last executing test programs:

2m16.114527374s ago: executing program 4 (id=671):
r0 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f3cf55ce49007c00000000000000"], 0x94}}, 0xc00) (async)
connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a30000000000800410072786500140033"], 0x38}}, 0x0)

2m15.60115943s ago: executing program 4 (id=677):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000240)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', r3, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000000))
syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe8000000000000000000000000000bbff020001000000000102009078000005006050835900000000fc010000000000000000000000000000fc0200000000000000000000000000003a01000000000000070800000900"/130], 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2m15.188165404s ago: executing program 4 (id=683):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0)
r3 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x5, 0x47, [0xfffffffc, 0x80]}})

2m14.905705937s ago: executing program 4 (id=685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
socket$unix(0x1, 0x5, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0102d248ff0042061c1d98689a7508000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c820)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000440)=[{0x8, 0xf5, 0x2, 0x805}, {0xea5, 0x8, 0x9, 0xffffff00}, {0x4, 0x8, 0x1, 0x7}, {0x1ff, 0xb, 0x14, 0x10}, {0x7, 0x9, 0x12, 0x3}, {0x0, 0x7, 0x9, 0x2}]}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000280)={r7, 0x11, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000380)={r7, 0x11, 0x6, @local}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010029bd7000fddbdf250218c002", @ANYRES32=r9, @ANYBLOB="08000200ffffffff14000600bbff0048cb"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r10=>0x0})
socket(0x400000000010, 0x3, 0x0) (async)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xe7cf679e280954a4}, @TCA_TBF_PRATE64={0xc, 0x5, 0x781a6d09381b934a}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xe7cf679e280954a4}, @TCA_TBF_PRATE64={0xc, 0x5, 0x781a6d09381b934a}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x80, 0x3ff, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8000, 0x5, 0xfffffff7}})
r14 = socket$netlink(0x10, 0x3, 0x0)
r15 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r16, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r14) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000018c0)={&(0x7f0000002f00)=ANY=[@ANYBLOB="74150000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="14000200776c616e31000000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="080003000100000008000300010000001c00018005000300030000000800010065a8c5149736c8b0794d9cb26e25ea8f946bfffbdc0bffcb637ca42794ac6369f30bfbd81c60570c1edaf64e437568992af9acf8bb09432bec9be1fbda066b484ab2ca49824d43803e650abeab496571a04ee10fe2e4cc646cab83f49b", @ANYRES32=r16, @ANYBLOB="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"], 0x1574}, 0x1, 0x0, 0x0, 0x880}, 0x2)

2m14.619020055s ago: executing program 4 (id=691):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000900000002002a2a597009e6e243d281cb8f03d193260e9b", @ANYRES32=0x0, @ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0x3800c085}, 0x8810)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="9bc76f97249243105f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6gre0\x00', <r9=>r3, 0x29, 0xf, 0x0, 0x0, 0x8, @mcast2, @local, 0x8000, 0x25436ed26c042305, 0x1, 0x82}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)={0x1d0, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000004}, 0x200008c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000100)=@default_ap_ssid, 0x6, 0x0)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r10, &(0x7f0000000540)={&(0x7f0000000280)={0xa, 0x4e23, 0xfffffbff, @empty, 0xffff8428}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@dstopts={{0x18, 0x29, 0x37, {0x67}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}], 0x48}, 0x800)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r5, @ANYRES8=r10], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc0460d4)

2m14.388164641s ago: executing program 4 (id=695):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x15c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x28}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6a8be8df91956a0957fd7b448041f372bfd835781f72b638"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36adca9db21a4a4b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e007f0e82acb91ca6b7de885f3d393dbeb162566c84f94ca01dbff75acb0d726"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3cbf71ba9640a1376a8c1de85448094b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="91fec985f26a8cd494cbd5aca4e1ecefc716e6ea7e30e5b1b3ff750f608e5288"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2d}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3617485801b0923be99dc386792f93af"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="91e12e29a03dda4c96513483c5213b8e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ead0219e861cd8ecb73abc803f9198ff1eb997639032272706b6b38921d12ffa"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="20e13829d540821be8468041d5935d1e"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47bbc1701f1ab7edfa7de8a05a9cce2e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c90238b37b1ab87340e725c192526754"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x44881}, 0x20840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m13.385460896s ago: executing program 0 (id=715):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="29f91603435413234746cb472bd5a9f5000000", @ANYRES16=r3, @ANYBLOB="01002dbd700000000000010000000500040002000000050002000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
writev(r2, &(0x7f0000000180), 0x100000000000003c)
vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='j', 0x1}], 0x1, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
splice(r0, 0x0, r4, 0x0, 0x2000000002ffff, 0x0)

