last executing test programs:

3m8.690043172s ago: executing program 3 (id=3549):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000141401"], 0x38}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x20, 0x3, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}]}, 0x20}}, 0x0)

3m8.560695956s ago: executing program 3 (id=3553):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xfff9}, &(0x7f00000000c0)=0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1) (async)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xfff9}, &(0x7f00000000c0)=0x90) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) (async)

3m8.484343283s ago: executing program 3 (id=3556):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
write(r1, &(0x7f0000000040)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)

3m8.282055802s ago: executing program 3 (id=3559):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_cred(r1, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000280)=0x7f)
listen(r0, 0x8)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x10, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x3}, 0x8)
sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
socket$inet(0xa, 0x801, 0x84) (async)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000280)=0x7f) (async)
listen(r0, 0x8) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x10, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x3}, 0x8) (async)
sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async)

3m8.124771501s ago: executing program 3 (id=3562):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
close(0x3)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)

3m7.810874786s ago: executing program 3 (id=3569):
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)) (async)
getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180))
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24)
sendmsg$rds(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x8044)

3m7.637010867s ago: executing program 32 (id=3569):
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)) (async)
getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180))
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24)
sendmsg$rds(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x8044)

1m13.729541012s ago: executing program 0 (id=5182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
r1 = socket(0x5, 0x3, 0xc5e6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=<r3=>0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000000c0)={r1})
sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x11b8, 0x11, 0x1, 0x401, 0x70bd29, 0x25dfdbff, {0x5, 0x0, 0x8}, [@generic="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", @generic="3a19c0e921d0226ff813f0ae3f497018576336856be59a663b61f7d2d25b221265c50542dac26d262fa15badae5fe620c263d1ab5ed63b29ba8f25c0e78521fdfe2f2b7b5ef70c65ffccecece5c1f5213263b0ad6609a3d76333436ed5531fdb507fca185fa7f323769a5b6cb669dbe6692977d418d874f11950c933470fa2eb6e639fb0644d7c61549ff0622be1f1e091f43798b0a0c78e58576aa6417799b912c7a4a93385677c829c476ce9d70b07229e003aa3a44556ebb04dde89cd38dfd11d61157267b460125cf9d4374d3d75eb42f93fac84", @generic="287a24a8c3c926436df8b4ff930654dd519bd667ec63ee6431499a03fec0c3", @generic="093ad2f913cf19faec9361bb76c89b2d6538d37897128b49bf7f806a88eee85e13b306472595a3394810219a95eeda9414875729b56193bdf988a3e16a8966df506f633bcd1e5d6f6b43d035488b01eb9c2922ccce5cf73f12620f14b9f0beff06d34c1a1700e0ae1ae6ff5e38a688cc88e3", @nested={0x3b, 0x119, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @pid=r3}, @generic="5c972b2bc8d7048ca331ba86fbe44456fb0c8a132698338c0d047c", @typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@empty}]}]}, 0x11b8}}, 0x8001)

1m13.45783001s ago: executing program 0 (id=5187):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040))
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r2, 0x0, 0x0)
read(r2, 0x0, 0x0)
write$ppp(r2, &(0x7f0000000200)="bc72", 0x2)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x60, 0x0, 0x731, 0x70bd2c, 0x1, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x2}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r4, @ANYRES32=r5, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000015)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0)

1m12.470160621s ago: executing program 0 (id=5214):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="18", 0x1}], 0x1}, 0x4008840)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d00000006000400000000000c00050000000000000000000a0001007770616e3000000008002f000500000005002e000505000005002b0003000000"], 0x4c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x104)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe2f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000880}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10)

1m11.965818295s ago: executing program 2 (id=5228):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) (async)
socket$packet(0x11, 0x0, 0x300) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0xfffffffe, @remote, 0x34}]}, &(0x7f0000000040)=0x10)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000300)='[', 0x1, 0x4090, &(0x7f0000000000)={0xa, 0x0, 0x8a3, @loopback, 0xb}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @empty, 0xcc9}, 0x1c)
sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="a9", 0x1}], 0x1}, 0x80) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f0000000240)) (async)
syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2000, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) (async)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000440), 0x4)

1m11.915936738s ago: executing program 4 (id=5230):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x7ffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a)

1m11.83977228s ago: executing program 1 (id=5232):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
shutdown(r0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6(0xa, 0x1000080002, 0x100000000000088)
r2 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4008840, 0x0, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x801, 0x81}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044800)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r3, 0x6, 0x3, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="17", 0x1, 0x10008095, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xc, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800)
ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, 0x0)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}], 0x20}, 0x0)
syz_open_procfs$namespace(r6, 0x0)

1m11.838011235s ago: executing program 2 (id=5233):
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x40)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@broadcast, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, 0x0) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@remote, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0x0)
socket$pppoe(0x18, 0x1, 0x0) (async)
socket$inet(0x2, 0x2, 0x6) (async)
accept(r1, &(0x7f0000000580)=@sco={0x1f, @fixed}, &(0x7f0000000500)=0x80)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000800)) (async)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0)

1m11.78248215s ago: executing program 4 (id=5235):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000eb0000000064e0000000fff3"], 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000019c0)=@ethtool_regs={0x4, 0x4, 0xc, '\x00'/12}}) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xc, 0xfffffffc}, 0x9c) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
r4 = socket$kcm(0x11, 0x3, 0x0) (rerun: 32)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x1, 0x5}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="27050200340f14000307002fb96dbcf706060000170008005f45f401000000c5ff1144ee16000f000001004057000000060000400000000080", 0x39}, {&(0x7f0000001280)="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", 0x6ea}], 0x2}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r5 = socket$key(0xf, 0x3, 0x2) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
writev(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)="b77375e5dc1d74becd2fcc787b022dde75b63baa3a1b0623fb995e7f920ae8cf8a62f0f5225b223c6909a502bd4ec883fc49a915457b75ce789aa2cc9005fcebea2ef8b9fb2f79a284ca83e4ea6bd9f60e3d3572bcad4cced362aafec924f8a4d7d6cbb6dd8f0aa3c1ff1b980b4959d85a2924c48690d6b7f7cb1ebf03a2504dfe421bdf2d34e49d508865146527b64c77b123973248a81b658a2a4009fefee24bdc659901db56a08c264f0975db868e63", 0xb1}, {&(0x7f0000000380)="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", 0xf50}], 0x2)
close(r6) (async)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=ANY=[], 0x60}, 0x1, 0x7}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000040a50000000060a0b040000000000000000020000002400048020000180080001006c6f670014000280060001400000000008000540000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a2dcc44004b636332f42bcf2fe3a67aebca54c7c4af4b7a6cd3ad669677143a132da8b7e791088e10f8860b322fa3b33a6de797ab230c3f7d1596b9d46c6d31ea65ddd4a5d328b1b52942b712f42efb82fa626594540adaf06a54ca1157b9f811af35b9e5df"], 0x78}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async)
setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast1=0xe0000300, @broadcast}, 0x8) (rerun: 32)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000000c0)={0x8, 0x7, 0xfdc6, 0x2, 0xf, 0x8, 0x4f}, 0xc) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$rxrpc(0x21, 0x2, 0x2) (async)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="b000ff00e89890658215d09456a6af1d75a099d1608e345d98dd110b46d630639cd47d410b08f9eb3790c2e0a8e8a93303b3ba4e9cffb6b6ab867e9dac038062af9fa83fe08168d0574177374ead62bf41a489a2de6d007999d93df54af2ebe99e0c5343faa71f786dbd8fe03214c91307890478dd4eaa0b6b3cd5074b2549a73eb15aa9fe96a12ca93dbd3a6c7802eb306d9aa3717e9597a40f1a", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf250b00000024000980080002000500000008000200e7000000080002000101000008000200040000001800078008000200ff0f00000c0003000000000000000000180007800c000300060000000000000008000100060000004800028008000200dba900003400038008000200280b00000800010000800000080002000400000008000100ff0700000800020001010000080002000008000008000200870b0000"], 0xb0}, 0x1, 0x0, 0x0, 0xc040}, 0x1)
ioctl$sock_inet_SIOCSIFNETMASK(r9, 0x891c, &(0x7f0000000180)={'vxcan1\x00', {0x2, 0x4e24, @rand_addr=0x64010101}})
close(r8)

1m11.65787248s ago: executing program 2 (id=5236):
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
socket$packet(0x11, 0x2, 0x300)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100005800c000180"], 0x34}}, 0x0)

1m11.640442971s ago: executing program 4 (id=5238):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @local, 'gre0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'geneve0\x00'}}, 0x1e)
close(r1)
syz_init_net_socket$ax25(0x3, 0x5, 0xce)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000007060403000000000000000005000004814cb76b843e5e9017888ccba34aefc4ea381ea128962fbc12d14b9fd06f11f19555fbd5313fdd6a68be9c828722f6ed7a3a5011c0cf32eb1559467c43c5b15815a321f51ef4b6d5a5d29d9a0c90a5150dd163b97893d8a971b7f16e034cd366a1d0a88b3f8dda8d2a64109769121d619303b631c3e1ed0d3681f05f9bccadf588f9751e402063c8e27fbd9db928be3af8ad3ec660bb4f782957b46438d17ebbdef5ecb3a8adb2b39f2470d4cbd590433db3006e52e4146e"], 0x14}}, 0x800)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x893}, 0x20040084)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x2404c084)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept(r7, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000001a80), 0x0, 0x0)
recvmsg$can_bcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/224, 0xe0}, {0x0}], 0x2}, 0x10003)

1m11.505739971s ago: executing program 2 (id=5240):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1b, &(0x7f00000003c0)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x35c4, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x7}, @ldst={0x3, 0x3, 0x6, 0xf76390ba15d0b1ed, 0x5, 0xfffffffffffffffc, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x3, 0x3, 0xf, 0x8, 0x3ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000140), 0x0}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000a40)=""/203, 0xcb, 0x0, &(0x7f0000000b40)=""/212, 0xd4}}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x0)

1m11.501450172s ago: executing program 0 (id=5241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002000)={0x28, r2, 0x421, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r4, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="e14e0716", @ANYRES16=r4, @ANYBLOB="00012cbd7000fedbdf25830000000c00990000800000700000000a000600ffffffffffff00000a0006000802110000010000800711807c070580ec0000800a000100ffffffffffff000008000380040002003c000280080022018a000000080026006c0900000800a1000200000008002201ca01000008002700020000000800a100060000000800270003000000480003804400018040000180040009000500060019000000050006001a00000004000c000600040059c20000050003000e000000040008000500060001000000050005000700000024000280080022018b00000005001801110000000800a1000600000008002201b30000002c00028008009f00060000000500180136000000080027000200000008002700010000000800270003000000a00200800c00028008002700020000000a000100ffffffffffff0000a00003800400020004000200940001800800018004000b001000018005000600150000000400010024000180050007000200000004000a00050006001f0000000600040004000000040008001400018004000800050006001e00000004000b00280001800500060003000000080002000100000004000c0004000c00050006001d000000040001001800018004000a0004000a0004000100060004000180000010000380040002000400020004000200d401038004000200000101801800018004000c00050005000800000006000400ff030000380001800500060011000000050005000500000004000900040001000800020002000000060004000100000004000b00080002000400000010000180050006001e00000004000b0020000180080002000300000005000600150000000400090004000b00040001001000018004000900050005000f0000004400018004000b00050005000900000005000700070000000400080008000200020000000500070006000000060004000004000004000a000400080006000400090000000c00018004000800040009000c000180050003000300000010000180050005000300000004000800cc0001801c000180050006000d000000050005000000000004000b0004000800200001800500050008000000060004000f000000050005000e00000004000c0024000180060004000600000005000600070000000400080004000c0005000600040000001c00018005000300020000000500060003000000050005000b00000040000180040009000800020004000000050005000c00000004000800050007000800000008000200030000000500030007000000080002000400000004000a000c00018004000b0004000b00b00300809403038034010180080001800400090024000180050006000500000005000600130000000500070009000000050006000c00000038000180050003000500000005000700050000000600040001000000050006001700000004000b000400090004000a00050003000000000014000180060004000c00000004000a0004000800340001800400090008000200030000000400010004000a000500060016000000080002000300000004000100080002000100000024000180050005000300000004000b0005000500060000000400010004000c0004000a000c00018005000600170000001800018004000c000600040008000000050007000400000018000180080002000000000004000b0005000700fa0000002400018004000a00050006000a00000004000b000500070003000000050005000a00000004000200a80001802c000180050006001d0000000400080005000700fd00000006000400020000000500030001000000040001001000018004000c00050005000e000000100001800500060001000000040009001c00018004000b0004000b00050003000b0000000500070007000000140001800800020003000000050003000700000028000180050007008100000004000a00050005000c00000006000400ff0f0000080002000300000004000200000101801000018004000100040001000400090024000180050006000b00000004000b00040001000800020002000000060004000400000020000180040009000500030005000000050006001800000004000b0004000800180001800400010004000a0004000b0005000600070000000c000180050007000300000024000180040008000500050009000000040009000500070009000000050005000b00000014000180050003000d000000050006000700000030000180050005000500000004000b000500050007000000080002000300000004000b000800020003000000040009000800018004000a001400018006000400f8e80000050006000e000000ac00018010000180050003000900000004000b000c00018005000300090000000c00018008000200000000001400018004000c000400080008000200030000003c00018004000900080002000000000004000800050006001200000004000a00050005000500000004000c0004000100050003000c00000004000b003000018008000200020000000500030007000000050003000d0000000600040001010000060004000000000004000a000a00010008021100000100000a00010008021100000100003c0000803800038004000200040002002c00018028000180080002000100000008000200010000000500050005000000050003000200000004000a005c0b1180580b0580a80300800a00010008021100000100003400028008009f0000000000080022014a0300000800220123010000050018011000000008009f000000000008009f00030000002c0002800800a000e70000000800a100060000000800a1000700000008009f000500000008002201cf0200000a0001000802110000000000040303806c0001800c00018005000600000000001400018005000600160000000500050007000000140001800500050008000000080002000400000028000180050006001600000008000200020000000400010004000b000400090005000700070000000c0001800400080004000c0004000200f8000180100001800400080004000b0004000a003c00018004000c000600040001800000040001000500070003000000050007008e00000004000b00060004000001000004000c0006000400010000000800018004000a0024000180050005000900000004000a0004000800050007000200000004000c0004000a000800018004000b0034000180050005000f00000004000a000500030006000000050003000300000004000a00050003000e00000004000a000400090010000180050007006900000004000900300001800500050005000000060004000600000005000600020000000400090008000200040000000500060012000000980101803c0001800400080006000400080000000500070040000000060004000300000004000b000500070001000000050003000c00000004000800040008002c00018008000200000000000400090005000700050000000800020001000000060004009b0200000400080034000180040008000400080004000b00080002000100000004000c00050005000d00000004000a00060004000200000004000a002c000180040009000500070005000000050005000e000000050003000c00000004000800080002000300000014000180080002000100000004000a0004000b002400018004000c00040009000400080005000700000000000400090008000200010000003000018006000400fcff00000500070000000000050006001400000004000a0006000400ae02000006000400008000002000018004000a00080002000100000004000c00050007008000000004000c00440001800500030002000000050003000c00000004000b0004000b0004000b00050007000e00000004000c000500060009000000050006000d00000006000400140000000a00010008021100000100001c0002800800a10007000000080026000816000008009f00070000006403008088010380b40001800c00018004000b0004000b00300001800500050008000000080002000000000006000400010100000500030004000000050007000e000000040008001c0001800500070007000000050006001900000004000a0004000a004400018004000900050006001a00000005000300010000000500060012000000050006001900000008000200030000000400080004000c0004000c0005000700070000001400018004000c0004000b00080002000000000004000200040002001400018010000180040009000800020002000000040002007400018040000180060004000700000006000400fbff00000500060010000000040008000800020004000000050007000500000005000700f700000005000300080000001800018004000900080002000400000006000400020000001400018004000a00050006000700000004000800040001803c0001803800018004000100060004000d00000005000700090000000400090004000100050007000e0000000400010006000400e24000000400090094000380500001804000018004000c00050003000300000004000b00050006001500000006000400feff0000060004000800000004000a00050005000600000005000500080000000c000180050006001a000000400001800800018004000a002800018005000600060000000500070007000000060004009200000004000a0008000200030000000c00018008000200000000002c0002800800a000ff000000050019010d0000000800a10007000000050019010b00000008002201c1020000b40003800400020004000200a800018014000180050007000a0000000400010004000a002000018004000b000400090004000b0004000100050003000800000004000a00300001800600040008000000080002000300000004000b0004000100050006000700000004000900050003000000000040000180050006000600000004000a00050003000f00000004000c00050005000000000004000900050007000900000004000a0004000b0005000500050000000a000100ffffffffffff00000a00010008021100000100000a000100ffffffffffff00002c000280080026006c0900000800a10006000000050018013a0000000800a1000f00000008002201e5020000140002800800a000000100000800a000d8db0000ec0300804400028008002201db030000080022016f0000000500180111000000050019010e0000000800270003000000050019010500000005001901060000000500180101000000f4020380f00001802800018004000900050005000900000004000a0004000c00050005000900000004000b0004000a002c0001800500030000000000050003000c00000004000c0006000400070000000800020002000000040009002000018005000700410000000600040000000000050007000800000004000c0018000180050006000e000000050005000c000000040008002400018004000b0006000400080000000500030002000000050005000f000000040008003c00018004000100050005000d00000005000700400000000500060001000000050007000400000004000b0004000800050003000100000004000c001c0001800c00018005000700070000000c00018005000600030000006400018010000180050003000b00000004000a001800018004000100050006001300000004000a00040008001000018004000c00050007003e0000001c000180040009000400080004000800050005000e00000004000b000c00018004000900040009000400018004000200a80001800c00018006000400070000001400018004000c0004000c0004000b0004000c0020000180060004000500000008000200040000000800020003000000040008002000018004000b000400090004000b00050005000700000008000200000000003000018004000c000500060011000000050003000d00000004000a0004000c0004000b0004000b0004000800040009000400018010000180050006001100000004000800cc0001800c0001800400080004000c0010000180040008000400010004000800480001800800020005000000060004000600000004000a00050005000100000008000200030000000500060016000000050005000c00000005000600170000000800020002000000140001800800020005000000050007000100000020000180050005000000000004000c0004000c00040008000500030008000000240001800500060009000000060004002dd8000006000400260b000006000400050000000c0001800500060007000000040002000a00010008021100000100000800038004000200140002800800a00008000000080027000000000034000280050018010f00000008002600e916000005001901080000000800260090150000080026006c0900000800a0000000000048000380040002002c0001800c00018005000700fd0000001c000180050007000000000004000100080002000000000004000c0004000200040002000400020004000200040002000a000100ffffffffffff00005c0000801c0002800800a000ff7f00000800a0000004000005001801210000003c00028008009f0001000000050018013200000008002700010000000800a1000000000008002201db02000008009f0003000000080027000100000008001001040000000a0006000802110000010000"], 0x1328}}, 0x1)

1m11.479743161s ago: executing program 5 (id=5242):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r2 = socket$kcm(0x10, 0x100000000002, 0x4) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x1e, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000003c0)={<r6=>r0, 0x8, 0xfff, 0x4})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='thermal_power_cpu_limit\x00', r6, 0x0, 0x13c}, 0x18)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r7 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20044881) (async)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xfffffffe}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) (async)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="5316d82978345c0fc27da01b3963c393c6dabb024139626e5e33153d252772c12cf68ac6d4b43d9f56a3b2d11d42db1b831cfcdc44c4daa2507d82e17e25b100897a", 0x42) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3f}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000080)={'gretap0\x00', @remote})

1m11.410843417s ago: executing program 0 (id=5243):
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r2)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x1, 0x9}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x1, 0x9}, 0x8)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x1407, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x800)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r7, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x25dfdbfd, {{'pcbc(fcrypt-generic)\x00'}, '\x00', '\x00', 0x0, 0x4400}}, 0xe0}}, 0x0) (async)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x25dfdbfd, {{'pcbc(fcrypt-generic)\x00'}, '\x00', '\x00', 0x0, 0x4400}}, 0xe0}}, 0x0)
sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)

1m11.329943146s ago: executing program 5 (id=5244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r0, &(0x7f0000001700), &(0x7f0000001780), 0x3}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0)

1m11.329079032s ago: executing program 2 (id=5245):
socket(0x40000000015, 0x5, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$tipc2(0x0, r0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500080000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000"], 0xe8}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0xf8, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0xfffffffffffffe95, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x44b47171}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x50}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfad}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0xb817}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000005}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40400c4}, 0x40000) (async, rerun: 32)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB='\n\x004'], 0x44}}, 0x0) (rerun: 32)

