last executing test programs:

16.631307396s ago: executing program 2 (id=6386):
r0 = socket$kcm(0x11, 0x3, 0x0) (async)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1200, r2, 0x25}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b00)=ANY=[@ANYRESOCT=r2, @ANYRES64, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x9, 0x6, 0x2}, 0x50)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000300)=0x110000, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ffffffff000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000085000000185400000f00000000000000000000001486fcff1000000018190000", @ANYRES32=r4, @ANYBLOB="000000000000000085100000fefeffffbf91000000000000b70200000200000085002d9266ddae01cf000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r5 = socket$pppoe(0x18, 0x1, 0x0) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmmsg$sock(r5, &(0x7f00000017c0)=[{{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @loopback}, 0x0, 0x1, 0x1, 0x3}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000600)="b2a547ae60668abaa7db5620afa54c816d36ec137c64bb40b60e1e303b4800c7f26185b974551b5454e8e50ad40110092672a98c269892b6c65eb39534bd140e95d88f0fa8a21da72e8d850ad82ae3273232753f3e963bfb749f7639e4296a326e63e3a88fede1c23340643066b38b1a95712daf7fa672a757bb0e1a010fd34e6937e769d0e8c89d0212e6a7f76279fea4f76165ae", 0x95}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="998a0f7f7223fff16973828bba1ef002d040bcfbb94eeb17a5f91319d764e700dcfdb60beae72b97e467f9c99df18746a3467619b8adcbdbd49f820f6734a8aacdcb8c64575546968ba29b378a549c6335d4fcded570009b8472a283f8f357970847a08800f8fe117fb4d40b759694c3e480dfb4e6a42e0c1f54cd0ccf1f01a3d4685959191f9f7b84a956aeea4fd1e0795b949279b907f77e121087c838a3ab5842b72f902b6703371f6f33480915147e9e32ab", 0xb4}], 0x3}}], 0x1, 0x810) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000500)) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1faa1a6a4f2965c4469694403c9da7111b2c3b6ab0a608501e74d74e03fa00b20267cabf068f48004592caa79d9113a65af763d3fa4d313c757e5f4c8842109331344866ce8585c2bc6c239b8d81a618361f04fd8cd83379109a4d5f809ba3180b12384f86cb85b222ccbb307b1df6ed73ed09792538bb305ee5c9d4963e1379e531f50b58ab38bcb0344f519b6b073341ce62b6f53e99d763714bd8e7f418bcec4999e6202cb5ceedba26ca469f2b", @ANYRES16=r8, @ANYBLOB="000427bd7000ffdbdf251f000000050092000000000005009200020000000400cc00080001006c0000000400cc0008009a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004844}, 0x4010) (async)
r9 = socket(0x2, 0x80805, 0x0) (async)
sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48801)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r10=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000480)={r10, 0x4}, &(0x7f0000000700)=0x8) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000340)={r10, 0x6}, 0xc)

16.34147669s ago: executing program 2 (id=6391):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x2, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0)

15.64464594s ago: executing program 2 (id=6395):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (async, rerun: 32)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 32)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r0, 0x18}, 0x38)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="3ed73cfc"]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0)

15.19066642s ago: executing program 2 (id=6397):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280080029000000000008001b0000000000"], 0x44}}, 0x0)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000500)={{r0}, r4, 0x14, @inherit={0x78, &(0x7f0000000480)={0x1, 0x6, 0xfffffffffffffffb, 0x1000, {0x26, 0x101, 0x9d2e, 0x100, 0x4}, [0x401, 0x8, 0x5, 0x777322fa, 0x40, 0x9]}}, @name="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"})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r6)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc050)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40880}, 0x8000)
close(r0)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000001)

14.951146687s ago: executing program 2 (id=6399):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="01000000061000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x4}, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0xdd95, 0xdf5f]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x20000044)
r3 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800090300000000000000000a808000fd00c8030000000008000400", @ANYRES32=r4, @ANYBLOB="0600150003000000100016"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10004044)

14.243803053s ago: executing program 2 (id=6403):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r4 = socket$unix(0x1, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000000)=0x9, 0x12)
sendfile(r6, r6, 0x0, 0x7ff)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}})

3.185049685s ago: executing program 0 (id=6474):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
r4 = accept(r3, 0x0, 0x0)
recvmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x100010, r7, 0x0) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x100010, r7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x38, '\x00', r8, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xf, 0x101, 0xc}, 0x10, 0x0, r5, 0x0, &(0x7f00000006c0)=[r2, r1, r2, r1, r1, r1, 0xffffffffffffffff, r9], 0x0, 0x10, 0x7}, 0x94)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r10 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
close(r0)
setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x7, 0x2, {{0x5, 0x4, 0x1, 0x30, 0x14, 0x65, 0x0, 0x2, 0x2f, 0x0, @local, @multicast2}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000200)={'gretap0\x00', <r12=>0x0, 0x7, 0x80, 0x7, 0x2, {{0x5, 0x4, 0x1, 0x30, 0x14, 0x65, 0x0, 0x2, 0x2f, 0x0, @local, @multicast2}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0xeaa9, 0x3ff, 0x0, r11, 0x0, '\x00', r12, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0xeaa9, 0x3ff, 0x0, r11, 0x0, '\x00', r12, 0xffffffffffffffff, 0x5, 0x3}, 0x50)
syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff)

3.020263521s ago: executing program 1 (id=6475):
r0 = socket(0xa, 0xa, 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'netpci0\x00', {0x2, 0x4e23, @broadcast}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.663372293s ago: executing program 3 (id=6478):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newnexthop={0x18, 0x68, 0x901}, 0x18}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x7, 0x8, 0x5e, 0x1], 0x0, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffa, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x9, 0x8, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newnexthop={0x18, 0x68, 0x901}, 0x18}}, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x7, 0x8, 0x5e, 0x1], 0x0, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffa, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x9, 0x8, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async)

2.539985782s ago: executing program 3 (id=6479):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xe, 0xffff}, {0xe}}}, 0x24}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0)
write(r4, &(0x7f0000000340)="0a000300010000", 0x7)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x5}, 0x94)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180))
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

2.535471758s ago: executing program 1 (id=6480):
r0 = socket$inet6(0x10, 0x2, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r1, 0x1) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)

2.4123652s ago: executing program 1 (id=6481):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}}, 0x50}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', <r4=>0x0, 0x29, 0x7, 0x0, 0x2, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8, 0x7, 0x80000001, 0x3}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x12c, 0x30, 0x0, 0x70bd26, 0x0, {}, [{0x118, 0x1, [@m_mirred={0x114, 0xa, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x20000000, 0x8, 0x7fe}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1a20, 0x0, 0x10000000, 0x6, 0x3}, 0x3, r5}}]}, {0xa7, 0x6, "b11dba774d3da7b0f8c2d343718cd08493e9d795d96c2381e343b166a9ce2bdd576de82391762a99046969fbd7fc81dac051e71e75cabc710d9283de09d443f2ece319b68e836fd835323862ca86ce5a2160efbaca25b31176e109918bd724dd031e08d0ae56bac6e424fbeddbfe87ca2b0c569cf3e8a249c5a2143388ae78c044874699ff0a8d17da270a691b162eac563bcd91cf59c6122a3d1bc11ec021c1da4475"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40815}, 0x4000000)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=':', 0x1}], 0x1)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
sendmmsg$alg(r8, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x840, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0xdd3, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0x4, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0xf17b, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x5, 0x3, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x2, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0xa, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x401, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x6, 0x7, 0x932, 0x6, 0x6a3, 0x2, 0x6, 0x8, 0x80, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x0, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x401, 0x0, 0x1, 0x40, 0x2, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x4, 0x5, 0xfffffffc, 0x1, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x0, 0x6, 0x3, 0x7, 0x0, 0x5ef, 0x9, 0x6, 0xfffffff8, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x42, 0x8, 0x9, 0xe09, 0x800, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x10001, 0x0, 0x423e573a, 0x9, 0x7, 0x2, 0x1, 0x6, 0x6, 0x9, 0x2, 0xfff, 0x40, 0xffff7fff, 0x2, 0x6dc, 0x9f, 0x7fffffff, 0xa, 0xb, 0xe0000000, 0x3, 0x6, 0xf, 0x3, 0x10, 0x4000000, 0x0, 0x10000, 0x8001, 0x9, 0x3, 0x1, 0x1ff, 0x8d14, 0x401, 0xffff, 0x10000, 0x6, 0x3180, 0x8, 0x8, 0x1f1, 0xffff7fff, 0x8, 0x81, 0x40400, 0x0, 0x2, 0x150, 0x7, 0x9, 0x8, 0x9, 0x9fa0, 0x3, 0xd97c, 0xf, 0x4, 0xd7, 0x2, 0x4, 0x6, 0x7f, 0x6, 0xa, 0x2, 0x97, 0xfffffff8, 0x1, 0x3, 0xa, 0xffffffb5, 0x8, 0x8, 0x7, 0x10, 0x0, 0x990, 0x3, 0xff, 0x400, 0x6, 0x7, 0xfff, 0x400, 0x1, 0x7, 0xc9f, 0x7, 0x0, 0x2, 0x569, 0x9, 0xffffff59, 0x95, 0x2, 0x8, 0x1f0, 0x5, 0x4, 0x7, 0x163025b1, 0xffff, 0x3498, 0x7, 0x5, 0x4d3, 0xffffff0f, 0x8, 0x81c, 0x3, 0x1, 0x1, 0x401, 0xfffffffc, 0x7, 0x6a8, 0x1, 0x8, 0xb, 0x7fffffff, 0x3, 0x7502, 0x0, 0x40, 0x7fffffff, 0x10, 0xde, 0x0, 0x697f, 0xc, 0x2, 0x0, 0x40, 0x3, 0x8, 0xaed, 0x7, 0x12, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x80000000, 0xffffff98, 0x200, 0x4, 0x6, 0xfffffde1, 0x1, 0xc0c, 0x81, 0x7fffffff, 0x8, 0x9f0, 0x80000001, 0x5, 0xa, 0x8, 0x81, 0x9, 0x1, 0x10001, 0x1, 0xa, 0x80000000, 0xffffac00, 0xb, 0xd31, 0x4, 0x4, 0xaa8b, 0x6, 0x7fff, 0x3bc, 0x10000, 0x3d7b, 0x3c, 0xfffffffc, 0x1b, 0xffffffb3, 0xf, 0x3, 0x2, 0x0, 0x7f, 0x8000, 0x4dd4, 0x2, 0x800, 0x6, 0x1ff, 0x50, 0x109d, 0x10001, 0xe11, 0x1000000, 0x20d, 0xa88, 0x1ff, 0x24f, 0xc, 0x1, 0x100, 0x2, 0x5, 0xbc3d, 0x2, 0xfffffffa, 0x4, 0x2, 0x9, 0x5, 0x1, 0x101]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4000}, 0xc050)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) (async)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="92345a", 0x3}], 0x1)

2.227780333s ago: executing program 0 (id=6483):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x6, 0x8, 0x6, 0x5, 0x1}, @jmp={0x5, 0x0, 0x5, 0x9, 0x5, 0x180, 0xfffffffffffffffc}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x10, 0xa3, &(0x7f0000000340)=""/163, 0x41100, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x1], &(0x7f0000000480)=[{0x1, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x4}, {0x4, 0x4, 0x8, 0x1}, {0x1, 0x2, 0xc, 0x9}, {0x1, 0x3, 0xf, 0x8}, {0x0, 0x1, 0x10, 0x2}], 0x10, 0x3}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)={0xffffffffffffffff, r2})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0xa, [@struct={0x5, 0x1, 0x0, 0x4, 0x0, 0xfff, [{0x3, 0x5, 0x4}]}, @var={0xf, 0x0, 0x0, 0xe, 0x4}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0x7}, {0x10, 0xfffffffa}, {0x5, 0xae}, {0xb, 0x100}, {0x8}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x70, 0x1}, @enum={0xa, 0x5, 0x0, 0x6, 0x4, [{0xc, 0xff}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x10}, {0xf, 0x656824e}]}, @fwd={0x9}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x2, 0x4}, {0x9, 0x6}, {0xb, 0x7fffffff}, {0xc, 0x9}, {0x6, 0xfc}, {0x3, 0x61a6}]}]}, {0x0, [0x61, 0x2e, 0x30, 0x2e, 0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000840)=""/4096, 0x116, 0x1000, 0x1, 0x5, 0x10000}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000018c0)='blkio.bfq.sectors\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x1, 0x6, 0x0, 0x9, 0x20, 0x10}, @generic={0x0, 0x9, 0x2, 0x9519, 0x10}], &(0x7f0000000240)='GPL\x00', 0x8eb, 0xc2, &(0x7f0000000600)=""/194, 0x41100, 0x25, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000001880)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001900)=[r4, r5], &(0x7f0000001940)=[{0x1, 0x3, 0xc, 0xc}, {0x4, 0x2, 0x4, 0x5}], 0x10, 0x3}, 0x94)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0)

2.16976909s ago: executing program 1 (id=6484):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000001ec0))
r1 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b040000000000000000020040001400000011000100"], 0x3c}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x14000000}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x48}}, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x12, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x19)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r7}, 0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c)
listen(0xffffffffffffffff, 0x7d0)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0x15}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3f8)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x18, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xf3d8, 0x0, 0x10, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90)
r10 = socket(0x840000000002, 0x3, 0x100)
getsockopt$inet_mreqn(r10, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2)
r11 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})

2.153128143s ago: executing program 3 (id=6485):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x0, 0x300)
recvfrom(r2, &(0x7f0000000080)=""/31, 0x1f, 0x4020, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r1, 0x0, 0x0, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90)
socket$inet(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
socket$packet(0x11, 0x0, 0x300) (async)
recvfrom(r2, &(0x7f0000000080)=""/31, 0x1f, 0x4020, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r1, 0x0, 0x0, 0x3}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) (async)

2.06825966s ago: executing program 0 (id=6486):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000140)=0x2)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2.053194307s ago: executing program 4 (id=6487):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4)
sendmsg$802154_dgram(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14, &(0x7f0000000440)={&(0x7f0000000380)="31754578a682cada1cdf8fee0e53e6bee7340eb7e5117ddca2b31984e285dd27be993150ec7ccfb2f7f647ef40d89ef75d013f8879e9197d8763ad2f8bf1dae92b5e37dd8d433e0a5f0c6adfb8a848fd0a9243ffbb18193ac527796d5465ce84174df3c7cd12b5ec3a5c50a03306052d6749aaf571c7c460cf9fe68832f7a6399c9f21ccad673a32fcfe1e98d26383764d267fa9bce7f5b3acfff449fb34022ad43f19a946e06fff6d6d", 0xaa}, 0x1, 0x0, 0x0, 0x2404c000}, 0x10040000)
sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0xed, 0xf, '\x00', [@ra={0x5, 0x2, 0x9f6}, @calipso={0x7, 0x50, {0x1, 0x12, 0x8, 0x8, [0x7, 0x3613, 0x3, 0xf, 0x2, 0x0, 0x3, 0x4, 0x6]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x1, 0x9, [0x8000000000000000, 0x7fffffff, 0xfffffffffffffff8]}}]}, 0x80)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e22, 0xe, @empty, 0x5}, 0x1c, 0x0}, 0xc4)

1.900252716s ago: executing program 3 (id=6488):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00'}, 0x99)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r6=>0x0})
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000c40)={'nat\x00', 0xe7, "c0fa18be1aa68fd07655fc8d618829bd574417422028e4d14ddb7a39d2856b629292e02e4e78dda4f99bd27a2e0b29970f4936b35475823f417a5256d62d63e6012f5c47161e843c38389f3751ece652db1da6601833b64e9a2cea7af8c13c1771efee3081b1d22a9ee9c27a71b22b3b5fcf72c73c8d055ddef9accad02d3485196c52798d755089437ecc940f72b41260671e2252c8ceb2805b36603837fb50ccceedd789c298426133585e47fd138e1127417049f4a16a3f4ca773cc613e4213c9246bd3ec77af2f7c4b2e170cbd67d28a55a8a663b286289073293998ad527e636d2b3ccffd"}, &(0x7f0000000d80)=0x10b)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0x4, [@restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x3}, @datasec={0x6, 0xa, 0x0, 0xf, 0x1, [{0x3, 0x7, 0x4}, {0x4, 0x5, 0x3}, {0x3, 0xffffffff, 0x10}, {0x3, 0x8, 0x101}, {0x3, 0x1, 0x101}, {0x3, 0x6, 0x1}, {0x2, 0x3ef0, 0x3}, {0x5, 0xbcc, 0x1}, {0x4, 0xd0f, 0xb}, {0x3, 0xffffff8c, 0x33}], "9c"}, @fwd={0x2}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @volatile={0x5, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0x0, 0x3}, {0xa, 0x5}, {0xd, 0x4}, {0x8, 0x1}, {0xc, 0x1}]}, @datasec={0x7, 0x3, 0x0, 0xf, 0x3, [{0x4, 0xfffffffa}, {0x5, 0x101, 0x6}, {0x4, 0xf71, 0x9}], "ea8ec0"}]}, {0x0, [0x61, 0xbe]}}, &(0x7f0000000540)=""/86, 0x15c, 0x56, 0x0, 0x5, 0x10000}, 0x28)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r9, &(0x7f0000000300), 0x0}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1d, 0xcde, 0x401, 0x8, 0x50, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xed, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0, <r12=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pB    \x00'}, 0x20)
pipe(&(0x7f0000000840)={<r13=>0xffffffffffffffff})
r14 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r14)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r15, &(0x7f0000000000), 0xffffff6a)
r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x16, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0xb, 0x2, 0x1, 0xfffffffffffffff0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000600)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x7, 0x9, 0x5}, 0x10, 0x20b90, r0, 0x4, &(0x7f0000000900)=[r9, r10, r11, r12, r0, r13, r0, r14, r15, r16], &(0x7f0000000940)=[{0x5, 0x2, 0x9, 0x1}, {0x2, 0x1, 0x10, 0x2}, {0x0, 0x4, 0xc, 0x3}, {0x1, 0x5, 0x5, 0xb}], 0x10, 0xf}, 0x94)