2m13.049203281s ago: executing program 0 (id=721):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x4}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7d5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={<r4=>0x0, 0xfffe, 0x6, [0x6, 0xf9c4, 0x2, 0x3, 0x2, 0x1]}, &(0x7f0000000300)=0x14)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={<r5=>r4, 0x8e}, &(0x7f0000000080)=0xffffffffffffff74)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x400, 0x101, 0x402, 0x5, 0x4, 0x9, 0xa4, 0x7fff, r5}, &(0x7f0000000100)=0x20)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
write(r6, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24)
listen(r1, 0x8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x3)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x0, 0x0, 0x1000}, {"c798a201"}}}}}}, 0x0)
listen(r1, 0x400)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r8=>0x0})
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x8d3e25577fefeb84, @rand_addr=0x64010100, 0x4e20, 0x2, 'wrr\x00', 0x4, 0x8, 0x5e}, 0x2c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x40}}, 0x48010)

2m12.917124997s ago: executing program 0 (id=724):
r0 = socket(0x23, 0x80805, 0x0)
listen(r0, 0x0)
accept4$tipc(r0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYBLOB="0003290900009daf529403e0064408ffda24fedbdf256d0000000c009900000000700c8fbf64"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4081)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r7], 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x80002, 0x10000)
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66f28fed09920d9e0a88fb", 0x15}], 0x1}, 0x8001)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES64=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x20000000010, 0x8})

2m12.830546878s ago: executing program 0 (id=725):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x8, &(0x7f0000000000)="6a0ea48a", 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, 0x0)

2m12.605362298s ago: executing program 0 (id=730):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x34, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "000300"}]}]}, 0x34}}, 0x0)

2m12.518609407s ago: executing program 0 (id=732):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x0, {0x5, 0x2}}, 0x14}}, 0x0)
sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8050)

1m59.079731967s ago: executing program 32 (id=695):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x15c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x28}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6a8be8df91956a0957fd7b448041f372bfd835781f72b638"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36adca9db21a4a4b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e007f0e82acb91ca6b7de885f3d393dbeb162566c84f94ca01dbff75acb0d726"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3cbf71ba9640a1376a8c1de85448094b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="91fec985f26a8cd494cbd5aca4e1ecefc716e6ea7e30e5b1b3ff750f608e5288"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2d}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3617485801b0923be99dc386792f93af"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="91e12e29a03dda4c96513483c5213b8e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ead0219e861cd8ecb73abc803f9198ff1eb997639032272706b6b38921d12ffa"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="20e13829d540821be8468041d5935d1e"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47bbc1701f1ab7edfa7de8a05a9cce2e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c90238b37b1ab87340e725c192526754"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x44881}, 0x20840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1m57.381732021s ago: executing program 33 (id=732):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x0, {0x5, 0x2}}, 0x14}}, 0x0)
sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8050)

1.866407147s ago: executing program 1 (id=2480):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r3=>0x0})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x3, 0x154, @vifc_lcl_ifindex=r3, @private=0xa010102}, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x9, @none, 0x101}, 0xe)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18)
r7 = accept4(r5, 0x0, 0x0, 0x800)
sendto$inet6(r7, &(0x7f0000000440)="df6d5f", 0x3, 0x10, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0)

1.54186362s ago: executing program 3 (id=2483):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket(0x2b, 0x800, 0x2)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x34}}, 0x0)

1.540818817s ago: executing program 6 (id=2485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x0)

1.540690382s ago: executing program 5 (id=2486):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c1000000541d9ec0000000000300000000002000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005001c00010000000500060001000000140003006272696467655f736c6176655f300000"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3205, @vifc_lcl_addr=@private=0xa010100, @broadcast}, 0x10)

