270] syzkaller1: entered allmulticast mode
[  359.961001][T14313] netlink: 'syz.0.2307': attribute type 64 has an invalid length.
[  360.009236][T14313] 8021q: VLANs not supported on ip_vti0
[  360.093466][T14317] vlan4: entered allmulticast mode
[  360.196682][T14322] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  360.484073][T14333] __nla_validate_parse: 12 callbacks suppressed
[  360.484104][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'.
[  360.551754][T14333] netlink: 620 bytes leftover after parsing attributes in process `syz.0.2315'.
[  360.615235][T14326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2313'.
[  361.288930][T14371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.350203][T14372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.568312][T14386] netlink: 'syz.4.2334': attribute type 1 has an invalid length.
[  361.727690][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2336'.
[  362.005151][T14416] netlink: 'syz.2.2343': attribute type 16 has an invalid length.
[  362.050679][T14416] netlink: 'syz.2.2343': attribute type 17 has an invalid length.
[  362.435215][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2348'.
[  362.449692][T14439] vlan0: entered promiscuous mode
[  362.549803][T14443] vlan0: entered allmulticast mode
[  362.772028][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'.
[  363.225002][T14466] netlink: 'syz.4.2358': attribute type 1 has an invalid length.
[  363.249236][T14466] netlink: 'syz.4.2358': attribute type 2 has an invalid length.
[  363.398016][T14469] bond0: entered promiscuous mode
[  363.404067][T14469] bond0: entered allmulticast mode
[  363.410032][T14469] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.902936][T14488] macsec2: entered allmulticast mode
[  363.909462][T14488] veth0_virt_wifi: entered allmulticast mode
[  363.934134][T14487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2365'.
[  363.962813][T14488] veth0_virt_wifi: left allmulticast mode
[  363.969099][T14487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2365'.
[  363.981177][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms
[  363.989306][    C1] lec:lec_tx_timeout: lec0
[  363.994728][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  364.011728][T14490] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.2367'.
[  364.153198][T14498] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.167265][T14498] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.331384][T14510] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2370'.
[  364.378949][T14506] bond6: option arp_interval: invalid value (18446744073709551615)
[  364.394322][T14506] bond6: option arp_interval: allowed values 0 - 2147483647
[  364.406031][T14506] bond6 (unregistering): Released all slaves
[  364.436958][T14512] tc_dump_action: action bad kind
[  364.445866][T14498] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.492579][T14498] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.555903][T14514] vlan0: entered promiscuous mode
[  364.598831][T14505] lo speed is unknown, defaulting to 1000
[  364.632898][T14498] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.653181][T14498] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.846476][T14498] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.880206][T14498] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.152080][T14530] lo speed is unknown, defaulting to 1000
[  365.202196][ T8763] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  365.222892][ T8763] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.304647][ T8763] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  365.313999][ T8763] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.377594][T14540] 8021q: adding VLAN 0 to HW filter on device bond6
[  365.413149][T14542] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  365.430008][ T8763] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  365.439672][ T8763] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.459369][ T6056] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  365.468828][ T6056] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.633721][T14544] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.705689][T14544] __nla_validate_parse: 2 callbacks suppressed
[  365.705709][T14544] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2380'.
[  365.777256][T14556] tc_dump_action: action bad kind
[  365.982033][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2386'.
[  365.998999][T14563] vlan4: entered promiscuous mode
[  366.349632][T14582] vlan0: entered allmulticast mode
[  366.419022][T14583] lo: Caught tx_queue_len zero misconfig
[  366.457368][T14589] tc_dump_action: action bad kind
[  366.496458][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2394'.
[  367.241356][T14611] netlink: 'syz.2.2402': attribute type 8 has an invalid length.
[  367.265248][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2403'.
[  367.281582][T14608] pimreg3: entered allmulticast mode
[  367.365581][T14611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2402'.
[  367.626425][T14623] vlan4: entered allmulticast mode
[  367.674773][T14626] tc_dump_action: action bad kind
[  367.765793][T14625] lo speed is unknown, defaulting to 1000
[  367.880877][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'.
[  367.891785][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'.
[  367.936349][T14633] bond3: option primary_reselect: invalid value (4)
[  367.945230][T14633] bond3 (unregistering): Released all slaves
[  368.394311][T14658] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.2419'.
[  368.421400][T14660] sctp: [Deprecated]: syz.3.2417 (pid 14660) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.421400][T14660] Use struct sctp_sack_info instead
[  368.442926][T14658] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2419'.
[  368.714275][T14666] veth0_virt_wifi: entered promiscuous mode
[  368.724510][T14666] veth0_virt_wifi: left promiscuous mode
[  368.738946][T14668] tc_dump_action: action bad kind
[  369.010411][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  369.018650][    C1] lec:lec_tx_timeout: lec0
[  369.023569][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  369.798303][T14713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2435'.
[  370.480426][T14753] team_slave_1: entered promiscuous mode
[  370.486144][T14753] team_slave_1: entered allmulticast mode
[  370.718282][T14764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.950922][T14777] __nla_validate_parse: 9 callbacks suppressed
[  370.950942][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2463'.
[  371.087675][   T30] audit: type=1800 audit(1771655542.857:8): pid=14778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2461" name="memory.events" dev="tmpfs" ino=2354 res=0 errno=0
[  371.460150][T14800] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2472'.
[  371.559168][T14805] netlink: 'syz.3.2472': attribute type 1 has an invalid length.
[  371.658402][T14810] vlan0: entered allmulticast mode
[  372.088148][T14830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2483'.
[  372.128994][T14830] sctp: [Deprecated]: syz.4.2483 (pid 14830) Use of struct sctp_assoc_value in delayed_ack socket option.
[  372.128994][T14830] Use struct sctp_sack_info instead
[  372.548273][T14849] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  372.671918][T14853] 8021q: adding VLAN 0 to HW filter on device team0
[  372.699596][T14853] batman_adv: batadv0: Interface activated: dummy0
[  372.750412][T14853] batadv0: mtu less than device minimum
[  372.758827][T14853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  372.770609][T14853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  372.782182][T14853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  372.793893][T14853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  372.805563][T14853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  372.817130][T14853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  372.828721][T14853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  372.840331][T14853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  372.948268][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'.
[  373.136549][T14874] bridge10: entered promiscuous mode
[  373.150702][T14874] bridge10: entered allmulticast mode
[  373.175371][T14874] team0: Port device bridge10 added
[  373.223859][T14871] bridge0: port 3(team0) entered blocking state
[  373.231266][T14871] bridge0: port 3(team0) entered disabled state
[  373.237935][T14871] team0: entered allmulticast mode
[  373.244056][T14871] team_slave_0: entered allmulticast mode
[  373.255946][T14871] team0: entered promiscuous mode
[  373.262039][T14871] team_slave_0: entered promiscuous mode
[  373.268340][T14871] team_slave_1: entered promiscuous mode
[  373.300528][T14885] tcpmss_tg6_check: 1 callbacks suppressed
[  373.300549][T14885] xt_TCPMSS: Only works on TCP SYN packets
[  373.385179][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2501'.
[  373.394617][T14889] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2501'.
[  373.869682][T14906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2505'.
[  374.030361][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  374.038466][    C1] lec:lec_tx_timeout: lec0
[  374.043404][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  374.308111][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2513'.
[  374.545332][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2515'.
[  374.626392][T14937] xt_CT: No such helper "pptp"
[  374.669472][T14945] lo speed is unknown, defaulting to 1000
[  375.264135][T14962] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  375.565791][T14979] bridge12: entered promiscuous mode
[  375.599304][T14979] bridge12: entered allmulticast mode
[  375.826678][T14993] FAULT_INJECTION: forcing a failure.
[  375.826678][T14993] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.871401][T14993] CPU: 0 UID: 0 PID: 14993 Comm: syz.4.2533 Not tainted syzkaller #0 PREEMPT(full) 
[  375.871430][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  375.871448][T14993] Call Trace:
[  375.871456][T14993]  <TASK>
[  375.871465][T14993]  dump_stack_lvl+0xe8/0x150
[  375.871500][T14993]  should_fail_ex+0x412/0x560
[  375.871530][T14993]  _copy_from_user+0x2d/0xb0
[  375.871560][T14993]  __sys_bpf+0x229/0x950
[  375.871594][T14993]  ? __pfx___sys_bpf+0x10/0x10
[  375.871642][T14993]  ? ksys_write+0x242/0x270
[  375.871665][T14993]  ? __pfx_ksys_write+0x10/0x10
[  375.871694][T14993]  __x64_sys_bpf+0x7c/0x90
[  375.871723][T14993]  do_syscall_64+0x14d/0xf80
[  375.871751][T14993]  ? trace_irq_disable+0x3b/0x150
[  375.871777][T14993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.871797][T14993]  ? clear_bhb_loop+0x40/0x90
[  375.871822][T14993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.871848][T14993] RIP: 0033:0x7f3519f9c629
[  375.871867][T14993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.871884][T14993] RSP: 002b:00007f351aeda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  375.871935][T14993] RAX: ffffffffffffffda RBX: 00007f351a215fa0 RCX: 00007f3519f9c629
[  375.871950][T14993] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000004
[  375.871963][T14993] RBP: 00007f351aeda090 R08: 0000000000000000 R09: 0000000000000000
[  375.871975][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.871995][T14993] R13: 00007f351a216038 R14: 00007f351a215fa0 R15: 00007ffe0916a918
[  375.872029][T14993]  </TASK>
[  376.507384][T15014] xt_bpf: check failed: parse error
[  376.543251][T15018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2542'.
[  376.658298][T15020] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2543'.
[  377.280997][T15035] FAULT_INJECTION: forcing a failure.