1.832176566s ago: executing program 0 (id=6489):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@newtclass={0x4f4, 0x28, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0x5, 0x5}, {0xf, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x1}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x7fff, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x40, 0x5323a814}}]}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x6b6d, 0x6, 0x1, 0x800, 0x3, 0x6, 0xa, 0x7, 0x88, 0x0, 0x15ff, 0x99a1, 0x708, 0x8, 0x0, 0x9, 0x9, 0x800, 0x9a, 0x3, 0x7, 0x6, 0xf, 0x8, 0x10001, 0x4, 0x1, 0x6, 0x6, 0x4, 0x1, 0x100, 0x0, 0x80000000, 0x8, 0x6, 0x1, 0x80000001, 0x8, 0x0, 0x6, 0x7, 0x6, 0xfffffffc, 0x1, 0x3, 0x0, 0x4, 0x3, 0x40, 0x3, 0x1d60f570, 0x6, 0x9, 0x4, 0x6, 0x400, 0x100, 0x4, 0x7fff, 0x7, 0x4c1, 0x1, 0x80, 0x1, 0x3, 0x0, 0x5, 0xf8, 0x1, 0x0, 0x4, 0x6, 0x8, 0x479, 0xfffffffe, 0x1, 0x20000002, 0x1, 0xfffffff8, 0xd, 0x6, 0x6, 0x898, 0x8, 0xffffffff, 0x270b, 0x0, 0x6, 0x3, 0xd, 0x200, 0x7, 0x9, 0x0, 0x100, 0x80000000, 0x28410ec, 0x200, 0xccb, 0x9, 0x1, 0x1cb4fbe7, 0xc, 0x0, 0x1, 0x0, 0x7a6, 0x1, 0xa1d5, 0x6, 0x4, 0x1, 0x200, 0x1, 0x6, 0x2, 0x0, 0x7, 0x681, 0xeb1, 0x7f, 0x3, 0x10000, 0x51, 0xd6, 0x0, 0x4, 0xb, 0x0, 0xffffff00, 0x80000000, 0x1, 0xffffffff, 0x5, 0xda800000, 0x9, 0x2, 0x3, 0x9, 0x8001, 0x9, 0x9, 0x527, 0x76ae7891, 0x0, 0x81, 0x0, 0x3, 0x9, 0xd, 0x4a, 0x3, 0x103, 0x5, 0x6, 0xffffffff, 0x8, 0x0, 0x6, 0x5, 0x3, 0x4, 0x0, 0x5, 0x9, 0xfffff001, 0x5cd9, 0x1, 0x7f, 0x0, 0x3, 0x1000, 0x80, 0xffffffff, 0x2, 0x80000001, 0x8, 0xe, 0x2e6b13a3, 0x3, 0x10001, 0x5, 0x8000, 0x8, 0xfffffffe, 0x4, 0x8001, 0x2, 0x8, 0xfffffffa, 0x9, 0x7, 0xfffffff9, 0x9, 0xc7ba, 0xff, 0xc, 0xfffffffa, 0xba, 0x8000, 0x1, 0x2, 0x2, 0x6, 0xf3f, 0x8fd, 0x9, 0x1, 0x3, 0x8, 0x3, 0x2, 0x8, 0x7, 0x4, 0x800, 0xffffffff, 0x6, 0xb, 0x0, 0x100, 0x200, 0x3, 0x136, 0x3, 0x1ca, 0x0, 0xd, 0x3, 0x5, 0x80000001, 0x643, 0x8, 0x5, 0xc, 0x2, 0x40, 0xc, 0x10000, 0x6, 0x80000001, 0x3, 0x0, 0x5, 0x4, 0xffffff01, 0x4, 0x7f, 0x4, 0x3, 0x70f7, 0xfffffffb, 0x7, 0x1, 0x21]}, @TCA_HTB_CEIL64={0xc, 0x7, 0xe000}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1ff}, @TCA_HTB_PARMS={0x30, 0x1, {{0xf, 0x2, 0x7ff, 0x7, 0x10, 0x101}, {0x3, 0x0, 0x3, 0x0, 0xfe00, 0x2}, 0x7, 0x7, 0x7fffffff, 0x5, 0x7}}]}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027c61a7dd1dbdf250f000000080028"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="c00100001000010000000000000000000000000000000000000000000000000020010000000000000000000000000002000000000000000000000080010000009a00acb49881bd95359a302ef20517f31d74b4411320ad97e8d23d6b3e12ccc08dbbe1e74eb0e1ea6ecd4ef45f51f94f40e498b6b9be7eeb51851c4a3d98b216654fa7bb62cb51ce1b2e45c3df54cae4bc291e2da031f1a0d1a9a98af294415c4536134acfa7c0f2b8d630c0f8565253aa35fcd350", @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0)

1.831535345s ago: executing program 1 (id=6490):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0)
pipe(&(0x7f00000000c0)) (async)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) (async)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={<r3=>0x0, 0x5}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={<r4=>r3, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, @in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x32eb, @loopback, 0x4}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) (async)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
close(r5)
r6 = accept4(r1, 0x0, &(0x7f0000000380), 0x800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e20, @multicast2}}, 0x6, 0x101, 0x8, 0x0, 0x5, 0x8, 0x4}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e20, @multicast2}}, 0x6, 0x101, 0x8, 0x0, 0x5, 0x8, 0x4}, 0x9c)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000480)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x6, @loopback, 0x1000}, @in6={0xa, 0x4e20, 0x45a6, @dev={0xfe, 0x80, '\x00', 0x41}, 0xf}], 0x48)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000500)={<r8=>r4, @in6={{0xa, 0x4e21, 0x99, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa5}}, 0x9, 0x218, 0x8, 0xd, 0x80, 0xffffffff, 0x10}, &(0x7f00000005c0)=0x9c)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)={r8, 0x2e, "02cc08778f4f7fe2e1db4a9e06830094df360ec12df63fb92e70c5c3e94da9ec037eaae5e9beff3aa2253d41788d"}, &(0x7f0000000640)=0x36) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)={r8, 0x2e, "02cc08778f4f7fe2e1db4a9e06830094df360ec12df63fb92e70c5c3e94da9ec037eaae5e9beff3aa2253d41788d"}, &(0x7f0000000640)=0x36)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000006c0)={r3, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x0, @private0, 0x401}]}, &(0x7f0000000700)=0x10)
ioctl$OCFS2_IOC_REFLINK(r7, 0x40186f04, &(0x7f00000007c0)={&(0x7f0000000740)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000780)='.)-,\x00', 0xe1db})
ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000800)=<r10=>0x0)
getuid() (async)
r11 = getuid()
r12 = getgid()
setsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000840)={r10, r11, r12}, 0xc)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000e00)=@filter={'filter\x00', 0xe, 0x2, 0x50c, [0x0, 0x2000000008c0, 0x200000000bb6, 0x200000000be6], 0x0, &(0x7f0000000880), &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x8, 0x883e, 'team_slave_1\x00', 'syzkaller0\x00', 'ip6gretap0\x00', 'ip6gre0\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x7f, 0xff], 0x1d6, 0x24e, 0x2c6, [@comment={{'comment\x00', 0x0, 0x100}}, @time={{'time\x00', 0x0, 0x18}, {{0x6de, 0x5759, 0x1238e, 0x2637, 0xf041, 0x2, 0x1}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x7f, 0xfffc, 0x4, 0x0, 0x0, "9b769787fb0e2ed06f5d8d3190d9131824acdbaadc869e1e773ad1a70d216dd9f37c88cdf53b24f2f0b95a2eaa1973dbe29396277a3df4fad86bd3fcb2a3f3d5"}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x40, 0x1c15, 0x7, 0x1, 0x0, "3c15e4f1b165c7cc24b7b108280868db2a0132ae37f7c4a3d251eed796c421bb2f60d12d1ccaf5761d789fa85d874a3e56d1c6b6ec85f42918ada19fd95283e0"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x5, 0x10, 0x886c, 'macvlan1\x00', 'virt_wifi0\x00', 'geneve1\x00', 'veth1_to_batadv\x00', @random="c957e50ae64b", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x45d427d19fe69021, 0x1b7ddc1460c6f544], 0xde, 0x156, 0x186, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x6}, {0x8}]}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x8, 0x2}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x7, 0x5, 0x0, 0x0, "13d16edc6bd440ef7c53460077ddf8596e1696c44520542a8d4411517cadf96b044c526e53272d823ea3d73adf81a418f320cb721c714c223cdcbf1ba4a0133e"}}}], @common=@STANDARD={'\x00', 0x8, {0xe5f9cae157dadec}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x584)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0xc7bbdc45afd97089}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x72}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x40080) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0xc7bbdc45afd97089}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x72}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x40080)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000f80)={r4, 0x8}, 0x8)
pipe(&(0x7f0000000fc0)) (async)
pipe(&(0x7f0000000fc0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r14, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x8446f2edfb6ebc01}, 0xc011)

1.791758706s ago: executing program 4 (id=6491):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x0, 0x20}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0)
listen(r0, 0x0)
listen(r0, 0x7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg$unix(r4, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="f36088e85e", 0x5}], 0x1, 0x0, 0x0, 0x20060000}}], 0x1, 0x0)
sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r6, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

1.562210575s ago: executing program 3 (id=6492):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfa69, 0x8001}, 0x48)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0x5, 0x18, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.492207809s ago: executing program 4 (id=6493):
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000080)={0x401, 0x8})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004800500030002000000050003000000000005000300000000000500030001e0ff000500030002"], 0x50}}, 0x0)

1.39141892s ago: executing program 4 (id=6494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706e6aa9cc54e6ebe1ca0458d380f8281030000000000000000000000000a05000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x4000080)
ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000000)={'tunl0\x00', @ifru_names='bond_slave_1\x00'})

1.2862618s ago: executing program 3 (id=6495):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=<r6=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0000}, 0x40805)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xd}]}}}]}, 0x38}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
r7 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42e}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42e}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@dellinkprop={0xe8, 0x6d, 0x2, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x880}, [@IFLA_OPERSTATE={0x5, 0x10, 0xd}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'dvmrp1\x00'}, {0x14, 0x35, 'veth1_macvtap\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'team_slave_1\x00'}]}, @IFLA_BROADCAST={0xa}, @IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000010)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)

1.135508659s ago: executing program 4 (id=6496):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@loopback, 0x4e23, 0x2, 0x4e20, 0x6, 0xa, 0xa0, 0x20, 0x3c}, {0x0, 0x9031, 0x9, 0x0, 0xfffffffffffffff4, 0x4, 0x7, 0x7}, {0x8001, 0x5, 0x71a, 0x9}, 0x9, 0x6e6bbe, 0x1, 0x7bbbbeaf0e80c2d7, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x34ff, 0x0, 0x3, 0xd, 0x1, 0x81d, 0xb}}, 0xe8) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x81)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0)

1.092851114s ago: executing program 0 (id=6497):
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r0=>0x0, 0x8}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x20b, 0x8, 0x1, r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0x0, 0xd, 0x809, 0x35, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0xe, 0x9}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x4, @val=@tracing={0xffffffffffffffff, 0x800}}, 0x20)
r5 = socket$inet6(0xa, 0xa, 0x7f)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000280)={<r6=>r0, 0x7fff}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000300)={<r7=>r0, @in6={{0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x30d}}, 0x2, 0x8, 0x3, 0x2f, 0x10000}, &(0x7f00000003c0)=0x98)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x12)
ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000400)="e8c8707bf91d5cf7ee1146a6a4284d8129d494bebd47")
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000440)={0x40, 0x800c, 0x48d, 0x1, r7}, 0x10)
socket$alg(0x26, 0x5, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000480)={@void, @val={0x2, 0x8c, 0xfff8, 0x0, 0x1, 0x1200}, @ipv6=@dccp_packet={0x9, 0x6, "5ab515", 0x373, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, {[@fragment={0x30, 0x0, 0x2, 0x0, 0x0, 0x8, 0x64}, @srh={0x3a, 0xc, 0x4, 0x6, 0x3, 0x8, 0xc, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x5c, 0x47, '\x00', [@generic={0x5, 0xc2, "e219093ce109f94462d3e68ed38170e609234928a15fe19b0fc05c4ec8f6a48c448f5f98b9545b3884b3b178141d8203a8cdcbf93802f9ab41ea2df7cabcffed906ae224857b4280e43f2ea20f32e3d7d7b9fbe44eae02c153a7683fcd242b89ee193d8bfdde5e6d54f11ebb1e8ae41124a0fdcb733b7e21cc3b56c37d860e180a73afb6b85b68fd414d7a8097673e8180ea082c111b4fd5f47fce4c950b80ed15f0706a5c790884b53ba1e3b3c10f128dd27c65e8fa480392465b78c5a9a38824e6"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x81, 0xec, "85484ae7a9ab35512a4d4c7452e711d5c10a7592bec09e793e0a62f19c32ec6dbca0b163143f8abb7a6d9cc4c66deeb04905d9f2ff9eb6afc0c4fbf3a2f661309bf453fcc03281397d1a63a2735029da156cf1b747a90b8bb97aaabfe4b6d2ea3387e63b7e2fcc4270f8675c598c9734f2e1830e2a70b043f3d48718da25436a9401f78bd61b9b0339991a27a5644d704997b6ff74b872cb2d6ad1ce1c0a515db3aafadeb8d7279f0b668fddfe7a0b8807ddf15ca65479e0e98aab623bf123f0b1388679b7f4934aa689a03c30de7ff82c0c85d91e30f005b363e58f6c134fa735fde9595a60b2adb7ea06dc"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @generic={0x3, 0x5d, "55f72792711e870db741ee6ec5bd365adc32b306a5f2178e32255a3c850cf4c199f98f2d0d3d4bc705365b07162d8cd92e290e0b2c3c8451174000cc475e46323cda355178bc4b06c28050ab7b30dd0d51b6b7bfa184de3da40f0edd1a"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0x4, 0x2, 0x5, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x2, "d038ef", 0x7c, "eaf697"}, "78cf1af660765a6099b0f66cff55173c8ad8171f8411e0a748d7823fe0eb08e73fa7d7b446ab4fcc5b051536b3c8f99c34c2ecb6bc841407987bdd7bbb879b72d75845808710185a2c8d3233dc48c6ae51d169d575eaee72ca1fb74e8d4ea2d8de0f6cb962a077aad005aee0edda1cc85a31c186d6033eb744e45fc522f4c80b0e0172"}}}}, 0x3a5)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r2, r2, 0xa, 0x0, @void}, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r9, 0xf507, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000a00)=r3, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000a40)={r0, 0x9}, 0x8)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r9, 0x5000940e, &(0x7f0000000a80)={{r9}, "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"})
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000001a80)={r6, 0x2}, &(0x7f0000001ac0)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001b00)={r7, 0x3}, &(0x7f0000001b40)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000001b80)={<r12=>r7, 0x64, "4a18e0ab57af6edd6f2afb2fbb7cce7fe17a9e742e3c06c9d7e07ac6540573afa368dd2652fdf4aa1f6cdf5414f33f3b394e8d7c74b6179b9fa6f3d3574af87cc70b40b2b12ebaffccb3c2bd4dac086d7af2d6edd14ff03d363c161b945ed6f3f7155c9d"}, &(0x7f0000001c00)=0x6c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001c40)={0x8, 0x8002, 0x101, 0x8, r12}, &(0x7f0000001c80)=0x10)
setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000001cc0)={{0xa, 0x4e24, 0x5, @mcast1}, {0xa, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, 0x0, {[0x7fffffff, 0x401, 0x4, 0x6c0801e8, 0x14f, 0xbf8, 0xa66, 0x3]}}, 0x5c)

875.579112ms ago: executing program 1 (id=6498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x49}, @TCA_IFE_METALST={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