1m11.311855995s ago: executing program 0 (id=5246):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10)
socket$key(0xf, 0x3, 0x2)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x2}}, 0x26)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000440)=ANY=[@ANYBLOB="140000001c0efa48ae4547970804000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"/28], 0x50)
r4 = socket$key(0xf, 0x3, 0x2)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200))
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x40040c0)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'gre0\x00'})
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
getsockopt$sock_int(r9, 0x1, 0x12, 0x0, &(0x7f0000001ec0))
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="01005024606f56b900000000fdffffff0f00000008000300", @ANYBLOB="62d6177f4841d4ac6e8b64837351a823efc81e30e412408fe35d261703efd4a2bb729bbae3015354007de8b0239956da0cf9eaaf8660871d829029be3dd9cd8aa8e34eaafdfd0d245fac8b89905664e9f5827c6b65f26afefbcf64a6b8b044d804ba56241a01f2b619ed796765fc874771a45b77e0226dd44945b66e619cc16ad3abaefd41592286780ba1a2e20db58af0afea776f3cbda8d92fa46ced253933e795ab4a272cf676adf3ae52816f2ade3a5f8813a9909f45", @ANYBLOB="0500290000000000050033000100000005003800000000000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x8)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r11)
r12 = socket(0xa, 0x800, 0x8)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000280)=0x4)

17.19655475s ago: executing program 5 (id=5247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r1 = socket(0x1f, 0x80000, 0x4)
ioctl$sock_ifreq(r1, 0x891b, &(0x7f0000000080)={'vxcan1\x00', @ifru_settings={0x3, 0x5, @fr_pvc=&(0x7f0000000040)={0x10000}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x2}}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
syz_emit_ethernet(0xd2, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x9c, 0x3c, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "abf9a9b08b40a1dc367c4dc078e27c26e9e42239289acc5aad0c6189fcc415e9", "4001d9e099f96e96b6fe33032ddc02272c1ea41f157a3dc5454ade0c416088f80a328a1a6dc9c6a843b8d6344cf5225f", "857c00661436f168db59cbbb93c5ba7cd13875e36fa3c3b8976b9dc0", {"7840a612fe1a814c065cd1094fa8ac89", "23a6cc482526163958fa4d52fc2d8623"}}}}}}}}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000200)=0x4, 0x4)

17.176546407s ago: executing program 5 (id=5248):
r0 = socket$netlink(0x10, 0x3, 0x12) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_PIM(r1, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) (async)
sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0)

16.696940571s ago: executing program 5 (id=5249):
r0 = socket$inet(0x10, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27d3f)
r1 = socket(0xa, 0x3, 0x3a)
getsockopt$nfc_llcp(r1, 0x3a, 0x0, 0x0, 0x20000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x800000, 0x3, 0x0, 0xfffffffe}, 0x14)
r3 = accept4(r2, 0x0, &(0x7f00000000c0), 0x80000)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x9, 0x9d, 0x4, 0xb7}, {0x7, 0x4, 0x6, 0x7}, {0xcc3, 0x88, 0x1, 0x100}, {0x8, 0x4, 0x5, 0xe}, {0xb2, 0x4, 0x5, 0x6}, {0xfff, 0x7, 0x6, 0x29f}]}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4078, 0xfee}, {&(0x7f0000000000)=""/139, 0x8b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4091, 0xffb}], 0x2}, 0x8}], 0x3, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0xf, 0x2, 0x0)
bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c4b4d79f000000000000111f38e30000000000000000d6ac000000000000"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00))
r9 = socket$netlink(0x10, 0x3, 0x4)
write(r9, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000340)=0x1e, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)

16.075368735s ago: executing program 2 (id=5250):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001000000488664f10b5218bb32867334fde5ed62775c77a79643d2a2c56394edca39c784e568bccb2d9f77ae845793b671e29de2622c07b4f28002f7fcdc7ee47de6bcc16bb66bbb4b5ea822053d12b54b5672d5d9fc309c1c3f5da11e2377f795c6efe85c1f9749", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000837834d2bf0000000000a9"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000000000000003000000183400000500000000000000000000001846000003000000000000000000000018550000090000000000000000000000950000000000000017b40001f0ffffff852000000200000018400000fdffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000000095000000000000000000"], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x4ea0777b9de0b27c, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xfffff5e8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000004c0)=[{0x1, 0x2, 0x6, 0x5}, {0x3, 0x1, 0x7, 0x1}, {0x4, 0x1, 0xe, 0x7}], 0x10, 0x100}, 0x94)
syz_emit_ethernet(0x13, &(0x7f00000014c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x88fb, @generic={{0x5, 0x4, 0x0, 0x4, 0x14, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @remote}}}}}, 0x0)
socket(0xa, 0x1, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x484800, 0x0)
ioctl(r2, 0x7, &(0x7f00000007c0)="bd92cf073d966df4da1175f02c241ea22250f61e932c6b40f8b6b6841616edeacd83f39c913ed7241495b9ad874b14657297743762d8ff1f93133d86bcf84d4ca22e26eeb37ee899d5c01cbab87cce9f0fdc32349953cffc367e45145ac110a0d792499d31870509e03b9c473a1bb60997f7b7601ad381567e571771ab3de799417b350b57cff65c634fb1e0b06f94cd2348b46fca25363aa7cd8f251421ded80d4cd09fc46aa27e614be22188")
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)
r6 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000001000000dc000000000000000000000000000000002493d7da3f403a193bdedfec82ec3cab56894e147d8d35917620902161bde85ddf548765b340c0d8ce22988588310f8e481175569b0a82b04017c9b05ef59f4024134a405e892b864ffe69343c63b531e7500b07aa2c1b11573a56f4265232df5bf1d614ad1171f442dcef207fb9ca964c2230a68c2d40b121d6e74fcb45a435013b66"], 0x18}, 0xfc00)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xffffffff)
r8 = accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10)
close(r8)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10)
syz_emit_ethernet(0xbf, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffff00000000000000040180adc0102d3309909b98c21468952693656ee04fcb428f856923d8889a028d77ec91361614f3f5952be20755a83d5e72729ebac905dc8dc9f9eae44144c63dff18659187f5d3d97023e98c1ba77be3b62734bc383f9efceb747115a0ae95d2229fc950ae2e06af8d750d8e10312dee7d99ab0fc1450f2970336ab1a3b51bd936290e708a2322383db490c1cc02e7bd713b799b70c85fadb9d0885d58a38cb14afb0700000000000000185a32a4cffcdab7db"], 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014c3ff0000120800030043000040a80019000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f6d7f3ef48286112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaac99eddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb06000000588a6364", 0xd8}], 0x1}, 0x0)

16.071968553s ago: executing program 5 (id=5251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2, 0x82011, r0, 0x0)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80c0002}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xc8, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc83}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x633e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfc4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x44080, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'lo\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) (async)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) (async)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2, 0x82011, r0, 0x0) (async)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80c0002}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xc8, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc83}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x633e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfc4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x44080, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'lo\x00'}) (async)

16.071129925s ago: executing program 1 (id=5252):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000000000000000083"], 0x0, 0x45, 0x0, 0x0, 0xa}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x1, 0x4, 0x2, 0x28000, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, r1, 0x3, 0x5, 0x4, 0x0, @value=r1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000080)="14cd77cd3840da190e55f0512f919a824dc5a7e5827c1a8d2347be560f4745f1e1eb44f028af7bf8c7a18816fb1beef6e94d8c788230e8aa5034b56ce0fdbd2651952cfbbb256d0ef71cf44f4f47daec19e395f730a9e0826357ac118f0a32602b09fcfb8a2edca31ad909708d31105fc7695177503b3a9c0226dea974b96e7403ef21072bd415c5b7d6c15426b66d9875338ebf67070117cec049b65e007fa6ecf53d9e41e1d7f8d88325ddeee9479a613184565f8a58915f7a96d40fc4ead634db43", &(0x7f00000009c0)=""/4096}, 0x20)

16.070403695s ago: executing program 1 (id=5253):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@func={0xc, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0xf}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x2e, 0x0, 0x30, 0x61, 0x30, 0x30]}}, &(0x7f00000003c0)=""/181, 0x51, 0xb5}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000500)=""/62, 0x3e, <r4=>0x0, &(0x7f0000000540)=""/112, 0x70}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x5e}, 0xc)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x2}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101}, [@map_fd={0x18, 0x8}, @call={0x85, 0x0, 0x0, 0x13}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='GPL\x00', 0xa, 0x0, &(0x7f0000000240), 0x41000, 0x20, '\x00', r2, @sk_msg=0x7, r3, 0x8, &(0x7f00000004c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, r5, r6, r7, r8], &(0x7f00000008c0)=[{0x4, 0x1, 0x2, 0xacdbcb350e795b59}], 0x10, 0x4}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)

16.064039953s ago: executing program 1 (id=5254):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x2c, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x2c}}, 0x800) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010001fff000000000000000000000000b06903e24eb2a74851c4eda0da8e79006c2ff95b6c16c651b3871825a18286a5243d78684e46bb", @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB="08000d000000000008001f0008000000"], 0x4c}}, 0x0)

16.058492258s ago: executing program 1 (id=5255):
r0 = socket$inet(0x2, 0x2, 0x40005)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
close(0x4)

16.055502045s ago: executing program 33 (id=5246):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10)
socket$key(0xf, 0x3, 0x2)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x2}}, 0x26)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000440)=ANY=[@ANYBLOB="140000001c0efa48ae4547970804000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"/28], 0x50)
r4 = socket$key(0xf, 0x3, 0x2)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200))
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x40040c0)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'gre0\x00'})
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
getsockopt$sock_int(r9, 0x1, 0x12, 0x0, &(0x7f0000001ec0))
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="01005024606f56b900000000fdffffff0f00000008000300", @ANYBLOB="62d6177f4841d4ac6e8b64837351a823efc81e30e412408fe35d261703efd4a2bb729bbae3015354007de8b0239956da0cf9eaaf8660871d829029be3dd9cd8aa8e34eaafdfd0d245fac8b89905664e9f5827c6b65f26afefbcf64a6b8b044d804ba56241a01f2b619ed796765fc874771a45b77e0226dd44945b66e619cc16ad3abaefd41592286780ba1a2e20db58af0afea776f3cbda8d92fa46ced253933e795ab4a272cf676adf3ae52816f2ade3a5f8813a9909f45", @ANYBLOB="0500290000000000050033000100000005003800000000000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x8)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r11)
r12 = socket(0xa, 0x800, 0x8)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000280)=0x4)

16.055158552s ago: executing program 34 (id=5250):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001000000488664f10b5218bb32867334fde5ed62775c77a79643d2a2c56394edca39c784e568bccb2d9f77ae845793b671e29de2622c07b4f28002f7fcdc7ee47de6bcc16bb66bbb4b5ea822053d12b54b5672d5d9fc309c1c3f5da11e2377f795c6efe85c1f9749", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000837834d2bf0000000000a9"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000000000000003000000183400000500000000000000000000001846000003000000000000000000000018550000090000000000000000000000950000000000000017b40001f0ffffff852000000200000018400000fdffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000000095000000000000000000"], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x4ea0777b9de0b27c, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xfffff5e8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000004c0)=[{0x1, 0x2, 0x6, 0x5}, {0x3, 0x1, 0x7, 0x1}, {0x4, 0x1, 0xe, 0x7}], 0x10, 0x100}, 0x94)
syz_emit_ethernet(0x13, &(0x7f00000014c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x88fb, @generic={{0x5, 0x4, 0x0, 0x4, 0x14, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @remote}}}}}, 0x0)
socket(0xa, 0x1, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x484800, 0x0)
ioctl(r2, 0x7, &(0x7f00000007c0)="bd92cf073d966df4da1175f02c241ea22250f61e932c6b40f8b6b6841616edeacd83f39c913ed7241495b9ad874b14657297743762d8ff1f93133d86bcf84d4ca22e26eeb37ee899d5c01cbab87cce9f0fdc32349953cffc367e45145ac110a0d792499d31870509e03b9c473a1bb60997f7b7601ad381567e571771ab3de799417b350b57cff65c634fb1e0b06f94cd2348b46fca25363aa7cd8f251421ded80d4cd09fc46aa27e614be22188")
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)
r6 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000001000000dc000000000000000000000000000000002493d7da3f403a193bdedfec82ec3cab56894e147d8d35917620902161bde85ddf548765b340c0d8ce22988588310f8e481175569b0a82b04017c9b05ef59f4024134a405e892b864ffe69343c63b531e7500b07aa2c1b11573a56f4265232df5bf1d614ad1171f442dcef207fb9ca964c2230a68c2d40b121d6e74fcb45a435013b66"], 0x18}, 0xfc00)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xffffffff)
r8 = accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10)
close(r8)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10)
syz_emit_ethernet(0xbf, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffff00000000000000040180adc0102d3309909b98c21468952693656ee04fcb428f856923d8889a028d77ec91361614f3f5952be20755a83d5e72729ebac905dc8dc9f9eae44144c63dff18659187f5d3d97023e98c1ba77be3b62734bc383f9efceb747115a0ae95d2229fc950ae2e06af8d750d8e10312dee7d99ab0fc1450f2970336ab1a3b51bd936290e708a2322383db490c1cc02e7bd713b799b70c85fadb9d0885d58a38cb14afb0700000000000000185a32a4cffcdab7db"], 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014c3ff0000120800030043000040a80019000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f6d7f3ef48286112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaac99eddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb06000000588a6364", 0xd8}], 0x1}, 0x0)

16.054908777s ago: executing program 35 (id=5251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2, 0x82011, r0, 0x0)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80c0002}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xc8, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc83}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x633e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfc4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x44080, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'lo\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) (async)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) (async)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2, 0x82011, r0, 0x0) (async)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80c0002}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xc8, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc83}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x633e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfc4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x44080, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'lo\x00'}) (async)

16.054588627s ago: executing program 1 (id=5257):
r0 = socket$netlink(0x10, 0x3, 0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="b702000007000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a55b000000c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2d90addedc28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000801989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802c8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a8f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c40bde6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d149d846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b01b823c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b988494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74585cf5e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f222c714870582a8832c2a326c5d1e406c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada47288e41e7e6ee82d66b99ae4b0889fe949e7342ca97c1a64dcc7f6a0c0da07de8c808b4caec54820f856889fc5f1af3d675206e3257f974d6e45ff1e905c2f0fc0173ac6714acaaca2397bee23630ecaa2c1c6ddc3085689a033d6d41a1a7ac59baec299158faa52308856805f2130863f4668e27b8bbef4f4cd43a2fd294b5b0bf2b0e4afbe570c54aa214579ca0caf54231d00a94eda2be6f037e2befdd03bf152f696ca1d1ea86eb7ee1f021062ad71246dae1580c4f959a320912032ed468a8ed9f27a2258ddf465de77a51b4713bc6b789a0e8b203f0f592ddb27aa90989a9e0cb624bc34e7d6ebf156ea251e3a2f83ada9f0b70035e8ed200a52b00"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000a00)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x24000000)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r7, 0x1)
getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8)
recvmmsg(r7, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r8, 0x0, 0x2, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r10}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

16.052436099s ago: executing program 4 (id=5260):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200201, 0x0) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0xd4}}, 0x4000010)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) (async)
r5 = socket$netlink(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r5)
sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x4008800)

16.007677992s ago: executing program 4 (id=5261):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r0, &(0x7f0000000080)="7910de3ad6464c5df1c7e494f1e4fc97d3bc789a1b5f6de71a443eb67bd146e4f41cd9eb7c9f09488280f671a0607d0cede1d1b0a9fe9a8f", 0x38, 0x4c884, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffa, @local, 0x80}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f0000000340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x1c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x88}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x3f9, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000011}, 0x20018810)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000040))
syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x20, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000018000109000000000000000002180000ff0000060000000008000100ac14140037ed323710fcbdba28d7a8b315476158657a7a2b9f673743af7324fbe67cc0263614f3685cfed0f9a7d046c0bda6e60773f4ef9444a7f7efb92aac92518b1dc2ef6377dd7b3b45feb480439ca2d1fa6ab64a1cf22f8d1f0a8ab80b3d9f61882b840b127fcc63add2f48ae875bc4b21db829463dc6b946c6bf2d59e6c53e26f570fb55f3af25ccf8c6241100232e006f9031e022fbc4907f63ea20e53"], 0x24}}, 0x0)

15.833142152s ago: executing program 4 (id=5262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000804)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x20044c10) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x20044c10)

1.534158864s ago: executing program 36 (id=5257):
r0 = socket$netlink(0x10, 0x3, 0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000a00)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x24000000)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r7, 0x1)
getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8)
recvmmsg(r7, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r8, 0x0, 0x2, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r10}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

0s ago: executing program 37 (id=5262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000804)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x20044c10) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x20044c10)

kernel console output (not intermixed with test programs):