[  377.280997][T15035] name failslab, interval 1, probability 0, space 0, times 0
[  377.311152][T15035] CPU: 0 UID: 0 PID: 15035 Comm: syz.1.2547 Not tainted syzkaller #0 PREEMPT(full) 
[  377.311184][T15035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  377.311197][T15035] Call Trace:
[  377.311206][T15035]  <TASK>
[  377.311215][T15035]  dump_stack_lvl+0xe8/0x150
[  377.311249][T15035]  should_fail_ex+0x412/0x560
[  377.311279][T15035]  should_failslab+0xa8/0x100
[  377.311308][T15035]  __kvmalloc_node_noprof+0x178/0x8a0
[  377.311332][T15035]  ? __fget_files+0x2a/0x420
[  377.311359][T15035]  ? map_get_next_key+0x234/0x620
[  377.311401][T15035]  map_get_next_key+0x234/0x620
[  377.311434][T15035]  ? bpf_lsm_bpf+0x9/0x20
[  377.311465][T15035]  __sys_bpf+0x768/0x950
[  377.311498][T15035]  ? __pfx___sys_bpf+0x10/0x10
[  377.311546][T15035]  ? ksys_write+0x242/0x270
[  377.311571][T15035]  ? __pfx_ksys_write+0x10/0x10
[  377.311600][T15035]  __x64_sys_bpf+0x7c/0x90
[  377.311629][T15035]  do_syscall_64+0x14d/0xf80
[  377.311659][T15035]  ? trace_irq_disable+0x3b/0x150
[  377.311689][T15035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.311711][T15035]  ? clear_bhb_loop+0x40/0x90
[  377.311736][T15035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.311757][T15035] RIP: 0033:0x7f190b99c629
[  377.311778][T15035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.311796][T15035] RSP: 002b:00007f190c8cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  377.311826][T15035] RAX: ffffffffffffffda RBX: 00007f190bc15fa0 RCX: 00007f190b99c629
[  377.311841][T15035] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000004
[  377.311854][T15035] RBP: 00007f190c8cc090 R08: 0000000000000000 R09: 0000000000000000
[  377.311867][T15035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  377.311880][T15035] R13: 00007f190bc16038 R14: 00007f190bc15fa0 R15: 00007ffede699d88
[  377.311912][T15035]  </TASK>
[  378.102776][T15046] 8021q: adding VLAN 0 to HW filter on device bond8
[  378.127088][T15046] bond8: (slave ip6gretap1): making interface the new active one
[  378.153171][T15046] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  378.577150][T15068] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2556'.
[  378.633078][T15063] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2556'.
[  378.860713][T15072] nbd1: detected capacity change from 0 to 63
[  378.869347][ T5837] block nbd1: Receive control failed (result -32)
[  378.921611][ T7837] block nbd1: Dead connection, failed to find a fallback
[  378.929220][ T7837] block nbd1: shutting down sockets
[  378.973690][ T7837] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  378.997269][ T7837] Buffer I/O error on dev nbd1, logical block 0, async page read
[  379.014798][ T7837] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  379.039358][ T7837] Buffer I/O error on dev nbd1, logical block 1, async page read
[  379.050392][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  379.058487][    C1] lec:lec_tx_timeout: lec0
[  379.063186][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  379.080157][ T7837] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  379.095713][ T7837] Buffer I/O error on dev nbd1, logical block 2, async page read
[  379.120746][ T7837] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  379.150373][ T7837] Buffer I/O error on dev nbd1, logical block 3, async page read
[  379.178602][ T7837] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  379.196446][ T7837] Buffer I/O error on dev nbd1, logical block 0, async page read
[  379.209612][ T7837] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  379.242876][ T7837] Buffer I/O error on dev nbd1, logical block 1, async page read
[  379.251711][ T7837] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  379.261933][ T7837] Buffer I/O error on dev nbd1, logical block 2, async page read
[  379.269767][ T7837] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  379.283076][ T7837] Buffer I/O error on dev nbd1, logical block 3, async page read
[  379.291739][ T7837] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  379.318942][ T7837] Buffer I/O error on dev nbd1, logical block 0, async page read
[  379.337334][ T7837] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  379.355575][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2565'.
[  379.358838][ T7837] Buffer I/O error on dev nbd1, logical block 1, async page read
[  379.376059][T15088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2566'.
[  379.410789][ T7837] ldm_validate_partition_table(): Disk read failed.
[  379.419136][T15088] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2566'.
[  379.429932][ T7837] Dev nbd1: unable to read RDB block 0
[  379.437943][ T7837]  nbd1: unable to read partition table
[  379.479706][T15089] bond3: entered promiscuous mode
[  379.488861][ T7837] ldm_validate_partition_table(): Disk read failed.
[  379.495720][T15089] bond3: entered allmulticast mode
[  379.502178][ T7837] Dev nbd1: unable to read RDB block 0
[  379.507582][T15089] 8021q: adding VLAN 0 to HW filter on device bond3
[  379.515988][ T7837]  nbd1: unable to read partition table
[  379.732145][T15101] sctp: [Deprecated]: syz.3.2569 (pid 15101) Use of struct sctp_assoc_value in delayed_ack socket option.
[  379.732145][T15101] Use struct sctp_sack_info instead
[  379.891501][T15101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2569'.
[  379.923639][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'.
[  380.028382][T15118] xt_bpf: check failed: parse error
[  380.334571][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'.
[  380.570738][T15143] lo speed is unknown, defaulting to 1000
[  380.872548][T15150] netlink: 'syz.4.2583': attribute type 9 has an invalid length.
[  381.036580][T15158] netlink: 'syz.1.2586': attribute type 1 has an invalid length.
[  381.057708][T15158] ������: renamed from dummy0 (while UP)
[  381.110915][T15162] xt_CT: You must specify a L4 protocol and not use inversions on it
[  381.575456][T15186] __nla_validate_parse: 3 callbacks suppressed
[  381.575476][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'.
[  381.597468][T15187] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20004
[  381.935270][T15200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.286471][T15222] FAULT_INJECTION: forcing a failure.
[  382.286471][T15222] name failslab, interval 1, probability 0, space 0, times 0
[  382.327621][T15217] lo speed is unknown, defaulting to 1000
[  382.351115][T15222] CPU: 1 UID: 0 PID: 15222 Comm: syz.1.2605 Not tainted syzkaller #0 PREEMPT(full) 
[  382.351146][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  382.351161][T15222] Call Trace:
[  382.351250][T15222]  <TASK>
[  382.351261][T15222]  dump_stack_lvl+0xe8/0x150
[  382.351300][T15222]  should_fail_ex+0x412/0x560
[  382.351334][T15222]  should_failslab+0xa8/0x100
[  382.351365][T15222]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  382.351405][T15222]  ? __alloc_skb+0x1d0/0x7d0
[  382.351434][T15222]  ? __local_bh_enable_ip+0xd0/0x130
[  382.351471][T15222]  __alloc_skb+0x1d0/0x7d0
[  382.351506][T15222]  netlink_dump+0x1ef/0xe80
[  382.351541][T15222]  ? __netlink_lookup+0xc6/0x8b0
[  382.351575][T15222]  ? __pfx_netlink_dump+0x10/0x10
[  382.351597][T15222]  ? __netlink_lookup+0x7e4/0x8b0
[  382.351645][T15222]  ? netlink_lookup+0x30/0x200
[  382.351670][T15222]  ? netlink_lookup+0x30/0x200
[  382.351693][T15222]  ? netlink_lookup+0x30/0x200
[  382.351724][T15222]  __netlink_dump_start+0x5cb/0x7e0
[  382.351762][T15222]  rtnetlink_rcv_msg+0xa3a/0xbe0
[  382.351793][T15222]  ? __pfx_tc_dump_action+0x10/0x10
[  382.351817][T15222]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  382.351845][T15222]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  382.351871][T15222]  ? ref_tracker_free+0x693/0x840
[  382.351899][T15222]  ? __pfx_rtnl_dumpit+0x10/0x10
[  382.351927][T15222]  ? __pfx_tc_dump_action+0x10/0x10
[  382.351978][T15222]  netlink_rcv_skb+0x232/0x4b0
[  382.352005][T15222]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  382.352034][T15222]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  382.352073][T15222]  ? netlink_deliver_tap+0x2e/0x1b0
[  382.352109][T15222]  netlink_unicast+0x80f/0x9b0
[  382.352143][T15222]  ? __pfx_netlink_unicast+0x10/0x10
[  382.352169][T15222]  ? netlink_sendmsg+0x650/0xb40
[  382.352201][T15222]  ? skb_put+0x11b/0x210
[  382.352234][T15222]  netlink_sendmsg+0x813/0xb40
[  382.352273][T15222]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.352304][T15222]  ? aa_sock_msg_perm+0xf1/0x1b0
[  382.352340][T15222]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  382.352365][T15222]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.352390][T15222]  ____sys_sendmsg+0xa68/0xad0
[  382.352433][T15222]  ? __pfx_____sys_sendmsg+0x10/0x10
[  382.352476][T15222]  ? import_iovec+0x73/0xa0
[  382.352511][T15222]  ___sys_sendmsg+0x2a5/0x360
[  382.352571][T15222]  ? __pfx____sys_sendmsg+0x10/0x10
[  382.352644][T15222]  ? __fget_files+0x2a/0x420
[  382.352672][T15222]  ? __fget_files+0x3a0/0x420
[  382.352715][T15222]  __x64_sys_sendmsg+0x1bd/0x2a0
[  382.352748][T15222]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  382.352795][T15222]  ? __pfx_ksys_write+0x10/0x10
[  382.352831][T15222]  do_syscall_64+0x14d/0xf80
[  382.352862][T15222]  ? trace_irq_disable+0x3b/0x150
[  382.352893][T15222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.352915][T15222]  ? clear_bhb_loop+0x40/0x90
[  382.352942][T15222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.352964][T15222] RIP: 0033:0x7f190b99c629
[  382.352984][T15222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.353003][T15222] RSP: 002b:00007f190c8cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  382.353026][T15222] RAX: ffffffffffffffda RBX: 00007f190bc15fa0 RCX: 00007f190b99c629
[  382.353041][T15222] RDX: 000000002004c080 RSI: 00002000000002c0 RDI: 0000000000000004
[  382.353055][T15222] RBP: 00007f190c8cc090 R08: 0000000000000000 R09: 0000000000000000
[  382.353069][T15222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.353081][T15222] R13: 00007f190bc16038 R14: 00007f190bc15fa0 R15: 00007ffede699d88
[  382.353118][T15222]  </TASK>
[  382.928585][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'.
[  383.417364][T15260] netlink: 'syz.3.2616': attribute type 1 has an invalid length.
[  383.576039][T15266] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2616'.
[  383.661217][T15260] 8021q: adding VLAN 0 to HW filter on device bond9
[  384.067350][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2624'.
[  384.076407][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  384.076439][    C1] lec:lec_tx_timeout: lec0
[  384.084905][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  384.175459][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'.