607.792858ms ago: executing program 0 (id=6499):
sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="53fb7bdc0f56297e8d81469a615db4192f58aa8c358d9957d4f84ba90ec0a5bfe9ec59611f6a064f", 0x28}], 0x0, 0x0, 0x24c0}}], 0x1, 0x60040d1) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="53fb7bdc0f56297e8d81469a615db4192f58aa8c358d9957d4f84ba90ec0a5bfe9ec59611f6a064f", 0x28}], 0x0, 0x0, 0x24c0}}], 0x1, 0x60040d1)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
getpeername(r0, &(0x7f0000000000)=@caif=@dbg, &(0x7f0000000100)=0x80)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x5, 0x84) (async)
r3 = socket$kcm(0x2, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', <r6=>0x0, 0x8000, 0x40, 0x8, 0x8, {{0x2d, 0x4, 0x2, 0x0, 0xb4, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x2c, 0x64, 0x0, 0x7, [0x5, 0x7, 0xa, 0x7, 0x2, 0x6, 0x1ff, 0x2, 0x480, 0x3]}, @ssrr={0x89, 0x7, 0xb8, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0x61, 0x1, 0x1, [{@remote, 0x4c9b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1c}, {@rand_addr=0x64010101, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x8}, {@private=0xa010101, 0xd69}]}, @timestamp={0x44, 0xc, 0x72, 0x0, 0x5, [0x2, 0x5]}, @noop, @timestamp={0x44, 0x10, 0x11, 0x0, 0x4, [0xbab, 0x7, 0x4]}, @timestamp={0x44, 0x10, 0x2b, 0x0, 0x5, [0x10e, 0x0, 0x5]}, @timestamp_addr={0x44, 0x14, 0x3c, 0x1, 0x6, [{@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x1}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'gre0\x00', <r7=>0x0, 0x7800, 0x10, 0x921, 0x9, {{0xe, 0x4, 0x0, 0xd, 0x38, 0x66, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, {[@ssrr={0x89, 0x23, 0x10, [@dev={0xac, 0x14, 0x14, 0x33}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010100, @empty, @multicast2, @multicast2]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="92ad981b335c7047d0b458fc8ba11d2eee", @ANYRES16=r5, @ANYBLOB="040029bd7000ffdbdf2510000000080006000700000008000700010000000800060003000000080006000500000070000180140002007665746831000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800030003000000140002006e6963766630000000000000000000000800030002000000140002006970766c616e31000000000000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="080007000400000008000900d13d0000"], 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x801) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="92ad981b335c7047d0b458fc8ba11d2eee", @ANYRES16=r5, @ANYBLOB="040029bd7000ffdbdf2510000000080006000700000008000700010000000800060003000000080006000500000070000180140002007665746831000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800030003000000140002006e6963766630000000000000000000000800030002000000140002006970766c616e31000000000000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="080007000400000008000900d13d0000"], 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x801)
setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000200001002dbd7000000000000a801040000000080000000014000200fe9d00000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000200001002dbd7000000000000a801040000000080000000014000200fe9d00000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r10)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r10, 0x24, 0x0, 0xfffc, &(0x7f0000000140)=[0x0], 0x4000000000000128, 0x0, 0x0, 0x0, 0x0}, 0x40)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r12, &(0x7f0000000840), 0x2, 0x0)
r13 = openat$cgroup_freezer_state(r12, &(0x7f0000000040), 0x2, 0x0)
close(r13)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68)

0s ago: executing program 4 (id=6500):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x1)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x24, r6, 0xa5c59466aaff822d, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0xfffffffffffffdd5, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48005}, 0x64040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f00000000c0)=0xfffffffc, 0x4)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, 0x0, &(0x7f0000000080))
listen(0xffffffffffffffff, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022ebd700000000000b1789488c6b90f000000080003001847a895537ea1c4bea0cecc7913d780a98f4681d55c2599e4e02bc4620c2c811701074e05566af33cdac640f3fdf2", @ANYRES32=0x0, @ANYBLOB="32000e006512505050505050ffffffffffff0802110000008c187a0ef4a4b0ec2344779d788579b5a92f543f515e467cee7e0000"], 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000c}, 0x40004)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000940)={'tunl0\x00', <r9=>0x0, 0x10, 0x8, 0x200, 0x8, {{0x52, 0x4, 0x2, 0x1, 0x148, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4}, @generic={0x86, 0x12, "d2472d130671cbe4ef65eca4ae59475a"}, @timestamp_prespec={0x44, 0x2c, 0x9d, 0x3, 0x9, [{@remote, 0x1800000}, {@remote, 0x1}, {@broadcast, 0x2}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x5}]}, @lsrr={0x83, 0x17, 0x18, [@dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2]}, @cipso={0x86, 0x3a, 0x0, [{0x0, 0xf, "c2de7e5e98c819dc88e8f8e02b"}, {0x5, 0x11, "5485f47197696f543bea7d863b6cce"}, {0x0, 0xd, "513bf894ef756409e7092e"}, {0x2, 0x4, "26f7"}, {0x7, 0x3, '\a'}]}, @cipso={0x86, 0x66, 0x1, [{0x6, 0x11, "eb394b52c62ab77e61be912c7842a2"}, {0x3, 0x10, "d90b214677d4e307803ed8dc3e01"}, {0x5, 0x10, "4c65e91c118a3cdb2f941a997fc0"}, {0x0, 0xd, "02e2dad006a72f8c856ec3"}, {0x7, 0x12, "b8130200000000040000000000000000"}, {0x6, 0xa, "86e811379d09de9c"}, {0x2, 0x6, "18073202"}]}, @lsrr={0x83, 0x7, 0xd8, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x7b, [@empty]}, @lsrr={0x83, 0xf, 0xa4, [@broadcast, @multicast1, @local]}, @timestamp={0x44, 0x1c, 0xfe, 0x0, 0x9, [0x5, 0x2, 0x9, 0x10000, 0x9, 0x2]}]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0500000002000000000000000000000000d500"/28], 0x50)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r1], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004)

kernel console output (not intermixed with test programs):