 entered promiscuous mode
[  278.502972][T18592] lo: entered allmulticast mode
[  278.510881][T18592] tunl0: entered promiscuous mode
[  278.517444][T18592] tunl0: entered allmulticast mode
[  278.551778][T18604] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  278.553211][T18592] gre0: entered promiscuous mode
[  278.585600][T18592] gre0: entered allmulticast mode
[  278.632307][T18592] gretap0: entered allmulticast mode
[  278.714239][T18592] gretap0: refused to change device tx_queue_len
[  278.726842][T18592] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  278.909671][ T5862] Bluetooth: hci1: command tx timeout
[  278.939905][T18625] delete_channel: no stack
[  279.038047][T18348] veth0_vlan: entered promiscuous mode
[  279.056326][T18629] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  279.065947][T18348] veth1_vlan: entered promiscuous mode
[  279.130512][T18629] bridge0: port 1(vlan2) entered blocking state
[  279.137294][T18629] bridge0: port 1(vlan2) entered disabled state
[  279.188985][T18629] vlan2: entered allmulticast mode
[  279.208684][T18629] bridge0: entered allmulticast mode
[  279.312442][T18629] vlan2: left allmulticast mode
[  279.317470][T18629] bridge0: left allmulticast mode
[  279.398088][T18348] veth0_macvtap: entered promiscuous mode
[  279.435426][T18348] veth1_macvtap: entered promiscuous mode
[  279.481303][T18348] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.540652][T18348] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.540691][T18663] netlink: 'syz.1.3667': attribute type 5 has an invalid length.
[  279.570930][   T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.587644][   T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.613332][   T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.633704][   T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.683210][T18669] netlink: 'syz.1.3669': attribute type 10 has an invalid length.
[  279.694822][T18670] netlink: 'syz.1.3669': attribute type 10 has an invalid length.
[  279.752511][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.773073][T18673] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  279.777425][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.799316][T18673] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  279.837202][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.850263][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.030679][T18690] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  280.039609][T18691] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  280.087731][T18696] veth1_to_bond: entered allmulticast mode
[  280.167438][T18701] __nla_validate_parse: 27 callbacks suppressed
[  280.167458][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3676'.
[  280.209476][T18706] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3571'.
[  280.422688][T18711] openvswitch: netlink: EtherType 0 is less than min 600
[  280.666268][T18701] bond0: (slave bond_slave_1): Releasing backup interface
[  280.695457][T18701] bond_slave_1 (unregistering): left promiscuous mode
[  280.721713][T18701] veth1_to_bond (unregistering): left allmulticast mode
[  280.746839][T18716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3680'.
[  280.757373][T18716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3680'.
[  280.788131][T18720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3682'.
[  280.989545][ T5862] Bluetooth: hci1: command tx timeout
[  281.040744][T18751] netlink: 'syz.4.3691': attribute type 1 has an invalid length.
[  281.344653][T18793] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3701'.
[  281.408046][T18793] veth1_macvtap: left promiscuous mode
[  281.417470][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3703'.
[  281.494256][T18802] netlink: 'syz.1.3704': attribute type 2 has an invalid length.
[  281.529061][T18802] netlink: 'syz.1.3704': attribute type 2 has an invalid length.
[  281.597665][T18810] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3708'.
[  281.626496][T18810] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3708'.
[  281.738622][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'.
[  282.260970][T18888] sctp: [Deprecated]: syz.0.3728 (pid 18888) Use of int in maxseg socket option.
[  282.260970][T18888] Use struct sctp_assoc_value instead
[  282.639842][T18907] netlink: set zone limit has 8 unknown bytes
[  282.914611][T18919] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  283.075432][ T5862] Bluetooth: hci1: command tx timeout
[  283.157684][T18935] validate_nla: 1 callbacks suppressed
[  283.157721][T18935] netlink: 'syz.2.3744': attribute type 1 has an invalid length.
[  283.346999][T18955] netlink: 'syz.2.3748': attribute type 2 has an invalid length.
[  283.663826][T18972] 8021q: adding VLAN 0 to HW filter on device bond2
[  283.786170][T18983] netlink: 'syz.2.3755': attribute type 1 has an invalid length.
[  283.814299][T18983] netlink: 'syz.2.3755': attribute type 3 has an invalid length.
[  283.845146][T18983] NCSI netlink: No device for ifindex 131080
[  284.336562][T19029] netlink: 'syz.0.3772': attribute type 4 has an invalid length.
[  284.395577][T19029] `: renamed from bond0
[  284.598926][T19062] netlink: 'syz.1.3779': attribute type 12 has an invalid length.
[  284.690509][T19064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.203604][T19092] sctp: [Deprecated]: syz.0.3790 (pid 19092) Use of int in max_burst socket option deprecated.
[  285.203604][T19092] Use struct sctp_assoc_value instead
[  285.245438][T19095] netlink: 'syz.1.3784': attribute type 13 has an invalid length.
[  285.759648][T19120] __nla_validate_parse: 23 callbacks suppressed
[  285.759670][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'.
[  285.820022][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'.
[  285.867316][T19124] nbd: couldn't find a device at index -373156329
[  285.923133][T19128] netlink: 'syz.1.3804': attribute type 16 has an invalid length.
[  285.938143][T19126] netlink: 'syz.4.3803': attribute type 7 has an invalid length.
[  285.949626][T19128] netlink: 'syz.1.3804': attribute type 3 has an invalid length.
[  285.958842][T19126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3803'.
[  285.969447][T19128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3804'.
[  286.435587][T19164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.517122][T19167] bond0: (slave bond1): Releasing backup interface
[  286.530025][T19167] bond1: left promiscuous mode
[  286.546622][T19167] bond2: (slave bond3): Releasing backup interface
[  286.742438][T19187] bridge0: port 1(syz_tun) entered blocking state
[  286.783389][T19187] bridge0: port 1(syz_tun) entered disabled state
[  286.817408][T19187] syz_tun: entered allmulticast mode
[  286.842710][T19187] syz_tun: entered promiscuous mode
[  286.973479][T19200] dvmrp1: entered allmulticast mode
[  287.210001][T19220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3835'.
[  287.228659][ T5867] Bluetooth: hci1: command 0x0405 tx timeout
[  287.360582][T19233] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3837'.
[  287.514888][T19241] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3841'.
[  287.740681][T19258] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3848'.
[  288.030115][T19288] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  288.085054][T19286] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3858'.
[  288.111101][T19293] Bluetooth: MGMT ver 1.23
[  288.116466][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3858'.
[  288.272327][T19303] geneve2: entered promiscuous mode
[  288.309640][T19308] validate_nla: 2 callbacks suppressed
[  288.309661][T19308] netlink: 'syz.2.3862': attribute type 1 has an invalid length.
[  288.368150][T19308] netlink: 'syz.2.3862': attribute type 2 has an invalid length.
[  288.403093][T19298] unknown channel width for channel at 909000KHz?
[  288.430231][T19298] unknown channel width for channel at 909000KHz?
[  288.486953][T19322] delete_channel: no stack
[  289.253380][T19391] netlink: 'syz.5.3890': attribute type 3 has an invalid length.
[  289.255822][T19393] netlink: 'syz.0.3892': attribute type 21 has an invalid length.
[  289.426930][   T49] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  289.519677][   T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  289.545827][   T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  289.577209][   T49] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  289.966626][T19456] netlink: 'syz.1.3911': attribute type 2 has an invalid length.
[  290.075952][T19465] netlink: 'syz.2.3914': attribute type 1 has an invalid length.
[  290.144977][T19475] netlink: 'syz.4.3913': attribute type 11 has an invalid length.
[  290.651696][T19514] netlink: 'syz.0.3930': attribute type 10 has an invalid length.
[  290.703322][T19514] bridge0: port 2(team0) entered blocking state
[  290.712718][T19514] bridge0: port 2(team0) entered disabled state
[  290.732149][T19514] team0: entered allmulticast mode
[  290.742008][T19514] team_slave_0: entered allmulticast mode
[  290.748070][T19514] team_slave_1: entered allmulticast mode
[  290.753204][T19518] openvswitch: netlink: IPv4 tun info is not correct
[  290.756604][T19514] team0: entered promiscuous mode
[  290.766748][T19514] team_slave_0: entered promiscuous mode
[  290.773898][T19514] team_slave_1: entered promiscuous mode
[  290.784313][T19514] bridge0: port 2(team0) entered blocking state
[  290.790857][T19514] bridge0: port 2(team0) entered forwarding state
[  290.859549][T19524] __nla_validate_parse: 27 callbacks suppressed
[  290.859570][T19524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'.
[  290.885386][T19526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'.
[  291.153866][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3937'.
[  291.214830][T19545] IPv6: NLM_F_CREATE should be specified when creating new route
[  291.332292][T19554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  313.902471][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3948'.
[  313.906857][T19581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3950'.
[  313.916462][T19580] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  313.947519][T19580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.004389][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3950'.
[  314.008066][T19592] syzkaller0: entered promiscuous mode
[  314.019898][T19592] syzkaller0: entered allmulticast mode
[  314.038075][T19580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.061898][T19588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.076076][T19598] pimreg: entered allmulticast mode
[  314.103841][T19588] tipc: Resetting bearer <eth:syzkaller0>
[  314.165888][T19588] tipc: Disabling bearer <eth:syzkaller0>
[  314.325795][T19621] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3960'.
[  314.356490][T19624] delete_channel: no stack
[  314.624373][T19651] openvswitch: netlink: Key type 12053 is out of range max 32
[  314.698504][T19654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3971'.
[  314.721562][T19656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3970'.
[  314.734451][T19656] netlink: 'syz.2.3970': attribute type 11 has an invalid length.
[  314.877309][T19666] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3975'.
[  314.905582][T19670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.913643][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3975'.
[  314.940903][T19666] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3975'.
[  314.982862][T19666] netlink: 'syz.2.3975': attribute type 2 has an invalid length.
[  315.022990][T19666] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3975'.
[  315.158145][T19694] netlink: 'syz.1.3982': attribute type 15 has an invalid length.
[  315.335223][T19706] xt_socket: unknown flags 0xd0
[  315.393312][T19714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.425581][T19723] C: renamed from team_slave_0 (while UP)
[  315.447955][T19723] netlink: 'syz.5.3991': attribute type 1 has an invalid length.
[  315.503658][T19723] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  315.653116][T19788] netlink: 'syz.2.3997': attribute type 6 has an invalid length.
[  315.721949][T19810] netlink: 'syz.0.3998': attribute type 1 has an invalid length.
[  315.731048][T19808] netlink: 'syz.0.3998': attribute type 1 has an invalid length.
[  315.743109][T19804] netlink: 'syz.2.3999': attribute type 2 has an invalid length.
[  315.761487][T19804] netlink: 'syz.2.3999': attribute type 8 has an invalid length.
[  315.774297][T19804] netlink: 'syz.2.3999': attribute type 3 has an invalid length.
[  315.782604][T19804] netlink: 'syz.2.3999': attribute type 2 has an invalid length.
[  316.017409][T19861] lo: entered promiscuous mode
[  316.046073][T19861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.106923][T19884] openvswitch: netlink: Unknown key attributes 2
[  316.149106][T19883] nbd: couldn't find a device at index -373156329
[  316.292541][T19911] 8021q: adding VLAN 0 to HW filter on device bond3
[  316.326847][T19911] bond3: (slave geneve2): making interface the new active one
[  316.339947][T19911] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  316.523051][T19705] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  316.602697][   T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  316.870737][T19994] openvswitch: netlink: Tunnel attr 1 has unexpected len 7 expected 4
[  317.114312][T20013] tap0: tun_chr_ioctl cmd 2148553947
[  317.371209][T20041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  317.378541][T20041] IPv6: NLM_F_CREATE should be set when creating new route
[  317.489772][T20040] can: request_module (can-proto-0) failed.
[  317.969913][T20091] 8021q: adding VLAN 0 to HW filter on device team0
[  318.243165][T20115] IPVS: length: 61 != 24
[  318.305873][T20113] 8021q: VLANs not supported on lo
[  318.836705][T20159] bond4: (slave gretap1): making interface the new active one
[  318.856587][T20159] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  318.923177][T20159] __nla_validate_parse: 25 callbacks suppressed
[  318.923198][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4080'.
[  319.009262][ T7410] net_ratelimit: 4 callbacks suppressed
[  319.009283][ T7410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.018539][T20171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4084'.
[  319.043411][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4083'.
[  319.070838][T20171] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4084'.
[  319.079821][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4085'.
[  319.082591][T20171] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4084'.
[  319.093186][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4085'.
[  319.124247][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4085'.
[  319.215332][T20181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4088'.
[  319.267482][T20181] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  319.284999][T20185] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4089'.
[  319.397706][T20194] 8021q: adding VLAN 0 to HW filter on device bond4
[  319.461799][T20194] team0: Device wireguard0 is up. Set it down before adding it as a team port
[  319.584775][T20207] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  319.930720][T20246] syzkaller1: entered promiscuous mode
[  319.956860][T20246] syzkaller1: entered allmulticast mode
[  320.044361][T20254] sctp: [Deprecated]: syz.1.4109 (pid 20254) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.044361][T20254] Use struct sctp_sack_info instead
[  320.187889][T20262] validate_nla: 15 callbacks suppressed
[  320.187913][T20262] netlink: 'syz.1.4110': attribute type 7 has an invalid length.
[  320.312286][T20265] syzkaller0: entered promiscuous mode
[  320.326392][T20265] syzkaller0: entered allmulticast mode
[  320.347787][T20271] tipc: Started in network mode
[  320.354480][T20271] tipc: Node identity , cluster identity 4711
[  320.366931][T20271] tipc: Failed to obtain node identity
[  320.381671][T20271] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  320.417280][T20265] syzkaller0: mtu greater than device maximum
[  320.677568][T20294] netlink: 'syz.2.4118': attribute type 1 has an invalid length.
[  320.708126][T20295] openvswitch: netlink: Duplicate or invalid key (type 0).
[  320.737548][T20295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.080389][T20304] 8021q: adding VLAN 0 to HW filter on device bond6
[  321.414125][T20354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.501326][T20356] netlink: 'syz.1.4139': attribute type 1 has an invalid length.
[  321.543083][T20356] 8021q: adding VLAN 0 to HW filter on device bond5
[  321.569917][T20356] 8021q: VLANs not supported on team0
[  321.587466][T20356] bond5: (slave gretap1): making interface the new active one
[  321.597606][T20356] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  321.638613][T14756] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  321.736169][T20384] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  321.780449][   T30] audit: type=1107 audit(1756332926.303:7): pid=20385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  322.076392][T20404] sctp: [Deprecated]: syz.0.4154 (pid 20404) Use of int in maxseg socket option.
[  322.076392][T20404] Use struct sctp_assoc_value instead
[  322.342714][T20413] netlink: 'syz.2.4156': attribute type 4 has an invalid length.
[  322.471252][T20416] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  322.555553][T20430] syzkaller0: entered promiscuous mode
[  322.563802][T20430] syzkaller0: entered allmulticast mode
[  323.451268][T20457] netlink: 'syz.5.4170': attribute type 21 has an invalid length.
[  323.502416][T20460] syzkaller0: entered promiscuous mode
[  323.525460][T20460] syzkaller0: entered allmulticast mode
[  323.540777][T20462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.547869][T20460] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.567226][T20462] tipc: Resetting bearer <eth:syzkaller0>
[  323.586232][T20458] tipc: Resetting bearer <eth:syzkaller0>
[  323.604005][T20458] tipc: Disabling bearer <eth:syzkaller0>
[  323.727710][T20477] netlink: 'syz.1.4178': attribute type 3 has an invalid length.
[  323.869373][T20482] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  324.011063][T20492] netlink: 'syz.0.4183': attribute type 1 has an invalid length.
[  324.037594][T20492] __nla_validate_parse: 31 callbacks suppressed
[  324.037614][T20492] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4183'.
[  324.594875][T20519] sctp: [Deprecated]: syz.1.4193 (pid 20519) Use of int in maxseg socket option.
[  324.594875][T20519] Use struct sctp_assoc_value instead
[  324.711148][T20526] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4196'.
[  324.850142][T20528] netlink: 'syz.1.4195': attribute type 4 has an invalid length.
[  324.913521][T20533] veth0_to_bond: default FDB implementation only supports local addresses
[  325.102594][T20537] veth9: entered allmulticast mode
[  325.324124][T20555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4205'.
[  325.379304][T20555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4205'.
[  325.390386][T20555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4205'.
[  325.455616][T20558] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4206'.
[  325.495711][T20572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4210'.
[  325.566777][T20578] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  325.594344][T20579] dvmrp0: entered allmulticast mode
[  325.612231][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4213'.
[  325.697517][T20585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.836729][T20599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4218'.
[  325.861287][T20599] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4218'.
[  326.510976][T20633] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  326.527404][T20648] : renamed from hsr0 (while UP)
[  326.673015][T20660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  326.708841][T20661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  326.731829][T20660] geneve2: entered promiscuous mode
[  326.737492][T20660] geneve2: entered allmulticast mode
[  327.063634][T20683] netlink: 'syz.2.4242': attribute type 3 has an invalid length.
[  327.416551][T20687] netlink: 'syz.1.4243': attribute type 23 has an invalid length.
[  327.743451][T20716] bond1: entered allmulticast mode
[  327.755817][T20716] 8021q: adding VLAN 0 to HW filter on device bond1
[  327.765983][T20716] bridge0: port 3(bond1) entered blocking state
[  327.773840][T20716] bridge0: port 3(bond1) entered disabled state
[  327.782139][T20716] bond1: entered promiscuous mode
[  327.787779][T20716] bridge0: port 3(bond1) entered blocking state
[  327.794186][T20716] bridge0: port 3(bond1) entered forwarding state
[  328.227546][T20764] TCP: TCP_TX_DELAY enabled
[  328.305435][T14754] syzkaller0: tun_net_xmit 76
[  328.315247][T14754] syzkaller0: tun_net_xmit 48
[  328.320682][T20774] syzkaller0: create flow: hash 791408981 index 1
[  328.331023][ T5921] syzkaller0: tun_net_xmit 76
[  328.341386][T20771] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  328.356807][T20771] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  328.364870][T20771] gretap1: entered promiscuous mode
[  328.374174][T20771] gretap1: entered allmulticast mode
[  328.391570][T20767] syzkaller0: delete flow: hash 791408981 index 1
[  328.660104][T20830] netlink: 'syz.0.4278': attribute type 2 has an invalid length.
[  328.680988][T20826] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  328.740818][T14751] bridge0: port 3(bond1) entered disabled state
[  328.863274][T20854] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  328.876071][T20854] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  328.885497][T20854] gretap1: entered promiscuous mode
[  328.890861][T20854] gretap1: entered allmulticast mode
[  329.103828][T20881] pim6reg1: entered promiscuous mode
[  329.123940][T20881] pim6reg1: entered allmulticast mode
[  329.263518][T20896] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  329.290561][T20898] __nla_validate_parse: 17 callbacks suppressed
[  329.290594][T20898] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4293'.
[  329.347686][T20902] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4295'.
[  329.360419][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'.
[  329.433255][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4297'.
[  329.445055][T20907] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4296'.
[  329.459478][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4296'.
[  329.478210][T20907] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4296'.
[  329.491442][T20907] netlink: 'syz.0.4296': attribute type 2 has an invalid length.
[  329.499591][T20907] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4296'.
[  329.518666][T20907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  329.653005][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4302'.
[  329.729848][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4302'.
[  329.742623][T20928] sctp: [Deprecated]: syz.4.4301 (pid 20928) Use of int in maxseg socket option.
[  329.742623][T20928] Use struct sctp_assoc_value instead