[  384.234674][T15297] vlan0: entered promiscuous mode
[  384.322504][T15300] lo speed is unknown, defaulting to 1000
[  384.382533][T15303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.475185][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2632'.
[  384.485887][T15303] tipc: Resetting bearer <eth:syzkaller0>
[  384.575867][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'.
[  384.685538][T15307] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  384.846486][T15326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2636'.
[  384.906718][T15302] tipc: Disabling bearer <eth:syzkaller0>
[  384.968607][T15330] : entered promiscuous mode
[  385.018223][T15331] gre0: Caught tx_queue_len zero misconfig
[  385.130054][T15339] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2639'.
[  385.249222][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2641'.
[  385.302914][T15346] vlan4: entered promiscuous mode
[  386.495099][T15411] bond10: option lp_interval: invalid value (0)
[  386.502457][T15411] bond10: option lp_interval: allowed values 1 - 2147483647
[  386.513275][T15411] bond10 (unregistering): Released all slaves
[  386.542249][T15429] netlink: 'syz.2.2661': attribute type 1 has an invalid length.
[  386.984142][T15438] __nla_validate_parse: 6 callbacks suppressed
[  386.984162][T15438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2660'.
[  387.578279][T15463] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2671'.
[  387.589402][T15463] net_ratelimit: 12 callbacks suppressed
[  387.589424][T15463] netlink: Unknown conntrack attr (type=2304, max=9)
[  387.801040][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2673'.
[  387.905994][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2672'.
[  388.075425][T15489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2676'.
[  388.088877][T15490] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2677'.
[  388.112547][T15482] 8021q: adding VLAN 0 to HW filter on device bond7
[  388.135269][T15490] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  388.168948][T15488] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  388.972453][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'.
[  389.070041][T15538] rdma_rxe: rxe_newlink: failed to add lo
[  389.090390][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  389.098494][    C1] lec:lec_tx_timeout: lec0
[  389.104561][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  389.154343][T15546] netlink: 'syz.0.2692': attribute type 1 has an invalid length.
[  389.200470][T15546] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2692'.
[  389.230712][T15546] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2692'.
[  389.263663][T15546] netlink: 'syz.0.2692': attribute type 1 has an invalid length.
[  389.272106][T15546] netlink: 634 bytes leftover after parsing attributes in process `syz.0.2692'.
[  389.320625][   T30] audit: type=1800 audit(1771655561.097:9): pid=15550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2693" name="memory.events" dev="tmpfs" ino=2872 res=0 errno=0
[  389.401579][   T30] audit: type=1804 audit(1771655561.097:10): pid=15550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2693" name="memory.events" dev="tmpfs" ino=2872 res=1 errno=0
[  389.521400][T15557] netlink: 'syz.3.2695': attribute type 1 has an invalid length.
[  389.842029][T15569] netlink: 'syz.4.2701': attribute type 2 has an invalid length.
[  390.191320][T15592] netlink: 'syz.0.2708': attribute type 15 has an invalid length.
[  390.282468][ T8763] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  390.293165][T15592] netlink: 'syz.0.2708': attribute type 15 has an invalid length.
[  390.302523][ T8763] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  390.316877][ T8763] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  390.357256][ T8763] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  390.675515][T15614] netlink: 'syz.3.2713': attribute type 7 has an invalid length.
[  390.692128][T15614] netlink: 'syz.3.2713': attribute type 8 has an invalid length.
[  390.721094][T15614] netlink: 'syz.3.2713': attribute type 9 has an invalid length.
[  391.367311][T15647] hsr_slave_1 (unregistering): left promiscuous mode
[  392.041820][T15691] validate_nla: 1 callbacks suppressed
[  392.041842][T15691] netlink: 'syz.1.2734': attribute type 1 has an invalid length.
[  392.068462][T15695] __nla_validate_parse: 10 callbacks suppressed
[  392.068483][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'.
[  392.092672][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'.
[  392.162608][T15701] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  392.167736][T15691] 8021q: adding VLAN 0 to HW filter on device bond4
[  392.212298][T15700] tc_dump_action: action bad kind
[  392.455611][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'.
[  392.761826][T15734] tc_dump_action: action bad kind
[  392.792675][T15732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2746'.
[  392.813597][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'.
[  392.826825][T15737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2747'.
[  392.984536][T15742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2749'.
[  393.010230][T15745] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2751'.
[  393.034608][T15744] netlink: 'syz.3.2750': attribute type 1 has an invalid length.
[  393.226816][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'.
[  393.271366][T15759] netlink: 'syz.2.2753': attribute type 1 has an invalid length.
[  393.299042][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'.
[  393.413017][T15774] netlink: 'syz.0.2756': attribute type 1 has an invalid length.
[  393.527819][T15759] 8021q: adding VLAN 0 to HW filter on device bond5
[  393.541552][T15772] batman_adv: batadv0: Interface deactivated: dummy0
[  393.573174][T15772] batman_adv: batadv0: Removing interface: dummy0
[  393.590756][T15772] bond5: (slave dummy0): making interface the new active one
[  393.600221][T15772] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  393.698759][T15774] 8021q: adding VLAN 0 to HW filter on device bond8
[  393.764716][T15770] netlink: 'syz.0.2756': attribute type 4 has an invalid length.
[  394.120303][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  394.128423][    C1] lec:lec_tx_timeout: lec0
[  394.133629][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  394.544787][T15825] netlink: 'syz.2.2769': attribute type 1 has an invalid length.
[  394.741178][T15831] syzkaller0: entered promiscuous mode
[  394.746718][T15831] syzkaller0: entered allmulticast mode
[  397.695294][T15857] __nla_validate_parse: 2 callbacks suppressed
[  397.695315][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'.
[  397.744383][T15859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.803042][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2779'.
[  398.324201][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'.
[  398.368895][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2788'.
[  398.693192][T15913] netlink: 'syz.2.2791': attribute type 5 has an invalid length.
[  398.747731][T15916] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2793'.
[  398.796806][T15919] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2794'.
[  398.921698][T15921] netlink: 'syz.4.2795': attribute type 5 has an invalid length.
[  399.140326][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  399.148732][    C1] lec:lec_tx_timeout: lec0
[  399.153585][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  399.256670][ T5809] IPVS: starting estimator thread 0...
[  399.291791][T15931] lo speed is unknown, defaulting to 1000
[  399.350506][T15943] IPVS: using max 26 ests per chain, 62400 per kthread
[  399.710067][T15959] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2805'.
[  399.901281][T15966] netlink: 'syz.3.2807': attribute type 3 has an invalid length.
[  399.937927][T15966] netlink: 'syz.3.2807': attribute type 3 has an invalid length.
[  399.961638][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2807'.
[  399.989401][T15968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2808'.
[  400.408978][T15985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'.
[  400.429515][T15985] veth1_macvtap: left promiscuous mode
[  400.965037][T15999] bridge6: port 1(veth15) entered blocking state
[  400.973609][T15999] bridge6: port 1(veth15) entered disabled state
[  400.981988][T15999] veth15: entered allmulticast mode
[  400.994686][T15999] veth15: entered promiscuous mode
[  401.017537][T16007] bridge6: port 2(veth0_to_bond) entered blocking state
[  401.040831][T16007] bridge6: port 2(veth0_to_bond) entered disabled state
[  401.049347][T16007] veth0_to_bond: entered allmulticast mode
[  401.057651][T16007] veth0_to_bond: entered promiscuous mode
[  401.071138][T16003] lo speed is unknown, defaulting to 1000
[  401.121117][T15999] bridge6: port 3(veth17) entered blocking state
[  401.134816][T15999] bridge6: port 3(veth17) entered disabled state
[  401.142165][T15999] veth17: entered allmulticast mode
[  401.149979][T15999] veth17: entered promiscuous mode
[  401.860006][T16041] tunl0: Caught tx_queue_len zero misconfig
[  402.294784][T16057] lo speed is unknown, defaulting to 1000
[  402.503396][T16066] vlan2: entered promiscuous mode
[  402.508512][T16066] geneve1: entered promiscuous mode
[  402.520712][T16066] vlan2: entered allmulticast mode
[  402.525979][T16066] geneve1: entered allmulticast mode
[  402.584236][T16066] netlink: 'syz.2.2836': attribute type 12 has an invalid length.
[  402.802593][T16087] __nla_validate_parse: 5 callbacks suppressed
[  402.802614][T16087] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2843'.
[  402.858063][T16091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2843'.
[  403.215498][T16100] lo speed is unknown, defaulting to 1000
[  403.281207][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'.
[  403.458260][T16116] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  403.473196][T16116] SET target dimension over the limit!
[  404.090532][T16136] netlink: 536 bytes leftover after parsing attributes in process `syz.0.2854'.
[  404.115345][T16136] netlink: 'syz.0.2854': attribute type 31 has an invalid length.
[  404.160336][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  404.168398][    C1] lec:lec_tx_timeout: lec0
[  404.180522][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  404.497928][T16147] xt_CT: You must specify a L4 protocol and not use inversions on it
[  404.513566][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2860'.
[  404.644853][T16158] netlink: 'syz.1.2861': attribute type 2 has an invalid length.
[  404.664575][T16156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2862'.
[  404.697511][T16158] : entered promiscuous mode
[  404.793249][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2862'.
[  404.834267][T16156] netlink: 'syz.0.2862': attribute type 2 has an invalid length.
[  404.857145][T16170] sctp: [Deprecated]: syz.3.2865 (pid 16170) Use of int in max_burst socket option.
[  404.857145][T16170] Use struct sctp_assoc_value instead
[  404.884688][T16170] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2865'.
[  404.896732][T16156] !��9: entered promiscuous mode
[  405.107056][T16179] vlan3: entered allmulticast mode
[  405.129077][T16179] hsr0: entered allmulticast mode
[  405.137500][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'.
[  405.160521][T16179] hsr_slave_0: entered allmulticast mode
[  405.358495][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2870'.
[  405.377261][T16187] vlan4: entered promiscuous mode
[  405.625203][T16194] tc_dump_action: action bad kind
[  405.899452][T16206] Cannot find add_set index 2 as target
[  406.187506][T16223] tipc: Invalid UDP bearer configuration
[  406.187563][T16223] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  406.617969][T16241] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  406.713622][   T10] lo speed is unknown, defaulting to 1000
[  406.719442][   T10] syz2: Port: 1 Link ACTIVE
[  406.853410][T16245] netlink: 'syz.0.2891': attribute type 32 has an invalid length.