z.0.5039': attribute type 16 has an invalid length.
[  563.445516][T25063] vlan3: entered allmulticast mode
[  563.451935][T25063] syz_tun: entered allmulticast mode
[  563.519378][T25071] netlink: 'syz.1.5046': attribute type 13 has an invalid length.
[  563.855296][T25078] bridge3: entered promiscuous mode
[  563.867808][T25078] bridge3: entered allmulticast mode
[  563.879492][T25078] team0: Port device bridge3 added
[  563.902491][T25078] bridge0: port 4(team0) entered blocking state
[  563.909066][T25078] bridge0: port 4(team0) entered disabled state
[  563.916714][T25078] team0: entered allmulticast mode
[  563.927657][T25078] team_slave_0: entered allmulticast mode
[  563.941089][T25078] team_slave_1: entered allmulticast mode
[  563.955930][T25078] team0: entered promiscuous mode
[  563.974112][T25078] team_slave_0: entered promiscuous mode
[  563.982773][T25078] team_slave_1: entered promiscuous mode
[  564.109942][T25089] tipc: Started in network mode
[  564.112311][T25091] netlink: 'syz.4.5053': attribute type 15 has an invalid length.
[  564.127999][T25089] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[  564.157821][T25089] tipc: Enabled bearer <eth:macvlan1>, priority 14
[  564.220591][T25096] netlink: 'syz.2.5054': attribute type 1 has an invalid length.
[  564.398809][T25100] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  564.462254][T25105] veth11: entered promiscuous mode
[  564.902359][T25133] netlink: 'syz.2.5065': attribute type 23 has an invalid length.
[  565.000525][T10693] net_ratelimit: 26 callbacks suppressed
[  565.000542][T10693] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  565.151198][T10691] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  565.278453][ T5755] tipc: Node number set to 10463914
[  565.325640][T25161] netlink: 'syz.3.5073': attribute type 3 has an invalid length.
[  565.351158][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  565.470910][T10693] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  565.620672][T10695] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  565.649688][T25181] netlink: 'syz.2.5079': attribute type 6 has an invalid length.
[  565.712103][T25184] __nla_validate_parse: 13 callbacks suppressed
[  565.712119][T25184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5082'.
[  565.830838][T10693] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  565.970940][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  566.101645][T10693] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  566.122012][T25204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'.
[  566.148116][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5091'.
[  566.175602][T25204] netlink: 'syz.0.5091': attribute type 14 has an invalid length.
[  566.199291][T25204] netlink: 'syz.0.5091': attribute type 13 has an invalid length.
[  566.251734][T10693] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  566.370371][T10691] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  566.477465][T25227] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5097'.
[  569.017648][T25269] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5103'.
[  569.028669][T25269] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5103'.
[  569.162961][T25275] netlink: 'syz.3.5104': attribute type 9 has an invalid length.
[  569.355708][T25290] netlink: 'syz.2.5108': attribute type 1 has an invalid length.
[  569.855148][T25318] xt_CT: You must specify a L4 protocol and not use inversions on it
[  570.051925][T10711] net_ratelimit: 8 callbacks suppressed
[  570.051944][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  570.678700][T25344] syzkaller1: entered promiscuous mode
[  570.690694][T25344] syzkaller1: entered allmulticast mode
[  570.860842][  T155] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  571.002128][T10695] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  571.142100][T10693] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  571.290412][T10695] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  571.421461][T10691] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  571.541112][T10693] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  571.670272][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  571.726004][T25407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5135'.
[  571.803387][T10693] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  571.940524][T10698] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  572.210813][T25433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5142'.
[  572.492922][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5149'.
[  572.532624][T25450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5149'.
[  572.597896][T25450] geneve5: entered promiscuous mode
[  572.614095][T25450] geneve5: entered allmulticast mode
[  572.808657][T25470] netlink: 'syz.3.5155': attribute type 1 has an invalid length.
[  572.871740][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5156'.
[  572.895457][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5156'.
[  572.906780][T25472] netlink: 'syz.1.5156': attribute type 15 has an invalid length.
[  572.914826][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5156'.
[  572.971946][T25470] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.987823][T25480] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  572.998929][T25480] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  573.009468][T25480] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  573.020130][T25480] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  573.030635][T25480] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  573.058490][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5156'.
[  573.069240][T10691] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  573.096175][T10691] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  573.108634][T25472] netlink: 'syz.1.5156': attribute type 15 has an invalid length.
[  573.123689][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5156'.
[  573.135530][T10691] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  573.311766][T25486] x_tables: ip_tables: sctp match: only valid for protocol 132
[  573.370045][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5164'.
[  573.710765][T25519] netlink: 'syz.2.5169': attribute type 1 has an invalid length.
[  573.849729][T25519] bond6: entered promiscuous mode
[  573.856055][T25519] 8021q: adding VLAN 0 to HW filter on device bond6
[  573.928680][T25519] bond6: (slave bridge5): making interface the new active one
[  573.936823][T25519] bridge5: entered promiscuous mode
[  573.948606][T25519] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  574.359331][T25551] xt_CT: No such helper "pptp"
[  574.588774][T25565] TCP: TCP_TX_DELAY enabled
[  574.653378][T25574] netem: change failed
[  574.675885][T25574] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  575.015900][T25591] xt_hashlimit: size too large, truncated to 1048576
[  575.112737][T25600] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  575.150547][T10711] net_ratelimit: 20 callbacks suppressed
[  575.150566][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  575.352975][T10707] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  575.466056][T25620] netlink: 'syz.2.5191': attribute type 3 has an invalid length.
[  575.499070][T25620] netlink: 'syz.2.5191': attribute type 1 has an invalid length.
[  575.507611][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  575.519198][T25620] NCSI netlink: No device for ifindex 813332851
[  575.610438][T25626] netlink: 'syz.0.5193': attribute type 21 has an invalid length.
[  575.620345][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  575.775996][T25626] bond13: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  575.805132][T25626] bond13 (unregistering): Released all slaves
[  575.851695][T10707] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  576.012660][T25645] xt_policy: output policy not valid in PREROUTING and INPUT
[  576.026090][T10695] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  576.168901][T10707] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  576.248589][T25660] netlink: 'syz.1.5204': attribute type 21 has an invalid length.
[  576.319305][T10707] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  576.350430][T25662] netlink: 'syz.0.5205': attribute type 1 has an invalid length.
[  576.376117][T25662] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  576.471039][T10707] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  576.643951][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  577.062537][T25705] xt_CT: You must specify a L4 protocol and not use inversions on it
[  577.169420][T25714] syzkaller0: entered promiscuous mode
[  577.199479][T25714] syzkaller0: entered allmulticast mode
[  577.315270][T25721] __nla_validate_parse: 10 callbacks suppressed
[  577.315290][T25721] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5224'.
[  577.468957][T25724] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5225'.
[  577.689271][T25738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5228'.
[  577.750767][T25743] netlink: 'syz.4.5230': attribute type 1 has an invalid length.
[  577.793599][T25743] xt_hashlimit: size too large, truncated to 1048576
[  577.881766][T25748] bridge_slave_0 (unregistering): left allmulticast mode
[  577.899511][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5232'.
[  577.929472][T25748] bridge_slave_0 (unregistering): left promiscuous mode
[  577.959057][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5232'.
[  577.989046][T25748] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.632644][T25779] x_tables: ip_tables: TRACE target: only valid in raw table, not 
[  579.142956][T25803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5243'.
[  579.295140][T25808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5245'.
[  579.573784][T25822] netlink: 'syz.3.5248': attribute type 7 has an invalid length.
[  579.646478][T25823] netlink: 'syz.3.5248': attribute type 7 has an invalid length.
[  579.847171][T25844] IPv6: NLM_F_CREATE should be specified when creating new route
[  579.986142][T25851] syzkaller1: entered promiscuous mode
[  580.013726][T25851] syzkaller1: entered allmulticast mode
[  580.320450][T10691] net_ratelimit: 21 callbacks suppressed
[  580.320469][T10691] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  580.471938][T10693] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  580.532809][T25878] netlink: 'syz.4.5264': attribute type 12 has an invalid length.
[  580.621092][T10707] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  580.760514][T10707] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  580.910615][T10707] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  581.045766][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  581.133846][T25914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5276'.
[  581.154673][T25910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5274'.
[  581.180330][T10707] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  581.309596][T25928] bond0: option ad_select: unable to set because the bond device is up
[  581.350299][T10712] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  581.457507][T25932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5279'.
[  581.531398][T10711] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  581.553582][T25933] syzkaller0: entered promiscuous mode
[  581.559092][T25933] syzkaller0: entered allmulticast mode
[  581.586202][T25939] block nbd0: NBD_DISCONNECT
[  581.617743][T25939] block nbd0: Send disconnect failed -32
[  581.645162][T25939] block nbd0: shutting down sockets
[  581.668661][T25938] tcf_pedit_act: 22 callbacks suppressed
[  581.668677][T25938] tc action pedit offset must be on 32 bit boundaries
[  581.684746][T10691] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  581.739753][    C0] blk_print_req_error: 138 callbacks suppressed
[  581.739773][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.755211][    C0] buffer_io_error: 138 callbacks suppressed
[  581.755225][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  581.791153][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.800288][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  581.812882][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.822028][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  581.831499][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.840613][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  581.857471][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  581.857514][T25947] bond7: Unable to set down delay as MII monitoring is disabled
[  581.878921][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[  581.887658][   T11] Buffer I/O error on dev nbd0, logical block 1, async page read
[  581.896222][   T11] Buffer I/O error on dev nbd0, logical block 2, async page read
[  581.904969][   T11] Buffer I/O error on dev nbd0, logical block 3, async page read
[  581.913732][T25947] bond7 (unregistering): Released all slaves
[  581.913986][ T5630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.930045][ T5630] Buffer I/O error on dev nbd0, logical block 0, async page read
[  581.938105][ T5630] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.947761][ T5630] Buffer I/O error on dev nbd0, logical block 1, async page read
[  581.956179][ T5630] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.965488][ T5630] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.974974][ T5630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.986660][ T5630] ldm_validate_partition_table(): Disk read failed.
[  581.995461][ T5630] Dev nbd0: unable to read RDB block 0
[  582.003205][ T5630]  nbd0: unable to read partition table
[  582.078522][ T4995] udevd[4995]: worker [5630] terminated by signal 9 (Killed)
[  582.089045][ T4995] udevd[4995]: worker [5630] failed while handling '/devices/virtual/block/nbd0'
[  582.140780][T25956] gre2: entered promiscuous mode
[  582.164616][T10698] bridge_slave_1: left allmulticast mode
[  582.174724][T10698] bridge_slave_1: left promiscuous mode
[  582.181298][T10698] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.195177][T10698] bridge_slave_0: left allmulticast mode
[  582.201141][T10698] bridge_slave_0: left promiscuous mode
[  582.206968][T10698] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.572969][T10698] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  582.584328][T10698] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[  582.698073][   T57] smc: removing ib device syz1
[  582.783590][T10698] bond5 (unregistering): (slave gretap2): Releasing active interface
[  582.790932][   T57] smbdirect: ib_dev[syz1] removed
[  582.877553][T10698] bond7 (unregistering): (slave gretap3): Releasing backup interface
[  583.062586][T10698] bond1 (unregistering): (slave geneve2): Releasing active interface
[  583.287710][T10698] bond1 (unregistering): Released all slaves
[  583.360943][T10698] bond2 (unregistering): Released all slaves
[  583.393260][T10698] bond3 (unregistering): Released all slaves
[  583.423484][T10698] bond4 (unregistering): Released all slaves
[  583.485666][T10698] bond5 (unregistering): Released all slaves
[  583.573533][T10698] bond6 (unregistering): Released all slaves
[  583.639400][T10698] bond7 (unregistering): (slave bond8): Releasing backup interface
[  583.648983][T10698] bond7 (unregistering): Released all slaves
[  583.706246][T10698] bond8 (unregistering): Released all slaves
[  583.763888][T10698] bond9 (unregistering): Released all slaves
[  583.859604][T10698] bond0 (unregistering): left promiscuous mode
[  583.868087][T10698] bond0 (unregistering): Released all slaves
[  583.913650][T10698] bond10 (unregistering): (slave veth3): Releasing backup interface
[  583.938352][T10698] bond10 (unregistering): Released all slaves
[  584.018179][T10698] bond11 (unregistering): Released all slaves
[  584.075299][T10698] bond12 (unregistering): Released all slaves
[  584.207911][T10698] bond13 (unregistering): (slave lo): Releasing backup interface
[  584.217177][T10698] bond13 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  584.242322][T10698] bond13 (unregistering): Released all slaves
[  584.344202][T25947] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  584.382903][ T9943] xfrm0 speed is unknown, defaulting to 1000
[  584.465374][ T9943] syz1: Port: 1 Link DOWN
[  584.799339][T25995] __nla_validate_parse: 2 callbacks suppressed
[  584.799357][T25995] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5296'.
[  584.882930][T25995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5296'.
[  584.900509][T25995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5296'.
[  584.945970][T26001] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5295'.
[  584.968129][T25998] syzkaller0: entered promiscuous mode
[  584.990333][T25998] syzkaller0: entered allmulticast mode
[  585.009660][T26004] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5299'.
[  585.106120][T26005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5299'.
[  585.207573][T26012] netlink: 'syz.3.5300': attribute type 21 has an invalid length.
[  585.408904][T26016] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5303'.
[  585.647636][T26016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  585.697872][T26016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  585.726272][T26016] bond0 (unregistering): Released all slaves
[  585.868074][T26032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5303'.
[  585.916596][T26039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5303'.
[  585.996202][T26046] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5309'.
[  586.135217][T26051] rdma_rxe: rxe_newlink: failed to add xfrm0
[  586.368452][T10690] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  586.404192][ T8000] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  586.412516][T10690] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  586.458210][ T8000] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  586.509256][T26075] Unsupported ieee802154 address type: 0
[  586.561194][ T9943] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  586.815227][T10698] tipc: Disabling bearer <udp:syz2>
[  586.839587][T10698] tipc: Left network mode
[  586.951040][T10698] IPVS: stopping backup sync thread 17002 ...
[  587.363686][T26119] netlink: 'syz.2.5328': attribute type 15 has an invalid length.
[  587.928328][T26141] netlink: 'syz.2.5334': attribute type 14 has an invalid length.
[  587.956750][T26146] xt_hl: Unknown Hop Limit match mode: 206
[  587.989776][T26151] netlink: 'syz.4.5335': attribute type 3 has an invalid length.
[  588.208168][T26158] syzkaller1: entered promiscuous mode
[  588.239079][T26158] syzkaller1: entered allmulticast mode
[  588.576436][T26182] sctp: [Deprecated]: syz.3.5346 (pid 26182) Use of int in maxseg socket option.
[  588.576436][T26182] Use struct sctp_assoc_value instead
[  588.821677][T26190] netlink: 'syz.1.5352': attribute type 12 has an invalid length.
[  588.831541][T26189] net_ratelimit: 1 callbacks suppressed
[  588.831558][T26189] openvswitch: netlink: IP tunnel dst address not specified
[  588.874334][T26190] netlink: 'syz.1.5352': attribute type 29 has an invalid length.
[  589.203598][T26207] netlink: 'syz.0.5359': attribute type 1 has an invalid length.
[  589.442117][T26207] bond13: entered promiscuous mode
[  589.458809][T26207] 8021q: adding VLAN 0 to HW filter on device bond13
[  589.489323][T26218] bond13: (slave bridge7): making interface the new active one
[  589.497952][T26218] bridge7: entered promiscuous mode
[  589.506006][T26218] bridge7: left promiscuous mode
[  589.567404][T10698] batadv0: left promiscuous mode
[  589.758665][T10698] hsr_slave_0: left promiscuous mode
[  589.768082][T10698] hsr_slave_1: left promiscuous mode
[  589.774830][T10698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  589.784565][T10698] batman_adv: batadv0: Removing interface: batadv_slave_0
[  589.809074][T10698] veth1_macvtap: left promiscuous mode
[  589.815420][T10698] veth0_macvtap: left promiscuous mode
[  589.938398][T10698] pim6reg (unregistering): left allmulticast mode
[  590.081032][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  590.106759][T10691] smc: removing ib device syz2
[  590.212066][T26248] __nla_validate_parse: 15 callbacks suppressed
[  590.212110][T26248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5369'.
[  590.240299][T26248] netlink: 'syz.4.5369': attribute type 7 has an invalid length.
[  590.248320][T26248] netlink: 'syz.4.5369': attribute type 8 has an invalid length.
[  590.257098][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5369'.
[  590.424226][T26228] netlink: 'syz.3.5362': attribute type 1 has an invalid length.
[  590.433450][T26228] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5362'.
[  590.547411][T10691] smbdirect: ib_dev[syz2] removed
[  590.708036][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5371'.
[  590.728336][T26262] netlink: 'syz.4.5371': attribute type 30 has an invalid length.
[  590.781109][T26262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5371'.
[  590.982686][T26275] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5376'.
[  591.785212][T26300] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  591.828938][T26300] bond7 (unregistering): Released all slaves
[  591.875996][T26316] set match dimension is over the limit!
[  592.607883][T26331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  593.063039][T26364] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5399'.
[  594.344929][T26424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5414'.
[  594.374839][T26424] validate_nla: 1 callbacks suppressed
[  594.374855][T26424] netlink: 'syz.3.5414': attribute type 3 has an invalid length.
[  594.457632][T26424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5414'.
[  594.508282][T26424] netlink: 'syz.3.5414': attribute type 3 has an invalid length.
[  594.687771][T26392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5405'.
[  594.912520][T26448] netlink: 'syz.3.5418': attribute type 1 has an invalid length.
[  595.143252][T26448] bond7: entered promiscuous mode
[  595.168283][T26448] 8021q: adding VLAN 0 to HW filter on device bond7
[  595.294421][T26438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5417'.
[  595.533131][T26462] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  595.665874][T10698] IPVS: stop unused estimator thread 0...
[  596.114447][T26469] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  596.148630][T26469] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  596.151247][T26489] sctp: [Deprecated]: syz.1.5427 (pid 26489) Use of struct sctp_assoc_value in delayed_ack socket option.
[  596.151247][T26489] Use struct sctp_sack_info instead
[  596.481785][T26500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5428'.
[  596.779617][T26516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5431'.
[  596.829975][T26516] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5431'.
[  596.874672][T26520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.895929][T26516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5431'.
[  597.032618][T26525] netlink: 'syz.0.5433': attribute type 2 has an invalid length.
[  597.227995][T26537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5435'.
[  597.265926][T26537] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  597.326740][T26537] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  597.363967][T26537] gretap1: entered promiscuous mode
[  597.387384][T26537] gretap1: entered allmulticast mode
[  597.405002][T10711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  597.447678][T26551] syz.2.5439: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  597.537382][T26551] CPU: 1 UID: 0 PID: 26551 Comm: syz.2.5439 Not tainted syzkaller #0 PREEMPT(full) 