[  330.203790][T20966] netlink: 'syz.2.4314': attribute type 2 has an invalid length.
[  330.460326][T20978] netlink: 'syz.0.4320': attribute type 4 has an invalid length.
[  330.565557][T20987] tipc: Started in network mode
[  330.573220][T20987] tipc: Node identity a6b79280cdb1, cluster identity 4711
[  330.583021][T20987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.610700][T20987] syzkaller0: entered promiscuous mode
[  330.616628][T20987] syzkaller0: entered allmulticast mode
[  330.637255][T20987] tipc: Resetting bearer <eth:syzkaller0>
[  330.646968][T20986] tipc: Resetting bearer <eth:syzkaller0>
[  330.668154][T20986] tipc: Disabling bearer <eth:syzkaller0>
[  331.789940][ T5867] Bluetooth: hci1: command 0x0405 tx timeout
[  332.131999][T21094] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  332.954453][T21154] netlink: 'syz.0.4377': attribute type 11 has an invalid length.
[  333.052653][T21158] tipc: Started in network mode
[  333.074850][T21158] tipc: Node identity ca47e4631bca, cluster identity 4711
[  333.108005][T21158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.116316][T21162] netlink: 'syz.1.4380': attribute type 10 has an invalid length.
[  333.120152][T21167] syzkaller0: entered promiscuous mode
[  333.131990][T21167] syzkaller0: entered allmulticast mode
[  333.147241][T21162] team0: Port device geneve0 added
[  333.184670][T21158] tipc: Resetting bearer <eth:syzkaller0>
[  333.218177][T21157] tipc: Resetting bearer <eth:syzkaller0>
[  333.253883][T21157] tipc: Disabling bearer <eth:syzkaller0>
[  333.317000][T21172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.330021][T21172] syzkaller0: entered promiscuous mode
[  333.336129][T21182] openvswitch: netlink: IPv6 tunnel dst address is zero
[  333.345729][T21172] syzkaller0: entered allmulticast mode
[  333.379674][T21172] tipc: Resetting bearer <eth:syzkaller0>
[  333.434511][T21169] tipc: Resetting bearer <eth:syzkaller0>
[  333.463976][T21169] tipc: Disabling bearer <eth:syzkaller0>
[  333.470298][T21191] netlink: 'syz.2.4389': attribute type 32 has an invalid length.
[  333.534897][T21197] IPv6: NLM_F_CREATE should be specified when creating new route
[  334.021358][T21240] pim6reg1: entered promiscuous mode
[  334.035833][T21240] pim6reg1: entered allmulticast mode
[  334.045424][T21231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.084408][T21229] tipc: Disabling bearer <eth:syzkaller0>
[  334.100441][T21243] netlink: 'syz.2.4407': attribute type 58 has an invalid length.
[  334.327714][T21266] __nla_validate_parse: 29 callbacks suppressed
[  334.327738][T21266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4415'.
[  334.423534][T21283] netlink: 'syz.1.4420': attribute type 6 has an invalid length.
[  334.443667][T21271] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.483514][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4422'.
[  334.492587][T21271] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.504872][T21288] netlink: 'syz.1.4420': attribute type 6 has an invalid length.
[  334.628249][T21271] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.652647][T21271] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.734160][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'.
[  334.745563][T21271] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.761144][T21271] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.831758][T21271] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.842840][T21271] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.868313][T21308] syzkaller0: tun_chr_ioctl cmd 1074025673
[  334.952741][ T6309] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  334.961466][ T6309] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.974757][ T6309] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  334.983796][ T6309] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.999696][ T6309] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  335.008214][ T6309] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.022332][T20815] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  335.030919][T20815] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.381599][T21326] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  335.420088][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4433'.
[  335.498693][T21333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4433'.
[  335.577792][T21338] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4439'.
[  335.592490][T21340] netlink: 'syz.0.4438': attribute type 12 has an invalid length.
[  335.603582][T21341] team0: Cannot enslave team device to itself
[  335.721554][T21351] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4444'.
[  335.759596][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4443'.
[  335.975337][T21373] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4450'.
[  335.995905][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4452'.
[  336.232464][T21401] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20004
[  336.345350][T21416] xt_policy: neither incoming nor outgoing policy selected
[  336.362876][T21418] netlink: 'syz.1.4467': attribute type 1 has an invalid length.
[  336.372448][T21418] netlink: 'syz.1.4467': attribute type 10 has an invalid length.
[  336.384088][T21418] netlink: 'syz.1.4467': attribute type 4 has an invalid length.
[  342.991531][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.069415][ T5862] Bluetooth: hci0: command 0x0406 tx timeout
[  350.188747][ T5862] Bluetooth: hci5: command 0x040f tx timeout
[  358.233876][T21452] __nla_validate_parse: 10 callbacks suppressed
[  358.233897][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4479'.
[  358.246013][T21453] : renamed from hsr0 (while UP)
[  358.262057][T21453] : failed to rename
[  358.267522][T21452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4479'.
[  358.278028][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4479'.
[  358.291628][T21451] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4478'.
[  358.292895][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4479'.
[  358.311946][T21453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4477'.
[  358.383815][T21459] lo: entered promiscuous mode
[  358.403150][T21459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  358.557885][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4485'.
[  358.630327][T21485] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4487'.
[  358.652629][T21490] netlink: 'syz.0.4489': attribute type 1 has an invalid length.
[  358.665048][T21485] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4487'.
[  358.666558][T21490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4489'.
[  358.761832][T21494] netlink: 'syz.4.4490': attribute type 1 has an invalid length.
[  358.802735][T21499] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  359.096443][T21527] netlink: 'syz.0.4501': attribute type 30 has an invalid length.
[  359.175905][T21537] Dead loop on virtual device ip6_vti0, fix it urgently!
[  359.189391][T21537] Dead loop on virtual device ip6_vti0, fix it urgently!
[  359.207596][T21537] Dead loop on virtual device ip6_vti0, fix it urgently!
[  359.228696][T21537] Dead loop on virtual device ip6_vti0, fix it urgently!
[  359.252346][T21537] Dead loop on virtual device ip6_vti0, fix it urgently!
[  359.266465][T21537] Dead loop on virtual device ip6_vti0, fix it urgently!
[  359.279198][T21552] netlink: 'syz.2.4507': attribute type 1 has an invalid length.
[  359.364434][T21552] veth11: entered promiscuous mode
[  359.381287][T21552] bond7: (slave veth11): Enslaving as a backup interface with a down link
[  359.587714][T21573] netlink: 'syz.0.4515': attribute type 2 has an invalid length.
[  359.611096][T21573] netlink: 'syz.0.4515': attribute type 1 has an invalid length.
[  359.633007][T21573] netlink: 'syz.0.4515': attribute type 2 has an invalid length.
[  359.958946][T21613] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  360.168138][T21632] netlink: 'syz.5.4534': attribute type 39 has an invalid length.
[  360.183191][T21630] netlink: 'syz.4.4532': attribute type 1 has an invalid length.
[  360.397333][T21652] 
: renamed from bridge_slave_0 (while UP)
[  360.465518][T21648] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  360.482639][T21648] bond3: (slave vcan1): Error -95 calling set_mac_address
[  360.483067][T21662] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  360.513397][T21647] syzkaller1: entered promiscuous mode
[  360.519086][T21647] syzkaller1: entered allmulticast mode
[  360.527866][T21652] netlink: 'syz.0.4540': attribute type 1 has an invalid length.
[  360.623067][T21647] bond6: (slave bridge5): making interface the new active one
[  360.671110][T21647] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  360.708238][T21678] FAULT_INJECTION: forcing a failure.
[  360.708238][T21678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.730115][T21678] CPU: 1 UID: 0 PID: 21678 Comm: syz.4.4550 Not tainted syzkaller #0 PREEMPT(full) 
[  360.730147][T21678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  360.730159][T21678] Call Trace:
[  360.730166][T21678]  <TASK>
[  360.730175][T21678]  dump_stack_lvl+0x189/0x250
[  360.730204][T21678]  ? __pfx____ratelimit+0x10/0x10
[  360.730231][T21678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  360.730253][T21678]  ? __pfx__printk+0x10/0x10
[  360.730277][T21678]  ? __might_fault+0xb0/0x130
[  360.730306][T21678]  ? rcu_is_watching+0x15/0xb0
[  360.730327][T21678]  should_fail_ex+0x414/0x560
[  360.730354][T21678]  _copy_from_iter+0x1db/0x16f0
[  360.730374][T21678]  ? rcu_is_watching+0x15/0xb0
[  360.730391][T21678]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  360.730418][T21678]  ? __pfx__copy_from_iter+0x10/0x10
[  360.730437][T21678]  ? __build_skb_around+0x257/0x3e0
[  360.730466][T21678]  ? netlink_sendmsg+0x642/0xb30
[  360.730492][T21678]  ? skb_put+0x11b/0x210
[  360.730510][T21678]  netlink_sendmsg+0x6b2/0xb30
[  360.730540][T21678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.730568][T21678]  ? is_bpf_text_address+0x26/0x2b0
[  360.730595][T21678]  ? rcu_is_watching+0x15/0xb0
[  360.730612][T21678]  ? aa_sock_msg_perm+0xf1/0x1d0
[  360.730629][T21678]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  360.730650][T21678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.730677][T21678]  __sock_sendmsg+0x21c/0x270
[  360.730703][T21678]  ____sys_sendmsg+0x52d/0x830
[  360.730727][T21678]  ? __pfx_____sys_sendmsg+0x10/0x10
[  360.730764][T21678]  ? import_iovec+0x74/0xa0
[  360.730786][T21678]  ___sys_sendmsg+0x21f/0x2a0
[  360.730806][T21678]  ? __pfx____sys_sendmsg+0x10/0x10
[  360.730826][T21678]  ? kstrtouint+0x6e/0xe0
[  360.730864][T21678]  ? rcu_is_watching+0x15/0xb0
[  360.730883][T21678]  ? lock_release+0x4b/0x3e0
[  360.730911][T21678]  ? __might_fault+0xcc/0x130
[  360.730938][T21678]  __sys_sendmmsg+0x227/0x430
[  360.730960][T21678]  ? __pfx___sys_sendmmsg+0x10/0x10
[  360.730978][T21678]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  360.731018][T21678]  ? ksys_write+0x22a/0x250
[  360.731043][T21678]  ? __pfx_ksys_write+0x10/0x10
[  360.731066][T21678]  ? rcu_is_watching+0x15/0xb0
[  360.731087][T21678]  __x64_sys_sendmmsg+0xa0/0xc0
[  360.731108][T21678]  do_syscall_64+0xfa/0x3b0
[  360.731147][T21678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.731166][T21678]  ? clear_bhb_loop+0x60/0xb0
[  360.731188][T21678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.731207][T21678] RIP: 0033:0x7ff48018ebe9
[  360.731225][T21678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.731242][T21678] RSP: 002b:00007ff4810cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  360.731265][T21678] RAX: ffffffffffffffda RBX: 00007ff4803b5fa0 RCX: 00007ff48018ebe9
[  360.731280][T21678] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  360.731295][T21678] RBP: 00007ff4810cc090 R08: 0000000000000000 R09: 0000000000000000
[  360.731308][T21678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  360.731320][T21678] R13: 00007ff4803b6038 R14: 00007ff4803b5fa0 R15: 00007fff68a82678
[  360.731342][T21678]  </TASK>
[  361.202920][T21701] bridge0: port 2(team0) entered disabled state
[  361.237145][T21701] team0: left allmulticast mode
[  361.268086][T21701] team_slave_0: left allmulticast mode
[  361.276121][T21701] team_slave_1: left allmulticast mode
[  361.282410][T21701] team0: left promiscuous mode
[  361.287705][T21701] team_slave_0: left promiscuous mode
[  361.294380][T21701] team_slave_1: left promiscuous mode
[  361.301269][T21701] bridge0: port 2(team0) entered disabled state
[  361.343699][T21701] 8021q: adding VLAN 0 to HW filter on device team0
[  361.352787][T21701] team0: entered promiscuous mode
[  361.357860][T21701] team_slave_0: entered promiscuous mode
[  361.367936][T21701] team_slave_1: entered promiscuous mode
[  361.374806][T21701] `: (slave team0): Enslaving as an active interface with an up link
[  361.413651][T21702] syz_tun: entered promiscuous mode
[  361.420826][T21702] `: (slave syz_tun): Enslaving as an active interface with an up link
[  361.457908][T21728] FAULT_INJECTION: forcing a failure.
[  361.457908][T21728] name failslab, interval 1, probability 0, space 0, times 0
[  361.478537][T21728] CPU: 0 UID: 0 PID: 21728 Comm: syz.2.4564 Not tainted syzkaller #0 PREEMPT(full) 
[  361.478566][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  361.478580][T21728] Call Trace:
[  361.478588][T21728]  <TASK>
[  361.478596][T21728]  dump_stack_lvl+0x189/0x250
[  361.478625][T21728]  ? __pfx____ratelimit+0x10/0x10
[  361.478652][T21728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.478675][T21728]  ? __pfx__printk+0x10/0x10
[  361.478708][T21728]  should_fail_ex+0x414/0x560
[  361.478735][T21728]  should_failslab+0xa8/0x100
[  361.478765][T21728]  kmem_cache_alloc_noprof+0x73/0x3c0
[  361.478790][T21728]  ? skb_clone+0x212/0x3a0
[  361.478823][T21728]  skb_clone+0x212/0x3a0
[  361.478846][T21728]  __netlink_deliver_tap+0x404/0x850
[  361.478880][T21728]  ? netlink_deliver_tap+0x2e/0x1b0
[  361.478908][T21728]  netlink_deliver_tap+0x19c/0x1b0
[  361.478935][T21728]  netlink_unicast+0x7fa/0x9e0
[  361.478965][T21728]  ? __pfx_netlink_unicast+0x10/0x10
[  361.478991][T21728]  ? netlink_sendmsg+0x642/0xb30
[  361.479017][T21728]  ? skb_put+0x11b/0x210
[  361.479036][T21728]  netlink_sendmsg+0x805/0xb30
[  361.479067][T21728]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.479095][T21728]  ? is_bpf_text_address+0x26/0x2b0
[  361.479122][T21728]  ? rcu_is_watching+0x15/0xb0
[  361.479141][T21728]  ? aa_sock_msg_perm+0xf1/0x1d0
[  361.479160][T21728]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  361.479182][T21728]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.479210][T21728]  __sock_sendmsg+0x21c/0x270
[  361.479236][T21728]  ____sys_sendmsg+0x52d/0x830
[  361.479259][T21728]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.479283][T21728]  ? import_iovec+0x74/0xa0
[  361.479306][T21728]  ___sys_sendmsg+0x21f/0x2a0
[  361.479326][T21728]  ? __pfx____sys_sendmsg+0x10/0x10
[  361.479348][T21728]  ? kstrtouint+0x6e/0xe0
[  361.479389][T21728]  ? rcu_is_watching+0x15/0xb0
[  361.479407][T21728]  ? lock_release+0x4b/0x3e0
[  361.479435][T21728]  ? __might_fault+0xcc/0x130
[  361.479462][T21728]  __sys_sendmmsg+0x227/0x430
[  361.479486][T21728]  ? __pfx___sys_sendmmsg+0x10/0x10
[  361.479504][T21728]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  361.479545][T21728]  ? ksys_write+0x22a/0x250
[  361.479571][T21728]  ? __pfx_ksys_write+0x10/0x10
[  361.479594][T21728]  ? rcu_is_watching+0x15/0xb0
[  361.479615][T21728]  __x64_sys_sendmmsg+0xa0/0xc0
[  361.479636][T21728]  do_syscall_64+0xfa/0x3b0
[  361.479666][T21728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.479686][T21728]  ? clear_bhb_loop+0x60/0xb0
[  361.479707][T21728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.479726][T21728] RIP: 0033:0x7f2bee98ebe9
[  361.479744][T21728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.479762][T21728] RSP: 002b:00007f2bef7d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  361.479786][T21728] RAX: ffffffffffffffda RBX: 00007f2beebb5fa0 RCX: 00007f2bee98ebe9
[  361.479811][T21728] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  361.479825][T21728] RBP: 00007f2bef7d4090 R08: 0000000000000000 R09: 0000000000000000
[  361.479838][T21728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  361.479851][T21728] R13: 00007f2beebb6038 R14: 00007f2beebb5fa0 R15: 00007ffcab46d988
[  361.479875][T21728]  </TASK>
[  361.983855][T21766] openvswitch: netlink: VXLAN extension message has 11 unknown bytes.
[  362.013177][T21773] syz.0.4578: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  362.028548][T21773] CPU: 0 UID: 0 PID: 21773 Comm: syz.0.4578 Not tainted syzkaller #0 PREEMPT(full) 
[  362.028578][T21773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  362.028590][T21773] Call Trace:
[  362.028598][T21773]  <TASK>
[  362.028607][T21773]  dump_stack_lvl+0x189/0x250
[  362.028638][T21773]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.028659][T21773]  ? __pfx__printk+0x10/0x10
[  362.028683][T21773]  ? lock_release+0x4b/0x3e0
[  362.028712][T21773]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  362.028735][T21773]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  362.028757][T21773]  warn_alloc+0x214/0x310
[  362.028784][T21773]  ? stack_depot_save_flags+0x40/0x860
[  362.028890][T21773]  ? __pfx_warn_alloc+0x10/0x10
[  362.028924][T21773]  ? kasan_save_track+0x4f/0x80
[  362.028948][T21773]  ? xskq_create+0x56/0x170
[  362.028979][T21773]  ? xsk_init_queue+0xb0/0x110
[  362.029002][T21773]  ? xsk_setsockopt+0x4dc/0x8d0
[  362.029025][T21773]  ? do_sock_setsockopt+0x17c/0x1b0
[  362.029043][T21773]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  362.029059][T21773]  ? do_syscall_64+0xfa/0x3b0
[  362.029087][T21773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.029110][T21773]  __vmalloc_node_range_noprof+0x125/0x12f0
[  362.029150][T21773]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  362.029178][T21773]  ? xsk_setsockopt+0x462/0x8d0
[  362.029202][T21773]  ? __kasan_kmalloc+0x93/0xb0
[  362.029228][T21773]  vmalloc_user_noprof+0xad/0xf0
[  362.029257][T21773]  ? xskq_create+0xbf/0x170
[  362.029282][T21773]  xskq_create+0xbf/0x170
[  362.029310][T21773]  xsk_init_queue+0xb0/0x110
[  362.029336][T21773]  xsk_setsockopt+0x4dc/0x8d0
[  362.029359][T21773]  ? __pfx_xsk_setsockopt+0x10/0x10
[  362.029383][T21773]  ? __pfx_aa_sk_perm+0x10/0x10
[  362.029410][T21773]  ? lock_release+0x4b/0x3e0
[  362.029437][T21773]  ? aa_sock_opt_perm+0xff/0x1b0
[  362.029454][T21773]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  362.029476][T21773]  ? __pfx_xsk_setsockopt+0x10/0x10
[  362.029500][T21773]  do_sock_setsockopt+0x17c/0x1b0
[  362.029520][T21773]  __x64_sys_setsockopt+0x13f/0x1b0
[  362.029540][T21773]  do_syscall_64+0xfa/0x3b0
[  362.029569][T21773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.029587][T21773]  ? clear_bhb_loop+0x60/0xb0
[  362.029608][T21773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.029626][T21773] RIP: 0033:0x7fbf5d18ebe9
[  362.029646][T21773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.029665][T21773] RSP: 002b:00007fbf5df43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  362.029688][T21773] RAX: ffffffffffffffda RBX: 00007fbf5d3b5fa0 RCX: 00007fbf5d18ebe9
[  362.029703][T21773] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  362.029717][T21773] RBP: 00007fbf5d211e19 R08: 0000000000000004 R09: 0000000000000000
[  362.029730][T21773] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.029743][T21773] R13: 00007fbf5d3b6038 R14: 00007fbf5d3b5fa0 R15: 00007fff0c2911d8
[  362.029765][T21773]  </TASK>
[  362.029892][T21773] Mem-Info:
[  362.343583][T21779] FAULT_INJECTION: forcing a failure.
[  362.343583][T21779] name failslab, interval 1, probability 0, space 0, times 0
[  362.356453][T21779] CPU: 0 UID: 0 PID: 21779 Comm: syz.4.4579 Not tainted syzkaller #0 PREEMPT(full) 
[  362.356481][T21779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  362.356493][T21779] Call Trace:
[  362.356499][T21779]  <TASK>
[  362.356507][T21779]  dump_stack_lvl+0x189/0x250
[  362.356534][T21779]  ? __pfx____ratelimit+0x10/0x10
[  362.356559][T21779]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.356580][T21779]  ? __pfx__printk+0x10/0x10
[  362.356609][T21779]  ? __pfx___might_resched+0x10/0x10
[  362.356628][T21779]  ? lock_acquire+0x5f/0x360
[  362.356656][T21779]  should_fail_ex+0x414/0x560
[  362.356684][T21779]  should_failslab+0xa8/0x100
[  362.356713][T21779]  __kmalloc_cache_noprof+0x70/0x3d0
[  362.356739][T21779]  ? rtnl_newlink+0xed/0x1c70
[  362.356778][T21779]  ? kasan_save_free_info+0x46/0x50
[  362.356800][T21779]  rtnl_newlink+0xed/0x1c70
[  362.356825][T21779]  ? netlink_sendmsg+0x805/0xb30
[  362.356851][T21779]  ? __sock_sendmsg+0x21c/0x270
[  362.356874][T21779]  ? ____sys_sendmsg+0x52d/0x830
[  362.356891][T21779]  ? ___sys_sendmsg+0x21f/0x2a0
[  362.356907][T21779]  ? __sys_sendmmsg+0x227/0x430
[  362.356925][T21779]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  362.356943][T21779]  ? do_syscall_64+0xfa/0x3b0
[  362.356968][T21779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.356991][T21779]  ? __pfx_rtnl_newlink+0x10/0x10
[  362.357028][T21779]  ? rcu_is_watching+0x15/0xb0
[  362.357051][T21779]  ? nlmon_xmit+0xb0/0x100
[  362.357068][T21779]  ? kmem_cache_free+0x18f/0x400
[  362.357097][T21779]  ? rcu_is_watching+0x15/0xb0
[  362.357115][T21779]  ? __dev_queue_xmit+0x27b/0x3b50
[  362.357136][T21779]  ? __local_bh_enable_ip+0x12d/0x1c0
[  362.357156][T21779]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  362.357173][T21779]  ? __dev_queue_xmit+0x27b/0x3b50
[  362.357194][T21779]  ? lock_release+0x4b/0x3e0
[  362.357221][T21779]  ? __dev_queue_xmit+0x27b/0x3b50
[  362.357242][T21779]  ? __dev_queue_xmit+0x27b/0x3b50
[  362.357264][T21779]  ? __dev_queue_xmit+0x1d79/0x3b50
[  362.357293][T21779]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  362.357320][T21779]  ? rcu_is_watching+0x15/0xb0
[  362.357339][T21779]  ? lock_release+0x4b/0x3e0
[  362.357362][T21779]  ? bpf_lsm_capable+0x9/0x20
[  362.357386][T21779]  ? security_capable+0x7e/0x2e0
[  362.357415][T21779]  ? __pfx_rtnl_newlink+0x10/0x10
[  362.357441][T21779]  rtnetlink_rcv_msg+0x7cc/0xb70
[  362.357468][T21779]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  362.357494][T21779]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  362.357520][T21779]  ? ref_tracker_free+0x63a/0x7d0
[  362.357545][T21779]  ? __asan_memcpy+0x40/0x70
[  362.357564][T21779]  ? __pfx_ref_tracker_free+0x10/0x10
[  362.357593][T21779]  netlink_rcv_skb+0x208/0x470
[  362.357619][T21779]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  362.357646][T21779]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  362.357683][T21779]  netlink_unicast+0x82c/0x9e0
[  362.357712][T21779]  ? __pfx_netlink_unicast+0x10/0x10
[  362.357737][T21779]  ? netlink_sendmsg+0x642/0xb30
[  362.357772][T21779]  ? skb_put+0x11b/0x210
[  362.357791][T21779]  netlink_sendmsg+0x805/0xb30
[  362.357824][T21779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.357852][T21779]  ? is_bpf_text_address+0x26/0x2b0
[  362.357879][T21779]  ? rcu_is_watching+0x15/0xb0