[  406.953171][T16251] openvswitch: netlink: IP tunnel dst address not specified
[  407.131045][T16254] syzkaller1: tun_chr_ioctl cmd 1074025677
[  407.137133][T16254] syzkaller1: linktype set to 260
[  407.932790][T16296] virt_wifi0 speed is unknown, defaulting to 1000
[  407.960765][T16296] virt_wifi0 speed is unknown, defaulting to 1000
[  407.995983][T16296] virt_wifi0 speed is unknown, defaulting to 1000
[  408.053371][T16301] netlink: 'syz.4.2907': attribute type 1 has an invalid length.
[  408.096842][T16296] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  408.150954][T16301] 8021q: adding VLAN 0 to HW filter on device bond4
[  408.181512][T16301] bond4: (slave gretap3): making interface the new active one
[  408.193188][T16301] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  408.203374][T16296] virt_wifi0 speed is unknown, defaulting to 1000
[  408.212409][T16296] virt_wifi0 speed is unknown, defaulting to 1000
[  408.259947][T16296] virt_wifi0 speed is unknown, defaulting to 1000
[  408.299276][T16296] virt_wifi0 speed is unknown, defaulting to 1000
[  408.322679][T16296] virt_wifi0 speed is unknown, defaulting to 1000
[  408.358401][T16309] netlink: 'syz.3.2909': attribute type 1 has an invalid length.
[  408.591154][T16330] __nla_validate_parse: 7 callbacks suppressed
[  408.591174][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'.
[  408.615110][T16331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2911'.
[  408.640163][T16329] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2914'.
[  408.734815][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'.
[  409.097345][T16351] ip6tnl0: Caught tx_queue_len zero misconfig
[  409.287385][T16357] lo speed is unknown, defaulting to 1000
[  409.305806][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'.
[  409.316398][T16357] virt_wifi0 speed is unknown, defaulting to 1000
[  409.407877][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'.
[  409.456033][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'.
[  409.491028][T16374] syzkaller0: entered promiscuous mode
[  409.514722][T16374] syzkaller0: entered allmulticast mode
[  409.760658][T16385] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2928'.
[  410.060286][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5880 ms
[  410.068393][    C1] lec:lec_tx_timeout: lec0
[  410.074797][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  410.334359][T16394] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  410.359510][T16394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2932'.
[  410.449088][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  410.459804][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  410.490541][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  410.498760][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  410.507158][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  410.527404][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  410.540611][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  410.548220][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  410.556547][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  410.565098][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  410.661327][T16405] syzkaller0: entered promiscuous mode
[  410.666871][T16405] syzkaller0: entered allmulticast mode
[  411.045790][T16396] lo speed is unknown, defaulting to 1000
[  411.081562][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2939'.
[  411.189150][T16396] virt_wifi0 speed is unknown, defaulting to 1000
[  411.426718][T16444] openvswitch: netlink: IP tunnel TTL not specified.
[  411.756184][T16396] chnl_net:caif_netlink_parms(): no params data found
[  412.136175][T16396] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.181128][T16396] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.188449][T16396] bridge_slave_0: entered allmulticast mode
[  412.208024][T16396] bridge_slave_0: entered promiscuous mode
[  412.255943][T16396] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.275365][T16396] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.291034][T16396] bridge_slave_1: entered allmulticast mode
[  412.306102][T16396] bridge_slave_1: entered promiscuous mode
[  412.422694][T16396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.463413][T16396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.608371][T16396] team0: Port device team_slave_0 added
[  412.686126][T16396] team0: Port device team_slave_1 added
[  412.700672][ T5837] Bluetooth: hci5: command tx timeout
[  412.848484][T16396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.857788][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.887594][T16504] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  412.896249][T16396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.915523][T16396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.932703][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.982939][T16396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.191329][T16396] hsr_slave_0: entered promiscuous mode
[  413.198538][T16396] hsr_slave_1: entered promiscuous mode
[  413.205771][T16396] debugfs: 'hsr0' already exists in 'hsr'
[  413.212192][T16396] Cannot create hsr debugfs directory
[  413.650019][T16527] __nla_validate_parse: 16 callbacks suppressed
[  413.650040][T16527] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2968'.
[  413.695622][T16396] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.823329][T16396] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.925921][T16396] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  414.059614][T16396] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  414.234325][T16546] netlink: 'syz.1.2972': attribute type 6 has an invalid length.
[  414.577309][T16396] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  414.637690][T16566] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2975'.
[  414.664977][T16396] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  414.703704][T16566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2975'.
[  414.753428][T16396] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  414.781439][ T5837] Bluetooth: hci5: command tx timeout
[  414.790728][T16576] xt_TCPMSS: Only works on TCP SYN packets
[  414.841061][T16396] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  415.090388][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  415.098516][    C1] lec:lec_tx_timeout: lec0
[  415.103257][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  415.479700][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'.
[  415.502930][T16598] openvswitch: netlink: Invalid VLAN frame
[  415.609863][T16600] syzkaller0: entered promiscuous mode
[  415.615926][T16600] syzkaller0: entered allmulticast mode
[  415.628700][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2982'.
[  415.649986][T16396] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.762913][T16396] 8021q: adding VLAN 0 to HW filter on device team0
[  415.796609][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.804010][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.860906][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.868135][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.947002][T16396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  416.213091][T16625] gtp1: entered promiscuous mode
[  416.228469][T16625] gtp1: entered allmulticast mode
[  416.417421][T16396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.593027][T16396] veth0_vlan: entered promiscuous mode
[  416.622742][T16396] veth1_vlan: entered promiscuous mode
[  416.703283][T16396] veth0_macvtap: entered promiscuous mode
[  416.725363][T16396] veth1_macvtap: entered promiscuous mode
[  416.771562][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'.
[  416.794127][T16396] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.817829][T16396] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.859143][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'.
[  416.862735][ T6056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.877344][ T5837] Bluetooth: hci5: command tx timeout
[  416.898788][ T6056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.914477][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2993'.
[  416.924439][ T6056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.934615][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'.
[  416.948627][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2993'.
[  416.965807][ T6056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.149899][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.175356][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.269518][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.280617][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.115394][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  418.127358][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  418.144848][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  418.153373][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  418.176550][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  418.301229][T16689] lo speed is unknown, defaulting to 1000
[  418.343686][T16689] virt_wifi0 speed is unknown, defaulting to 1000
[  418.461029][T16699] : entered promiscuous mode
[  418.501773][T16702] netlink: 'syz.0.3008': attribute type 31 has an invalid length.
[  418.769084][T16716] __nla_validate_parse: 5 callbacks suppressed
[  418.769104][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'.
[  418.943572][ T5837] Bluetooth: hci5: command tx timeout
[  419.063969][T16689] chnl_net:caif_netlink_parms(): no params data found
[  419.145247][T16736] netlink: 'syz.0.3018': attribute type 1 has an invalid length.
[  419.359420][T16746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  419.371564][T16746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  419.456222][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'.
[  419.596722][T16761] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  419.608244][T16746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  419.612192][T16761] ipt_REJECT: TCP_RESET invalid for non-tcp
[  419.630010][T16746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  419.648346][T16689] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.655855][T16689] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.665478][T16689] bridge_slave_0: entered allmulticast mode
[  419.673691][T16689] bridge_slave_0: entered promiscuous mode
[  419.694045][T16762] vlan4: entered allmulticast mode
[  419.708164][T16689] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.718044][T16689] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.736705][T16689] bridge_slave_1: entered allmulticast mode
[  419.759112][T16689] bridge_slave_1: entered promiscuous mode
[  419.793580][T16746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  419.818830][T16746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  419.862168][T16772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  419.869617][T16772] IPv6: NLM_F_CREATE should be set when creating new route
[  419.927540][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3024'.
[  419.964941][T16746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.005358][T16746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  420.088830][T16787] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3027'.
[  420.099510][T16689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.110392][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  420.110425][    C1] lec:lec_tx_timeout: lec0
[  420.110531][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  420.131592][T16689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.220564][ T5837] Bluetooth: hci1: command tx timeout
[  420.313748][T16689] team0: Port device team_slave_0 added
[  420.343909][T16689] team0: Port device team_slave_1 added
[  420.416424][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3030'.
[  420.463807][T16800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3030'.
[  420.537491][T16689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.545742][T16689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  420.575264][T16689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.603466][ T8747] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  420.612845][ T8747] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  420.671723][ T8747] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  420.684870][ T8747] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  420.746219][T16689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  420.757020][T16807] netlink: 'syz.3.3033': attribute type 13 has an invalid length.
[  420.766230][T16689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  420.810861][T16689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.834970][T16809] gtp0: entered promiscuous mode
[  420.839990][T16809] gtp0: entered allmulticast mode
[  420.847035][ T6056] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  420.856607][ T6056] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  421.010318][ T8769] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  421.018561][ T8769] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  421.078380][T16689] hsr_slave_0: entered promiscuous mode
[  421.117181][T16689] hsr_slave_1: entered promiscuous mode
[  421.125374][T16689] debugfs: 'hsr0' already exists in 'hsr'
[  421.142694][T16689] Cannot create hsr debugfs directory
[  421.255159][T16823] netlink: 'syz.1.3037': attribute type 1 has an invalid length.
[  421.276608][T16823] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3037'.
[  421.300773][T16823] NCSI netlink: No device for ifindex 0
[  421.527560][T16689] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.561317][T16689] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.642335][T16689] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.657172][T16689] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.764477][T16843] syzkaller0: entered promiscuous mode
[  421.770566][T16843] syzkaller0: entered allmulticast mode
[  421.816827][T16689] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.849337][T16689] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.913388][T16845] netlink: 'syz.0.3045': attribute type 4 has an invalid length.
[  421.926561][T16845] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3045'.
[  421.956204][T16689] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.972020][T16689] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.058178][T16848] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3046'.
[  422.314089][ T5837] Bluetooth: hci1: command tx timeout
[  422.359452][T16849] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  422.427987][T16849] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  422.648438][T16849] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  422.680889][T16849] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  422.740794][T16872] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3051'.