[  597.537410][T26551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  597.537427][T26551] Call Trace:
[  597.537438][T26551]  <TASK>
[  597.537447][T26551]  dump_stack_lvl+0xe8/0x150
[  597.537476][T26551]  warn_alloc+0x249/0x340
[  597.537505][T26551]  ? stack_trace_save+0xa9/0x100
[  597.537538][T26551]  ? __pfx_warn_alloc+0x10/0x10
[  597.537574][T26551]  ? kasan_save_track+0x4f/0x80
[  597.537597][T26551]  ? kasan_save_track+0x3e/0x80
[  597.537621][T26551]  ? __kasan_kmalloc+0x93/0xb0
[  597.537646][T26551]  ? __kmalloc_cache_noprof+0x31c/0x660
[  597.537671][T26551]  ? xskq_create+0x56/0x170
[  597.537695][T26551]  ? xsk_setsockopt+0x54c/0x990
[  597.537716][T26551]  ? do_sock_setsockopt+0x17c/0x1b0
[  597.537742][T26551]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  597.537767][T26551]  ? do_syscall_64+0x15f/0xf80
[  597.537799][T26551]  __vmalloc_node_range_noprof+0x132/0x1750
[  597.537857][T26551]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  597.537891][T26551]  ? __kasan_kmalloc+0x93/0xb0
[  597.537924][T26551]  vmalloc_user_noprof+0xad/0xe0
[  597.537950][T26551]  ? xskq_create+0xbf/0x170
[  597.537976][T26551]  xskq_create+0xbf/0x170
[  597.538004][T26551]  xsk_init_queue+0x8a/0xe0
[  597.538032][T26551]  xsk_setsockopt+0x54c/0x990
[  597.538058][T26551]  ? __pfx_xsk_setsockopt+0x10/0x10
[  597.538082][T26551]  ? __pfx_aa_sk_perm+0x10/0x10
[  597.538110][T26551]  ? aa_sock_opt_perm+0xff/0x1a0
[  597.538139][T26551]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  597.538165][T26551]  ? __pfx_xsk_setsockopt+0x10/0x10
[  597.538191][T26551]  do_sock_setsockopt+0x17c/0x1b0
[  597.538223][T26551]  __x64_sys_setsockopt+0x13d/0x1b0
[  597.538252][T26551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.538273][T26551]  do_syscall_64+0x15f/0xf80
[  597.538301][T26551]  ? trace_irq_disable+0x3b/0x140
[  597.538329][T26551]  ? clear_bhb_loop+0x40/0x90
[  597.538352][T26551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.538380][T26551] RIP: 0033:0x7f8d8419ce59
[  597.538401][T26551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.538417][T26551] RSP: 002b:00007f8d85126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  597.538438][T26551] RAX: ffffffffffffffda RBX: 00007f8d84415fa0 RCX: 00007f8d8419ce59
[  597.538452][T26551] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  597.538464][T26551] RBP: 00007f8d84232d6f R08: 0000000000000004 R09: 0000000000000000
[  597.538476][T26551] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  597.538488][T26551] R13: 00007f8d84416038 R14: 00007f8d84415fa0 R15: 00007ffdb32486d8
[  597.538520][T26551]  </TASK>
[  597.892286][T26551] Mem-Info:
[  597.898443][T26563] netlink: 'syz.1.5441': attribute type 2 has an invalid length.
[  597.909205][T26551] active_anon:6282 inactive_anon:0 isolated_anon:0
[  597.909205][T26551]  active_file:3077 inactive_file:40147 isolated_file:0
[  597.909205][T26551]  unevictable:768 dirty:75 writeback:0
[  597.909205][T26551]  slab_reclaimable:12368 slab_unreclaimable:118093
[  597.909205][T26551]  mapped:29375 shmem:1299 pagetables:1389
[  597.909205][T26551]  sec_pagetables:0 bounce:0
[  597.909205][T26551]  kernel_misc_reclaimable:0
[  597.909205][T26551]  free:1291838 free_pcp:19157 free_cma:0
[  597.909576][T26563] netlink: 'syz.1.5441': attribute type 2 has an invalid length.
[  597.989963][T26566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5443'.
[  598.000329][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  598.022818][T26551] Node 0 active_anon:25228kB inactive_anon:0kB active_file:12308kB inactive_file:160376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117500kB dirty:296kB writeback:0kB shmem:3660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14712kB pagetables:5416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  598.058326][T26551] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  598.074698][T26568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5443'.
[  598.095220][T26551] Node 0 DMA free:15332kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:16kB free_cma:0kB
[  598.156476][T26551] lowmem_reserve[]: 0 2492 2493 2493 2493
[  598.177228][T26551] Node 0 DMA32 free:1251156kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25228kB inactive_anon:0kB active_file:12308kB inactive_file:160376kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2552548kB mlocked:0kB bounce:0kB free_pcp:41372kB local_pcp:20572kB free_cma:0kB
[  598.280697][T26551] lowmem_reserve[]: 0 0 0 0 0
[  598.293084][T26551] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB
[  598.390477][T26551] lowmem_reserve[]: 0 0 0 0 0
[  598.406611][T26551] Node 1 Normal free:3900756kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:34604kB local_pcp:18968kB free_cma:0kB
[  598.460111][T26581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5447'.
[  598.493430][T26551] lowmem_reserve[]: 0 0 0 0 0
[  598.518380][T26551] Node 0 DMA: 1*4kB (U) 0*8kB 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15332kB
[  598.586363][T26551] Node 0 DMA32: 10869*4kB (UME) 6920*8kB (UME) 3982*16kB (UME) 993*32kB (UME) 591*64kB (UME) 1004*128kB (UME) 734*256kB (UM) 429*512kB (UM) 243*1024kB (UM) 106*2048kB (UME) 4*4096kB (U) = 1250516kB
[  598.674326][T26551] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  598.712890][T26551] Node 1 Normal: 3*4kB (U) 8*8kB (UM) 11*16kB (UM) 12*32kB (UM) 13*64kB (UM) 10*128kB (UM) 9*256kB (UM) 11*512kB (UM) 7*1024kB (UM) 6*2048kB (U) 945*4096kB (UM) = 3900860kB
[  598.733731][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5453'.
[  598.773960][T26551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  598.818744][T26551] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  598.839216][T26551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  598.866241][T26551] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  598.902974][T26551] 44519 total pagecache pages
[  598.918674][T26551] 0 pages in swap cache
[  598.939983][T26551] Free swap  = 124996kB
[  598.959860][T26551] Total swap = 124996kB
[  598.982487][T26551] 2097051 pages RAM
[  599.006911][T26606] netlink: 'syz.3.5454': attribute type 13 has an invalid length.
[  599.016977][T26551] 0 pages HighMem/MovableOnly
[  599.035375][T26551] 427132 pages reserved
[  599.056824][T26551] 0 pages cma reserved
[  599.083169][T26606] gretap0: refused to change device tx_queue_len
[  599.114517][T26606] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  599.586622][   T30] audit: type=1107 audit(1779615346.084:12): pid=26632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›'
[  599.818364][ T5290] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  600.457828][T26681] vlan3: entered allmulticast mode
[  600.722249][T26689] gre3: entered promiscuous mode
[  600.736915][T26689] gre3: entered allmulticast mode
[  600.870645][T26656] __nla_validate_parse: 3 callbacks suppressed
[  600.870665][T26656] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5466'.
[  601.172141][T26710] IPVS: set_ctl: invalid protocol: 135 172.20.20.54:20001
[  601.218530][T26710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5478'.
[  601.768210][T26753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5488'.
[  602.007057][T26764] netlink: 'syz.1.5493': attribute type 33 has an invalid length.
[  602.078331][T26770] netlink: 33 bytes leftover after parsing attributes in process `syz.2.5494'.
[  602.105344][T26769] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5495'.
[  602.115377][T26770] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5494'.
[  602.131846][T26770] netlink: 33 bytes leftover after parsing attributes in process `syz.2.5494'.
[  602.218582][T26780] netlink: 'syz.4.5496': attribute type 1 has an invalid length.
[  602.316949][T26792] netlink: 'syz.2.5500': attribute type 30 has an invalid length.
[  602.584570][T26806] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  602.613100][T26810] netlink: 'syz.2.5504': attribute type 4 has an invalid length.
[  602.667238][T26813] netlink: 'syz.2.5504': attribute type 4 has an invalid length.
[  602.708296][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5504'.
[  602.738222][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5504'.
[  602.766606][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5504'.
[  602.860328][T26823] netlink: 'syz.3.5508': attribute type 9 has an invalid length.
[  602.936977][T26828] veth0_to_bond: entered allmulticast mode
[  603.536720][T26864] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  603.964552][T26883] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  604.218767][T26889] vet: renamed from veth0_vlan
[  605.224258][T26954] netlink: 'syz.2.5540': attribute type 1 has an invalid length.
[  605.254319][T26954] netlink: 'syz.2.5540': attribute type 1 has an invalid length.
[  605.566499][T26967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  605.597490][T26962] gre1: entered promiscuous mode
[  605.673516][ T5290] vet: left promiscuous mode
[  605.729383][ T5290] vet: entered promiscuous mode
[  605.902373][T26979] __nla_validate_parse: 46 callbacks suppressed
[  605.902394][T26979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5545'.
[  605.946690][T26979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5545'.
[  606.000660][T26979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5545'.
[  607.159191][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5558'.
[  607.439579][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5561'.
[  607.793632][T27070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5566'.
[  608.127010][T27079] ipt_REJECT: TCP_RESET invalid for non-tcp
[  608.286830][T27088] netlink: 'syz.0.5571': attribute type 13 has an invalid length.
[  608.528219][T27101] batadv2: entered allmulticast mode
[  608.581263][T27100] syzkaller0: entered promiscuous mode
[  608.595332][T27100] syzkaller0: entered allmulticast mode
[  610.923148][T27118] syz.1.5577: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  610.941758][T27118] CPU: 1 UID: 0 PID: 27118 Comm: syz.1.5577 Not tainted syzkaller #0 PREEMPT(full) 
[  610.941784][T27118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  610.941796][T27118] Call Trace:
[  610.941803][T27118]  <TASK>
[  610.941812][T27118]  dump_stack_lvl+0xe8/0x150
[  610.941839][T27118]  warn_alloc+0x249/0x340
[  610.941903][T27118]  ? stack_trace_save+0xa9/0x100
[  610.941956][T27118]  ? __pfx_warn_alloc+0x10/0x10
[  610.941995][T27118]  ? kasan_save_track+0x4f/0x80
[  610.942022][T27118]  ? kasan_save_track+0x3e/0x80
[  610.942048][T27118]  ? __kasan_kmalloc+0x93/0xb0
[  610.942076][T27118]  ? __kmalloc_cache_noprof+0x31c/0x660
[  610.942104][T27118]  ? xskq_create+0x56/0x170
[  610.942132][T27118]  ? xsk_setsockopt+0x54c/0x990
[  610.942155][T27118]  ? do_sock_setsockopt+0x17c/0x1b0
[  610.942182][T27118]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  610.942209][T27118]  ? do_syscall_64+0x15f/0xf80
[  610.942244][T27118]  __vmalloc_node_range_noprof+0x132/0x1750
[  610.942307][T27118]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  610.942343][T27118]  ? __kasan_kmalloc+0x93/0xb0
[  610.942378][T27118]  vmalloc_user_noprof+0xad/0xe0
[  610.942407][T27118]  ? xskq_create+0xbf/0x170
[  610.942438][T27118]  xskq_create+0xbf/0x170
[  610.942471][T27118]  xsk_init_queue+0x8a/0xe0
[  610.942501][T27118]  xsk_setsockopt+0x54c/0x990
[  610.942532][T27118]  ? __pfx_xsk_setsockopt+0x10/0x10
[  610.942558][T27118]  ? __pfx_aa_sk_perm+0x10/0x10
[  610.942589][T27118]  ? aa_sock_opt_perm+0xff/0x1a0
[  610.942630][T27118]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  610.942658][T27118]  ? __pfx_xsk_setsockopt+0x10/0x10
[  610.942686][T27118]  do_sock_setsockopt+0x17c/0x1b0
[  610.942723][T27118]  __x64_sys_setsockopt+0x13d/0x1b0
[  610.942756][T27118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.942780][T27118]  do_syscall_64+0x15f/0xf80
[  610.942810][T27118]  ? trace_irq_disable+0x3b/0x140
[  610.942842][T27118]  ? clear_bhb_loop+0x40/0x90
[  610.942868][T27118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.942888][T27118] RIP: 0033:0x7f50e759ce59
[  610.942911][T27118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.942928][T27118] RSP: 002b:00007f50e8464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  610.942950][T27118] RAX: ffffffffffffffda RBX: 00007f50e7815fa0 RCX: 00007f50e759ce59
[  610.942967][T27118] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  610.942979][T27118] RBP: 00007f50e7632d6f R08: 0000000000000004 R09: 0000000000000000
[  610.942992][T27118] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.943005][T27118] R13: 00007f50e7816038 R14: 00007f50e7815fa0 R15: 00007ffe5b5e8f98
[  610.943040][T27118]  </TASK>
[  610.943060][T27118] Mem-Info:
[  611.017667][T27086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  611.137718][T27120] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5577'.
[  611.168092][T27118] active_anon:6390 inactive_anon:0 isolated_anon:0
[  611.168092][T27118]  active_file:3077 inactive_file:40151 isolated_file:0
[  611.168092][T27118]  unevictable:768 dirty:36 writeback:0
[  611.168092][T27118]  slab_reclaimable:12556 slab_unreclaimable:119910
[  611.168092][T27118]  mapped:29447 shmem:1301 pagetables:1432
[  611.168092][T27118]  sec_pagetables:0 bounce:0
[  611.168092][T27118]  kernel_misc_reclaimable:0
[  611.168092][T27118]  free:1283837 free_pcp:25023 free_cma:0
[  611.168157][T27118] Node 0 active_anon:25560kB inactive_anon:0kB active_file:12308kB inactive_file:160392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117788kB dirty:144kB writeback:0kB shmem:3668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14864kB pagetables:5588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  611.344588][T27125] team0: Device gtp2 is up. Set it down before adding it as a team port
[  611.359423][T27118] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  611.401525][T27118] Node 0 DMA free:15324kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:20kB free_cma:0kB
[  611.432532][T27118] lowmem_reserve[]: 0 2492 2493 2493 2493
[  611.438355][T27118] Node 0 DMA32 free:1242760kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25660kB inactive_anon:0kB active_file:12308kB inactive_file:160392kB unevictable:1536kB writepending:144kB zspages:0kB present:3129332kB managed:2552548kB mlocked:0kB bounce:0kB free_pcp:40956kB local_pcp:20772kB free_cma:0kB
[  611.500099][T27118] lowmem_reserve[]: 0 0 0 0 0
[  611.517093][T27118] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB
[  611.548108][T27118] lowmem_reserve[]: 0 0 0 0 0
[  611.554744][T27118] Node 1 Normal free:3876872kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58540kB local_pcp:30588kB free_cma:0kB
[  611.606101][T27118] lowmem_reserve[]: 0 0 0 0 0
[  611.621391][T27118] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15324kB
[  611.639495][T27118] Node 0 DMA32: 10282*4kB (UME) 7418*8kB (UME) 4258*16kB (UME) 718*32kB (UM) 628*64kB (UME) 1003*128kB (UM) 738*256kB (UME) 429*512kB (UME) 247*1024kB (UME) 108*2048kB (UM) 0*4096kB = 1242840kB
[  611.677671][T27118] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  611.723413][T27118] Node 1 Normal: 5*4kB (U) 9*8kB (UM) 16*16kB (UM) 15*32kB (UM) 14*64kB (UM) 13*128kB (UM) 13*256kB (UM) 13*512kB (UM) 9*1024kB (UM) 8*2048kB (U) 937*4096kB (UM) = 3876924kB
[  611.742158][T27118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  611.752578][T27118] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  611.762325][T27118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  611.772880][T27118] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  611.782882][T27118] 44527 total pagecache pages
[  611.787680][T27118] 0 pages in swap cache
[  611.792338][T27118] Free swap  = 124996kB
[  611.796600][T27118] Total swap = 124996kB
[  611.812948][T27118] 2097051 pages RAM
[  611.857106][T27118] 0 pages HighMem/MovableOnly
[  611.912004][T27118] 427132 pages reserved
[  611.916224][T27118] 0 pages cma reserved
[  611.953978][T27123] bond8 (unregistering): Released all slaves
[  611.981026][T27142] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5582'.
[  612.044797][T27135] bond0: entered promiscuous mode
[  612.068151][T27135] batadv0: entered promiscuous mode
[  612.090450][T27135] debugfs: 'hsr1' already exists in 'hsr'
[  612.096359][T27135] Cannot create hsr debugfs directory
[  612.108344][T27135] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  612.119200][T27135] 8021q: adding VLAN 0 to HW filter on device hsr1
[  612.326548][T27146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5584'.
[  612.427891][T27161] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5589'.
[  612.554916][T27166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5590'.
[  612.658304][T27173] sctp: [Deprecated]: syz.2.5593 (pid 27173) Use of int in max_burst socket option.
[  612.658304][T27173] Use struct sctp_assoc_value instead
[  612.749619][T27177] netlink: 'syz.3.5594': attribute type 5 has an invalid length.
[  612.779255][T27182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5595'.
[  612.788865][T27177] 8021q: VLANs not supported on sit0
[  612.815444][T27177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5594'.
[  612.856588][T27182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5595'.
[  612.894977][T27177] bond8: entered promiscuous mode
[  613.061833][T27195] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5599'.
[  613.072660][T27195] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5599'.
[  613.089447][T27196] netlink: 'syz.3.5600': attribute type 21 has an invalid length.
[  613.109445][T27196] netlink: 'syz.3.5600': attribute type 5 has an invalid length.
[  613.128681][T27196] netlink: 'syz.3.5600': attribute type 6 has an invalid length.
[  613.360558][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  613.598168][T27220] IPv6: NLM_F_CREATE should be specified when creating new route
[  614.247673][T27262] lo speed is unknown, defaulting to 1000
[  614.265937][T27262] lo speed is unknown, defaulting to 1000
[  614.308686][T27262] lo speed is unknown, defaulting to 1000
[  614.333590][T27262] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  614.405380][T27268] »»»»»»: renamed from lo
[  614.431902][T27262] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  614.528201][T27262] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  614.640785][T27262] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  614.668376][T27283] x_tables: unsorted entry at hook 1
[  614.718241][T27262] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98
[  614.908161][T27262] »»»»»» speed is unknown, defaulting to 1000
[  614.955671][T27262] »»»»»» speed is unknown, defaulting to 1000
[  615.006823][T27262] »»»»»» speed is unknown, defaulting to 1000
[  615.090770][T27262] »»»»»» speed is unknown, defaulting to 1000
[  615.105784][T27262] »»»»»» speed is unknown, defaulting to 1000
[  615.116412][T27262] »»»»»» speed is unknown, defaulting to 1000
[  615.132930][T27262] »»»»»» speed is unknown, defaulting to 1000
[  615.615708][T27313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  615.652224][T27336] netlink: 'syz.3.5640': attribute type 1 has an invalid length.
[  615.684327][T27313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  615.712568][T27313] bond0 (unregistering): Released all slaves
[  615.742589][T27332] ip6tnl2: entered promiscuous mode
[  615.876330][T27349] sctp: [Deprecated]: syz.0.5643 (pid 27349) Use of struct sctp_assoc_value in delayed_ack socket option.
[  615.876330][T27349] Use struct sctp_sack_info instead
[  615.988171][T27356] bond9 (unregistering): Released all slaves
[  616.192092][T27369] tunl0: Caught tx_queue_len zero misconfig
[  616.728324][T27389] __nla_validate_parse: 12 callbacks suppressed
[  616.728345][T27389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5653'.
[  616.777690][T27389] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  617.056285][T27402] netlink: 'syz.4.5658': attribute type 10 has an invalid length.
[  617.142176][T27402] dummy0: entered promiscuous mode
[  617.179753][T27402] dummy0: entered allmulticast mode
[  617.204503][T27402] team0: Port device dummy0 added
[  617.567118][T27432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5670'.
[  617.608752][T27436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5668'.
[  617.706653][T27436] netlink: 'syz.0.5668': attribute type 7 has an invalid length.
[  617.748790][T27438] netlink: 'syz.0.5668': attribute type 27 has an invalid length.
[  617.797205][T27436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5668'.
[  617.836666][T27438] netlink: 'syz.0.5668': attribute type 4 has an invalid length.
[  617.912994][T27438] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5668'.
[  618.385951][T27465] netlink: 'syz.2.5677': attribute type 1 has an invalid length.
[  618.420560][T27465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5677'.
[  618.628640][T27472] C: renamed from »»»»»»
[  618.675494][T27472] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  619.253110][T27499] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5686'.
[  619.281344][T27499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5686'.
[  619.324752][T27499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5686'.
[  619.665984][T27515] nbd: couldn't find a device at index 1048580
[  620.248624][T27541] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5693'.
[  622.709052][T27518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  622.978566][T27561] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5700'.
[  622.989803][T27563] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5699'.
[  623.187368][T27573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5705'.
[  623.241753][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5704'.
[  623.324477][T27575] veth1_macvtap: left promiscuous mode
[  623.472291][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5704'.
[  623.492337][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5704'.
[  623.493594][T27588] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5709'.
[  623.519080][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5704'.
[  623.529467][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5704'.
[  623.540597][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5704'.
[  623.786650][T27600] vlan0: Caught tx_queue_len zero misconfig
[  624.190638][T27625] netlink: 'syz.1.5724': attribute type 2 has an invalid length.
[  624.206286][T27625] netlink: 'syz.1.5724': attribute type 2 has an invalid length.
[  624.243494][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  624.427173][T27639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  624.509969][T27639] netlink: 'syz.4.5726': attribute type 10 has an invalid length.
[  624.547534][T27638] syzkaller0: entered promiscuous mode
[  624.553588][T27638] syzkaller0: entered allmulticast mode
[  624.565677][T27639] veth1_vlan: left promiscuous mode
[  624.572765][T27639] macvlan1: entered promiscuous mode
[  624.586804][T27639] macvlan1: entered allmulticast mode
[  624.597302][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807cda3400: rx timeout, send abort
[  624.606199][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cda3400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  624.622179][T27639] veth1_vlan: entered promiscuous mode
[  624.656914][T27639] veth1_vlan: entered allmulticast mode
[  624.676943][T27639] team0: Port device macvlan1 added
[  625.334868][T27668] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  627.053750][T27676] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode
[  627.083034][T27676] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode
[  627.123044][T27681] xt_TPROXY: Can be used only with -p tcp or -p udp
[  627.137155][T27681] netlink: 'syz.1.5738': attribute type 1 has an invalid length.