[  362.357896][T21779]  ? aa_sock_msg_perm+0xf1/0x1d0
[  362.357914][T21779]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  362.357935][T21779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.357962][T21779]  __sock_sendmsg+0x21c/0x270
[  362.357987][T21779]  ____sys_sendmsg+0x52d/0x830
[  362.358009][T21779]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.358032][T21779]  ? import_iovec+0x74/0xa0
[  362.358054][T21779]  ___sys_sendmsg+0x21f/0x2a0
[  362.358074][T21779]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.358096][T21779]  ? kstrtouint+0x6e/0xe0
[  362.358136][T21779]  ? rcu_is_watching+0x15/0xb0
[  362.358155][T21779]  ? lock_release+0x4b/0x3e0
[  362.358182][T21779]  ? __might_fault+0xcc/0x130
[  362.358208][T21779]  __sys_sendmmsg+0x227/0x430
[  362.358230][T21779]  ? __pfx___sys_sendmmsg+0x10/0x10
[  362.358253][T21779]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  362.358293][T21779]  ? ksys_write+0x22a/0x250
[  362.358318][T21779]  ? __pfx_ksys_write+0x10/0x10
[  362.358341][T21779]  ? rcu_is_watching+0x15/0xb0
[  362.358361][T21779]  __x64_sys_sendmmsg+0xa0/0xc0
[  362.358381][T21779]  do_syscall_64+0xfa/0x3b0
[  362.358408][T21779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.358427][T21779]  ? clear_bhb_loop+0x60/0xb0
[  362.358448][T21779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.358466][T21779] RIP: 0033:0x7ff48018ebe9
[  362.358483][T21779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.358500][T21779] RSP: 002b:00007ff4810cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  362.358523][T21779] RAX: ffffffffffffffda RBX: 00007ff4803b5fa0 RCX: 00007ff48018ebe9
[  362.358536][T21779] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  362.358549][T21779] RBP: 00007ff4810cc090 R08: 0000000000000000 R09: 0000000000000000
[  362.358561][T21779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  362.358572][T21779] R13: 00007ff4803b6038 R14: 00007ff4803b5fa0 R15: 00007fff68a82678
[  362.358595][T21779]  </TASK>
[  362.860953][T21773] active_anon:7455 inactive_anon:0 isolated_anon:0
[  362.860953][T21773]  active_file:3334 inactive_file:39965 isolated_file:0
[  362.860953][T21773]  unevictable:768 dirty:78 writeback:0
[  362.860953][T21773]  slab_reclaimable:13309 slab_unreclaimable:130328
[  362.860953][T21773]  mapped:30137 shmem:1378 pagetables:1514
[  362.860953][T21773]  sec_pagetables:0 bounce:0
[  362.860953][T21773]  kernel_misc_reclaimable:0
[  362.860953][T21773]  free:1288343 free_pcp:13328 free_cma:0
[  362.907307][T21773] Node 0 active_anon:29820kB inactive_anon:0kB active_file:13336kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120548kB dirty:312kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16696kB pagetables:5916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  362.940002][T21773] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  362.970489][T21773] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  363.000464][T21773] lowmem_reserve[]: 0 2497 2499 2499 2499
[  363.006539][T21773] Node 0 DMA32 free:1248956kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29868kB inactive_anon:0kB active_file:13336kB inactive_file:158100kB unevictable:1536kB writepending:312kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:38948kB local_pcp:18596kB free_cma:0kB
[  363.039009][T21773] lowmem_reserve[]: 0 0 1 1 1
[  363.044072][T21773] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  363.051769][T21774] nbd4: detected capacity change from 0 to 127
[  363.073666][T21773] lowmem_reserve[]: 0 0 0 0 0
[  363.073714][T21773] Node 1 Normal free:3888776kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14216kB local_pcp:5344kB free_cma:0kB
[  363.073773][T21773] lowmem_reserve[]: 0 0 0 0 0
[  363.073819][T21773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  363.073943][T21773] Node 0 DMA32: 1781*4kB (UME) 1283*8kB (UM) 793*16kB (UME) 256*32kB (UME) 239*64kB (UME) 627*128kB (UME) 742*256kB (UME) 561*512kB (UM) 315*1024kB (UME) 30*2048kB (UM) 62*4096kB (UM) = 1248956kB
[  363.074115][T21773] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  363.074231][T21773] Node 1 Normal: 168*4kB (UE) 45*8kB (UME) 46*16kB (UME) 181*32kB (UME) 46*64kB (UME) 13*128kB (UME) 5*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3888776kB
[  363.074399][T21773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  363.074417][T21773] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  363.074435][T21773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  363.074451][T21773] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  363.074468][T21773] 44674 total pagecache pages
[  363.212213][ T5867] block nbd4: Receive control failed (result -32)
[  363.213590][T21773] 0 pages in swap cache
[  363.238404][T21773] Free swap  = 124996kB
[  363.242580][T21773] Total swap = 124996kB
[  363.246751][T21773] 2097051 pages RAM
[  363.250672][T21773] 0 pages HighMem/MovableOnly
[  363.255452][T21773] 425661 pages reserved
[  363.260058][T21773] 0 pages cma reserved
[  363.263307][T21792] veth1_to_bond: entered allmulticast mode
[  363.276215][T21791] __nla_validate_parse: 30 callbacks suppressed
[  363.276234][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4584'.
[  363.302359][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4585'.
[  363.311750][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4585'.
[  363.323735][T21794] 8021q: VLANs not supported on wg1
[  363.330140][T21794] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4585'.
[  363.350361][T21792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4583'.
[  363.494495][T21792] veth1_to_bond (unregistering): left allmulticast mode
[  363.555757][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'.
[  363.576707][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'.
[  363.767320][T21839] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4597'.
[  363.830770][T21845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4598'.
[  363.852404][T21844] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4599'.
[  363.921741][T21844] validate_nla: 5 callbacks suppressed
[  363.921762][T21844] netlink: 'syz.1.4599': attribute type 11 has an invalid length.
[  364.014106][T21865] netlink: 'syz.5.4605': attribute type 7 has an invalid length.
[  364.026824][T21865] : entered promiscuous mode
[  364.043748][T21872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.056742][T20815] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  364.079802][T21844] netlink: 'syz.1.4599': attribute type 1 has an invalid length.
[  364.247098][T21889] netlink: 'syz.1.4612': attribute type 5 has an invalid length.
[  364.699452][T21928] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  364.993044][T21943] netlink: 'syz.2.4626': attribute type 11 has an invalid length.
[  365.008054][T21945] syzkaller1: entered promiscuous mode
[  365.016527][T21945] syzkaller1: entered allmulticast mode
[  365.030599][T21945] netlink: 'syz.5.4627': attribute type 23 has an invalid length.
[  365.330510][T21981] netlink: 'syz.5.4638': attribute type 3 has an invalid length.
[  365.339236][T21979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  365.346771][T21979] IPv6: NLM_F_CREATE should be set when creating new route
[  365.393943][T21987] tipc: Enabled bearer <udp:syz1>, priority 10
[  365.419295][T21989] IPVS: set_ctl: invalid protocol: 34 255.255.255.255:3
[  365.736396][T22024] openvswitch: netlink: Missing key (keys=40, expected=100)
[  365.785739][T22026] netlink: 'syz.2.4653': attribute type 1 has an invalid length.
[  365.889255][T22037] netlink: 'syz.2.4657': attribute type 2 has an invalid length.
[  366.121697][T22058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.169701][T22058] syzkaller0: entered promiscuous mode
[  366.191897][T22058] syzkaller0: entered allmulticast mode
[  366.288034][T22058] tipc: Resetting bearer <eth:syzkaller0>
[  366.315136][T22057] tipc: Resetting bearer <eth:syzkaller0>
[  366.339181][T22057] tipc: Disabling bearer <eth:syzkaller0>
[  366.358015][T22060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.413717][T22059] tipc: Resetting bearer <eth:syzkaller0>
[  366.512115][T22059] tipc: Disabling bearer <eth:syzkaller0>
[  367.129451][T22127] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  367.230564][T22133] syzkaller1: entered promiscuous mode
[  367.258706][T22133] syzkaller1: entered allmulticast mode
[  367.348512][ T7410] tipc: Node number set to 1795592832
[  367.547089][T22154] netlink: 'syz.1.4694': attribute type 1 has an invalid length.
[  367.939557][T22182] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  367.952514][T22182] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  367.994532][T22192] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  368.002749][T22191] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  368.201384][T22221] syzkaller0: entered allmulticast mode
[  368.343570][T22234] __nla_validate_parse: 34 callbacks suppressed
[  368.343592][T22234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'.
[  368.362375][T22234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'.
[  368.461332][T22242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4722'.
[  368.473901][T22242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4722'.
[  368.603146][T22253] ip6erspan0: entered promiscuous mode
[  368.609536][T22253] ip6erspan0: entered allmulticast mode
[  368.733164][T22266] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4729'.
[  368.741319][T22262] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  368.750740][T22266] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4729'.
[  368.893143][T22276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4731'.
[  368.913838][T22276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4731'.
[  368.938576][T22284] IPVS: ip_vs_edit_dest(): server weight less than zero
[  368.945658][ T5921] IPVS: starting estimator thread 0...
[  368.989428][T22288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4737'.
[  369.014632][T22289] validate_nla: 5 callbacks suppressed
[  369.014654][T22289] netlink: 'syz.2.4736': attribute type 27 has an invalid length.
[  369.068639][T22285] IPVS: using max 35 ests per chain, 84000 per kthread
[  369.387239][T22312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4745'.
[  369.446164][T22322] FAULT_INJECTION: forcing a failure.
[  369.446164][T22322] name failslab, interval 1, probability 0, space 0, times 0
[  369.489270][T22322] CPU: 0 UID: 0 PID: 22322 Comm: syz.1.4748 Not tainted syzkaller #0 PREEMPT(full) 
[  369.489301][T22322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  369.489313][T22322] Call Trace:
[  369.489321][T22322]  <TASK>
[  369.489329][T22322]  dump_stack_lvl+0x189/0x250
[  369.489358][T22322]  ? __pfx____ratelimit+0x10/0x10
[  369.489384][T22322]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.489406][T22322]  ? __pfx__printk+0x10/0x10
[  369.489433][T22322]  ? fs_reclaim_acquire+0x7d/0x100
[  369.489462][T22322]  ? __pfx___might_resched+0x10/0x10
[  369.489480][T22322]  ? lock_acquire+0x5f/0x360
[  369.489508][T22322]  should_fail_ex+0x414/0x560
[  369.489533][T22322]  ? alloc_netdev_mqs+0x8a0/0x11b0
[  369.489554][T22322]  should_failslab+0xa8/0x100
[  369.489582][T22322]  __kvmalloc_node_noprof+0x161/0x5f0
[  369.489608][T22322]  ? alloc_netdev_mqs+0x8a0/0x11b0
[  369.489631][T22322]  alloc_netdev_mqs+0x8a0/0x11b0
[  369.489657][T22322]  rtnl_create_link+0x31f/0xd10
[  369.489683][T22322]  rtnl_newlink_create+0x25c/0xb00
[  369.489706][T22322]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  369.489727][T22322]  ? __pfx___mutex_lock+0x10/0x10
[  369.489758][T22322]  ? full_name_hash+0x92/0xe0
[  369.489782][T22322]  rtnl_newlink+0x16d6/0x1c70
[  369.489810][T22322]  ? netlink_sendmsg+0x805/0xb30
[  369.489843][T22322]  ? __pfx_rtnl_newlink+0x10/0x10
[  369.489881][T22322]  ? rcu_is_watching+0x15/0xb0
[  369.489904][T22322]  ? nlmon_xmit+0xb0/0x100
[  369.489919][T22322]  ? kmem_cache_free+0x18f/0x400
[  369.489979][T22322]  ? rcu_is_watching+0x15/0xb0
[  369.489997][T22322]  ? __dev_queue_xmit+0x27b/0x3b50
[  369.490019][T22322]  ? __local_bh_enable_ip+0x12d/0x1c0
[  369.490038][T22322]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  369.490056][T22322]  ? __dev_queue_xmit+0x27b/0x3b50
[  369.490077][T22322]  ? lock_release+0x4b/0x3e0
[  369.490113][T22322]  ? __dev_queue_xmit+0x27b/0x3b50
[  369.490133][T22322]  ? __dev_queue_xmit+0x27b/0x3b50
[  369.490154][T22322]  ? __dev_queue_xmit+0x1d79/0x3b50
[  369.490183][T22322]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  369.490211][T22322]  ? lock_release+0x4b/0x3e0
[  369.490234][T22322]  ? bpf_lsm_capable+0x9/0x20
[  369.490258][T22322]  ? security_capable+0x7e/0x2e0
[  369.490287][T22322]  ? __pfx_rtnl_newlink+0x10/0x10
[  369.490313][T22322]  rtnetlink_rcv_msg+0x7cc/0xb70
[  369.490342][T22322]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  369.490368][T22322]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  369.490394][T22322]  ? ref_tracker_free+0x63a/0x7d0
[  369.490420][T22322]  ? __asan_memcpy+0x40/0x70
[  369.490440][T22322]  ? __pfx_ref_tracker_free+0x10/0x10
[  369.490471][T22322]  netlink_rcv_skb+0x208/0x470
[  369.490498][T22322]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  369.490525][T22322]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  369.490562][T22322]  netlink_unicast+0x82c/0x9e0
[  369.490590][T22322]  ? __pfx_netlink_unicast+0x10/0x10
[  369.490615][T22322]  ? netlink_sendmsg+0x642/0xb30
[  369.490641][T22322]  ? skb_put+0x11b/0x210
[  369.490660][T22322]  netlink_sendmsg+0x805/0xb30
[  369.490693][T22322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.490721][T22322]  ? is_bpf_text_address+0x26/0x2b0
[  369.490747][T22322]  ? rcu_is_watching+0x15/0xb0
[  369.490763][T22322]  ? aa_sock_msg_perm+0xf1/0x1d0
[  369.490780][T22322]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  369.490800][T22322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.490827][T22322]  __sock_sendmsg+0x21c/0x270
[  369.490852][T22322]  ____sys_sendmsg+0x52d/0x830
[  369.490873][T22322]  ? __pfx_____sys_sendmsg+0x10/0x10
[  369.490897][T22322]  ? import_iovec+0x74/0xa0
[  369.490919][T22322]  ___sys_sendmsg+0x21f/0x2a0
[  369.490939][T22322]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.490968][T22322]  ? kstrtouint+0x6e/0xe0
[  369.491009][T22322]  ? rcu_is_watching+0x15/0xb0
[  369.491027][T22322]  ? lock_release+0x4b/0x3e0
[  369.491053][T22322]  ? __might_fault+0xcc/0x130
[  369.491079][T22322]  __sys_sendmmsg+0x227/0x430
[  369.491100][T22322]  ? __pfx___sys_sendmmsg+0x10/0x10
[  369.491117][T22322]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  369.491157][T22322]  ? ksys_write+0x22a/0x250
[  369.491182][T22322]  ? __pfx_ksys_write+0x10/0x10
[  369.491204][T22322]  ? rcu_is_watching+0x15/0xb0
[  369.491224][T22322]  __x64_sys_sendmmsg+0xa0/0xc0
[  369.491245][T22322]  do_syscall_64+0xfa/0x3b0
[  369.491273][T22322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.491292][T22322]  ? clear_bhb_loop+0x60/0xb0
[  369.491313][T22322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.491331][T22322] RIP: 0033:0x7f8437b8ebe9
[  369.491347][T22322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.491364][T22322] RSP: 002b:00007f8438ab0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  369.491386][T22322] RAX: ffffffffffffffda RBX: 00007f8437db5fa0 RCX: 00007f8437b8ebe9
[  369.491400][T22322] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  369.491413][T22322] RBP: 00007f8438ab0090 R08: 0000000000000000 R09: 0000000000000000
[  369.491425][T22322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  369.491436][T22322] R13: 00007f8437db6038 R14: 00007f8437db5fa0 R15: 00007ffe59da67f8
[  369.491458][T22322]  </TASK>
[  370.029692][ T5867] Bluetooth: hci0: command 0x0406 tx timeout
[  370.162453][T22345] siw: device registration error -23
[  370.204804][T22348] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  370.262778][T22356] netlink: 'syz.1.4755': attribute type 11 has an invalid length.
[  370.270989][T22356] netlink: 'syz.1.4755': attribute type 11 has an invalid length.
[  370.366099][T22372] FAULT_INJECTION: forcing a failure.
[  370.366099][T22372] name failslab, interval 1, probability 0, space 0, times 0
[  370.416123][T22372] CPU: 0 UID: 0 PID: 22372 Comm: syz.0.4761 Not tainted syzkaller #0 PREEMPT(full) 
[  370.416154][T22372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  370.416166][T22372] Call Trace:
[  370.416173][T22372]  <TASK>
[  370.416181][T22372]  dump_stack_lvl+0x189/0x250
[  370.416209][T22372]  ? __pfx____ratelimit+0x10/0x10
[  370.416235][T22372]  ? __pfx_dump_stack_lvl+0x10/0x10
[  370.416257][T22372]  ? __pfx__printk+0x10/0x10
[  370.416283][T22372]  ? fs_reclaim_acquire+0x7d/0x100
[  370.416312][T22372]  ? __pfx___might_resched+0x10/0x10
[  370.416330][T22372]  ? lock_acquire+0x5f/0x360
[  370.416358][T22372]  should_fail_ex+0x414/0x560
[  370.416384][T22372]  ? alloc_netdev_mqs+0xa46/0x11b0
[  370.416405][T22372]  should_failslab+0xa8/0x100
[  370.416432][T22372]  __kvmalloc_node_noprof+0x161/0x5f0
[  370.416459][T22372]  ? alloc_netdev_mqs+0xa46/0x11b0
[  370.416483][T22372]  alloc_netdev_mqs+0xa46/0x11b0
[  370.416508][T22372]  rtnl_create_link+0x31f/0xd10
[  370.416535][T22372]  rtnl_newlink_create+0x25c/0xb00
[  370.416559][T22372]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  370.416580][T22372]  ? __pfx___mutex_lock+0x10/0x10
[  370.416610][T22372]  ? full_name_hash+0x92/0xe0
[  370.416633][T22372]  rtnl_newlink+0x16d6/0x1c70
[  370.416661][T22372]  ? netlink_sendmsg+0x805/0xb30
[  370.416694][T22372]  ? __pfx_rtnl_newlink+0x10/0x10
[  370.416732][T22372]  ? rcu_is_watching+0x15/0xb0
[  370.416754][T22372]  ? nlmon_xmit+0xb0/0x100
[  370.416772][T22372]  ? kmem_cache_free+0x18f/0x400
[  370.416800][T22372]  ? rcu_is_watching+0x15/0xb0
[  370.416818][T22372]  ? __dev_queue_xmit+0x27b/0x3b50
[  370.416840][T22372]  ? __local_bh_enable_ip+0x12d/0x1c0
[  370.416859][T22372]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  370.416877][T22372]  ? __dev_queue_xmit+0x27b/0x3b50
[  370.416906][T22372]  ? lock_release+0x4b/0x3e0
[  370.416933][T22372]  ? __dev_queue_xmit+0x27b/0x3b50
[  370.416953][T22372]  ? __dev_queue_xmit+0x27b/0x3b50
[  370.416974][T22372]  ? __dev_queue_xmit+0x1d79/0x3b50
[  370.417002][T22372]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  370.417030][T22372]  ? lock_release+0x4b/0x3e0
[  370.417055][T22372]  ? bpf_lsm_capable+0x9/0x20
[  370.417080][T22372]  ? security_capable+0x7e/0x2e0
[  370.417110][T22372]  ? __pfx_rtnl_newlink+0x10/0x10
[  370.417135][T22372]  rtnetlink_rcv_msg+0x7cc/0xb70
[  370.417162][T22372]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  370.417187][T22372]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  370.417213][T22372]  ? ref_tracker_free+0x63a/0x7d0
[  370.417239][T22372]  ? __asan_memcpy+0x40/0x70
[  370.417259][T22372]  ? __pfx_ref_tracker_free+0x10/0x10
[  370.417290][T22372]  netlink_rcv_skb+0x208/0x470
[  370.417316][T22372]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  370.417343][T22372]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  370.417378][T22372]  netlink_unicast+0x82c/0x9e0
[  370.417407][T22372]  ? __pfx_netlink_unicast+0x10/0x10
[  370.417431][T22372]  ? netlink_sendmsg+0x642/0xb30
[  370.417458][T22372]  ? skb_put+0x11b/0x210
[  370.417477][T22372]  netlink_sendmsg+0x805/0xb30
[  370.417508][T22372]  ? __pfx_netlink_sendmsg+0x10/0x10
[  370.417535][T22372]  ? is_bpf_text_address+0x26/0x2b0
[  370.417561][T22372]  ? rcu_is_watching+0x15/0xb0
[  370.417577][T22372]  ? aa_sock_msg_perm+0xf1/0x1d0
[  370.417596][T22372]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  370.417616][T22372]  ? __pfx_netlink_sendmsg+0x10/0x10
[  370.417643][T22372]  __sock_sendmsg+0x21c/0x270
[  370.417668][T22372]  ____sys_sendmsg+0x52d/0x830
[  370.417690][T22372]  ? __pfx_____sys_sendmsg+0x10/0x10
[  370.417714][T22372]  ? import_iovec+0x74/0xa0
[  370.417736][T22372]  ___sys_sendmsg+0x21f/0x2a0
[  370.417757][T22372]  ? __pfx____sys_sendmsg+0x10/0x10
[  370.417778][T22372]  ? kstrtouint+0x6e/0xe0
[  370.417818][T22372]  ? rcu_is_watching+0x15/0xb0
[  370.417836][T22372]  ? lock_release+0x4b/0x3e0
[  370.417862][T22372]  ? __might_fault+0xcc/0x130
[  370.417888][T22372]  __sys_sendmmsg+0x227/0x430
[  370.417917][T22372]  ? __pfx___sys_sendmmsg+0x10/0x10
[  370.417935][T22372]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  370.417974][T22372]  ? ksys_write+0x22a/0x250
[  370.418000][T22372]  ? __pfx_ksys_write+0x10/0x10
[  370.418022][T22372]  ? rcu_is_watching+0x15/0xb0
[  370.418043][T22372]  __x64_sys_sendmmsg+0xa0/0xc0
[  370.418064][T22372]  do_syscall_64+0xfa/0x3b0
[  370.418092][T22372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.418111][T22372]  ? clear_bhb_loop+0x60/0xb0
[  370.418132][T22372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.418151][T22372] RIP: 0033:0x7fbf5d18ebe9
[  370.418169][T22372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  370.418185][T22372] RSP: 002b:00007fbf5df43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  370.418208][T22372] RAX: ffffffffffffffda RBX: 00007fbf5d3b5fa0 RCX: 00007fbf5d18ebe9
[  370.418223][T22372] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  370.418236][T22372] RBP: 00007fbf5df43090 R08: 0000000000000000 R09: 0000000000000000
[  370.418254][T22372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  370.418265][T22372] R13: 00007fbf5d3b6038 R14: 00007fbf5d3b5fa0 R15: 00007fff0c2911d8
[  370.418286][T22372]  </TASK>
[  370.947948][T22374] tipc: Started in network mode
[  370.952974][T22374] tipc: Node identity feb60aea8f24, cluster identity 4711
[  370.964230][T22374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.972321][T22374] syzkaller0: entered promiscuous mode
[  370.977874][T22374] syzkaller0: entered allmulticast mode
[  371.018844][T22385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.091314][T22373] tipc: Resetting bearer <eth:syzkaller0>
[  371.106427][T22373] tipc: Disabling bearer <eth:syzkaller0>
[  371.185304][T22394] dvmrp0: left allmulticast mode
[  371.254060][T22388] nbd5: detected capacity change from 0 to 127
[  371.265598][T22390] netlink: 'syz.0.4767': attribute type 27 has an invalid length.
[  371.274909][ T5862] block nbd5: Receive control failed (result -32)
[  371.278155][ T5867] block nbd5: Receive control failed (result -32)
[  371.740623][T22447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  371.764490][T22451] netlink: 'syz.2.4782': attribute type 18 has an invalid length.
[  371.944218][T22472] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  371.974245][T22470] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  372.098057][T22489] netlink: 'syz.2.4793': attribute type 29 has an invalid length.
[  372.112167][ T5867] Bluetooth: hci0: command 0x0406 tx timeout
[  372.183604][T22496] lo: left promiscuous mode
[  372.201147][T22496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.265616][T22502] netlink: 'syz.1.4798': attribute type 1 has an invalid length.
[  372.403528][T22513] bond7: (slave geneve3): making interface the new active one
[  372.417404][T22513] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  372.439013][T20815] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0