[  422.922505][T16849] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  422.941894][T16849] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  422.998249][T16689] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  423.042446][T16849] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  423.083732][T16849] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  423.124225][T16689] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  423.199139][T16689] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  423.208369][T16881] syz.0.3055: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  423.224648][T16881] CPU: 0 UID: 0 PID: 16881 Comm: syz.0.3055 Not tainted syzkaller #0 PREEMPT(full) 
[  423.224678][T16881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  423.224691][T16881] Call Trace:
[  423.224700][T16881]  <TASK>
[  423.224710][T16881]  dump_stack_lvl+0xe8/0x150
[  423.224746][T16881]  warn_alloc+0x249/0x340
[  423.224772][T16881]  ? stack_trace_save+0xa9/0x100
[  423.224797][T16881]  ? __pfx_warn_alloc+0x10/0x10
[  423.224828][T16881]  ? kasan_save_track+0x4f/0x80
[  423.224848][T16881]  ? kasan_save_track+0x3e/0x80
[  423.224866][T16881]  ? __kasan_kmalloc+0x93/0xb0
[  423.224887][T16881]  ? __kmalloc_cache_noprof+0x31c/0x660
[  423.224907][T16881]  ? xskq_create+0x56/0x170
[  423.224934][T16881]  ? xsk_setsockopt+0x54c/0x990
[  423.224957][T16881]  ? do_sock_setsockopt+0x17c/0x1b0
[  423.224985][T16881]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  423.225011][T16881]  ? do_syscall_64+0x14d/0xf80
[  423.225046][T16881]  __vmalloc_node_range_noprof+0x132/0x1730
[  423.225101][T16881]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  423.225130][T16881]  ? __kasan_kmalloc+0x93/0xb0
[  423.225159][T16881]  vmalloc_user_noprof+0xad/0xe0
[  423.225181][T16881]  ? xskq_create+0xbf/0x170
[  423.225210][T16881]  xskq_create+0xbf/0x170
[  423.225241][T16881]  xsk_init_queue+0x8a/0xe0
[  423.225271][T16881]  xsk_setsockopt+0x54c/0x990
[  423.225300][T16881]  ? __pfx_xsk_setsockopt+0x10/0x10
[  423.225326][T16881]  ? __pfx_aa_sk_perm+0x10/0x10
[  423.225354][T16881]  ? aa_sock_opt_perm+0xff/0x1a0
[  423.225382][T16881]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  423.225414][T16881]  ? __pfx_xsk_setsockopt+0x10/0x10
[  423.225442][T16881]  do_sock_setsockopt+0x17c/0x1b0
[  423.225477][T16881]  __x64_sys_setsockopt+0x13d/0x1b0
[  423.225513][T16881]  do_syscall_64+0x14d/0xf80
[  423.225543][T16881]  ? trace_irq_disable+0x3b/0x150
[  423.225573][T16881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.225601][T16881]  ? clear_bhb_loop+0x40/0x90
[  423.225627][T16881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.225649][T16881] RIP: 0033:0x7f32ff79c629
[  423.225669][T16881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.225688][T16881] RSP: 002b:00007f330065e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  423.225711][T16881] RAX: ffffffffffffffda RBX: 00007f32ffa15fa0 RCX: 00007f32ff79c629
[  423.225727][T16881] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  423.225739][T16881] RBP: 00007f32ff832b39 R08: 0000000000000004 R09: 0000000000000000
[  423.225752][T16881] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  423.225765][T16881] R13: 00007f32ffa16038 R14: 00007f32ffa15fa0 R15: 00007fffe25f06c8
[  423.225800][T16881]  </TASK>
[  423.225878][T16881] Mem-Info:
[  423.262403][T16689] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  423.500230][T16881] active_anon:6029 inactive_anon:0 isolated_anon:0
[  423.500230][T16881]  active_file:3282 inactive_file:40071 isolated_file:0
[  423.500230][T16881]  unevictable:768 dirty:177 writeback:0
[  423.500230][T16881]  slab_reclaimable:12093 slab_unreclaimable:136274
[  423.500230][T16881]  mapped:29704 shmem:1359 pagetables:1377
[  423.500230][T16881]  sec_pagetables:0 bounce:0
[  423.500230][T16881]  kernel_misc_reclaimable:0
[  423.500230][T16881]  free:1290145 free_pcp:6443 free_cma:0
[  423.561805][T16881] Node 0 active_anon:24116kB inactive_anon:0kB active_file:13128kB inactive_file:160080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118816kB dirty:708kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15612kB pagetables:5344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  423.611343][T16881] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  423.647471][T16881] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  423.678481][T16881] lowmem_reserve[]: 0 2493 2493 2493 2493
[  423.685774][T16881] Node 0 DMA32 free:1183104kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24116kB inactive_anon:0kB active_file:13128kB inactive_file:160080kB unevictable:1536kB writepending:708kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:25552kB local_pcp:10860kB free_cma:0kB
[  423.733539][T16881] lowmem_reserve[]: 0 0 0 0 0
[  423.738593][T16881] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  423.793541][T16881] lowmem_reserve[]: 0 0 0 0 0
[  423.798446][T16881] Node 1 Normal free:3962116kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  423.920090][ T8747] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  423.932131][ T8747] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  423.944505][T16911] netlink: 'syz.3.3060': attribute type 13 has an invalid length.
[  423.953045][T16881] lowmem_reserve[]: 0 0 0 0 0
[  423.957829][T16881] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  423.981047][T16881] Node 0 DMA32: 7459*4kB (UM) 3717*8kB (UME) 1897*16kB (UME) 960*32kB (UME) 1035*64kB (UM) 567*128kB (UM) 444*256kB (UM) 314*512kB (UM) 186*1024kB (UM) 82*2048kB (UM) 71*4096kB (UM) = 1183108kB
[  424.056180][T16881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  424.131112][T16881] Node 1 Normal: 3*4kB (UE) 7*8kB (UME) 17*16kB (UME) 11*32kB (UME) 14*64kB (UME) 12*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 964*4096kB (M) = 3962164kB
[  424.151178][T16881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  424.170484][T16881] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  424.200116][T16881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  424.220028][T16881] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  424.239348][T16881] 46747 total pagecache pages
[  424.251887][T16881] 0 pages in swap cache
[  424.260289][T16881] Free swap  = 124996kB
[  424.272979][T16881] Total swap = 124996kB
[  424.280942][T16881] 2097051 pages RAM
[  424.291167][T16881] 0 pages HighMem/MovableOnly
[  424.301288][T16881] 427002 pages reserved
[  424.310521][T16881] 0 pages cma reserved
[  424.382519][ T5837] Bluetooth: hci1: command tx timeout
[  424.549333][T16911] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  424.634542][ T8747] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  424.650596][ T8747] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  424.685490][ T8747] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  424.695637][ T8747] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  424.772025][ T8735] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  424.819930][ T8735] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  424.882847][T16917] __nla_validate_parse: 1 callbacks suppressed
[  424.882868][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3062'.
[  424.930134][T16689] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.045694][T16689] 8021q: adding VLAN 0 to HW filter on device team0
[  425.078580][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.085926][ T8740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.120315][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  425.128377][    C1] lec:lec_tx_timeout: lec0
[  425.133553][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  425.180963][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.188223][ T8740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.270184][   T30] audit: type=1800 audit(1771655597.057:11): pid=16930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3066" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3190 res=0 errno=0
[  425.524364][T16944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'.
[  425.538290][T16945] geneve2: entered promiscuous mode
[  425.626928][ T8740] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.636089][ T8740] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.684933][ T8740] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.694321][ T8740] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.917676][T16958] lo speed is unknown, defaulting to 1000
[  425.927685][T16958] virt_wifi0 speed is unknown, defaulting to 1000
[  425.935663][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'.
[  425.947954][ T7837] udevd[7837]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory
[  426.134117][T16689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.142986][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'.
[  426.435217][T16985] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  426.461142][ T5837] Bluetooth: hci1: command tx timeout
[  426.589142][T16990] lo speed is unknown, defaulting to 1000
[  426.607131][T16994] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  426.651866][T16990] virt_wifi0 speed is unknown, defaulting to 1000
[  426.733569][T16997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3083'.
[  426.956626][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3087'.
[  427.112067][T17017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3088'.
[  427.315258][T16689] veth0_vlan: entered promiscuous mode
[  427.349754][T16689] veth1_vlan: entered promiscuous mode
[  427.427076][T16689] veth0_macvtap: entered promiscuous mode
[  427.438576][T16689] veth1_macvtap: entered promiscuous mode
[  427.476434][T16689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.513322][T17027] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3092'.
[  427.543862][T16689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.591952][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.605637][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.671341][T17030] batadv0: entered promiscuous mode
[  427.689275][T17030] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  427.718366][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.730924][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.976986][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.025876][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.082545][ T8756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.100889][ T8756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.127449][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3095'.
[  428.791926][T17070] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3105'.
[  428.984420][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  428.996599][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  429.006413][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  429.017944][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  429.028099][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  429.204184][T17075] lo speed is unknown, defaulting to 1000
[  429.218794][T17075] virt_wifi0 speed is unknown, defaulting to 1000
[  429.368476][T17060] tipc: Started in network mode
[  429.379714][T17060] tipc: Node identity ac1414aa, cluster identity 4711
[  429.403856][T17060] tipc: Enabled bearer <udp:s>, priority 10
[  429.460037][   T36] team0: left allmulticast mode
[  429.469327][   T36] team_slave_0: left allmulticast mode
[  429.475512][   T36] team0: left promiscuous mode
[  429.481353][   T36] team_slave_0: left promiscuous mode
[  429.488607][   T36] team_slave_1: left promiscuous mode
[  429.497190][   T36] bridge0: port 3(team0) entered disabled state
[  429.526050][   T36] bridge_slave_1: left allmulticast mode
[  429.534973][   T36] bridge_slave_1: left promiscuous mode
[  429.542167][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.562050][   T36] bridge_slave_0: left allmulticast mode
[  429.567752][   T36] bridge_slave_0: left promiscuous mode
[  429.581217][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.877148][   T36] bond4 (unregistering): (slave gretap3): Releasing active interface
[  430.067852][   T36] bond2 (unregistering): (slave bridge3): Releasing active interface
[  430.140342][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  430.148495][    C1] lec:lec_tx_timeout: lec0
[  430.153325][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  430.405071][   T36] team0: Port device bridge10 removed
[  430.555783][   T36] bond1 (unregistering): Released all slaves
[  430.570189][   T36] bond2 (unregistering): Released all slaves
[  430.586512][   T36] bond0 (unregistering): Released all slaves
[  430.607191][   T36] bond3 (unregistering): Released all slaves
[  430.626965][   T36] bond4 (unregistering): Released all slaves
[  430.675644][T17081] __nla_validate_parse: 1 callbacks suppressed
[  430.675664][T17081] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3108'.