[  628.033927][T27738] __nla_validate_parse: 68 callbacks suppressed
[  628.033946][T27738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5755'.
[  628.255698][T27746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5757'.
[  628.269700][T27748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5758'.
[  628.303305][T27748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5758'.
[  628.315811][T27746] bridge0: port 1(gretap0) entered blocking state
[  628.346849][T27746] bridge0: port 1(gretap0) entered disabled state
[  628.377270][T27746] gretap0: entered allmulticast mode
[  628.388113][T27752] xt_cgroup: xt_cgroup: no path or classid specified
[  628.443463][T27746] gretap0: entered promiscuous mode
[  628.509605][T27750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5758'.
[  628.837614][T27788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5766'.
[  628.847733][T27789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5766'.
[  631.584206][T27767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  631.819246][T27829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5774'.
[  631.845973][T27832] netlink: 'syz.0.5775': attribute type 12 has an invalid length.
[  631.859935][T27830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5774'.
[  631.892376][T27837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5774'.
[  632.134293][T27855] lo: Caught tx_queue_len zero misconfig
[  632.162264][T27856] bridge: RTM_NEWNEIGH with invalid state 0x20
[  632.815632][T27885] bond9: Invalid ad_actor_system MAC address.
[  632.830331][T27885] bond9: option ad_actor_system: invalid value (1)
[  632.848521][T27885] bond9 (unregistering): Released all slaves
[  633.209002][T27914] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  633.539203][T27935] __nla_validate_parse: 3 callbacks suppressed
[  633.539223][T27935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5798'.
[  633.669400][T27944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5801'.
[  633.837812][T27955] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5804'.
[  634.067894][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5807'.
[  634.116654][T27967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5807'.
[  634.119231][T27970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5808'.
[  634.187793][T27967] bridge3: port 1(vlan4) entered blocking state
[  634.215983][T27967] bridge3: port 1(vlan4) entered disabled state
[  634.234936][T27967] vlan4: entered allmulticast mode
[  634.245410][T27967] bridge3: entered allmulticast mode
[  634.257167][T27967] vlan4: left allmulticast mode
[  634.264955][T27967] bridge3: left allmulticast mode
[  634.436970][T27979] gtp1: entered allmulticast mode
[  634.448152][T27979] gtp1: entered promiscuous mode
[  634.461308][T27979] team0: Port device gtp1 added
[  634.820966][T28000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5821'.
[  634.830009][T28000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5821'.
[  634.864005][T28000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5821'.
[  634.907372][T28001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5819'.
[  635.268927][T28027] netlink: 'syz.4.5827': attribute type 3 has an invalid length.
[  635.301800][T28027] netlink: 'syz.4.5827': attribute type 3 has an invalid length.
[  636.145004][T28072] netlink: 'syz.3.5841': attribute type 11 has an invalid length.
[  636.159937][T28072] netlink: 'syz.3.5841': attribute type 11 has an invalid length.
[  636.547704][T28085] syzkaller0: entered promiscuous mode
[  636.560881][T28085] syzkaller0: entered allmulticast mode
[  637.131968][T28120] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  638.615452][T28183] vlan4: entered allmulticast mode
[  638.928042][T28209] __nla_validate_parse: 14 callbacks suppressed
[  638.928062][T28209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5873'.
[  639.061788][T28209] 8021q: adding VLAN 0 to HW filter on device bond7
[  639.115644][T28221] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component
[  639.272933][T28231] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5878'.
[  639.344365][T28231] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode
[  639.360951][T28231] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode
[  639.438341][T28242] netlink: 'syz.0.5881': attribute type 1 has an invalid length.
[  639.472412][T28242] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5881'.
[  639.505405][T28242] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5881'.
[  639.554876][T28242] netlink: 'syz.0.5881': attribute type 1 has an invalid length.
[  639.582783][T28242] netlink: 634 bytes leftover after parsing attributes in process `syz.0.5881'.
[  639.625355][T28253] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  639.673097][T28254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'.
[  639.718506][T28254] nbd: must specify a size in bytes for the device
[  639.763383][T28255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'.
[  639.805358][T28255] nbd: must specify a size in bytes for the device
[  639.841687][T28259] block nbd3: NBD_DISCONNECT
[  639.878911][T28259] block nbd3: Send disconnect failed -32
[  639.885977][T28263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5888'.
[  639.912144][T28265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5886'.
[  639.929657][T28259] block nbd3: Send disconnect failed -32
[  640.255113][T28278] syzkaller0: entered promiscuous mode
[  640.287275][T28278] syzkaller0: entered allmulticast mode
[  640.356061][T28282] netlink: 'syz.3.5891': attribute type 1 has an invalid length.
[  640.392329][T28287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5892'.
[  640.460941][T28292] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20002
[  640.471188][T28292] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004
[  640.657682][T28282] batman_adv: batadv0: Interface deactivated: ipvlan2
[  640.671919][T28282] batman_adv: batadv0: Removing interface: ipvlan2
[  640.696220][T28282] batman_adv: batadv0: Interface deactivated: wlan0
[  640.718125][T28282] batman_adv: batadv0: Removing interface: wlan0
[  641.195793][T28322] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  642.413773][T28387] netlink: 'syz.4.5916': attribute type 2 has an invalid length.
[  642.578938][T28397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  642.765859][T28406] netlink: 'syz.1.5922': attribute type 7 has an invalid length.
[  642.801529][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  642.945680][T28417] openvswitch: netlink: Missing key (keys=40, expected=100)
[  643.290014][T28432] netlink: 'syz.1.5927': attribute type 23 has an invalid length.
[  644.038080][T28475] IPv6: sit2: Disabled Multicast RS
[  644.069219][T28475] sit2: entered allmulticast mode
[  644.097853][T28479] netlink: 'syz.2.5939': attribute type 1 has an invalid length.
[  644.235019][T28479] 8021q: adding VLAN 0 to HW filter on device bond8
[  644.274194][T28488] team0: Port device team_slave_0 removed
[  644.301677][T28488] bond8: (slave team_slave_0): Enslaving as a backup interface with an up link
[  644.337281][T28492] __nla_validate_parse: 11 callbacks suppressed
[  644.337298][T28492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5942'.
[  644.361454][T28492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5942'.
[  644.384042][T28479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5939'.
[  644.663469][T28504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5945'.
[  644.727601][T28508] netlink: 'syz.4.5945': attribute type 11 has an invalid length.
[  644.822479][T28482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5941'.
[  645.535422][T28545] vlan4: entered allmulticast mode
[  645.546755][T28545] veth1_virt_wifi: entered allmulticast mode
[  645.615147][T28552] netlink: 'syz.2.5955': attribute type 1 has an invalid length.
[  645.649278][T28552] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  645.672283][T28558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5957'.
[  645.864637][T28570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5961'.
[  645.927783][T28572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5962'.
[  646.424616][T28596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5968'.
[  646.507360][T28600] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5969'.
[  646.529416][T28600] netlink: 'syz.2.5969': attribute type 2 has an invalid length.
[  646.563248][T28600] netlink: 'syz.2.5969': attribute type 1 has an invalid length.
[  646.612235][T28604] gretap0: left allmulticast mode
[  646.623823][T28604] gretap0: left promiscuous mode
[  646.637526][T28604] bridge0: port 1(gretap0) entered disabled state
[  646.661669][T28604] team0: left allmulticast mode
[  646.675795][T28604] team_slave_0: left allmulticast mode
[  646.691895][T28604] team_slave_1: left allmulticast mode
[  646.734275][T28604] dummy0: left allmulticast mode
[  646.754181][T28604] team0: left promiscuous mode
[  646.767450][T28604] team_slave_0: left promiscuous mode
[  646.790329][T28604] team_slave_1: left promiscuous mode
[  646.812793][T28604] dummy0: left promiscuous mode
[  646.826148][T28604] bridge0: port 4(team0) entered disabled state
[  646.859681][T28604] veth1_to_bridge: left allmulticast mode
[  646.874023][T28604] veth1_to_bridge: left promiscuous mode
[  646.886831][T28604] bridge0: port 3(veth1_to_bridge) entered disabled state
[  646.922417][T28604] bridge_slave_1: left allmulticast mode
[  646.932784][T28604] bridge_slave_1: left promiscuous mode
[  646.946176][T28604] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.512589][T28657] bridge_slave_0: left allmulticast mode
[  647.527159][T28657] bridge_slave_0: left promiscuous mode
[  647.541010][T28657] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.581414][T28657] bridge_slave_1: left allmulticast mode
[  647.627369][T28657] bridge_slave_1: left promiscuous mode
[  647.650716][T28657] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.703509][T28657] bond8: (slave team_slave_0): Removing an active aggregator
[  647.715911][T10698] bond8: Warning: Found an uninitialized port
[  647.724382][T28657] bond8: (slave team_slave_0): Releasing backup interface
[  647.781939][T28657] team0: Port device team_slave_1 removed
[  647.813390][T28657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  647.839742][T28657] batman_adv: batadv0: Removing interface: batadv_slave_0
[  647.864065][T28657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  647.897667][T28657] batman_adv: batadv0: Removing interface: batadv_slave_1
[  647.934617][T28657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  648.002341][T28674] netlink: 'syz.1.5990': attribute type 23 has an invalid length.
[  648.028281][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  648.045456][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  648.054860][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  648.069333][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  648.077213][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  648.823706][T28715] netlink: 'syz.0.6000': attribute type 30 has an invalid length.
[  648.959541][T28675] C speed is unknown, defaulting to 1000
[  649.627111][T28675] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.649681][T28762] __nla_validate_parse: 5 callbacks suppressed
[  649.649699][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6013'.
[  649.670411][T28675] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.704517][T28675] bridge_slave_0: entered allmulticast mode
[  649.713019][T28675] bridge_slave_0: entered promiscuous mode
[  649.725466][T28675] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.733042][T28675] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.740975][T28675] bridge_slave_1: entered allmulticast mode
[  649.748832][T28675] bridge_slave_1: entered promiscuous mode
[  649.814007][T28675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.827072][T28675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  649.881357][T28675] team0: Port device team_slave_0 added
[  649.892031][T28675] team0: Port device team_slave_1 added
[  649.940011][T28675] batman_adv: batadv0: Adding interface: batadv_slave_0
[  649.947500][T28675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.974908][T28675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  649.990697][T28675] batman_adv: batadv0: Adding interface: batadv_slave_1
[  649.998229][T28675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  650.027551][T28675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  650.150524][T28770] netlink: 'syz.1.6017': attribute type 1 has an invalid length.
[  650.161269][ T5629] Bluetooth: hci2: command tx timeout
[  650.228085][T28675] hsr_slave_0: entered promiscuous mode
[  650.237441][T28675] hsr_slave_1: entered promiscuous mode
[  650.244333][T28675] debugfs: 'hsr0' already exists in 'hsr'
[  650.250378][T28675] Cannot create hsr debugfs directory
[  650.477494][T28791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6020'.
[  650.612397][T28797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6021'.
[  650.623319][T28797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6021'.
[  650.804402][T28675] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.815223][T28675] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.826513][T28675] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  650.839057][T28675] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  650.942870][T28675] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  650.954512][T28675] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.967799][T28675] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  650.978939][T28675] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  651.073903][T28675] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  651.085387][T28675] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.096096][T28675] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  651.108203][T28675] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  651.176117][T28675] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  651.186683][T28675] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.197560][T28675] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  651.208474][T28675] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  652.240790][ T5629] Bluetooth: hci2: command tx timeout
[  653.065334][T28768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  653.123445][T28675] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  653.173110][T28675] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  653.191614][T28675] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  653.217630][T28675] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  653.254124][T28675] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  653.282098][T28675] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  653.304452][T28675] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  653.333931][T28675] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  653.776413][T28675] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.844052][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6034'.
[  653.888452][T28675] 8021q: adding VLAN 0 to HW filter on device team0
[  653.946758][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.954023][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  654.002200][T10691] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.009436][T10691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  654.047635][T28864] netlink: 'syz.1.6036': attribute type 21 has an invalid length.
[  654.093412][T28864] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6036'.
[  654.182904][T28869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6038'.
[  654.323495][ T5629] Bluetooth: hci2: command tx timeout
[  654.375841][T28880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  654.697660][T28887] C speed is unknown, defaulting to 1000
[  655.349722][T28934] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002
[  655.627000][T28941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6050'.
[  655.665705][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6052'.
[  655.715237][ T5290] veth0_macvtap: left promiscuous mode
[  656.045587][T28675] 8021q: adding VLAN 0 to HW filter on device batadv0
[  656.400846][ T5629] Bluetooth: hci2: command tx timeout
[  656.499471][T28990] netlink: 'syz.2.6060': attribute type 49 has an invalid length.
[  656.803575][T28675] veth0_vlan: entered promiscuous mode
[  656.838669][T28675] veth1_vlan: entered promiscuous mode
[  656.852730][T29005] netlink: 'syz.1.6064': attribute type 1 has an invalid length.
[  656.868145][T29005] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6064'.
[  656.884380][T29007] block nbd0: Unsupported socket: should be TCP or UNIX.
[  656.951512][T28675] veth0_macvtap: entered promiscuous mode
[  656.963125][T29007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6065'.
[  656.978399][T28675] veth1_macvtap: entered promiscuous mode
[  657.004993][T29007] netlink: 'syz.3.6065': attribute type 1 has an invalid length.
[  657.030322][T29007] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6065'.
[  657.051621][T29007] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6065'.
[  657.081104][T29007] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6065'.
[  657.086624][T28675] batman_adv: batadv0: Interface activated: batadv_slave_0
[  657.141612][T28675] batman_adv: batadv0: Interface activated: batadv_slave_1
[  657.179676][T10707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  657.219434][T10707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  657.265512][T10707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  657.292368][T29019] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6069'.
[  657.331792][T10707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  657.411824][T29019] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6069'.
[  657.422768][T29019] openvswitch: netlink: Key type 132 is out of range max 32
[  657.603249][T10697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.653599][T10697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.759712][T10707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.791734][T10707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  658.009353][T29048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6075'.
[  658.587330][T29077] netlink: 'syz.2.6080': attribute type 3 has an invalid length.
[  658.611443][T29077] netlink: 'syz.2.6080': attribute type 2 has an invalid length.
[  658.727928][T29081] netlink: 'syz.3.6082': attribute type 10 has an invalid length.
[  658.778328][T29090] xt_time: invalid argument - start or stop time greater than 23:59:59
[  659.461980][T29125] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  659.512934][T29126] sctp: [Deprecated]: syz.1.6093 (pid 29126) Use of struct sctp_assoc_value in delayed_ack socket option.
[  659.512934][T29126] Use struct sctp_sack_info instead
[  659.549683][T29131] netlink: 'syz.2.6095': attribute type 1 has an invalid length.
[  659.717276][T29131] bond9: entered promiscuous mode
[  659.757219][T29131] 8021q: adding VLAN 0 to HW filter on device bond9
[  659.900230][T29151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  659.980747][T29157] vlan3: entered promiscuous mode
[  659.991747][T29157] hsr0: entered promiscuous mode
[  660.013982][T29157] vlan3: entered allmulticast mode
[  660.655694][T29156] __nla_validate_parse: 15 callbacks suppressed
[  660.655711][T29156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6101'.
[  660.656100][T29192] xt_nfacct: accounting object `syz1' does not exist
[  660.981556][T29218] openvswitch: netlink: IP tunnel dst address not specified
[  661.017230][T29219] netlink: 'syz.3.6117': attribute type 3 has an invalid length.
[  661.023740][T29220] netlink: 'syz.2.6116': attribute type 10 has an invalid length.
[  661.136939][T29223] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6119'.
[  661.531998][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  661.547800][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  661.556600][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  661.570483][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  661.580798][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  661.832343][T29244] netlink: 'syz.0.6128': attribute type 1 has an invalid length.
[  662.034848][T29244] bond17: entered promiscuous mode
[  662.040493][T29244] 8021q: adding VLAN 0 to HW filter on device bond17
[  662.089681][T29253] syzkaller1: tun_chr_ioctl cmd 1074025678
[  662.096131][T29253] syzkaller1: group set to 0
[  662.532331][T29280] netlink: 'syz.4.6135': attribute type 16 has an invalid length.
[  662.540458][T29280] netlink: 'syz.4.6135': attribute type 17 has an invalid length.
[  662.793720][T29234] C speed is unknown, defaulting to 1000
[  663.366700][T29318] xt_ecn: cannot match TCP bits for non-tcp packets
[  663.375069][T29234] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.406245][T29234] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.419547][T29234] bridge_slave_0: entered allmulticast mode
[  663.428388][T29234] bridge_slave_0: entered promiscuous mode
[  663.484696][T29234] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.510698][T29234] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.525516][T29234] bridge_slave_1: entered allmulticast mode
[  663.542311][T29234] bridge_slave_1: entered promiscuous mode
[  663.648067][T29234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  663.663571][T29234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  663.681393][   T50] Bluetooth: hci4: command tx timeout
[  663.737850][T29234] team0: Port device team_slave_0 added
[  663.747260][T29234] team0: Port device team_slave_1 added
[  663.787503][T29234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  663.802301][T29234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  663.869269][T29234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  663.916752][T29234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  663.934411][T29234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  663.979752][T29234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.008847][T29342] netlink: 'syz.0.6149': attribute type 142 has an invalid length.
[  664.189614][T29234] hsr_slave_0: entered promiscuous mode
[  664.213657][T29234] hsr_slave_1: entered promiscuous mode
[  664.221082][T29234] debugfs: 'hsr0' already exists in 'hsr'
[  664.226952][T29234] Cannot create hsr debugfs directory
[  664.351333][T29358] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.358534][T29358] bridge0: port 2(bridge_slave_1) entered forwarding state
[  664.370419][T29360] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6154'.
[  664.721599][T29234] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.888518][T29234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.913990][T29234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  665.169008][T29234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.181509][T29234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  665.341208][T29234] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.367488][T29411] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6166'.
[  665.370031][T29234] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  665.476964][T29415] netlink: 'syz.2.6167': attribute type 1 has an invalid length.
[  665.716613][T29420] netlink: 264 bytes leftover after parsing attributes in process `syz.4.6169'.
[  665.757011][T29424] bond18: Removing last arp target with arp_interval on
[  665.765370][   T50] Bluetooth: hci4: command tx timeout
[  665.798283][T29432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6173'.