[  372.486485][ T6309] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0
[  372.532359][T22524] netlink: 'syz.2.4804': attribute type 10 has an invalid length.
[  372.534870][ T6309] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0
[  372.568952][ T6309] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0
[  372.586566][T22532] ip6gre2: entered allmulticast mode
[  372.713135][T22549] netlink: 'syz.0.4809': attribute type 1 has an invalid length.
[  372.766063][T22549] 8021q: adding VLAN 0 to HW filter on device bond7
[  372.831549][T22556] bond7: (slave geneve3): making interface the new active one
[  372.843512][T22556] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  373.073935][T22579] netlink: 'syz.2.4815': attribute type 10 has an invalid length.
[  373.347882][T22601] netlink: 'syz.2.4822': attribute type 64 has an invalid length.
[  373.359514][T22601] __nla_validate_parse: 58 callbacks suppressed
[  373.359534][T22601] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4822'.
[  373.385180][T22607] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4824'.
[  373.654026][T22624] netlink: 'syz.4.4828': attribute type 1 has an invalid length.
[  373.750903][T22633] gretap2: entered promiscuous mode
[  373.790510][T22633] bond4: (slave gretap2): making interface the new active one
[  373.835609][T22633] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  373.885202][T22624] macvlan3: entered promiscuous mode
[  373.891398][T22624] macvlan3: entered allmulticast mode
[  373.897753][T22624] bond4: entered promiscuous mode
[  373.904141][T22624] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  373.913036][T22624] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  373.930331][T22624] bond4: left promiscuous mode
[  373.964800][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4837'.
[  373.997442][T22649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4837'.
[  374.174290][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4841'.
[  374.212525][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4842'.
[  374.226699][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4842'.
[  374.247948][T22666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4844'.
[  374.276093][T22662] bridge0: port 1(vlan4) entered blocking state
[  374.289499][T22662] bridge0: port 1(vlan4) entered disabled state
[  374.296977][T22662] vlan4: entered allmulticast mode
[  374.306249][T22662] bridge0: entered allmulticast mode
[  374.355210][T22662] vlan4: left allmulticast mode
[  374.362876][T22662] bridge0: left allmulticast mode
[  374.387051][T22673] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  374.529251][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4846'.
[  374.538146][T22688] netlink: 'syz.4.4847': attribute type 4 has an invalid length.
[  374.542501][T22684] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  374.561537][T22684] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  374.572059][T22684] gretap2: entered promiscuous mode
[  374.577668][T22684] gretap2: entered allmulticast mode
[  374.596936][T22696] netlink: 'syz.4.4847': attribute type 4 has an invalid length.
[  374.602662][T22692] sch_fq: defrate 0 ignored.
[  374.614917][T22692] netlink: 'syz.5.4850': attribute type 4 has an invalid length.
[  374.631679][T22698] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4852'.
[  374.696674][T22702] sctp: [Deprecated]: syz.0.4854 (pid 22702) Use of struct sctp_assoc_value in delayed_ack socket option.
[  374.696674][T22702] Use struct sctp_sack_info instead
[  375.315736][T22711] syzkaller1: entered promiscuous mode
[  375.321600][T22711] syzkaller1: entered allmulticast mode
[  375.669179][T22743] netlink: 'syz.4.4870': attribute type 23 has an invalid length.
[  375.788555][ T5862] Bluetooth: hci4: command 0x0406 tx timeout
[  375.940981][T22772] block nbd0: reconnected socket
[  376.184831][T22800] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001
[  376.653427][T22824] tipc: New replicast peer: 255.255.255.255
[  376.660982][T22824] tipc: Enabled bearer <udp:syz2>, priority 10
[  376.728856][T22830] netlink: 'syz.4.4898': attribute type 1 has an invalid length.
[  376.754765][T22830] bond5: entered promiscuous mode
[  376.760513][T22830] 8021q: adding VLAN 0 to HW filter on device bond5
[  376.800356][T22830] 8021q: adding VLAN 0 to HW filter on device bond6
[  376.809103][T22830] bond5: (slave bond6): making interface the new active one
[  376.816483][T22830] bond6: entered promiscuous mode
[  376.824781][T22830] bond5: (slave bond6): Enslaving as an active interface with an up link
[  377.046105][T22843] gretap0: left allmulticast mode
[  377.191529][T22856] netlink: 'syz.4.4908': attribute type 1 has an invalid length.
[  377.200538][T22856] netlink: 'syz.4.4908': attribute type 13 has an invalid length.
[  377.209510][T22856] netlink: 'syz.4.4908': attribute type 58 has an invalid length.
[  377.659391][ T5941] tipc: Node number set to 1673968098
[  377.751988][T22899] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  378.206068][T22941] netlink: 'syz.5.4933': attribute type 1 has an invalid length.
[  378.486592][T22977] __nla_validate_parse: 32 callbacks suppressed
[  378.486613][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4943'.
[  378.514886][T22974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4941'.
[  378.524500][T22968] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4940'.
[  378.594895][T22984] xt_HMARK: spi-set and port-set can't be combined
[  378.802310][T22999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4951'.
[  378.813065][T23001] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  378.826993][T22999] netlink: 'syz.4.4951': attribute type 5 has an invalid length.
[  378.855253][T22999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4951'.
[  378.859053][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4952'.
[  378.883704][T22999] geneve2: entered promiscuous mode
[  378.889979][T22999] geneve2: entered allmulticast mode
[  378.896783][T20813] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 256 - 0
[  378.922018][T20813] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  378.942780][T23009] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  378.959846][T20813] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  378.981454][T20813] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  379.000592][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4955'.
[  379.197817][T23023] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002
[  379.282617][T23042] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4965'.
[  379.322606][T23042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4965'.
[  379.347249][T23042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4965'.
[  379.476974][T23052] unsupported nlmsg_type 40
[  379.536309][T23059] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  379.550659][T23058] validate_nla: 5 callbacks suppressed
[  379.550682][T23058] netlink: 'syz.2.4972': attribute type 1 has an invalid length.
[  379.557822][T23059] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  379.616407][T23058] 8021q: adding VLAN 0 to HW filter on device bond9
[  379.633131][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806a282c00: rx timeout, send abort
[  379.701281][T23069] 8021q: adding VLAN 0 to HW filter on device bond9
[  379.713238][T23069] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  379.725780][T23069] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  379.770567][T23058] vlan4: entered allmulticast mode
[  379.776045][T23058] bond9: entered allmulticast mode
[  379.787930][T23078] netlink: 'syz.4.4977': attribute type 22 has an invalid length.
[  379.824800][T23078] netlink: 'syz.4.4977': attribute type 22 has an invalid length.
[  380.136218][T23106] sctp: [Deprecated]: syz.2.4988 (pid 23106) Use of struct sctp_assoc_value in delayed_ack socket option.
[  380.136218][T23106] Use struct sctp_sack_info instead
[  380.141448][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806a282c00: abort rx timeout. Force session deactivation
[  380.314856][T23115] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  380.596582][T23139] syzkaller1: entered promiscuous mode
[  380.602328][T23139] syzkaller1: entered allmulticast mode
[  380.621804][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806a283000: rx timeout, send abort
[  380.782501][T23148] bond7: entered promiscuous mode
[  380.787980][T23148] bond7: entered allmulticast mode
[  380.794207][T23148] 8021q: adding VLAN 0 to HW filter on device bond7
[  381.130220][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806a283000: abort rx timeout. Force session deactivation
[  381.907644][T23226] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  382.228538][T23243] netlink: 'syz.1.5032': attribute type 29 has an invalid length.
[  382.249604][T23245] netlink: 'syz.5.5029': attribute type 4 has an invalid length.
[  382.269881][T23245] openvswitch: netlink: VXLAN extension message has 11 unknown bytes.
[  382.279080][T23243] netlink: 'syz.1.5032': attribute type 29 has an invalid length.
[  382.403760][T23255] netlink: 'syz.1.5035': attribute type 10 has an invalid length.
[  382.454277][T23255] syz_tun: left allmulticast mode
[  382.473745][T23255] bridge0: port 1(syz_tun) entered disabled state
[  382.747817][T23291] netlink: 'syz.5.5045': attribute type 8 has an invalid length.
[  383.133116][T23324] netlink: 'syz.5.5058': attribute type 1 has an invalid length.
[  383.153521][T23324] 8021q: adding VLAN 0 to HW filter on device bond2
[  383.175297][T23324] bond2: (slave geneve2): making interface the new active one
[  383.200431][T23324] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  383.354874][T23337] "syz.5.5062" (23337) uses obsolete ecb(arc4) skcipher
[  383.359282][T23335] syz_tun: entered allmulticast mode
[  383.569573][T23334] syz_tun: left allmulticast mode
[  383.754155][T23366] __nla_validate_parse: 28 callbacks suppressed
[  383.754175][T23366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5069'.
[  383.934162][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5075'.
[  383.956225][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5077'.
[  384.002709][T10877] IPVS: starting estimator thread 0...
[  384.087712][T23396] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  384.098513][T23389] IPVS: using max 44 ests per chain, 105600 per kthread
[  384.114774][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801bbd2000: rx timeout, send abort
[  384.216146][T23404] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5084'.
[  384.325911][T23420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5088'.
[  384.366421][T23417] netlink: 'syz.4.5087': attribute type 11 has an invalid length.
[  384.380727][T23417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5087'.
[  384.380741][T23426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5087'.
[  384.539423][T23435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5091'.
[  384.579893][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5092'.
[  384.598667][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5091'.
[  384.623090][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801bbd2000: abort rx timeout. Force session deactivation
[  384.667783][T23435] hsr_slave_0 (unregistering): left promiscuous mode
[  384.894062][ T6309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  384.917750][ T6309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  384.927859][T10877] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  385.050749][T10877] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  385.221456][T23496] syzkaller0: entered promiscuous mode
[  385.227089][T23496] syzkaller0: entered allmulticast mode
[  385.413966][T23510] netlink: 'syz.4.5113': attribute type 4 has an invalid length.
[  385.428607][T23510] netlink: 'syz.4.5113': attribute type 4 has an invalid length.
[  385.694296][T23534] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  385.706463][T23534] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  385.714992][T23534] gretap2: entered promiscuous mode
[  385.721152][T23534] gretap2: entered allmulticast mode
[  385.871389][T10877] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  386.040303][T23385] Bluetooth: hci3: command 0x0406 tx timeout
[  386.335752][T23589] netlink: 'syz.2.5138': attribute type 3 has an invalid length.
[  386.522713][T23605] netlink: 'syz.2.5141': attribute type 33 has an invalid length.
[  386.576952][T23605] bond0 (unregistering): Released all slaves
[  386.627511][T23612] netlink: 'syz.5.5143': attribute type 13 has an invalid length.
[  386.635861][T23612] netlink: 'syz.5.5143': attribute type 58 has an invalid length.
[  386.729907][T23621] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  386.739095][T23621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.742008][T23622] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  386.756258][T23622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.757809][T23619] syzkaller1: entered promiscuous mode
[  386.775839][T23619] syzkaller1: entered allmulticast mode
[  386.868862][T23629] 
: left allmulticast mode
[  386.875291][T23629] 
: left promiscuous mode
[  386.880421][T23629] bridge0: port 1(
) entered disabled state
[  387.314269][T23664] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  387.559693][T23681] netlink: 'syz.0.5160': attribute type 2 has an invalid length.
[  387.600656][T23684] netlink: 'syz.5.5164': attribute type 1 has an invalid length.
[  387.986525][T23716] sctp: [Deprecated]: syz.2.5176 (pid 23716) Use of int in max_burst socket option deprecated.
[  387.986525][T23716] Use struct sctp_assoc_value instead
[  388.146884][T23725] 8021q: adding VLAN 0 to HW filter on device bond8
[  388.220787][T23725] bond0: (slave bond8): Enslaving as an active interface with an up link
[  388.668747][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  389.013597][T23787] __nla_validate_parse: 29 callbacks suppressed
[  389.013618][T23787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'.
[  389.144161][T23796] netlink: 'syz.4.5202': attribute type 10 has an invalid length.
[  389.175122][T23798] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  389.175238][T23796] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.215368][T23796] bridge_slave_1: left allmulticast mode
[  389.231490][T23796] bridge_slave_1: left promiscuous mode
[  389.237496][T23796] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.249394][T23796] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  389.263217][T23800] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  389.366690][T23816] netlink: 'syz.4.5210': attribute type 2 has an invalid length.
[  389.377051][T23816] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.5210'.
[  389.456646][T23825] 8021q: VLANs not supported on ip6gre0
[  389.472892][T23826] openvswitch: netlink: Key 9 has unexpected len 0 expected 4
[  389.582802][T23835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5214'.
[  389.612812][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5214'.
[  389.644274][T23839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5218'.
[  389.688933][T23847] netlink: 71 bytes leftover after parsing attributes in process `syz.1.5220'.
[  389.703838][T23849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5221'.
[  389.733567][T23852] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5222'.
[  389.745060][T23852] openvswitch: netlink: Message has -1 unknown bytes.
[  389.921128][T23862] vxlan2: entered promiscuous mode
[  389.937925][T23865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5227'.
[  389.952499][T23862] vxlan2: entered allmulticast mode
[  390.573812][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5243'.
[  390.605100][T23932] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  390.652173][T23935] validate_nla: 4 callbacks suppressed
[  390.652195][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.667062][T23938] block nbd0: NBD_DISCONNECT
[  390.672766][T23938] block nbd0: Send disconnect failed -107
[  390.676726][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.679551][T23938] block nbd0: Disconnected due to user request.
[  390.679572][T23938] block nbd0: shutting down sockets
[  390.703665][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.712869][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.725518][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.736161][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.750271][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.761262][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.771819][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.782900][T23935] netlink: 'syz.2.5245': attribute type 53 has an invalid length.
[  390.796786][T23949] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  390.993731][T23967] C: renamed from team_slave_0
[  391.001825][T23967] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  396.108552][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  410.828513][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  439.628529][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  444.878169][T23385] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  444.886327][T23385] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  444.893966][T23385] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  444.903676][T23385] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  444.913213][T23385] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  445.119631][T23982] chnl_net:caif_netlink_parms(): no params data found
[  445.164217][T23982] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.171652][T23982] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.179788][T23982] bridge_slave_0: entered allmulticast mode
[  445.186546][T23982] bridge_slave_0: entered promiscuous mode
[  445.194547][T23982] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.202016][T23982] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.210400][T23982] bridge_slave_1: entered allmulticast mode
[  445.217119][T23982] bridge_slave_1: entered promiscuous mode
[  445.239730][T23982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.256407][T23982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.294414][T23982] team0: Port device team_slave_0 added
[  445.302921][T23982] team0: Port device team_slave_1 added
[  445.334778][T23982] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.343478][T23982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.371198][T23982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.383519][T23982] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.392149][T23982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.419139][T23982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.459413][T23385] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  445.466909][T23385] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  445.474366][T23385] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  445.482765][T23982] hsr_slave_0: entered promiscuous mode
[  445.483120][T23385] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  445.493451][T23982] hsr_slave_1: entered promiscuous mode
[  445.496387][T23385] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  445.502260][T23982] debugfs: 'hsr0' already exists in 'hsr'
[  445.514889][T23982] Cannot create hsr debugfs directory
[  445.736211][T23992] chnl_net:caif_netlink_parms(): no params data found
[  445.782832][T23992] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.790380][T23992] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.797720][T23992] bridge_slave_0: entered allmulticast mode
[  445.804657][T23992] bridge_slave_0: entered promiscuous mode
[  445.812328][T23992] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.819562][T23992] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.826784][T23992] bridge_slave_1: entered allmulticast mode
[  445.833960][T23992] bridge_slave_1: entered promiscuous mode
[  445.856011][T23992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.869192][T23992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.923504][T23992] team0: Port device team_slave_0 added
[  445.947272][T23992] team0: Port device team_slave_1 added
[  445.979088][T23992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.986260][T23992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.014118][T23992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.031168][T23992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.040537][T23992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.067098][T23992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.143020][ T5862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  446.152384][ T5862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  446.159995][ T5862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  446.167974][ T5862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  446.176051][ T5862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  446.184792][T23992] hsr_slave_0: entered promiscuous mode
[  446.192569][T23992] hsr_slave_1: entered promiscuous mode
[  446.200339][T23992] debugfs: 'hsr0' already exists in 'hsr'
[  446.206098][T23992] Cannot create hsr debugfs directory
[  446.443424][T24008] chnl_net:caif_netlink_parms(): no params data found
[  446.489976][T24008] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.497151][T24008] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.504490][T24008] bridge_slave_0: entered allmulticast mode
[  446.511725][T24008] bridge_slave_0: entered promiscuous mode
[  446.520180][T24008] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.527382][T24008] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.534872][T24008] bridge_slave_1: entered allmulticast mode
[  446.542458][T24008] bridge_slave_1: entered promiscuous mode
[  446.565485][T24008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.580028][T24008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.606631][T24008] team0: Port device team_slave_0 added
[  446.614217][T24008] team0: Port device team_slave_1 added
[  446.635068][T24008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.642352][T24008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.670431][T24008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.682707][T24008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.689967][T24008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.716222][T24008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.749711][T24008] hsr_slave_0: entered promiscuous mode
[  446.755952][T24008] hsr_slave_1: entered promiscuous mode
[  446.762442][T24008] debugfs: 'hsr0' already exists in 'hsr'
[  446.768677][T24008] Cannot create hsr debugfs directory
[  446.988449][ T5862] Bluetooth: hci2: command tx timeout
[  447.548418][ T5862] Bluetooth: hci6: command tx timeout
[  448.188812][ T5862] Bluetooth: hci7: command tx timeout
[  449.068558][ T5862] Bluetooth: hci2: command tx timeout
[  449.628443][ T5862] Bluetooth: hci6: command tx timeout
[  450.268431][ T5862] Bluetooth: hci7: command tx timeout
[  451.148883][ T5862] Bluetooth: hci2: command tx timeout
[  451.709581][ T5862] Bluetooth: hci6: command tx timeout
[  452.348352][ T5862] Bluetooth: hci7: command tx timeout