1.357097688s ago: executing program 2 (id=2487):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x1092}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000480), 0x10)
sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x10, 0x2}]}, {0x0, [0x6f, 0x5f, 0x5f, 0x0, 0x30]}}, 0x0, 0x2f, 0x0, 0x1, 0xd6f}, 0x28)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000081c0)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0x4}, {0x2, 0xffff}, {0xfff3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40890)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex=r2, 0xa, 0x1, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x100, 0x401, 0xbf, {0x9, 0x0, 0x8e, 0xfffa, 0xd, 0x1}, {0x6, 0x2, 0x2, 0xfff, 0x100, 0x8}, 0x0, 0x8001, 0x3}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40c0}, 0x200008c0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa080007400000000078000680140005"], 0x10c}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)

1.354517925s ago: executing program 6 (id=2488):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x8000000b, 0x8})
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e27, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x44fd4b3f}, 0x1c)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000380)="580000001400add427323b472545b45702117fffffff81004e230e000001925aa80020007b00090080007f000001e809000000ff0000f03a871002000000fffffcffffffffffffe7ee000000000d1300000200000000", 0x56}, {&(0x7f0000000140)="2ff47d3e9362330896ec04882b567df2c2d97c85c765a86ee62a7882b8ccb6c8f5aa6aaf61ff438ded3d3bf521b8405ca2973d448fe87cf53c221edba28a3804c772c06fe67c358f87fc3a044b3823152f3dc59f6efd1a9e3c5278c7f4a9ee5eae9984a3f319197c891a04260f53751d4f1bcc9e5694103755150fd8254d1b31d4015526e3a1b1c608db4104d50b2c89de95d1680f5c19e9d40f", 0x9a}, {&(0x7f0000000280)="0cf623ced25a262f8cc3c80a396d14ad17b322aa37aeaafa43919028883b25c97a9178aec8497b83fae53b5908b153f9712d8e3bd2b904df995cb9e386f82028d6f15bcd9606f69d2976a9556cdb3f3e3c40e77aa1865cd0dea5b0c3d5507ee2e4a53530579de40f2df0986577ff444508687fe90d15b29f0158908cd6c4e4b7413bfc55d37f522a6b092165acf602b885a29834ab35618de32d60e8971a988ac4fbc78bf9ee13fee1f6775434d965d980f716e9bfe7c19a0d29ba50cd6cb39623d74442b18e2c1a4592cd4903e1", 0xce}], 0x3)

1.281156348s ago: executing program 5 (id=2489):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x4, 0x1, @remote}]}, 0x44}}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000d744f20e8d2e273b19fe5a510814e82b554912a8434491a50941a3f83917f0b0f898f542eafd7a83c615e2667a3171ae780b7d2b511b629f149dea73985f3351630e62a64978960a07fa1050f3270559acf70060c1e0be113eb45c6c436c7ce419783c4a7909398b2936842063463817152bec9c43bf1698a42627c3a20a8d2662df8a703876402aca93931a30d38a4c5032a1ad83f642499b1ef6bc18"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000f00000009000000", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24000080)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x9700)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={<r9=>0x0, 0x19a8, 0x8e37}, &(0x7f00000002c0)=0x8)
r10 = socket$inet6(0xa, 0x805, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r10, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={r9, @in6={{0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, '\x00', 0x27}, 0x4}}, 0x1ff, 0xee}, &(0x7f00000003c0)=0x90)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r12, 0x4004743c, 0x20000000)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf257000000f1ea591b497d27ab01db6746f61f5dc000a00060008021100"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0xfffffffc)
socket$netlink(0x10, 0x3, 0x8000000004)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @none}, &(0x7f0000000480)=0xe, 0x80000)

1.275850143s ago: executing program 6 (id=2490):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1}, 0x31c467c443849ffc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x10e, 0x5, 0x0, 0x0)
r2 = accept4$inet(r0, 0x0, &(0x7f0000000080), 0x800)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000100)=@ethtool_rx_ntuple={0x35, {0x5, @hdata="b40e5a5c7df52515be0147a6525df4eb1bf70b889a38eac8a832be9a6c345442bcdb8579aa859970c9d58e29c06924575150d21bf9be564d9cc203c2179f67fe343151bd5e42f907", @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101, 0x6, 0x7f}, 0xffff, 0x3ff, 0x2, 0x1}}})

1.065301258s ago: executing program 6 (id=2491):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000))
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) (async)