[  666.056372][T29234] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  666.068399][T29234] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  666.089235][T29234] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  666.117273][T29234] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  666.144173][T29234] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  666.158606][T29452] netlink: 'syz.0.6178': attribute type 3 has an invalid length.
[  666.174752][T29234] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  666.191707][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6178'.
[  666.202574][T29234] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  666.226815][T29234] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  666.239325][T29452] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  666.298804][T29461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6179'.
[  666.452458][T29464] netlink: 'syz.0.6180': attribute type 1 has an invalid length.
[  666.489237][T29234] 8021q: adding VLAN 0 to HW filter on device bond0
[  666.498975][T29464] netlink: 'syz.0.6180': attribute type 2 has an invalid length.
[  666.544605][T29234] 8021q: adding VLAN 0 to HW filter on device team0
[  666.589014][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.596224][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.656568][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.663872][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.943439][T29489] team0: Caught tx_queue_len zero misconfig
[  667.333679][T29503] netlink: 'syz.1.6191': attribute type 1 has an invalid length.
[  667.406507][T29509] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6191'.
[  667.763039][T29234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.840746][   T50] Bluetooth: hci4: command tx timeout
[  667.880062][T29538] netlink: 'syz.2.6198': attribute type 2 has an invalid length.
[  667.894165][T29538] netlink: 'syz.2.6198': attribute type 11 has an invalid length.
[  667.918334][T29538] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6198'.
[  667.945100][T29234] veth0_vlan: entered promiscuous mode
[  668.024586][T29234] veth1_vlan: entered promiscuous mode
[  668.167308][T29234] veth0_macvtap: entered promiscuous mode
[  668.215970][T29234] veth1_macvtap: entered promiscuous mode
[  668.305678][T29234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  668.363001][T29234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  668.436336][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  668.467430][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  668.508225][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  668.573106][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.187229][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.238913][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.421129][T10705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.459673][T10705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.550914][T29600] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  669.565736][T29604] SET target dimension over the limit!
[  669.578870][T29604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6213'.
[  669.667763][T29609] netem: incorrect gi model size
[  669.707050][T29609] netem: change failed
[  669.735205][T29609] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6214'.
[  669.930289][   T50] Bluetooth: hci4: command tx timeout
[  670.234778][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  670.252942][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  670.267567][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  670.283203][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  670.294679][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  670.502558][T29638] openvswitch: netlink: Multiple metadata blocks provided
[  670.512311][T29638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6219'.
[  670.555075][T29625] syzkaller0: entered promiscuous mode
[  670.573675][T29625] syzkaller0: entered allmulticast mode
[  670.606196][T29638] macvlan0: left promiscuous mode
[  670.642081][T29638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6219'.
[  670.731296][T29646] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6221'.
[  671.022198][T29659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6225'.
[  671.126187][T29659] : entered promiscuous mode
[  671.487217][T29690] netlink: 'syz.2.6231': attribute type 1 has an invalid length.
[  671.529391][T29695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6232'.
[  671.611563][T29629] C speed is unknown, defaulting to 1000
[  672.138160][T29719] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.6237'.
[  672.275214][T29723] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  672.332331][   T50] Bluetooth: hci5: command tx timeout
[  672.368310][T29726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6239'.
[  672.406420][T29723] syzkaller0: entered promiscuous mode
[  672.425771][T29723] syzkaller0: entered allmulticast mode
[  672.546803][T29629] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.562080][T29629] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.587474][T29629] bridge_slave_0: entered allmulticast mode
[  672.612473][T29629] bridge_slave_0: entered promiscuous mode
[  672.632787][T29629] bridge0: port 2(bridge_slave_1) entered blocking state
[  672.660505][T29629] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.695678][T29629] bridge_slave_1: entered allmulticast mode
[  672.716677][T29629] bridge_slave_1: entered promiscuous mode
[  672.760920][T29740] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.6245'.
[  672.773141][T29629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.826158][T29629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.991108][T29629] team0: Port device team_slave_0 added
[  673.009240][T29629] team0: Port device team_slave_1 added
[  673.083772][T29754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  673.094988][T29629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  673.117798][T29629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.149889][T29629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.205587][T29629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.226578][T29629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.284745][T29629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.507815][T29629] hsr_slave_0: entered promiscuous mode
[  673.515804][T29629] hsr_slave_1: entered promiscuous mode
[  673.525114][T29629] debugfs: 'hsr0' already exists in 'hsr'
[  673.533935][T29629] Cannot create hsr debugfs directory
[  673.585566][T29773] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  673.678874][T29778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6259'.
[  673.816313][T29629] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  673.845228][T29629] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.867741][T29629] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  673.893575][T29629] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  674.086234][T29629] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.108741][T29629] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.131800][T29629] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  674.161652][T29629] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  674.255235][T29795] openvswitch: netlink: IP tunnel dst address not specified
[  674.372498][T29629] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.399591][T29629] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.411168][   T50] Bluetooth: hci5: command tx timeout
[  674.437440][T29629] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  674.449217][T29800] netlink: 'syz.4.6264': attribute type 1 has an invalid length.
[  674.461158][T29629] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  674.552380][T29629] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.564561][T29629] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.575788][T29629] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  674.586120][T29629] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  674.776075][T29816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6269'.
[  675.030053][T29829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6272'.
[  675.079484][T29829] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6272'.
[  675.090778][T29829] tipc: Invalid UDP bearer configuration
[  675.090839][T29829] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  675.138827][T29629] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  675.159113][T29629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  675.180035][T29629] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  675.211864][T29629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  675.223373][T29629] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  675.271608][T29629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  675.307216][T29629] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  675.319774][T29841] netlink: 'syz.1.6277': attribute type 11 has an invalid length.
[  675.359009][T29629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  675.670873][T29629] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.707472][T29629] 8021q: adding VLAN 0 to HW filter on device team0
[  675.720860][T10697] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.728050][T10697] bridge0: port 1(bridge_slave_0) entered forwarding state
[  675.747253][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.754528][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  675.928262][T29872] syzkaller0: entered promiscuous mode
[  675.940202][T29872] syzkaller0: entered allmulticast mode
[  675.958279][T29872] __nla_validate_parse: 1 callbacks suppressed
[  675.958294][T29872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6285'.
[  676.002608][T29872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6285'.
[  676.344566][T29855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  676.490740][   T50] Bluetooth: hci5: command tx timeout
[  676.525291][T29901] netlink: 'syz.4.6292': attribute type 3 has an invalid length.
[  676.562391][T29901] netlink: 'syz.4.6292': attribute type 3 has an invalid length.
[  676.640051][T29908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6293'.
[  676.662052][T29906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6294'.
[  676.747919][T29913] netlink: 'syz.2.6295': attribute type 10 has an invalid length.
[  676.816766][T29629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  676.918272][T29629] veth0_vlan: entered promiscuous mode
[  677.008320][T29629] veth1_vlan: entered promiscuous mode
[  677.017026][T29925] netlink: 'syz.1.6297': attribute type 1 has an invalid length.
[  677.082887][T29925] 8021q: adding VLAN 0 to HW filter on device bond9
[  677.227975][T29934] netlink: 'syz.3.6300': attribute type 4 has an invalid length.
[  677.280039][T29935] netlink: 'syz.3.6300': attribute type 4 has an invalid length.
[  677.312258][T29927] bond9: (slave veth9): Enslaving as an active interface with a down link
[  677.343251][T29925] 8021q: adding VLAN 0 to HW filter on device batadv2
[  677.354068][T29925] bond9: (slave batadv2): making interface the new active one
[  677.364938][T29925] batadv2: entered promiscuous mode
[  677.371275][T29925] bond9: (slave batadv2): Enslaving as an active interface with an up link
[  677.563064][T29629] veth0_macvtap: entered promiscuous mode
[  677.588315][T29629] veth1_macvtap: entered promiscuous mode
[  677.656822][T29629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  677.691989][T29629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  677.740254][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.771230][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.792289][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.818785][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.095003][T29950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6304'.
[  678.127095][T29951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6304'.
[  678.202881][T29951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  678.248484][T10700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.270493][T10700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.361239][T10707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.428424][T10707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.561420][   T50] Bluetooth: hci5: command tx timeout
[  679.096388][T29988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6314'.
[  679.271143][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  679.282265][T29988] bond1: entered promiscuous mode
[  679.296401][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  679.308273][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  679.324133][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  679.326287][T29988] bond1: entered allmulticast mode
[  679.344330][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  679.666310][T30004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6318'.
[  679.715435][T30005] xt_hashlimit: size too large, truncated to 1048576
[  679.724209][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6318'.
[  680.014935][T30020] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6321'.
[  680.093653][T29986] infiniband syz2: set down
[  680.110920][T29986] infiniband syz2: added ipvlan0
[  680.169593][T29986] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  680.206559][T29986] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  680.226676][T29986] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  680.286859][T29986] RDS/IB: syz2: added
[  680.307744][T29986] smc: adding ib device syz2 with port count 1
[  680.316559][T29986] smc:    ib device syz2 port 1 has no pnetid
[  680.421472][T30033] netlink: 'syz.0.6324': attribute type 1 has an invalid length.
[  680.473244][T30033] batman_adv: batadv0: Adding interface: gretap1
[  680.490832][T30033] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  680.607001][T29991] C speed is unknown, defaulting to 1000
[  680.635348][T30033] macvlan2: entered promiscuous mode
[  680.641539][T30033] macvlan2: entered allmulticast mode
[  680.770801][T30040] syz.3.6326: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  680.785799][T30040] CPU: 1 UID: 0 PID: 30040 Comm: syz.3.6326 Not tainted syzkaller #0 PREEMPT(full) 
[  680.785823][T30040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  680.785835][T30040] Call Trace:
[  680.785843][T30040]  <TASK>
[  680.785851][T30040]  dump_stack_lvl+0xe8/0x150
[  680.785889][T30040]  warn_alloc+0x249/0x340
[  680.785918][T30040]  ? stack_trace_save+0xa9/0x100
[  680.785953][T30040]  ? __pfx_warn_alloc+0x10/0x10
[  680.785989][T30040]  ? kasan_save_track+0x4f/0x80
[  680.786013][T30040]  ? kasan_save_track+0x3e/0x80
[  680.786038][T30040]  ? __kasan_kmalloc+0x93/0xb0
[  680.786064][T30040]  ? __kmalloc_cache_noprof+0x31c/0x660
[  680.786091][T30040]  ? xskq_create+0x56/0x170
[  680.786116][T30040]  ? xsk_setsockopt+0x54c/0x990
[  680.786138][T30040]  ? do_sock_setsockopt+0x17c/0x1b0
[  680.786176][T30040]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  680.786202][T30040]  ? do_syscall_64+0x15f/0xf80
[  680.786236][T30040]  __vmalloc_node_range_noprof+0x132/0x1750
[  680.786298][T30040]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  680.786333][T30040]  ? __kasan_kmalloc+0x93/0xb0
[  680.786367][T30040]  vmalloc_user_noprof+0xad/0xe0
[  680.786394][T30040]  ? xskq_create+0xbf/0x170
[  680.786440][T30040]  xskq_create+0xbf/0x170
[  680.786472][T30040]  xsk_init_queue+0x8a/0xe0
[  680.786503][T30040]  xsk_setsockopt+0x54c/0x990
[  680.786533][T30040]  ? __pfx_xsk_setsockopt+0x10/0x10
[  680.786560][T30040]  ? __pfx_aa_sk_perm+0x10/0x10
[  680.786592][T30040]  ? aa_sock_opt_perm+0xff/0x1a0
[  680.786624][T30040]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  680.786654][T30040]  ? __pfx_xsk_setsockopt+0x10/0x10
[  680.786683][T30040]  do_sock_setsockopt+0x17c/0x1b0
[  680.786719][T30040]  __x64_sys_setsockopt+0x13d/0x1b0
[  680.786753][T30040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.786777][T30040]  do_syscall_64+0x15f/0xf80
[  680.786807][T30040]  ? trace_irq_disable+0x3b/0x140
[  680.786841][T30040]  ? clear_bhb_loop+0x40/0x90
[  680.786867][T30040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.786888][T30040] RIP: 0033:0x7f7b0bd9ce59
[  680.786908][T30040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  680.786928][T30040] RSP: 002b:00007f7b0ccde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  680.786950][T30040] RAX: ffffffffffffffda RBX: 00007f7b0c015fa0 RCX: 00007f7b0bd9ce59
[  680.786967][T30040] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  680.786980][T30040] RBP: 00007f7b0be32d6f R08: 0000000000000004 R09: 0000000000000000
[  680.786993][T30040] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  680.787007][T30040] R13: 00007f7b0c016038 R14: 00007f7b0c015fa0 R15: 00007ffd64ce8fc8
[  680.787046][T30040]  </TASK>
[  680.787077][T30040] Mem-Info:
[  681.110293][T30040] active_anon:6626 inactive_anon:0 isolated_anon:0
[  681.110293][T30040]  active_file:3077 inactive_file:40186 isolated_file:0
[  681.110293][T30040]  unevictable:768 dirty:43 writeback:0
[  681.110293][T30040]  slab_reclaimable:12780 slab_unreclaimable:130748
[  681.110293][T30040]  mapped:29402 shmem:1356 pagetables:1371
[  681.110293][T30040]  sec_pagetables:0 bounce:0
[  681.110293][T30040]  kernel_misc_reclaimable:0
[  681.110293][T30040]  free:1270651 free_pcp:24428 free_cma:0
[  681.115833][T30041] __nla_validate_parse: 2 callbacks suppressed
[  681.115871][T30041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6326'.
[  681.237821][T30040] Node 0 active_anon:26504kB inactive_anon:0kB active_file:12308kB inactive_file:160532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72552kB dirty:168kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16376kB pagetables:5444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  681.320781][T30040] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:45056kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  681.401927][T30040] Node 0 DMA free:11224kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:16kB free_cma:0kB
[  681.439028][T30040] lowmem_reserve[]: 0 2492 2493 2493 2493
[  681.452734][T30040] Node 0 DMA32 free:1309584kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26504kB inactive_anon:0kB active_file:12308kB inactive_file:160532kB unevictable:1536kB writepending:168kB zspages:0kB present:3129332kB managed:2552548kB mlocked:0kB bounce:0kB free_pcp:37792kB local_pcp:20576kB free_cma:0kB
[  681.459570][   T50] Bluetooth: hci3: command tx timeout
[  681.544882][T30040] lowmem_reserve[]: 0 0 0 0 0
[  681.562260][T30040] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB
[  681.610464][T30040] lowmem_reserve[]: 0 0 0 0 0
[  681.635049][T30040] Node 1 Normal free:3761532kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59156kB local_pcp:29248kB free_cma:0kB
[  681.677408][T30040] lowmem_reserve[]: 0 0 0 0 0
[  681.683309][T30040] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11224kB
[  681.700582][T30040] Node 0 DMA32: 12082*4kB (UM) 7809*8kB (UM) 4344*16kB (UM) 282*32kB (UM) 619*64kB (UME) 1107*128kB (UM) 799*256kB (UM) 460*512kB (UME) 265*1024kB (UM) 111*2048kB (UM) 0*4096kB = 1309392kB
[  681.719701][T30040] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  681.734130][T30040] Node 1 Normal: 4*4kB (U) 6*8kB (UM) 13*16kB (UM) 13*32kB (UM) 12*64kB (UM) 12*128kB (UM) 12*256kB (UM) 11*512kB (UM) 8*1024kB (UM) 9*2048kB (U) 909*4096kB (UM) = 3761584kB
[  681.752441][T30040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  681.768271][T30040] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  681.778156][T30040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  681.788170][T30040] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  681.798130][T30040] 44615 total pagecache pages
[  681.802985][T30040] 0 pages in swap cache
[  681.807368][T30040] Free swap  = 124996kB
[  681.812331][T30040] Total swap = 124996kB
[  681.816704][T30040] 2097051 pages RAM
[  681.820688][T30040] 0 pages HighMem/MovableOnly
[  681.825606][T30040] 427132 pages reserved
[  681.829855][T30040] 0 pages cma reserved
[  682.200553][T30064] syzkaller0: entered promiscuous mode
[  682.219416][T30064] syzkaller0: entered allmulticast mode
[  682.319209][T30064] tipc: Started in network mode
[  682.352133][T30064] tipc: Node identity e6d1f82822ab, cluster identity 4711
[  682.390964][T30064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  682.568726][   T13] tipc: Resetting bearer <eth:syzkaller0>
[  682.593058][T30063] tipc: Resetting bearer <eth:syzkaller0>
[  682.645893][T30063] tipc: Disabling bearer <eth:syzkaller0>
[  682.781925][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6338'.
[  683.256074][T30098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6342'.
[  683.282857][T29991] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.296485][T29991] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.315402][T29991] bridge_slave_0: entered allmulticast mode
[  683.327867][T29991] bridge_slave_0: entered promiscuous mode
[  683.422388][T30098] veth3: entered promiscuous mode
[  683.429226][T30098] veth3: entered allmulticast mode
[  683.465116][T29991] bridge0: port 2(bridge_slave_1) entered blocking state
[  683.488172][T29991] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.504793][T29991] bridge_slave_1: entered allmulticast mode
[  683.521475][   T50] Bluetooth: hci3: command tx timeout
[  683.537976][T29991] bridge_slave_1: entered promiscuous mode
[  683.570022][T30108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6344'.
[  683.763232][T29991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  683.794016][T30120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  683.801349][T30120] IPv6: NLM_F_CREATE should be set when creating new route
[  683.846191][T29991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  683.861394][T30120] netlink: 'syz.4.6346': attribute type 3 has an invalid length.
[  683.887319][T30120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6346'.
[  684.007424][T29991] team0: Port device team_slave_0 added
[  684.025983][T29991] team0: Port device team_slave_1 added
[  684.287404][T29991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  684.305153][T29991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.335041][T29991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.438941][T29991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.456769][T29991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.515291][T29991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  685.147081][T29991] hsr_slave_0: entered promiscuous mode
[  685.159289][T29991] hsr_slave_1: entered promiscuous mode
[  685.175680][T29991] debugfs: 'hsr0' already exists in 'hsr'
[  685.181734][T29991] Cannot create hsr debugfs directory
[  685.613903][   T50] Bluetooth: hci3: command tx timeout
[  685.688162][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  686.986251][T30191] netlink: 212272 bytes leftover after parsing attributes in process `syz.0.6362'.
[  687.680664][   T50] Bluetooth: hci3: command tx timeout
[  687.973472][T30203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6364'.
[  688.010039][T30203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6364'.
[  688.468020][T30226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6368'.
[  688.485884][T29991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  688.505541][T29991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  688.518505][T29991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.661981][T28959] batadv2: left promiscuous mode