[  453.228487][ T5862] Bluetooth: hci2: command tx timeout
[  453.788472][ T5862] Bluetooth: hci6: command tx timeout
[  454.428372][ T5862] Bluetooth: hci7: command tx timeout
[  460.521519][T23385] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  460.528913][T23385] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  460.536164][T23385] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  460.544068][T23385] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  460.552145][T23385] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  460.704071][T24020] chnl_net:caif_netlink_parms(): no params data found
[  460.747476][T24020] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.757572][T24020] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.765165][T24020] bridge_slave_0: entered allmulticast mode
[  460.774110][T24020] bridge_slave_0: entered promiscuous mode
[  460.781378][T24020] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.789320][T24020] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.796565][T24020] bridge_slave_1: entered allmulticast mode
[  460.803615][T24020] bridge_slave_1: entered promiscuous mode
[  460.826259][T24020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.837965][T24020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.863355][T24020] team0: Port device team_slave_0 added
[  460.871234][T24020] team0: Port device team_slave_1 added
[  460.892352][T24020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.900865][T24020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.927850][T24020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.941094][T24020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.948088][T24020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.974614][T24020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  461.007666][T24020] hsr_slave_0: entered promiscuous mode
[  461.014516][T24020] hsr_slave_1: entered promiscuous mode
[  461.020827][T24020] debugfs: 'hsr0' already exists in 'hsr'
[  461.026559][T24020] Cannot create hsr debugfs directory
[  462.062619][ T5862] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  462.071144][ T5862] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  462.078507][ T5862] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  462.086322][ T5862] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  462.094320][ T5862] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  462.244410][T24029] chnl_net:caif_netlink_parms(): no params data found
[  462.290466][T24029] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.297592][T24029] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.305665][T24029] bridge_slave_0: entered allmulticast mode
[  462.313175][T24029] bridge_slave_0: entered promiscuous mode
[  462.321215][T24029] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.328882][T24029] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.336121][T24029] bridge_slave_1: entered allmulticast mode
[  462.344279][T24029] bridge_slave_1: entered promiscuous mode
[  462.366615][T24029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.378030][T24029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.402253][T24029] team0: Port device team_slave_0 added
[  462.409986][T24029] team0: Port device team_slave_1 added
[  462.432085][T24029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.440034][T24029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.466660][T24029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.479189][T24029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.486172][T24029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.513769][T24029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.545076][T24029] hsr_slave_0: entered promiscuous mode
[  462.552274][T24029] hsr_slave_1: entered promiscuous mode
[  462.558637][T24029] debugfs: 'hsr0' already exists in 'hsr'
[  462.564581][T24029] Cannot create hsr debugfs directory
[  462.589290][ T5862] Bluetooth: hci8: command tx timeout
[  464.108584][ T5862] Bluetooth: hci9: command tx timeout
[  464.669709][ T5862] Bluetooth: hci8: command tx timeout
[  466.188679][ T5862] Bluetooth: hci9: command tx timeout
[  466.748567][ T5862] Bluetooth: hci8: command tx timeout
[  468.268705][ T5862] Bluetooth: hci9: command tx timeout
[  468.828858][ T5862] Bluetooth: hci8: command tx timeout
[  470.348866][ T5862] Bluetooth: hci9: command tx timeout
[  470.998620][ T2950] bond8: left promiscuous mode
[  471.003701][ T2950] bridge0: port 3(bond8) entered disabled state
[  471.011183][ T2950] bridge_slave_1: left allmulticast mode
[  471.016825][ T2950] bridge_slave_1: left promiscuous mode
[  471.022691][ T2950] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.031980][ T2950] bridge_slave_0: left allmulticast mode
[  471.037613][ T2950] bridge_slave_0: left promiscuous mode
[  471.043376][ T2950] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.169831][ T2950] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  471.183825][ T2950] bond11 (unregistering): (slave gretap0): Releasing active interface
[  471.194612][ T2950] bond14 (unregistering): (slave gretap2): Releasing active interface
[  471.211098][ T2950] dvmrp1 (unregistering): left allmulticast mode
[  471.913911][ T2950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  471.926937][ T2950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  471.937240][ T2950] bond0 (unregistering): Released all slaves
[  471.946823][ T2950] bond1 (unregistering): (slave bond2): Releasing backup interface
[  471.956898][ T2950] bond1 (unregistering): Released all slaves
[  471.971956][ T2950] bond2 (unregistering): Released all slaves
[  471.982681][ T2950] bond3 (unregistering): (slave bond4): Releasing backup interface
[  471.994704][ T2950] bond3 (unregistering): Released all slaves
[  472.004705][ T2950] bond4 (unregistering): Released all slaves
[  472.019964][ T2950] bond5 (unregistering): (slave veth3): Releasing active interface
[  472.035136][ T2950] bond5 (unregistering): Released all slaves
[  472.044772][ T2950] bond6 (unregistering): Released all slaves
[  472.057500][ T2950] bond7 (unregistering): Released all slaves
[  472.072327][ T2950] bond8 (unregistering): Released all slaves
[  472.084576][ T2950] bond9 (unregistering): Released all slaves
[  472.097093][ T2950] bond10 (unregistering): Released all slaves
[  472.106565][ T2950] bond11 (unregistering): Released all slaves
[  472.117878][ T2950] bond12 (unregistering): (slave bond13): Releasing backup interface
[  472.128050][ T2950] bond12 (unregistering): Released all slaves
[  472.141516][ T2950] bond13 (unregistering): Released all slaves
[  472.152915][ T2950] bond14 (unregistering): Released all slaves
[  472.164532][ T2950] team0: Port device bond15 removed
[  472.171069][ T2950] bond15 (unregistering): Released all slaves
[  472.184199][ T2950] bond16 (unregistering): Released all slaves
[  472.195835][ T2950] bond17 (unregistering): Released all slaves
[  473.591640][ T2950] : left promiscuous mode
[  473.639754][ T2950] tipc: Left network mode
[  473.897891][ T2950] hsr_slave_0: left promiscuous mode
[  473.904185][ T2950] hsr_slave_1: left promiscuous mode
[  473.917733][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  473.926088][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  473.940684][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  473.948191][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  473.958850][ T2950] veth0_macvtap: left allmulticast mode
[  473.964702][ T2950] veth0_macvtap: left promiscuous mode
[  474.027959][ T2950] team0 (unregistering): Port device veth1_macvtap removed
[  474.074270][ T2950] team0 (unregistering): Port device team_slave_1 removed
[  474.087666][ T2950] team0 (unregistering): Port device team_slave_0 removed
[  481.229245][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.678653][T23385] Bluetooth: hci1: command 0x0405 tx timeout
[  501.718415][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  505.121853][T23385] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  505.129336][T23385] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  505.136618][T23385] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  505.144660][T23385] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  505.152885][T23385] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  505.293881][T24038] chnl_net:caif_netlink_parms(): no params data found
[  505.341511][T24038] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.348676][T24038] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.355892][T24038] bridge_slave_0: entered allmulticast mode
[  505.363328][T24038] bridge_slave_0: entered promiscuous mode
[  505.370707][T24038] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.377839][T24038] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.385499][T24038] bridge_slave_1: entered allmulticast mode
[  505.392968][T24038] bridge_slave_1: entered promiscuous mode
[  505.413766][T24038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.425523][T24038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.451408][T24038] team0: Port device team_slave_0 added
[  505.458983][T24038] team0: Port device team_slave_1 added
[  505.477505][T24038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.485258][T24038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.511637][T24038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.523744][T24038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.531108][T24038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.561201][T24038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.592789][T24038] hsr_slave_0: entered promiscuous mode
[  505.599355][T24038] hsr_slave_1: entered promiscuous mode
[  505.605417][T24038] debugfs: 'hsr0' already exists in 'hsr'
[  505.611601][T24038] Cannot create hsr debugfs directory
[  506.250238][ T5862] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  506.258374][ T5862] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  506.271101][T24051] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  506.274775][ T5864] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  506.280188][T24053] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  506.286261][ T5864] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  506.297347][T24053] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  506.301327][ T5864] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  506.309034][T24053] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  506.322898][T24053] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  506.548342][T24048] chnl_net:caif_netlink_parms(): no params data found
[  506.613850][T24048] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.621829][T24048] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.629848][T24048] bridge_slave_0: entered allmulticast mode
[  506.636511][T24048] bridge_slave_0: entered promiscuous mode
[  506.644388][T24048] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.651703][T24048] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.660411][T24048] bridge_slave_1: entered allmulticast mode
[  506.667441][T24048] bridge_slave_1: entered promiscuous mode
[  506.692955][T24048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.707825][T24048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.756625][T24048] team0: Port device team_slave_0 added
[  506.765138][T24048] team0: Port device team_slave_1 added
[  506.794877][T24048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.802074][T24048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  506.830737][T24048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.844221][T24048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  506.851633][T24048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  506.879934][T24048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.898752][T24050] chnl_net:caif_netlink_parms(): no params data found
[  506.943266][T24048] hsr_slave_0: entered promiscuous mode
[  506.950446][T24048] hsr_slave_1: entered promiscuous mode
[  506.956651][T24048] debugfs: 'hsr0' already exists in 'hsr'
[  506.962486][T24048] Cannot create hsr debugfs directory
[  507.013099][T24050] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.020327][T24050] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.027544][T24050] bridge_slave_0: entered allmulticast mode
[  507.035112][T24050] bridge_slave_0: entered promiscuous mode
[  507.048830][T24050] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.055964][T24050] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.063828][T24050] bridge_slave_1: entered allmulticast mode
[  507.070854][T24050] bridge_slave_1: entered promiscuous mode
[  507.111466][T24050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  507.125265][T24050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.170258][T24050] team0: Port device team_slave_0 added
[  507.185611][T24050] team0: Port device team_slave_1 added
[  507.216338][T24050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.223734][T24050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  507.251151][T24050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.262312][ T5862] Bluetooth: hci10: command tx timeout
[  507.263919][T24050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.274982][T24050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  507.301636][T24050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.342424][T24050] hsr_slave_0: entered promiscuous mode
[  507.349022][T24050] hsr_slave_1: entered promiscuous mode
[  507.355021][T24050] debugfs: 'hsr0' already exists in 'hsr'
[  507.360959][T24050] Cannot create hsr debugfs directory
[  508.348585][ T5862] Bluetooth: hci12: command tx timeout
[  508.348958][T24053] Bluetooth: hci11: command tx timeout
[  509.308841][T24053] Bluetooth: hci10: command tx timeout
[  510.428522][T24053] Bluetooth: hci11: command tx timeout
[  510.428656][ T5862] Bluetooth: hci12: command tx timeout
[  511.388792][ T5862] Bluetooth: hci10: command tx timeout
[  512.508578][ T5862] Bluetooth: hci12: command tx timeout
[  512.508582][T24053] Bluetooth: hci11: command tx timeout
[  513.468493][T24053] Bluetooth: hci10: command tx timeout
[  514.588703][T24053] Bluetooth: hci11: command tx timeout
[  514.589215][ T5862] Bluetooth: hci12: command tx timeout
[  521.197162][T24053] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  521.204965][T24053] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  521.212384][T24053] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  521.220244][T24053] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  521.227887][T24053] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  521.377976][T24067] chnl_net:caif_netlink_parms(): no params data found
[  521.423127][T24067] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.430578][T24067] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.437919][T24067] bridge_slave_0: entered allmulticast mode
[  521.446002][T24067] bridge_slave_0: entered promiscuous mode
[  521.454395][T24067] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.461854][T24067] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.469860][T24067] bridge_slave_1: entered allmulticast mode
[  521.476809][T24067] bridge_slave_1: entered promiscuous mode
[  521.500223][T24067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.511558][T24067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.535864][T24067] team0: Port device team_slave_0 added
[  521.543730][T24067] team0: Port device team_slave_1 added
[  521.564737][T24067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.572196][T24067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.599402][T24067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.612808][T24067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.619924][T24067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.646210][T24067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.677352][T24067] hsr_slave_0: entered promiscuous mode
[  521.684098][T24067] hsr_slave_1: entered promiscuous mode
[  521.691014][T24067] debugfs: 'hsr0' already exists in 'hsr'
[  521.696767][T24067] Cannot create hsr debugfs directory
[  522.213250][T24053] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  522.220746][T24053] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  522.228353][T24053] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  522.236262][T24053] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  522.244154][T24053] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  522.397370][T24076] chnl_net:caif_netlink_parms(): no params data found
[  522.444551][T24076] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.451940][T24076] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.460382][T24076] bridge_slave_0: entered allmulticast mode
[  522.467125][T24076] bridge_slave_0: entered promiscuous mode
[  522.474693][T24076] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.482746][T24076] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.490638][T24076] bridge_slave_1: entered allmulticast mode
[  522.497527][T24076] bridge_slave_1: entered promiscuous mode
[  522.519652][T24076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.531435][T24076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.555779][T24076] team0: Port device team_slave_0 added
[  522.563309][T24076] team0: Port device team_slave_1 added
[  522.584553][T24076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.591886][T24076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.620360][T24076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.632338][T24076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.639473][T24076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.665925][T24076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.699279][T24076] hsr_slave_0: entered promiscuous mode
[  522.705842][T24076] hsr_slave_1: entered promiscuous mode
[  522.712335][T24076] debugfs: 'hsr0' already exists in 'hsr'
[  522.718111][T24076] Cannot create hsr debugfs directory
[  523.309480][T24053] Bluetooth: hci13: command tx timeout
[  524.268884][T24053] Bluetooth: hci14: command tx timeout
[  525.389774][T24053] Bluetooth: hci13: command tx timeout
[  526.348648][T24053] Bluetooth: hci14: command tx timeout
[  527.469860][T24053] Bluetooth: hci13: command tx timeout
[  528.429399][T24053] Bluetooth: hci14: command tx timeout
[  529.548344][T24053] Bluetooth: hci13: command tx timeout
[  530.509558][T24053] Bluetooth: hci14: command tx timeout
[  536.908703][   T31] INFO: task syz.0.5246:23938 blocked for more than 143 seconds.
[  536.916498][   T31]       Not tainted syzkaller #0
[  536.921527][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  536.930368][   T31] task:syz.0.5246      state:D stack:25160 pid:23938 tgid:23937 ppid:16126  task_flags:0x400140 flags:0x00004004
[  536.942921][   T31] Call Trace:
[  536.946223][   T31]  <TASK>
[  536.950039][   T31]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  536.954672][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  536.960939][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  536.967731][   T31]  ? number+0x41/0xf60
[  536.978555][   T31]  ? __pfx___schedule+0x10/0x10
[  536.983459][   T31]  ? schedule+0x91/0x360
[  536.987737][   T31]  ? rcu_is_watching+0x15/0xb0
[  537.000155][   T31]  ? lock_release+0x4b/0x3e0
[  537.004823][   T31]  schedule+0x165/0x360
[  537.014722][   T31]  schedule_timeout+0x9a/0x270
[  537.021017][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  537.026438][   T31]  ? rcu_is_watching+0x15/0xb0
[  537.039198][   T31]  ? rcu_is_watching+0x15/0xb0
[  537.068539][   T31]  ? wait_for_completion+0x267/0x5d0
[  537.073887][   T31]  wait_for_completion+0x2bf/0x5d0
[  537.090040][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  537.095862][   T31]  ? flush_workqueue_prep_pwqs+0x47c/0x4f0
[  537.101780][   T31]  ? check_flush_dependency+0x88/0x400
[  537.107362][   T31]  __flush_workqueue+0x6f7/0x14b0
[  537.112838][   T31]  ? rcu_is_watching+0x15/0xb0
[  537.118116][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  537.124442][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  537.130763][   T31]  ? __wake_up_common_lock+0x190/0x1f0
[  537.136348][   T31]  nbd_disconnect_and_put+0x9e/0x2a0
[  537.141712][   T31]  nbd_genl_disconnect+0x485/0x570
[  537.146944][   T31]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  537.153274][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  537.159703][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  537.165343][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  537.171600][   T31]  ? stack_trace_save+0x9c/0xe0
[  537.176573][   T31]  genl_rcv_msg+0x60e/0x790
[  537.181471][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.186616][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  537.191808][   T31]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  537.197497][   T31]  ? __netlink_lookup+0xbd/0x810
[  537.202622][   T31]  ? rcu_is_watching+0x15/0xb0
[  537.207505][   T31]  netlink_rcv_skb+0x208/0x470
[  537.212989][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.218037][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  537.223385][   T31]  ? lock_release+0x4b/0x3e0
[  537.228085][   T31]  ? down_read+0x1ad/0x2e0
[  537.232969][   T31]  genl_rcv+0x28/0x40
[  537.236974][   T31]  netlink_unicast+0x82c/0x9e0
[  537.242238][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  537.247525][   T31]  ? netlink_sendmsg+0x642/0xb30
[  537.252705][   T31]  ? skb_put+0x11b/0x210
[  537.256962][   T31]  netlink_sendmsg+0x805/0xb30
[  537.261777][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.267094][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  537.272654][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  537.277965][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.283404][   T31]  __sock_sendmsg+0x21c/0x270
[  537.288116][   T31]  ____sys_sendmsg+0x505/0x830
[  537.293586][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  537.299419][   T31]  ? import_iovec+0x74/0xa0
[  537.303944][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  537.308951][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  537.314175][   T31]  ? futex_wake+0x4b2/0x560
[  537.318756][   T31]  ? __fget_files+0x2a/0x420
[  537.323551][   T31]  ? __fget_files+0x3a0/0x420
[  537.328673][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  537.333706][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  537.339395][   T31]  ? rcu_is_watching+0x15/0xb0
[  537.344553][   T31]  ? rcu_is_watching+0x15/0xb0
[  537.349392][   T31]  do_syscall_64+0xfa/0x3b0
[  537.353945][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.360848][   T31]  ? clear_bhb_loop+0x60/0xb0
[  537.365544][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.371542][   T31] RIP: 0033:0x7fbf5d18ebe9
[  537.375972][   T31] RSP: 002b:00007fbf5df43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  537.384525][   T31] RAX: ffffffffffffffda RBX: 00007fbf5d3b5fa0 RCX: 00007fbf5d18ebe9
[  537.393144][   T31] RDX: 00000000040040c0 RSI: 0000200000000340 RDI: 000000000000000b
[  537.401570][   T31] RBP: 00007fbf5d211e19 R08: 0000000000000000 R09: 0000000000000000