984.746607ms ago: executing program 3 (id=2492):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0) (async)
close(0x3) (async)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000a00), 0x4) (async)
recvmmsg$unix(r0, &(0x7f0000002b80)=[{{&(0x7f0000000180), 0x6e, 0xfffffffffffffffd, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f00000005c0)=""/190, 0xbe}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f0000000680)=""/68, 0x44}, {&(0x7f0000000700)=""/231, 0xe7}], 0x5, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/245, 0xf5}, {&(0x7f0000000c40)=""/37, 0x25}], 0x2, &(0x7f0000000cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/182, 0xb6}, {&(0x7f0000000ec0)=""/62, 0x3e}, {&(0x7f0000000f00)=""/242, 0xf2}], 0x3}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/95, 0x5f}, {&(0x7f0000002140)=""/216, 0xd8}], 0x4}}, {{&(0x7f0000002280)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002300)=""/236, 0xec}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000002400)}, {&(0x7f0000002440)=""/74, 0x4a}, {&(0x7f00000024c0)=""/207, 0xcf}, {&(0x7f00000025c0)=""/136, 0x88}, {&(0x7f0000002680)=""/157, 0x9d}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x8}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002840)=""/129, 0x81}, {&(0x7f0000002900)}, {&(0x7f0000002940)=""/185, 0xb9}, {&(0x7f0000002a00)=""/64, 0x40}, {&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000002a40)}, {&(0x7f0000007100)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x8, 0x2040, &(0x7f0000002d80)={0x0, 0x989680})
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)
recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000002a40), 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x400, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x10008, 0x291c9}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}]}, 0x34}}, 0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'w\x00'}, 0x8) (async)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
connect$rds(r0, &(0x7f0000002900)={0x2, 0x4e23, @multicast2}, 0x10) (async)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

943.409889ms ago: executing program 6 (id=2493):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="5ab8440583e4f8c6f5de412c2735a9bf37cbc83396c8aebf1a20798e9d0710698a4de6db", 0x24}], 0x1, &(0x7f0000000280)=[@iv={0x58, 0x117, 0x2, 0x40, "a4d5f706f0f524b64489802e2377ecf1a7de89b91e25667f4765fbedab14a2a6e99d671546ae3cb59923fd855b82f281d4d5825630bf7bbf76c94f7f5dc2c8ed"}, @iv={0x20, 0x117, 0x2, 0x7, "d2b68c9599d083"}], 0x78, 0x8001}], 0x1, 0x2000c004)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)

897.290296ms ago: executing program 1 (id=2494):
syz_emit_ethernet(0xce, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0xb03}, 0x14}}, 0x0)

857.181191ms ago: executing program 2 (id=2495):
r0 = socket$inet(0x2, 0x2, 0x6)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

802.085356ms ago: executing program 1 (id=2496):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040)=0x1ff, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040051)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, r2, 0xaba00000)
bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}, 0x40)

717.07225ms ago: executing program 6 (id=2497):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xd8, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0xd, 0xffe0}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008044}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}], 0x1}, 0x101}], 0x1, 0x60, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x5}, 0x10)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r2, 0x26}, 0x10)
recvmsg$can_bcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/137, 0x89}, {&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000500)=""/61, 0x3d}], 0x6, &(0x7f0000000640)=""/195, 0xc3}, 0x40000000)
syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002003800080000fe800000000000000000000000000000fe8000000000000000000000000000aa73000103000008"], 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0xa, [@fwd={0x8}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0x1, 0x2}, {0x10, 0x2}]}, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0xa, 0xd}, {0x200}, {0xf, 0x7}, {0xa, 0x3}, {0x0, 0x9}, {0x1, 0xe}]}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @fwd={0x7}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x2e, 0x0, 0x30, 0x1e]}}, &(0x7f00000008c0)=""/195, 0xa6, 0xc3, 0x1, 0x7}, 0x28)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x10, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="44bc484fc97864061a4bb9ea42dfc157b26cc9300f939dfd62d3c96605c471eaa267846798953b12c11181bf531fa8b2728a0eb5bf680114a21db3582922b8c1f51a13c00e39ac5af0b75e6ce2a6e8dad2d85e8cc6f15cfb6202bb3affc1719f45206fc4"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xe, r5}, 0x94)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000000)={'pim6reg1\x00', &(0x7f0000000300)=@ethtool_rxfh_indir={0x39}})