[  430.741430][T17095] tipc: Started in network mode
[  430.746745][T17095] tipc: Node identity f67ba2faecd1, cluster identity 4711
[  430.757349][T17095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.769238][T17099] syzkaller0: entered promiscuous mode
[  430.786925][T17099] syzkaller0: entered allmulticast mode
[  430.875565][ T5907] tipc: Node number set to 2886997162
[  430.933771][   T36] tipc: Disabling bearer <udp:syz2>
[  430.947523][   T36] tipc: Left network mode
[  430.963196][T17099] tipc: Resetting bearer <eth:syzkaller0>
[  430.996305][T17115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'.
[  431.048665][T17115] netlink: 'syz.0.3112': attribute type 2 has an invalid length.
[  431.064688][T17099] tipc: Disabling bearer <eth:syzkaller0>
[  431.085343][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'.
[  431.096381][T17119] openvswitch: netlink: Invalid VLAN frame
[  431.103154][ T5837] Bluetooth: hci0: command tx timeout
[  431.115482][T17120] netlink: 'syz.0.3112': attribute type 2 has an invalid length.
[  431.274743][T17120] !��9: left promiscuous mode
[  431.418163][T17131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.446612][T17131] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3116'.
[  431.488457][T17131] netlink: 'syz.2.3116': attribute type 2 has an invalid length.
[  431.531010][T17131] netlink: 'syz.2.3116': attribute type 11 has an invalid length.
[  431.552254][T17131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3116'.
[  431.859646][   T36] hsr_slave_0: left promiscuous mode
[  431.886407][   T36] veth0_macvtap: left promiscuous mode
[  432.005169][   T36] pim6reg99999999 (unregistering): left allmulticast mode
[  432.119914][   T36] team0 (unregistering): Port device team_slave_1 removed
[  432.151709][   T36] team0 (unregistering): Port device team_slave_0 removed
[  432.330936][ T5907] infiniband syz0: ib_query_port failed (-19)
[  432.451835][T17075] chnl_net:caif_netlink_parms(): no params data found
[  432.578327][T17172] netlink: 'syz.4.3129': attribute type 1 has an invalid length.
[  432.617309][T17172] netlink: 'syz.4.3129': attribute type 11 has an invalid length.
[  432.644351][T17172] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3129'.
[  432.869679][T17185] team_slave_1: left promiscuous mode
[  432.894445][T17185] team_slave_1: left allmulticast mode
[  432.904182][T17185] bridge3: left promiscuous mode
[  432.909321][T17185] bridge3: left allmulticast mode
[  432.915382][T17185] bridge5: left promiscuous mode
[  432.920539][T17185] bridge5: left allmulticast mode
[  432.926009][T17185] bond2: left promiscuous mode
[  432.932127][T17185] bond3: left promiscuous mode
[  432.937538][T17185] bond3: left allmulticast mode
[  432.948771][T17185] gre1: left allmulticast mode
[  432.957263][T17185] gtp0: left promiscuous mode
[  432.963159][T17185] gtp0: left allmulticast mode
[  432.969618][T17188] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3133'.
[  432.979652][T17185] macsec1: left promiscuous mode
[  432.993411][T17185] gtp1: left promiscuous mode
[  432.998261][T17185] gtp1: left allmulticast mode
[  433.010505][T17075] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.017703][T17075] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.036574][T17075] bridge_slave_0: entered allmulticast mode
[  433.050160][T17075] bridge_slave_0: entered promiscuous mode
[  433.140012][T17075] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.140032][T17194] netlink: 'syz.0.3135': attribute type 16 has an invalid length.
[  433.156086][T17194] netlink: 'syz.0.3135': attribute type 17 has an invalid length.
[  433.174364][T17075] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.190726][ T5837] Bluetooth: hci0: command tx timeout
[  433.210187][T17075] bridge_slave_1: entered allmulticast mode
[  433.224613][T17075] bridge_slave_1: entered promiscuous mode
[  433.271462][T17194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  433.354990][T17075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  433.404419][T17075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  433.426766][   T36] IPVS: stop unused estimator thread 0...
[  433.554233][T17075] team0: Port device team_slave_0 added
[  433.575302][T17075] team0: Port device team_slave_1 added
[  433.629204][T17075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.636722][T17075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.678387][T17216] IPVS: length: 63 != 24
[  433.683089][T17075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.698332][T17075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.706074][T17075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.732996][T17075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.804630][T17075] hsr_slave_0: entered promiscuous mode
[  433.812660][T17075] hsr_slave_1: entered promiscuous mode
[  433.819511][T17075] debugfs: 'hsr0' already exists in 'hsr'
[  433.826284][T17075] Cannot create hsr debugfs directory
[  434.059967][T17219] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.077281][T17219] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  434.089875][T17219] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.169704][T17219] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.183067][T17219] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  434.195362][T17219] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.226813][T17075] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  434.252447][T17075] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  434.282639][T17219] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.294356][T17219] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  434.306997][T17219] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.353594][T17075] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  434.364035][T17075] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  434.409109][T17219] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.413826][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'.
[  434.450393][T17219] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  434.463322][T17219] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.504953][T17075] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  434.519272][T17075] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  434.545787][T17234] xt_cgroup: xt_cgroup: no path or classid specified
[  434.597058][T17075] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  434.612713][T17235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3148'.
[  434.613159][T17075] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  434.712429][ T8741] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  434.730363][ T8741] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  434.739718][ T8741] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.773798][ T8741] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  434.788218][ T8741] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  434.826592][ T8741] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.854456][ T8735] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  434.871113][ T8735] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  434.889684][ T8735] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.930202][T17251] tap0: tun_chr_ioctl cmd 2147767521
[  434.961558][ T8756] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  434.975137][ T8756] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  434.984012][ T8756] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.021449][T17248] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3151'.
[  435.121365][T17075] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  435.155864][T17075] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  435.162825][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  435.162861][    C1] lec:lec_tx_timeout: lec0
[  435.171074][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  435.209896][T17075] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  435.239107][T17075] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  435.262286][ T5837] Bluetooth: hci0: command tx timeout
[  435.296733][T17259] lo speed is unknown, defaulting to 1000
[  435.351295][T17259] virt_wifi0 speed is unknown, defaulting to 1000
[  435.392990][T17075] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.558628][T17075] 8021q: adding VLAN 0 to HW filter on device team0
[  435.640076][T17276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.648253][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.656155][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.717943][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.725398][ T8735] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.764433][T17279] xt_TCPMSS: Only works on TCP SYN packets
[  436.350446][T17302] nbd: must specify an index to disconnect
[  436.487012][T17075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.620188][T17075] veth0_vlan: entered promiscuous mode
[  436.637315][T17311] __nla_validate_parse: 1 callbacks suppressed
[  436.637333][T17311] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3165'.
[  436.664614][T17075] veth1_vlan: entered promiscuous mode
[  436.672910][T17311] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3165'.
[  436.746726][T17075] veth0_macvtap: entered promiscuous mode
[  436.778354][T17075] veth1_macvtap: entered promiscuous mode
[  436.825342][T17075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.845497][T17075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.881634][ T8735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.903942][ T8735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.945675][ T8735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.969052][ T8735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.294515][ T8737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.335959][ T8737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.347310][ T5837] Bluetooth: hci0: command tx timeout
[  437.470190][ T8737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.478898][ T8737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.594001][T17335] x_tables: duplicate underflow at hook 3
[  437.721547][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'.
[  437.897551][T17344] 8021q: adding VLAN 0 to HW filter on device bond1
[  438.112543][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  438.124648][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  438.135445][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  438.152520][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  438.171037][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  438.328219][T17359] lo speed is unknown, defaulting to 1000
[  438.360067][T17359] virt_wifi0 speed is unknown, defaulting to 1000
[  438.775358][T17383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3186'.
[  438.878642][T17383] netlink: 'syz.3.3186': attribute type 11 has an invalid length.
[  439.396006][T17417] lec:lec_atm_send: lec0: Unknown message type 17
[  439.465122][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3188'.
[  439.492492][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3188'.
[  439.519241][T17397] netlink: 'syz.4.3188': attribute type 5 has an invalid length.
[  439.545419][T17395] lec:lec_atm_close: lec0: Shut down!
[  439.574267][T17359] chnl_net:caif_netlink_parms(): no params data found
[  439.627797][T17425] x_tables: duplicate underflow at hook 2
[  439.669877][T17420] syzkaller0: entered promiscuous mode
[  439.691104][T17420] syzkaller0: entered allmulticast mode
[  439.701631][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'.
[  439.786909][T17428] bond1: Unable to set down delay as MII monitoring is disabled
[  439.805415][T17428] bond1 (unregistering): Released all slaves
[  439.858525][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'.
[  439.871678][T17435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3196'.
[  439.915865][T17359] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.931931][T17359] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.939413][T17359] bridge_slave_0: entered allmulticast mode
[  439.951911][T17359] bridge_slave_0: entered promiscuous mode
[  440.044542][T17359] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.060527][T17359] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.075457][T17359] bridge_slave_1: entered allmulticast mode
[  440.093148][T17359] bridge_slave_1: entered promiscuous mode
[  440.187865][T17359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.206645][T17359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.227197][ T5828] Bluetooth: hci2: command tx timeout
[  440.339398][T17359] team0: Port device team_slave_0 added
[  440.352024][T17359] team0: Port device team_slave_1 added
[  440.466155][T17359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.475275][T17359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.502350][T17359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.523463][T17359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.534342][T17359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.585648][T17359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.628887][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3203'.