[  537.409783][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  537.417796][   T31] R13: 00007fbf5d3b6038 R14: 00007fbf5d3b5fa0 R15: 00007fff0c2911d8
[  537.426255][   T31]  </TASK>
[  537.429369][   T31] INFO: task syz.0.5246:23941 blocked for more than 143 seconds.
[  537.437104][   T31]       Not tainted syzkaller #0
[  537.442149][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  537.451926][   T31] task:syz.0.5246      state:D stack:28488 pid:23941 tgid:23937 ppid:16126  task_flags:0x400040 flags:0x00004004
[  537.464045][   T31] Call Trace:
[  537.467339][   T31]  <TASK>
[  537.470466][   T31]  __schedule+0x1798/0x4cc0
[  537.475007][   T31]  ? __pfx___schedule+0x10/0x10
[  537.480630][   T31]  ? schedule+0x91/0x360
[  537.485000][   T31]  ? rcu_is_watching+0x15/0xb0
[  537.489920][   T31]  ? lock_release+0x4b/0x3e0
[  537.494535][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  537.500501][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  537.506852][   T31]  schedule+0x165/0x360
[  537.511415][   T31]  schedule_preempt_disabled+0x13/0x30
[  537.517020][   T31]  __mutex_lock+0x7e6/0x1350
[  537.521705][   T31]  ? __mutex_lock+0x5bb/0x1350
[  537.526527][   T31]  ? genl_rcv_msg+0x10d/0x790
[  537.531287][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  537.536347][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  537.542071][   T31]  ? radix_tree_lookup+0x240/0x290
[  537.547389][   T31]  genl_rcv_msg+0x10d/0x790
[  537.553228][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.558766][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  537.563858][   T31]  ? __asan_memcpy+0x40/0x70
[  537.569422][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  537.574935][   T31]  netlink_rcv_skb+0x208/0x470
[  537.580082][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.585145][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  537.590624][   T31]  ? lock_release+0x4b/0x3e0
[  537.595238][   T31]  ? down_read+0x1ad/0x2e0
[  537.600460][   T31]  genl_rcv+0x28/0x40
[  537.604564][   T31]  netlink_unicast+0x82c/0x9e0
[  537.609638][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  537.615147][   T31]  ? netlink_sendmsg+0x642/0xb30
[  537.620350][   T31]  ? skb_put+0x11b/0x210
[  537.624618][   T31]  netlink_sendmsg+0x805/0xb30
[  537.631207][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.636541][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  537.641739][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  537.647145][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.652954][   T31]  __sock_sendmsg+0x21c/0x270
[  537.657828][   T31]  __sys_sendto+0x3bd/0x520
[  537.663216][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  537.668518][   T31]  ? fd_install+0x97/0x540
[  537.672972][   T31]  ? fd_install+0x30d/0x540
[  537.677478][   T31]  __x64_sys_sendto+0xde/0x100
[  537.682404][   T31]  do_syscall_64+0xfa/0x3b0
[  537.686950][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.693724][   T31]  ? clear_bhb_loop+0x60/0xb0
[  537.698479][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.704492][   T31] RIP: 0033:0x7fbf5d190a7c
[  537.709342][   T31] RSP: 002b:00007fbf5df20ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  537.717797][   T31] RAX: ffffffffffffffda RBX: 00007fbf5df20fc0 RCX: 00007fbf5d190a7c
[  537.726250][   T31] RDX: 0000000000000020 RSI: 00007fbf5df21010 RDI: 000000000000000f
[  537.734435][   T31] RBP: 0000000000000000 R08: 00007fbf5df20f14 R09: 000000000000000c
[  537.742845][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f
[  537.750985][   T31] R13: 00007fbf5df20f68 R14: 00007fbf5df21010 R15: 0000000000000000
[  537.759197][   T31]  </TASK>
[  537.762246][   T31] INFO: task syz.0.5246:23947 blocked for more than 144 seconds.
[  537.774787][   T31]       Not tainted syzkaller #0
[  537.780057][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  537.789073][   T31] task:syz.0.5246      state:D stack:27816 pid:23947 tgid:23937 ppid:16126  task_flags:0x400040 flags:0x00004004
[  537.801162][   T31] Call Trace:
[  537.804465][   T31]  <TASK>
[  537.807421][   T31]  __schedule+0x1798/0x4cc0
[  537.812075][   T31]  ? __pfx___schedule+0x10/0x10
[  537.816962][   T31]  ? schedule+0x91/0x360
[  537.821363][   T31]  ? rcu_is_watching+0x15/0xb0
[  537.826178][   T31]  ? lock_release+0x4b/0x3e0
[  537.830879][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  537.836898][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  537.843577][   T31]  schedule+0x165/0x360
[  537.847765][   T31]  schedule_preempt_disabled+0x13/0x30
[  537.853530][   T31]  __mutex_lock+0x7e6/0x1350
[  537.858253][   T31]  ? __mutex_lock+0x5bb/0x1350
[  537.863080][   T31]  ? genl_rcv_msg+0x10d/0x790
[  537.867786][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  537.873429][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  537.878635][   T31]  ? radix_tree_lookup+0x240/0x290
[  537.883787][   T31]  genl_rcv_msg+0x10d/0x790
[  537.888669][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.893807][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  537.899027][   T31]  ? __asan_memcpy+0x40/0x70
[  537.903678][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  537.909211][   T31]  netlink_rcv_skb+0x208/0x470
[  537.914027][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.919226][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  537.924632][   T31]  ? lock_release+0x4b/0x3e0
[  537.929423][   T31]  ? down_read+0x1ad/0x2e0
[  537.933878][   T31]  genl_rcv+0x28/0x40
[  537.937889][   T31]  netlink_unicast+0x82c/0x9e0
[  537.942769][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  537.948167][   T31]  ? netlink_sendmsg+0x642/0xb30
[  537.953249][   T31]  ? skb_put+0x11b/0x210
[  537.957522][   T31]  netlink_sendmsg+0x805/0xb30
[  537.962503][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.967926][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  537.973482][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  537.978942][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.984350][   T31]  __sock_sendmsg+0x21c/0x270
[  537.989313][   T31]  __sys_sendto+0x3bd/0x520
[  537.993852][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  537.999044][   T31]  ? count_memcg_event_mm+0x21/0x260
[  538.004367][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  538.009731][   T31]  __x64_sys_sendto+0xde/0x100
[  538.014529][   T31]  do_syscall_64+0xfa/0x3b0
[  538.019218][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.025392][   T31]  ? clear_bhb_loop+0x60/0xb0
[  538.030222][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.036132][   T31] RIP: 0033:0x7fbf5d190a7c
[  538.040642][   T31] RSP: 002b:00007fbf5b3f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  538.049164][   T31] RAX: ffffffffffffffda RBX: 00007fbf5b3f4fc0 RCX: 00007fbf5d190a7c
[  538.057168][   T31] RDX: 0000000000000020 RSI: 00007fbf5b3f5010 RDI: 0000000000000010
[  538.065218][   T31] RBP: 0000000000000000 R08: 00007fbf5b3f4f14 R09: 000000000000000c
[  538.075771][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010
[  538.083865][   T31] R13: 00007fbf5b3f4f68 R14: 00007fbf5b3f5010 R15: 0000000000000000
[  538.091899][   T31]  </TASK>
[  538.095023][   T31] INFO: task syz.5.5251:23954 blocked for more than 144 seconds.
[  538.102853][   T31]       Not tainted syzkaller #0
[  538.107797][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  538.116720][   T31] task:syz.5.5251      state:D stack:26056 pid:23954 tgid:23952 ppid:18348  task_flags:0x400140 flags:0x00004004
[  538.128797][   T31] Call Trace:
[  538.132074][   T31]  <TASK>
[  538.134994][   T31]  __schedule+0x1798/0x4cc0
[  538.139718][   T31]  ? __pfx___schedule+0x10/0x10
[  538.144642][   T31]  ? schedule+0x91/0x360
[  538.148978][   T31]  ? rcu_is_watching+0x15/0xb0
[  538.153795][   T31]  ? lock_release+0x4b/0x3e0
[  538.158482][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  538.164608][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  538.171050][   T31]  schedule+0x165/0x360
[  538.175243][   T31]  schedule_preempt_disabled+0x13/0x30
[  538.180908][   T31]  __mutex_lock+0x7e6/0x1350
[  538.185524][   T31]  ? __mutex_lock+0x5bb/0x1350
[  538.192691][   T31]  ? genl_rcv_msg+0x10d/0x790
[  538.197404][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  538.205273][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  538.210913][   T31]  ? radix_tree_lookup+0x240/0x290
[  538.216226][   T31]  genl_rcv_msg+0x10d/0x790
[  538.221607][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  538.226747][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  538.232262][   T31]  ? __asan_memcpy+0x40/0x70
[  538.236877][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  538.242593][   T31]  netlink_rcv_skb+0x208/0x470
[  538.247381][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  538.252577][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  538.258096][   T31]  ? lock_release+0x4b/0x3e0
[  538.263204][   T31]  ? down_read+0x1ad/0x2e0
[  538.267617][   T31]  genl_rcv+0x28/0x40
[  538.271716][   T31]  netlink_unicast+0x82c/0x9e0
[  538.276602][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  538.282017][   T31]  ? netlink_sendmsg+0x642/0xb30
[  538.286983][   T31]  ? skb_put+0x11b/0x210
[  538.291823][   T31]  netlink_sendmsg+0x805/0xb30
[  538.296608][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  538.301939][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  538.306893][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  538.313224][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  538.319171][   T31]  __sock_sendmsg+0x21c/0x270
[  538.323887][   T31]  __sys_sendto+0x3bd/0x520
[  538.328605][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  538.333672][   T31]  ? count_memcg_event_mm+0x21/0x260
[  538.339243][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  538.344589][   T31]  __x64_sys_sendto+0xde/0x100
[  538.350434][   T31]  do_syscall_64+0xfa/0x3b0
[  538.355040][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.361378][   T31]  ? clear_bhb_loop+0x60/0xb0
[  538.366075][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.372060][   T31] RIP: 0033:0x7f3a7d790a7c
[  538.376503][   T31] RSP: 002b:00007f3a7e5d2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  538.385443][   T31] RAX: ffffffffffffffda RBX: 00007f3a7e5d2fc0 RCX: 00007f3a7d790a7c
[  538.393470][   T31] RDX: 0000000000000020 RSI: 00007f3a7e5d3010 RDI: 0000000000000005
[  538.401632][   T31] RBP: 0000000000000000 R08: 00007f3a7e5d2f14 R09: 000000000000000c
[  538.410329][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  538.418466][   T31] R13: 00007f3a7e5d2f68 R14: 00007f3a7e5d3010 R15: 0000000000000000
[  538.426554][   T31]  </TASK>
[  538.429841][   T31] INFO: task syz.2.5250:23955 blocked for more than 144 seconds.
[  538.437656][   T31]       Not tainted syzkaller #0
[  538.443370][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  538.452437][   T31] task:syz.2.5250      state:D stack:26664 pid:23955 tgid:23953 ppid:15312  task_flags:0x400140 flags:0x00004004
[  538.464887][   T31] Call Trace:
[  538.468346][   T31]  <TASK>
[  538.471305][   T31]  __schedule+0x1798/0x4cc0
[  538.475989][   T31]  ? stack_trace_save+0x9c/0xe0
[  538.481096][   T31]  ? __pfx___schedule+0x10/0x10
[  538.485994][   T31]  ? schedule+0x91/0x360
[  538.490740][   T31]  ? rcu_is_watching+0x15/0xb0
[  538.495781][   T31]  ? lock_release+0x4b/0x3e0
[  538.500459][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  538.506467][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  538.513185][   T31]  schedule+0x165/0x360
[  538.517372][   T31]  schedule_preempt_disabled+0x13/0x30
[  538.522917][   T31]  __mutex_lock+0x7e6/0x1350
[  538.527532][   T31]  ? __mutex_lock+0x5bb/0x1350
[  538.533674][   T31]  ? genl_rcv_msg+0x10d/0x790
[  538.538657][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  538.543726][   T31]  ? stack_trace_save+0x9c/0xe0
[  538.548891][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  538.554283][   T31]  ? radix_tree_lookup+0x240/0x290
[  538.559466][   T31]  genl_rcv_msg+0x10d/0x790
[  538.563997][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  538.569328][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  538.574559][   T31]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  538.580860][   T31]  ? kmalloc_reserve+0xbd/0x290
[  538.585760][   T31]  ? __netlink_lookup+0xbd/0x810
[  538.591646][   T31]  ? rcu_is_watching+0x15/0xb0
[  538.596478][   T31]  netlink_rcv_skb+0x208/0x470
[  538.602412][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  538.607524][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  538.612988][   T31]  ? lock_release+0x4b/0x3e0
[  538.617651][   T31]  ? down_read+0x1ad/0x2e0
[  538.622197][   T31]  genl_rcv+0x28/0x40
[  538.626218][   T31]  netlink_unicast+0x82c/0x9e0
[  538.631423][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  538.636734][   T31]  ? netlink_sendmsg+0x642/0xb30
[  538.642016][   T31]  ? skb_put+0x11b/0x210
[  538.646298][   T31]  netlink_sendmsg+0x805/0xb30
[  538.651429][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  538.656848][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  538.662454][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  538.667946][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  538.673463][   T31]  __sock_sendmsg+0x21c/0x270
[  538.678221][   T31]  __sys_sendto+0x3bd/0x520
[  538.682760][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  538.687820][   T31]  ? count_memcg_event_mm+0x21/0x260
[  538.694042][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  538.699463][   T31]  __x64_sys_sendto+0xde/0x100
[  538.704350][   T31]  do_syscall_64+0xfa/0x3b0
[  538.709207][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.715319][   T31]  ? clear_bhb_loop+0x60/0xb0
[  538.720598][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.726606][   T31] RIP: 0033:0x7f2bee990a7c
[  538.731125][   T31] RSP: 002b:00007f2bef7d2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  538.739614][   T31] RAX: ffffffffffffffda RBX: 00007f2bef7d2fc0 RCX: 00007f2bee990a7c
[  538.747695][   T31] RDX: 000000000000001c RSI: 00007f2bef7d3010 RDI: 0000000000000006
[  538.756314][   T31] RBP: 0000000000000000 R08: 00007f2bef7d2f14 R09: 000000000000000c
[  538.764345][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  538.772391][   T31] R13: 00007f2bef7d2f68 R14: 00007f2bef7d3010 R15: 0000000000000000
[  538.780938][   T31]  </TASK>
[  538.783986][   T31] INFO: task syz.2.5250:23961 blocked for more than 145 seconds.
[  538.791775][   T31]       Not tainted syzkaller #0
[  538.796739][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  538.805821][   T31] task:syz.2.5250      state:D stack:27560 pid:23961 tgid:23953 ppid:15312  task_flags:0x400140 flags:0x00004004
[  538.818019][   T31] Call Trace:
[  538.821918][   T31]  <TASK>
[  538.824918][   T31]  __schedule+0x1798/0x4cc0
[  538.830635][   T31]  ? stack_trace_save+0x9c/0xe0
[  538.835734][   T31]  ? __pfx___schedule+0x10/0x10
[  538.841969][   T31]  ? schedule+0x91/0x360
[  538.846525][   T31]  ? rcu_is_watching+0x15/0xb0
[  538.851435][   T31]  ? lock_release+0x4b/0x3e0
[  538.856045][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  538.862029][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  538.868781][   T31]  schedule+0x165/0x360
[  538.872961][   T31]  schedule_preempt_disabled+0x13/0x30
[  538.878488][   T31]  __mutex_lock+0x7e6/0x1350
[  538.883109][   T31]  ? __mutex_lock+0x5bb/0x1350
[  538.887899][   T31]  ? genl_rcv_msg+0x10d/0x790
[  538.892738][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  538.897823][   T31]  ? stack_trace_save+0x9c/0xe0
[  538.903217][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  538.908949][   T31]  ? radix_tree_lookup+0x240/0x290
[  538.914091][   T31]  genl_rcv_msg+0x10d/0x790
[  538.918774][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  538.923818][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  538.929277][   T31]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  538.935373][   T31]  ? kmalloc_reserve+0xbd/0x290
[  538.940374][   T31]  ? __netlink_lookup+0xbd/0x810
[  538.945327][   T31]  ? rcu_is_watching+0x15/0xb0
[  538.950600][   T31]  netlink_rcv_skb+0x208/0x470
[  538.955388][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  538.960782][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  538.966074][   T31]  ? lock_release+0x4b/0x3e0
[  538.971050][   T31]  ? down_read+0x1ad/0x2e0
[  538.975493][   T31]  genl_rcv+0x28/0x40
[  538.979550][   T31]  netlink_unicast+0x82c/0x9e0
[  538.984339][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  538.990660][   T31]  ? netlink_sendmsg+0x642/0xb30
[  538.995638][   T31]  ? skb_put+0x11b/0x210
[  538.999991][   T31]  netlink_sendmsg+0x805/0xb30
[  539.004962][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  539.010485][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  539.015453][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  539.021223][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  539.026525][   T31]  __sock_sendmsg+0x21c/0x270
[  539.031380][   T31]  __sys_sendto+0x3bd/0x520
[  539.035908][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  539.041035][   T31]  ? count_memcg_event_mm+0x21/0x260
[  539.046348][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  539.052202][   T31]  __x64_sys_sendto+0xde/0x100
[  539.056995][   T31]  do_syscall_64+0xfa/0x3b0
[  539.061674][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.067788][   T31]  ? clear_bhb_loop+0x60/0xb0
[  539.072663][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.079097][   T31] RIP: 0033:0x7f2bee990a7c
[  539.083553][   T31] RSP: 002b:00007f2bef7b1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  539.092952][   T31] RAX: ffffffffffffffda RBX: 00007f2bef7b1fc0 RCX: 00007f2bee990a7c
[  539.101209][   T31] RDX: 0000000000000024 RSI: 00007f2bef7b2010 RDI: 0000000000000006
[  539.109977][   T31] RBP: 0000000000000000 R08: 00007f2bef7b1f14 R09: 000000000000000c
[  539.117972][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  539.126001][   T31] R13: 00007f2bef7b1f68 R14: 00007f2bef7b2010 R15: 0000000000000000
[  539.134191][   T31]  </TASK>
[  539.137241][   T31] INFO: lockdep is turned off.
[  539.142461][   T31] NMI backtrace for cpu 1
[  539.142474][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  539.142488][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  539.142495][   T31] Call Trace:
[  539.142500][   T31]  <TASK>
[  539.142505][   T31]  dump_stack_lvl+0x189/0x250
[  539.142523][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  539.142537][   T31]  ? __pfx__printk+0x10/0x10
[  539.142556][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  539.142571][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  539.142584][   T31]  ? __pfx__printk+0x10/0x10
[  539.142600][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  539.142619][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  539.142634][   T31]  watchdog+0xf93/0xfe0
[  539.142651][   T31]  ? watchdog+0x1de/0xfe0
[  539.142667][   T31]  kthread+0x70e/0x8a0
[  539.142682][   T31]  ? __pfx_watchdog+0x10/0x10
[  539.142696][   T31]  ? __pfx_kthread+0x10/0x10
[  539.142710][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  539.142725][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  539.142748][   T31]  ? __pfx_kthread+0x10/0x10
[  539.142762][   T31]  ret_from_fork+0x3f9/0x770
[  539.142774][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  539.142787][   T31]  ? __switch_to_asm+0x39/0x70
[  539.142802][   T31]  ? __switch_to_asm+0x33/0x70
[  539.142815][   T31]  ? __pfx_kthread+0x10/0x10
[  539.142829][   T31]  ret_from_fork_asm+0x1a/0x30
[  539.142848][   T31]  </TASK>
[  539.142853][   T31] Sending NMI from CPU 1 to CPUs 0:
[  539.292180][    C0] NMI backtrace for cpu 0
[  539.292198][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  539.292229][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  539.292239][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  539.292281][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 86 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  539.292295][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  539.292311][    C0] RAX: 041c669b8078f200 RBX: ffffffff819683b8 RCX: 041c669b8078f200
[  539.292324][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  539.292335][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  539.292346][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38530
[  539.292358][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  539.292369][    C0] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  539.292382][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  539.292393][    C0] CR2: 0000559748d68000 CR3: 000000000df36000 CR4: 00000000003526f0
[  539.292416][    C0] Call Trace:
[  539.292422][    C0]  <TASK>
[  539.292428][    C0]  default_idle+0x13/0x20
[  539.292443][    C0]  default_idle_call+0x74/0xb0
[  539.292459][    C0]  do_idle+0x1e8/0x510
[  539.292476][    C0]  ? __pfx_do_idle+0x10/0x10
[  539.292494][    C0]  ? do_idle+0x11/0x510
[  539.292509][    C0]  cpu_startup_entry+0x44/0x60
[  539.292523][    C0]  rest_init+0x2de/0x300
[  539.292540][    C0]  start_kernel+0x3a9/0x410
[  539.292560][    C0]  x86_64_start_reservations+0x24/0x30
[  539.292580][    C0]  x86_64_start_kernel+0x143/0x1c0
[  539.292601][    C0]  common_startup_64+0x13e/0x147
[  539.292627][    C0]  </TASK>
[  539.293217][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  539.480716][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  539.489835][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  539.499891][   T31] Call Trace:
[  539.503179][   T31]  <TASK>
[  539.506115][   T31]  dump_stack_lvl+0x99/0x250
[  539.510721][   T31]  ? __asan_memcpy+0x40/0x70
[  539.515316][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  539.520515][   T31]  ? __pfx__printk+0x10/0x10
[  539.525115][   T31]  vpanic+0x281/0x750
[  539.529115][   T31]  ? __pfx_vpanic+0x10/0x10
[  539.533621][   T31]  ? rcu_is_watching+0x15/0xb0
[  539.538392][   T31]  ? preempt_schedule+0xae/0xc0
[  539.543247][   T31]  ? preempt_schedule_common+0x83/0xd0
[  539.548715][   T31]  panic+0xb9/0xc0
[  539.552614][   T31]  ? __pfx_panic+0x10/0x10
[  539.557045][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  539.562514][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  539.568864][   T31]  watchdog+0xfd2/0xfe0
[  539.573033][   T31]  ? watchdog+0x1de/0xfe0
[  539.577371][   T31]  kthread+0x70e/0x8a0
[  539.581444][   T31]  ? __pfx_watchdog+0x10/0x10
[  539.586134][   T31]  ? __pfx_kthread+0x10/0x10
[  539.590727][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  539.596016][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  539.601220][   T31]  ? __pfx_kthread+0x10/0x10
[  539.605813][   T31]  ret_from_fork+0x3f9/0x770
[  539.610406][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  539.615527][   T31]  ? __switch_to_asm+0x39/0x70
[  539.620341][   T31]  ? __switch_to_asm+0x33/0x70
[  539.625128][   T31]  ? __pfx_kthread+0x10/0x10
[  539.629761][   T31]  ret_from_fork_asm+0x1a/0x30
[  539.634548][   T31]  </TASK>
[  539.637955][   T31] Kernel Offset: disabled
[  539.642357][   T31] Rebooting in 86400 seconds..