716.553215ms ago: executing program 5 (id=2498):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000100000000000000000002000000000000000000000008000400", @ANYRES32, @ANYBLOB="08001e004e"], 0x2c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x0, 0x20, [0xffffff00, 0xffffffff, 0xff000000, 0xff]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x38}], 0x1}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

715.736609ms ago: executing program 3 (id=2499):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a"], 0x7c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600843b00004c15028008"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

595.522302ms ago: executing program 1 (id=2500):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xa0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000001200))
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r5, 0x4}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r6}, 0x10)
r7 = socket$kcm(0xa, 0x1, 0x106)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r8}, 0x10)
sendmsg$kcm(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r4, 0xa20, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8045)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14}}, 0x64}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000040)={r10, 0xffffffffffffffff, 0x29}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x7, &(0x7f0000000440)=@raw=[@ldst={0x2, 0x2, 0x2, 0x7, 0x5, 0x30}, @call={0x85, 0x0, 0x0, 0x12}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0xe7, 0xc, 0x7, 0x6, 0x80}], &(0x7f0000000000)='GPL\x00'}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2, 0xd, 0x4, 0xfffffffc, 0x60, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @local, 0x700, 0x1, 0x5a, 0x4}})

584.046803ms ago: executing program 3 (id=2501):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @local}}}, 0x108)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xe, 0x7)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
shutdown(r3, 0x1)

476.953851ms ago: executing program 2 (id=2502):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x8090)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@generic="299a50bdc19377268b5707eafb"]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x2, &(0x7f00000003c0)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x9}], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x2, 0x20e, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)=[r4], &(0x7f0000000500)=[{0x4, 0x3, 0xf, 0x6}, {0x5, 0x1, 0x6, 0x3}, {0x3, 0x4, 0x2}, {0x3, 0x2, 0x5, 0x1}, {0x1, 0x1, 0xa, 0x6}, {0x2, 0x2, 0x3, 0x2}, {0x5, 0x1, 0xc, 0xc}, {0x4, 0x2, 0x8}], 0x10, 0x1ff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd21, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x80}}}}}}}}, 0x3e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)
sendmsg$802154_dgram(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x8000040)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)

430.213632ms ago: executing program 3 (id=2503):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000300000000000600000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa6602"], 0x2c}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r2=>r0, 0x2, 0x7, 0x100000001})
r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000140)={r3, 0x0, 0x8001, "7b9e8b40d5525ed7ece3"})

363.285997ms ago: executing program 1 (id=2504):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'pim6reg1\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r0=>0x0})
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x101, {{0xa, 0x4e23, 0xf68c, @local, 0x3}}, {{0xa, 0x4e23, 0x1000, @empty, 0xd}}}, 0x108)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000080)=ANY=[@ANYBLOB="18110200", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000010000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000410000008500000006000000185a000009000000000000000000000018270000", @ANYRES32, @ANYBLOB="0000000080000000180000000200000000000000001000001d87300001000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xbc, &(0x7f0000000340)=""/188, 0x41000, 0x6c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0xfffffffd, 0xf, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x2, 0x1, 0x4, 0x8}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map, 0xe, 0x0, 0x10, &(0x7f0000000540)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, 0x0, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000001ac0)={0x1f, 0x0, 0x1}, 0x6)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x800448d7, 0x0)
write$bt_hci(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f00000008c0)='\x03\x00\f\xfd\xd2\xb3b\x00\x00\x00\x00\x00\x00}\x82B\b\x00\x00\x00\x00\x00\x00\x00\x00>\xd0\x0f\x8e', <r7=>0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r4, r1, 0x6, 0x28, 0x0, @void, @void, @void, @value=r7, r2}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0f000000040000000800000022000000000000005e2163c60c9cab2c5a4a07eacc82f22c3eb99a17b4cacefdb0ffab0ce408004b6aa1b707db4a94cd2df450a9e2f48ad20f16276fc952059e1e801729ac80659b83d94e202de5d81b44cc05000000a7ed3e74c3e214dc929a5970da6a7a34990f7a33961faf0ed045913d0e66ca87b5e7218b60ffb14d7c4bd61fb9a035001eb92493ce40dc63c2d36179ab80855d5794d1ef3fb5fe099a7eba3ae04195a7b927cc7271a59b39221b12fad439f37667423ea2e51e360b7daed1cd9a28db83afa366927eec1379749d01b583e7ca586c316b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000170000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x9, 0x5, 0xc, 0x6, 0x440, r5, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x9662}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00'}, 0x18)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000)
r10 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'ip_vti0\x00', r0, 0x700, 0x8000, 0x0, 0xffffffff, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x64, 0x0, 0xfa, 0x4, 0x0, @empty, @multicast1, {[@rr={0x7, 0x23, 0x6, [@rand_addr=0x64010101, @local, @empty, @multicast1, @multicast2, @multicast2, @multicast2, @private=0xa010101]}]}}}}})