[  440.712656][T17359] hsr_slave_0: entered promiscuous mode
[  440.722135][T17359] hsr_slave_1: entered promiscuous mode
[  440.728784][T17359] debugfs: 'hsr0' already exists in 'hsr'
[  440.750311][T17359] Cannot create hsr debugfs directory
[  440.932874][T17476] ip6tnl1: entered promiscuous mode
[  440.938237][T17476] ip6tnl1: entered allmulticast mode
[  440.964535][ T8737] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  440.978748][ T8737] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  441.021992][ T8737] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  441.054704][ T8737] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  441.105515][T17359] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.116736][T17359] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  441.126953][T17359] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.151142][T17457] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  441.159908][T17457] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  441.216147][T17359] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.229731][T17359] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  441.240939][T17359] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.288437][T17457] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  441.303053][T17457] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  441.316893][T17359] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.329229][T17359] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  441.348244][T17359] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.401896][T17359] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.414485][T17359] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  441.426002][T17359] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.454244][T17457] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  441.465962][T17457] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  441.560217][T17457] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  441.566326][T17457] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  441.749879][T17359] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  441.813762][T17499] __nla_validate_parse: 4 callbacks suppressed
[  441.813784][T17499] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3212'.
[  441.835622][T17359] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  441.857608][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'.
[  441.879155][T17359] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  441.892096][T17505] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3214'.
[  441.908682][T17359] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  441.993915][T17499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3212'.
[  442.253754][T17359] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.327533][T17359] 8021q: adding VLAN 0 to HW filter on device team0
[  442.348850][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.356124][ T8740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.430027][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.437299][ T8740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.818341][T17550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3223'.
[  442.987857][T17359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.143080][T17359] veth0_vlan: entered promiscuous mode
[  443.154151][T17564] Bluetooth: MGMT ver 1.23
[  443.162654][T17359] veth1_vlan: entered promiscuous mode
[  443.257572][T17359] veth0_macvtap: entered promiscuous mode
[  443.266197][T17572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3229'.
[  443.276835][T17359] veth1_macvtap: entered promiscuous mode
[  443.335197][T17574] netlink: 558 bytes leftover after parsing attributes in process `syz.2.3230'.
[  443.355393][T17359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.445625][T17572] syzkaller0: entered promiscuous mode
[  443.461289][T17572] syzkaller0: entered allmulticast mode
[  443.481519][T17359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.500989][ T8737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.521515][ T8737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.549474][ T8737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.591436][ T8737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.668753][T17586] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3233'.
[  444.942173][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms
[  444.950208][    C1] lec:lec_tx_timeout: lec0
[  444.954991][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  445.147838][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'.
[  445.477693][ T8735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.508267][ T8735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.600807][ T8756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.608673][ T8756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.710895][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'.
[  445.785129][T17615] netlink: 'syz.2.3245': attribute type 10 has an invalid length.
[  445.909177][T17615] veth0_vlan: left promiscuous mode
[  445.933603][T17615] veth0_vlan: entered promiscuous mode
[  445.945839][T17615] team0: Device veth0_vlan failed to register rx_handler
[  446.471410][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  446.483073][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  446.493695][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  446.502890][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  446.512343][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  446.615929][T17641] lo speed is unknown, defaulting to 1000
[  446.637157][T17641] virt_wifi0 speed is unknown, defaulting to 1000
[  446.901205][T17641] chnl_net:caif_netlink_parms(): no params data found
[  447.029290][T17660] FAULT_INJECTION: forcing a failure.
[  447.029290][T17660] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.044055][T17660] CPU: 0 UID: 0 PID: 17660 Comm: syz.4.3250 Not tainted syzkaller #0 PREEMPT(full) 
[  447.044085][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  447.044099][T17660] Call Trace:
[  447.044107][T17660]  <TASK>
[  447.044116][T17660]  dump_stack_lvl+0xe8/0x150
[  447.044151][T17660]  should_fail_ex+0x412/0x560
[  447.044181][T17660]  _copy_from_iter+0x1d3/0x1670
[  447.044210][T17660]  ? rcu_is_watching+0x15/0xb0
[  447.044244][T17660]  ? __pfx__copy_from_iter+0x10/0x10
[  447.044278][T17660]  ? netlink_sendmsg+0x650/0xb40
[  447.044301][T17660]  ? skb_put+0x11b/0x210
[  447.044331][T17660]  netlink_sendmsg+0x6c0/0xb40
[  447.044363][T17660]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.044390][T17660]  ? aa_sock_msg_perm+0xf1/0x1b0
[  447.044416][T17660]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  447.044441][T17660]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.044465][T17660]  ____sys_sendmsg+0xa68/0xad0
[  447.044505][T17660]  ? __pfx_____sys_sendmsg+0x10/0x10
[  447.044552][T17660]  ? import_iovec+0x73/0xa0
[  447.044584][T17660]  ___sys_sendmsg+0x2a5/0x360
[  447.044620][T17660]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.044686][T17660]  ? __fget_files+0x2a/0x420
[  447.044715][T17660]  ? __fget_files+0x3a0/0x420
[  447.044754][T17660]  __x64_sys_sendmsg+0x1bd/0x2a0
[  447.044787][T17660]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  447.044827][T17660]  ? __pfx_ksys_write+0x10/0x10
[  447.044860][T17660]  do_syscall_64+0x14d/0xf80
[  447.044890][T17660]  ? trace_irq_disable+0x3b/0x150
[  447.044918][T17660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.044939][T17660]  ? clear_bhb_loop+0x40/0x90
[  447.044965][T17660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.044985][T17660] RIP: 0033:0x7fda7cb9c629
[  447.045006][T17660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.045023][T17660] RSP: 002b:00007fda7dac4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.045046][T17660] RAX: ffffffffffffffda RBX: 00007fda7ce16090 RCX: 00007fda7cb9c629
[  447.045061][T17660] RDX: 0000000000000098 RSI: 0000200000000040 RDI: 0000000000000003
[  447.045073][T17660] RBP: 00007fda7dac4090 R08: 0000000000000000 R09: 0000000000000000
[  447.045086][T17660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.045099][T17660] R13: 00007fda7ce16128 R14: 00007fda7ce16090 R15: 00007ffcc2524ea8
[  447.045132][T17660]  </TASK>
[  447.093431][T17641] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.312473][T17641] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.319829][T17641] bridge_slave_0: entered allmulticast mode
[  447.328949][T17641] bridge_slave_0: entered promiscuous mode
[  447.347696][T17641] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.356235][T17641] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.364944][T17641] bridge_slave_1: entered allmulticast mode
[  447.373453][T17641] bridge_slave_1: entered promiscuous mode
[  447.414982][T17641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.428887][T17641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.475410][T17641] team0: Port device team_slave_0 added
[  447.486128][T17641] team0: Port device team_slave_1 added
[  447.529526][T17641] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.542908][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.569843][T17641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.587294][T17641] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.595083][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.621824][T17641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.676122][T17641] hsr_slave_0: entered promiscuous mode
[  447.683386][T17641] hsr_slave_1: entered promiscuous mode
[  447.689634][T17641] debugfs: 'hsr0' already exists in 'hsr'
[  447.696983][T17641] Cannot create hsr debugfs directory
[  448.476215][T17610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  448.505276][T17641] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  448.589507][T17641] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  448.621867][ T5837] Bluetooth: hci4: command tx timeout
[  448.698169][T17678] netlink: 'syz.1.3254': attribute type 1 has an invalid length.
[  448.719763][T17641] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  448.772097][T17682] __nla_validate_parse: 2 callbacks suppressed
[  448.772118][T17682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3256'.
[  448.798822][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3257'.
[  448.809374][T17682] netlink: 'syz.4.3256': attribute type 1 has an invalid length.
[  448.841828][T17641] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  449.058742][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3258'.
[  449.112623][T17701] FAULT_INJECTION: forcing a failure.
[  449.112623][T17701] name failslab, interval 1, probability 0, space 0, times 0
[  449.128160][T17700] netlink: 'syz.0.3261': attribute type 4 has an invalid length.
[  449.141683][T17701] CPU: 1 UID: 0 PID: 17701 Comm: syz.4.3260 Not tainted syzkaller #0 PREEMPT(full) 
[  449.141712][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  449.141725][T17701] Call Trace:
[  449.141734][T17701]  <TASK>
[  449.141743][T17701]  dump_stack_lvl+0xe8/0x150
[  449.141777][T17701]  should_fail_ex+0x412/0x560
[  449.141807][T17701]  should_failslab+0xa8/0x100
[  449.141833][T17701]  ? skb_clone+0x212/0x3a0
[  449.141865][T17701]  kmem_cache_alloc_noprof+0x87/0x650
[  449.141898][T17701]  ? __netlink_lookup+0xc6/0x8b0
[  449.141929][T17701]  skb_clone+0x212/0x3a0
[  449.141963][T17701]  __netlink_deliver_tap+0x404/0x850
[  449.142001][T17701]  ? netlink_deliver_tap+0x2e/0x1b0
[  449.142028][T17701]  netlink_deliver_tap+0x19c/0x1b0
[  449.142054][T17701]  netlink_unicast+0x7e3/0x9b0
[  449.142085][T17701]  ? __pfx_netlink_unicast+0x10/0x10
[  449.142110][T17701]  ? netlink_sendmsg+0x650/0xb40
[  449.142133][T17701]  ? skb_put+0x11b/0x210
[  449.142163][T17701]  netlink_sendmsg+0x813/0xb40
[  449.142199][T17701]  ? __pfx_netlink_sendmsg+0x10/0x10
[  449.142228][T17701]  ? aa_sock_msg_perm+0xf1/0x1b0
[  449.142253][T17701]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  449.142276][T17701]  ? __pfx_netlink_sendmsg+0x10/0x10
[  449.142298][T17701]  ____sys_sendmsg+0xa68/0xad0
[  449.142335][T17701]  ? __pfx_____sys_sendmsg+0x10/0x10
[  449.142379][T17701]  ? import_iovec+0x73/0xa0
[  449.142410][T17701]  ___sys_sendmsg+0x2a5/0x360
[  449.142445][T17701]  ? __pfx____sys_sendmsg+0x10/0x10
[  449.142518][T17701]  ? __fget_files+0x2a/0x420
[  449.142546][T17701]  ? __fget_files+0x3a0/0x420
[  449.142585][T17701]  __x64_sys_sendmsg+0x1bd/0x2a0
[  449.142619][T17701]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  449.142660][T17701]  ? __pfx_ksys_write+0x10/0x10
[  449.142693][T17701]  do_syscall_64+0x14d/0xf80
[  449.142723][T17701]  ? trace_irq_disable+0x3b/0x150
[  449.142752][T17701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.142773][T17701]  ? clear_bhb_loop+0x40/0x90
[  449.142799][T17701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.142820][T17701] RIP: 0033:0x7fda7cb9c629
[  449.142840][T17701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.142858][T17701] RSP: 002b:00007fda7dac4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  449.142880][T17701] RAX: ffffffffffffffda RBX: 00007fda7ce16090 RCX: 00007fda7cb9c629
[  449.142895][T17701] RDX: 0000000000000098 RSI: 0000200000000040 RDI: 0000000000000003
[  449.142908][T17701] RBP: 00007fda7dac4090 R08: 0000000000000000 R09: 0000000000000000
[  449.142921][T17701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.142933][T17701] R13: 00007fda7ce16128 R14: 00007fda7ce16090 R15: 00007ffcc2524ea8
[  449.142968][T17701]  </TASK>
[  449.143073][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'.