[  688.765645][T29991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  688.810596][T29991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  688.835839][T29991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.885985][T30239] netlink: 'syz.4.6370': attribute type 83 has an invalid length.
[  689.056235][T30244] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6373'.
[  689.076301][T29991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  689.103182][T29991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  689.125485][T29991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.753495][T30267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6376'.
[  689.771019][   T50] Bluetooth: hci3: command tx timeout
[  690.016443][T29991] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  690.055540][T29991] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  690.079053][T29991] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  690.118754][T29991] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  690.139874][T29991] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  690.186719][T29991] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  690.214452][T29991] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  690.261234][T29991] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  690.567297][T29991] 8021q: adding VLAN 0 to HW filter on device bond0
[  690.654728][T29991] 8021q: adding VLAN 0 to HW filter on device team0
[  690.707369][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.714606][ T3278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  690.773310][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.780526][ T3278] bridge0: port 2(bridge_slave_1) entered forwarding state
[  690.903323][T30298] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.911203][T30298] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.008286][T30298] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  691.355460][T30308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6381'.
[  692.265010][T30351] tipc: Failed to remove unknown binding: 66,0,0/0:2547825362/2547825364
[  692.318140][T30351] tipc: Failed to remove unknown binding: 66,0,0/0:2547825362/2547825363
[  692.397266][T30351] tipc: Failed to remove unknown binding: 66,0,0/0:2547825362/2547825364
[  692.447149][T30351] tipc: Failed to remove unknown binding: 66,0,0/0:2547825362/2547825363
[  692.473229][T29991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  692.498790][T30360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'.
[  692.713835][T30360] bond10: option xmit_hash_policy: invalid value (64)
[  692.789459][T30360] bond10 (unregistering): Released all slaves
[  693.009065][T29991] veth0_vlan: entered promiscuous mode
[  693.149560][T29991] veth1_vlan: entered promiscuous mode
[  693.158325][T30380] netlink: 'syz.2.6395': attribute type 10 has an invalid length.
[  693.181208][T30380] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6395'.
[  693.261025][T29991] veth0_macvtap: entered promiscuous mode
[  693.284381][T29991] veth1_macvtap: entered promiscuous mode
[  693.413695][T29991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  693.499916][T29991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  693.552562][T30396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6397'.
[  693.608348][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  693.644577][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  693.672483][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  693.735255][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  693.794362][T30372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6393'.
[  694.101822][T30403] IPv6: NLM_F_CREATE should be specified when creating new route
[  694.140368][T30403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6399'.
[  694.202190][T10707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  694.236871][T10707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  694.379097][T30420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6402'.
[  694.455791][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  694.516740][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  694.685989][T30433] netlink: 'syz.0.6406': attribute type 1 has an invalid length.
[  694.769043][T30431] atomic_op ffff88806a6a6198 conn xmit_atomic 0000000000000000
[  694.785541][T30433] netlink: 'syz.0.6406': attribute type 2 has an invalid length.
[  695.116263][T30448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6407'.
[  695.205052][T30448] team0 (unregistering): Port device team_slave_0 removed
[  695.257894][T30448] team0 (unregistering): Port device team_slave_1 removed
[  695.454256][T30444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.169732][T30488] Cannot find add_set index 0 as target
[  696.217274][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  696.253679][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  696.265939][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  696.303891][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  696.314728][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  696.720757][T30516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6422'.
[  696.786359][T30526] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  696.946807][T30516] vlan2: entered allmulticast mode
[  696.978079][T30516] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  697.088469][T30524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6421'.
[  697.130211][T30524] nbd: must specify a device to reconfigure
[  697.530906][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  697.552490][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.564937][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  697.887358][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  697.919069][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.944608][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  697.999126][T30571] xt_hashlimit: size too large, truncated to 1048576
[  698.019307][T30563] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  698.268173][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  698.319167][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.352809][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  698.404221][ T5629] Bluetooth: hci0: command tx timeout
[  698.554538][T30595] tipc: Started in network mode
[  698.586886][T30595] tipc: Node identity , cluster identity 4711
[  698.614408][T30595] tipc: Failed to obtain node identity
[  698.645328][T30595] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  698.908069][   T12] netdevsim netdevsim2 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  698.940762][   T12] netdevsim netdevsim2 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.972749][   T12] netdevsim netdevsim2 
 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  699.056662][T30500] C speed is unknown, defaulting to 1000
[  699.393507][T10697] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  699.526523][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  699.722601][T10692] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.803577][T10692] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  700.046828][T30649] netlink: 'syz.1.6443': attribute type 1 has an invalid length.
[  700.480806][ T5629] Bluetooth: hci0: command tx timeout
[  700.483209][T30670] netlink: 'syz.0.6446': attribute type 3 has an invalid length.
[  700.575854][   T12] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[  701.043273][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  701.189210][T30659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  701.226904][   T12] bond6 (unregistering): (slave bridge5): Releasing backup interface
[  701.250431][   T12] bridge5 (unregistering): left promiscuous mode
[  701.335537][   T12] bond1 (unregistering): Released all slaves
[  701.388246][   T12] bond2 (unregistering): Released all slaves
[  701.409283][   T12] bond3 (unregistering): Released all slaves
[  701.425534][   T12] bond4 (unregistering): Released all slaves
[  701.443775][   T12] bond5 (unregistering): Released all slaves
[  701.468497][   T12] bond6 (unregistering): Released all slaves
[  701.486512][   T12] bond0 (unregistering): Released all slaves
[  701.510213][   T12] bond7 (unregistering): Released all slaves
[  701.526628][   T12] bond8 (unregistering): Released all slaves
[  701.544940][   T12] bond9 (unregistering): Released all slaves
[  701.583899][T30654] ip_vti0: entered promiscuous mode
[  701.688488][T30672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  701.718747][T30673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  701.818340][   T12] : left promiscuous mode
[  701.884165][T30689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6450'.
[  701.925820][T30689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6450'.
[  702.004321][T30693] Bluetooth: MGMT ver 1.23
[  702.560937][ T5629] Bluetooth: hci0: command tx timeout
[  702.847887][   T12] tipc: Disabling bearer <udp:syz2>
[  702.860211][   T12] tipc: Left network mode
[  703.211249][T30500] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.244918][T30500] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.280997][T30500] bridge_slave_0: entered allmulticast mode
[  703.325489][T30500] bridge_slave_0: entered promiscuous mode
[  703.362875][T30500] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.382189][T30500] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.404006][T30745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6460'.
[  703.414354][T30500] bridge_slave_1: entered allmulticast mode
[  703.424554][T30500] bridge_slave_1: entered promiscuous mode
[  703.554616][T30750] xt_limit: Overflow, try lower: 604147548/4200216962
[  703.799429][T30747] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  703.831186][T30747] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  703.914027][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1
[  704.072914][T30500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  704.108872][T30764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6463'.
[  704.133698][T30500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.165324][T30773] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6464'.
[  704.180341][T30764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6463'.
[  704.205224][T30773] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6464'.
[  704.257076][T30773] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6464'.
[  704.331222][T30500] team0: Port device team_slave_0 added
[  704.428772][T30500] team0: Port device team_slave_1 added
[  704.640742][ T5629] Bluetooth: hci0: command tx timeout
[  704.711240][T30783] netlink: 'syz.3.6465': attribute type 1 has an invalid length.
[  704.720009][T30500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  704.759353][T30500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  704.829887][T30500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  704.873705][T30500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  704.885895][T30797] netlink: 'syz.4.6468': attribute type 3 has an invalid length.
[  704.911720][T30500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  704.951853][T30500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.195275][T30818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  705.487037][T30500] hsr_slave_0: entered promiscuous mode
[  705.530798][T30500] hsr_slave_1: entered promiscuous mode
[  705.558903][T30500] debugfs: 'hsr0' already exists in 'hsr'
[  705.578245][T30500] Cannot create hsr debugfs directory
[  705.729613][T30832] netlink: 'syz.0.6474': attribute type 4 has an invalid length.
[  705.834218][T30833] netlink: 'syz.0.6474': attribute type 4 has an invalid length.
[  706.152121][T30843] veth0_macvtap: entered allmulticast mode
[  706.170494][T30843] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  706.231724][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2
[  706.455474][T30868] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  706.497931][T30868] gretap1: entered promiscuous mode
[  706.517347][T30868] gretap1: entered allmulticast mode
[  706.639745][ T9941] IPVS: starting estimator thread 0...
[  706.740352][T30882] IPVS: using max 25 ests per chain, 60000 per kthread
[  707.055018][T30500] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.138063][T30901] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6489'.
[  707.225262][T30906] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6492'.
[  707.478509][T30500] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.587378][   T12] hsr_slave_0: left promiscuous mode
[  707.613707][   T12] hsr_slave_1: left promiscuous mode
[  707.648843][T30922] sctp: [Deprecated]: syz.0.6497 (pid 30922) Use of struct sctp_assoc_value in delayed_ack socket option.
[  707.648843][T30922] Use struct sctp_sack_info instead
[  707.661205][   T12] veth0_macvtap: left promiscuous mode
[  707.672404][   T12] veth1_vlan: left promiscuous mode
[  707.677848][   T12] veth0_vlan: left promiscuous mode
[  708.268572][T10697] smc: removing ib device syz2
[  708.538971][T30918] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  708.547800][T30920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6495'.
[  708.555524][T30930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6498'.
[  708.566974][T30930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6498'.
[  708.579944][T30930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6498'.
[  708.611487][T30920] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  708.611597][T30920] block (null): Could not allocate knbd recv work queue.
[  708.661859][ T9941] ==================================================================
[  708.669980][ T9941] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[  708.678803][ T9941] Read of size 8 at addr ffff8880563f62f0 by task kworker/0:13/9941
[  708.686817][ T9941] 
[  708.689182][ T9941] CPU: 0 UID: 0 PID: 9941 Comm: kworker/0:13 Not tainted syzkaller #0 PREEMPT(full) 
[  708.689208][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  708.689224][ T9941] Workqueue: events smc_ib_port_event_work
[  708.689258][ T9941] Call Trace:
[  708.689267][ T9941]  <TASK>
[  708.689276][ T9941]  dump_stack_lvl+0xe8/0x150
[  708.689300][ T9941]  print_address_description+0x55/0x1e0
[  708.689323][ T9941]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  708.689347][ T9941]  print_report+0x58/0x70
[  708.689366][ T9941]  kasan_report+0x117/0x150
[  708.689400][ T9941]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  708.689428][ T9941]  __ethtool_get_link_ksettings+0x5e/0x170
[  708.689453][ T9941]  ib_get_eth_speed+0x180/0x7f0
[  708.689484][ T9941]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  708.689518][ T9941]  ? do_raw_spin_unlock+0xf5/0x210
[  708.689554][ T9941]  rxe_query_port+0x93/0x3d0
[  708.689585][ T9941]  ib_query_port+0x170/0x830
[  708.689617][ T9941]  smc_ib_port_event_work+0x15a/0x940
[  708.689652][ T9941]  ? process_scheduled_works+0xa70/0x1860
[  708.689674][ T9941]  ? process_scheduled_works+0xa70/0x1860
[  708.689697][ T9941]  process_scheduled_works+0xb5d/0x1860
[  708.689738][ T9941]  ? __pfx_process_scheduled_works+0x10/0x10
[  708.689764][ T9941]  ? assign_work+0x3d5/0x5e0
[  708.689803][ T9941]  worker_thread+0xa53/0xfc0
[  708.689843][ T9941]  kthread+0x389/0x470
[  708.689870][ T9941]  ? __pfx_worker_thread+0x10/0x10
[  708.689890][ T9941]  ? __pfx_kthread+0x10/0x10
[  708.689919][ T9941]  ret_from_fork+0x514/0xb70
[  708.689943][ T9941]  ? __pfx_ret_from_fork+0x10/0x10
[  708.689966][ T9941]  ? __switch_to+0xc79/0x1410
[  708.689998][ T9941]  ? __pfx_kthread+0x10/0x10
[  708.690026][ T9941]  ret_from_fork_asm+0x1a/0x30
[  708.690061][ T9941]  </TASK>
[  708.690069][ T9941] 
[  708.863234][ T9941] Allocated by task 18982:
[  708.867670][ T9941]  kasan_save_track+0x3e/0x80
[  708.872371][ T9941]  __kasan_kmalloc+0x93/0xb0
[  708.876986][ T9941]  __kvmalloc_node_noprof+0x528/0x8a0
[  708.882398][ T9941]  alloc_netdev_mqs+0xa8/0x1210
[  708.887260][ T9941]  rtnl_create_link+0x31f/0xd70
[  708.892125][ T9941]  rtnl_newlink_create+0x277/0xb70
[  708.897257][ T9941]  rtnl_newlink+0x166a/0x1bb0
[  708.901950][ T9941]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  708.906909][ T9941]  netlink_rcv_skb+0x232/0x4b0
[  708.911693][ T9941]  netlink_unicast+0x75c/0x8e0
[  708.916470][ T9941]  netlink_sendmsg+0x813/0xb40
[  708.921254][ T9941]  __sys_sendto+0x672/0x710
[  708.925786][ T9941]  __x64_sys_sendto+0xde/0x100
[  708.930565][ T9941]  do_syscall_64+0x15f/0xf80
[  708.935175][ T9941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.941078][ T9941] 
[  708.943415][ T9941] Freed by task 12:
[  708.947231][ T9941]  kasan_save_track+0x3e/0x80
[  708.951923][ T9941]  kasan_save_free_info+0x46/0x50
[  708.956963][ T9941]  __kasan_slab_free+0x5c/0x80
[  708.961740][ T9941]  kfree+0x1c5/0x640
[  708.965646][ T9941]  device_release+0xc4/0x1f0
[  708.970255][ T9941]  kobject_put+0x228/0x560
[  708.974691][ T9941]  netdev_run_todo+0xc75/0xde0
[  708.979471][ T9941]  default_device_exit_batch+0x967/0x9e0
[  708.985120][ T9941]  ops_undo_list+0x52b/0x940
[  708.989733][ T9941]  cleanup_net+0x56b/0x800
[  708.994183][ T9941]  process_scheduled_works+0xb5d/0x1860
[  708.999739][ T9941]  worker_thread+0xa53/0xfc0
[  709.004336][ T9941]  kthread+0x389/0x470
[  709.008421][ T9941]  ret_from_fork+0x514/0xb70
[  709.013024][ T9941]  ret_from_fork_asm+0x1a/0x30
[  709.017805][ T9941] 
[  709.020136][ T9941] The buggy address belongs to the object at ffff8880563f6000
[  709.020136][ T9941]  which belongs to the cache kmalloc-cg-4k of size 4096
[  709.034465][ T9941] The buggy address is located 752 bytes inside of
[  709.034465][ T9941]  freed 4096-byte region [ffff8880563f6000, ffff8880563f7000)
[  709.048362][ T9941] 
[  709.050701][ T9941] The buggy address belongs to the physical page:
[  709.057140][ T9941] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x563f0
[  709.065912][ T9941] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  709.074418][ T9941] memcg:ffff8880563f1011
[  709.078668][ T9941] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  709.086219][ T9941] page_type: f5(slab)
[  709.090212][ T9941] raw: 00fff00000000040 ffff88813fe36500 dead000000000100 dead000000000122
[  709.098805][ T9941] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff8880563f1011
[  709.107399][ T9941] head: 00fff00000000040 ffff88813fe36500 dead000000000100 dead000000000122
[  709.116077][ T9941] head: 0000000000000000 0000200000040004 00000000f5000000 ffff8880563f1011
[  709.124760][ T9941] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  709.133447][ T9941] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  709.142124][ T9941] page dumped because: kasan: bad access detected
[  709.148556][ T9941] page_owner tracks the page as allocated
[  709.154274][ T9941] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18982, tgid 18982 (syz-executor), ts 407933069886, free_ts 407930931787
[  709.175993][ T9941]  post_alloc_hook+0x22d/0x280
[  709.180780][ T9941]  get_page_from_freelist+0x24ba/0x2540
[  709.186350][ T9941]  __alloc_frozen_pages_noprof+0x18d/0x380
[  709.192178][ T9941]  allocate_slab+0x77/0x660
[  709.196690][ T9941]  refill_objects+0x339/0x3d0
[  709.201379][ T9941]  __pcs_replace_empty_main+0x321/0x720
[  709.206934][ T9941]  __kmalloc_cache_noprof+0x392/0x660
[  709.212327][ T9941]  ipv6_add_dev+0x6aa/0x13a0
[  709.216932][ T9941]  addrconf_notify+0x771/0x1050
[  709.221802][ T9941]  notifier_call_chain+0x1ad/0x3d0
[  709.226930][ T9941]  register_netdevice+0x18c9/0x1ec0
[  709.232137][ T9941]  veth_newlink+0x67b/0xb70
[  709.236652][ T9941]  rtnl_newlink_create+0x329/0xb70
[  709.241780][ T9941]  rtnl_newlink+0x166a/0x1bb0
[  709.246475][ T9941]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  709.251430][ T9941]  netlink_rcv_skb+0x232/0x4b0
[  709.256209][ T9941] page last free pid 18982 tgid 18982 stack trace:
[  709.262709][ T9941]  __free_frozen_pages+0xbc7/0xd30
[  709.267834][ T9941]  __slab_free+0x274/0x2c0
[  709.272263][ T9941]  qlist_free_all+0x99/0x100
[  709.276869][ T9941]  kasan_quarantine_reduce+0x148/0x160
[  709.282359][ T9941]  __kasan_slab_alloc+0x22/0x80
[  709.287228][ T9941]  __kmalloc_cache_noprof+0x2ba/0x660
[  709.292616][ T9941]  kset_create_and_add+0x5a/0x170
[  709.297651][ T9941]  netdev_register_kobject+0x1a2/0x310
[  709.303116][ T9941]  register_netdevice+0x1456/0x1ec0
[  709.308325][ T9941]  veth_newlink+0x67b/0xb70
[  709.312839][ T9941]  rtnl_newlink_create+0x329/0xb70
[  709.317966][ T9941]  rtnl_newlink+0x166a/0x1bb0
[  709.322663][ T9941]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  709.327630][ T9941]  netlink_rcv_skb+0x232/0x4b0
[  709.332411][ T9941]  netlink_unicast+0x75c/0x8e0
[  709.337188][ T9941]  netlink_sendmsg+0x813/0xb40
[  709.341973][ T9941] 
[  709.344306][ T9941] Memory state around the buggy address:
[  709.349940][ T9941]  ffff8880563f6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  709.358021][ T9941]  ffff8880563f6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  709.366090][ T9941] >ffff8880563f6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  709.374157][ T9941]                                                              ^
[  709.381887][ T9941]  ffff8880563f6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  709.389956][ T9941]  ffff8880563f6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  709.398027][ T9941] ==================================================================
[  709.483036][ T9941] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  709.490301][ T9941] CPU: 0 UID: 0 PID: 9941 Comm: kworker/0:13 Not tainted syzkaller #0 PREEMPT(full) 
[  709.499787][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  709.509878][ T9941] Workqueue: events smc_ib_port_event_work
[  709.515731][ T9941] Call Trace:
[  709.519036][ T9941]  <TASK>
[  709.522003][ T9941]  vpanic+0x56c/0xa60
[  709.526019][ T9941]  ? __pfx_vpanic+0x10/0x10
[  709.530552][ T9941]  ? __pfx___schedule+0x10/0x10
[  709.535439][ T9941]  panic+0xc5/0xd0
[  709.539189][ T9941]  ? __pfx_panic+0x10/0x10
[  709.543638][ T9941]  ? preempt_schedule_common+0x82/0xd0
[  709.549144][ T9941]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  709.555144][ T9941]  check_panic_on_warn+0x89/0xb0
[  709.560113][ T9941]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  709.566114][ T9941]  end_report+0x73/0x170
[  709.570374][ T9941]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  709.576362][ T9941]  kasan_report+0x128/0x150
[  709.580891][ T9941]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  709.586889][ T9941]  __ethtool_get_link_ksettings+0x5e/0x170
[  709.592723][ T9941]  ib_get_eth_speed+0x180/0x7f0
[  709.597591][ T9941]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  709.602993][ T9941]  ? do_raw_spin_unlock+0xf5/0x210
[  709.608132][ T9941]  rxe_query_port+0x93/0x3d0
[  709.612743][ T9941]  ib_query_port+0x170/0x830
[  709.617357][ T9941]  smc_ib_port_event_work+0x15a/0x940
[  709.622754][ T9941]  ? process_scheduled_works+0xa70/0x1860
[  709.628482][ T9941]  ? process_scheduled_works+0xa70/0x1860
[  709.634215][ T9941]  process_scheduled_works+0xb5d/0x1860
[  709.639790][ T9941]  ? __pfx_process_scheduled_works+0x10/0x10
[  709.645794][ T9941]  ? assign_work+0x3d5/0x5e0
[  709.650399][ T9941]  worker_thread+0xa53/0xfc0
[  709.655024][ T9941]  kthread+0x389/0x470
[  709.659110][ T9941]  ? __pfx_worker_thread+0x10/0x10
[  709.664235][ T9941]  ? __pfx_kthread+0x10/0x10
[  709.668841][ T9941]  ret_from_fork+0x514/0xb70
[  709.673444][ T9941]  ? __pfx_ret_from_fork+0x10/0x10
[  709.678569][ T9941]  ? __switch_to+0xc79/0x1410
[  709.683272][ T9941]  ? __pfx_kthread+0x10/0x10
[  709.687901][ T9941]  ret_from_fork_asm+0x1a/0x30
[  709.692697][ T9941]  </TASK>
[  709.696680][ T9941] Kernel Offset: disabled
[  709.701012][ T9941] Rebooting in 86400 seconds..