[  449.288341][T17700] netlink: 'syz.0.3261': attribute type 4 has an invalid length.
[  449.491356][T17641] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.544570][T17641] 8021q: adding VLAN 0 to HW filter on device team0
[  449.589907][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.597157][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.643880][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.651143][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.745992][   T31] INFO: task kworker/1:0H:25 blocked for more than 143 seconds.
[  449.756991][   T31]       Not tainted syzkaller #0
[  449.771861][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  449.805200][   T31] task:kworker/1:0H    state:D stack:26536 pid:25    tgid:25    ppid:2      task_flags:0x4208060 flags:0x00080000
[  449.865026][   T31] Workqueue: kblockd blk_mq_requeue_work
[  449.890647][   T31] Call Trace:
[  449.894041][   T31]  <TASK>
[  449.897103][   T31]  __schedule+0x1585/0x5340
[  449.919172][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  449.930289][   T31]  ? __pfx___schedule+0x10/0x10
[  449.941065][   T31]  ? schedule+0x90/0x360
[  449.945410][   T31]  schedule+0x164/0x360
[  449.967596][   T31]  schedule_timeout+0x158/0x2c0
[  449.980903][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  449.984495][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  449.988961][    C1] lec:lec_tx_timeout: lec0
[  449.999541][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  450.015776][   T31]  ? __pfx_process_timeout+0x10/0x10
[  450.056537][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  450.086930][   T31]  ? prepare_to_wait_event+0x436/0x480
[  450.116506][   T31]  nbd_queue_rq+0x857/0x1100
[  450.160542][   T31]  ? __pfx_nbd_queue_rq+0x10/0x10
[  450.165658][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  450.202294][   T31]  blk_mq_dispatch_rq_list+0xa70/0x1910
[  450.208045][   T31]  ? sbitmap_get+0x229/0x390
[  450.231136][   T31]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  450.237224][   T31]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  450.260641][   T31]  __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  450.267096][   T31]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  450.280819][   T31]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  450.287040][   T31]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  450.310618][   T31]  blk_mq_run_hw_queue+0x348/0x4f0
[  450.315863][   T31]  blk_mq_run_hw_queues+0x26c/0x3f0
[  450.330809][   T31]  blk_mq_requeue_work+0x71c/0x780
[  450.336009][   T31]  ? __pfx_blk_mq_requeue_work+0x10/0x10
[  450.350896][   T31]  ? process_scheduled_works+0xa25/0x1830
[  450.356694][   T31]  ? process_scheduled_works+0xa25/0x1830
[  450.381797][   T31]  process_scheduled_works+0xb02/0x1830
[  450.387459][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  450.400778][   T31]  ? assign_work+0x3d5/0x5e0
[  450.405448][   T31]  worker_thread+0xa50/0xfc0
[  450.410125][   T31]  kthread+0x388/0x470
[  450.450813][   T31]  ? __pfx_worker_thread+0x10/0x10
[  450.456016][   T31]  ? __pfx_kthread+0x10/0x10
[  450.480573][   T31]  ret_from_fork+0x51e/0xb90
[  450.485273][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  450.510591][   T31]  ? __switch_to+0xc7d/0x1450
[  450.515381][   T31]  ? __pfx_kthread+0x10/0x10
[  450.520040][   T31]  ret_from_fork_asm+0x1a/0x30
[  450.550304][   T31]  </TASK>
[  450.554039][   T31] 
[  450.554039][   T31] Showing all locks held in the system:
[  450.610526][   T31] 4 locks held by kworker/1:0H/25:
[  450.615718][   T31]  #0: ffff888020694548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  450.693092][   T31]  #1: ffffc900001f7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  450.709211][ T5837] Bluetooth: hci4: command tx timeout
[  450.721809][   T31]  #2: ffff888026252018 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  450.741168][   T31]  #3: ffff888027250380 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  450.754323][   T31] 1 lock held by khungtaskd/31:
[  450.759241][   T31]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  450.770130][   T31] 3 locks held by kworker/u8:2/36:
[  450.790406][   T31]  #0: ffff888032dd3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  450.830284][   T31]  #1: ffffc90000ac7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  450.880564][   T31]  #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[  450.890194][   T31] 2 locks held by getty/5581:
[  450.900304][   T31]  #0: ffff88803656b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  450.910160][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  450.950466][   T31] 3 locks held by kworker/0:3/5809:
[  450.955739][   T31]  #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  450.990470][   T31]  #1: ffffc90003b77c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  451.010363][   T31]  #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  451.028152][   T31] 1 lock held by udevd/6136:
[  451.033042][   T31]  #0: ffff8880271be358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  451.042583][   T31] 1 lock held by syz-executor/16689:
[  451.047882][   T31]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  451.057055][   T31] 1 lock held by syz-executor/17075:
[  451.063174][   T31]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  451.072646][   T31] 1 lock held by syz-executor/17359:
[  451.077998][   T31]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  451.087180][   T31] 4 locks held by syz-executor/17641:
[  451.092757][   T31]  #0: ffff888088914ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  451.102979][   T31]  #1: ffff8880889140c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  451.112880][   T31]  #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  451.123204][   T31]  #3: ffff888034455af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0
[  451.132789][   T31] 1 lock held by syz.2.3258/17685:
[  451.137945][   T31]  #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  451.147193][   T31] 
[  451.149561][   T31] =============================================
[  451.149561][   T31] 
[  451.179306][   T31] NMI backtrace for cpu 0
[  451.179327][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  451.179349][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  451.179360][   T31] Call Trace:
[  451.179368][   T31]  <TASK>
[  451.179377][   T31]  dump_stack_lvl+0xe8/0x150
[  451.179409][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  451.179431][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  451.179465][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  451.179488][   T31]  sys_info+0x135/0x170
[  451.179506][   T31]  watchdog+0xfd9/0x1030
[  451.179539][   T31]  ? watchdog+0x21a/0x1030
[  451.179577][   T31]  kthread+0x388/0x470
[  451.179596][   T31]  ? __pfx_watchdog+0x10/0x10
[  451.179629][   T31]  ? __pfx_kthread+0x10/0x10
[  451.179648][   T31]  ret_from_fork+0x51e/0xb90
[  451.179678][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  451.179703][   T31]  ? __switch_to+0xc7d/0x1450
[  451.179729][   T31]  ? __pfx_kthread+0x10/0x10
[  451.179750][   T31]  ret_from_fork_asm+0x1a/0x30
[  451.179795][   T31]  </TASK>
[  451.179803][   T31] Sending NMI from CPU 0 to CPUs 1:
[  451.294876][    C1] NMI backtrace for cpu 1
[  451.294896][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  451.294915][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  451.294926][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  451.294958][    C1] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  451.294975][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242
[  451.294990][    C1] RAX: 00000000000d17fd RBX: ffffffff819a80dd RCX: 0000000080000001
[  451.295003][    C1] RDX: 0000000000000001 RSI: ffffffff8def18d2 RDI: ffffffff8c27a480
[  451.295016][    C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b
[  451.295028][    C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901172b0
[  451.295042][    C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001
[  451.295053][    C1] FS:  0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000
[  451.295067][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  451.295079][    C1] CR2: 00007faf1749fe9c CR3: 000000000e54c000 CR4: 00000000003526f0
[  451.295095][    C1] Call Trace:
[  451.295102][    C1]  <TASK>
[  451.295108][    C1]  default_idle+0x9/0x20
[  451.295125][    C1]  default_idle_call+0x72/0xb0
[  451.295144][    C1]  do_idle+0x1bd/0x500
[  451.295171][    C1]  ? __pfx_do_idle+0x10/0x10
[  451.295197][    C1]  ? do_idle+0x4d6/0x500
[  451.295229][    C1]  cpu_startup_entry+0x43/0x60
[  451.295253][    C1]  start_secondary+0x101/0x110
[  451.295273][    C1]  common_startup_64+0x13e/0x147
[  451.295301][    C1]  </TASK>
[  451.469716][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  451.476638][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  451.485965][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  451.496344][   T31] Call Trace:
[  451.499694][   T31]  <TASK>
[  451.502713][   T31]  vpanic+0x56c/0xa60
[  451.506750][   T31]  ? __pfx___schedule+0x10/0x10
[  451.511658][   T31]  ? __pfx_vpanic+0x10/0x10
[  451.516253][   T31]  ? __pfx_console_unlock+0x10/0x10
[  451.521542][   T31]  panic+0xc5/0xd0
[  451.525392][   T31]  ? __pfx_panic+0x10/0x10
[  451.529976][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  451.535503][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  451.541741][   T31]  watchdog+0x1023/0x1030
[  451.546129][   T31]  ? watchdog+0x21a/0x1030
[  451.550693][   T31]  kthread+0x388/0x470
[  451.554788][   T31]  ? __pfx_watchdog+0x10/0x10
[  451.559501][   T31]  ? __pfx_kthread+0x10/0x10
[  451.564114][   T31]  ret_from_fork+0x51e/0xb90
[  451.568737][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  451.573878][   T31]  ? __switch_to+0xc7d/0x1450
[  451.578593][   T31]  ? __pfx_kthread+0x10/0x10
[  451.583301][   T31]  ret_from_fork_asm+0x1a/0x30
[  451.588122][   T31]  </TASK>
[  451.591334][   T31] Kernel Offset: disabled
[  451.595668][   T31] Rebooting in 86400 seconds..