265.366617ms ago: executing program 3 (id=2505):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x401}}}]}, 0x3c}}, 0x4080)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000000)=0x9, 0x4)

264.986644ms ago: executing program 5 (id=2506):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000011)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)

258.863549ms ago: executing program 2 (id=2507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, &(0x7f00000007c0))
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000000000), 0x4)
listen(r2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc40000010000104000000007e59e2424375b378", @ANYBLOB="549547077bdf6372e1354f5d762944069d287e7e4f482e943a64883d7101f8905b2d8bdbe6027906", @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0)

184.177837ms ago: executing program 1 (id=2508):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYRES16], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket(0x1d, 0x2, 0x6)
syz_emit_ethernet(0xae, &(0x7f0000000840)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{0x2, 0xa, "4efd30cc4fd5778d2eddbb50dcd9592d82d0f4824d00292bde7a4c3cbb9c8830e44d8bbf5cff62cb5652b1896b224ca8865ab267c2ec2c252e258b84b7dd7c3df974dd93dc0c51e30171cab29c79"}]}}}}}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0xa4f4547ead50e9e3}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18)
bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r3, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000300)='bridge_slave_1\x00')
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xfff5, 0x4, 0x2, 0x8, 0x33}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=ANY=[@ANYBLOB="4400000600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000100677265001800028006000300010000000400120006000e0000000000"], 0x44}}, 0x0)

93.313331ms ago: executing program 2 (id=2509):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000140007800800114000000000050015000c0000000900020073797a31000000000500050002000000050004000000000005000100070000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r2 = socket(0x22, 0x2, 0x1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
close(0x3)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={<r4=>0x0, 0xa, 0x6, 0xff}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x7, 0x20}, &(0x7f0000000100)=0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3, 0xb, 0x6, 0x8}, 0xe)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000140)=0x100102, 0x4)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000300)={r6, 0x4, 0xffff, 0x5, 0x5, 0x1041, 0x3, 0x4, {r6, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x9, 0x12, 0x8, 0x206}}, &(0x7f00000001c0)=0xb0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000000008116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000a3ecd5bb2ea7de75c298394d16ad64ee4f29067ec47cb3284e8d8d8f6802c2b41becb863cc60310a8701f0a07df49024228aecaa5b44bbdb776a782da346b8870837d499d26a503961ce7ece4fad37c44510cb19dfe199d5e7015548954"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

92.370034ms ago: executing program 5 (id=2510):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080))
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c003d02935899202ebb00"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067656e65766500000c000280060005004e220000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

38.597823ms ago: executing program 2 (id=2511):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x4) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32)
r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) (async)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x48010) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)=ANY=[@ANYBLOB="680300002400010026bd7000fedbdf25550300800c0001000200000000004000650264808d002180d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d38880800fa00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="040030800000000c005600120600000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x368}], 0x1}, 0x0) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3, <r4=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r4, 0x4) (async)
socket$inet(0x2, 0xa, 0x100)

0s ago: executing program 5 (id=2512):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000500181100080000000000000000", @ANYBLOB="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", @ANYBLOB="0000000000000000b70000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ff1e00b802000008000000182200"/132, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYRES8=r8, @ANYRESDEC=r3], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$inet(0x2, 0x1, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r9)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000240)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r10, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)

kernel console output (not intermixed with test programs):

ority 0
[  144.026771][ T8891] bridge0: port 3(syz_tun) entered blocking state
[  144.033664][ T8891] bridge0: port 3(syz_tun) entered disabled state
[  144.041257][ T8891] syz_tun: entered allmulticast mode
[  144.048578][ T8891] syz_tun: entered promiscuous mode
[  144.055755][ T8891] netlink: 'syz.2.868': attribute type 10 has an invalid length.
[  144.058766][ T8888] syzkaller0: entered promiscuous mode
[  144.069548][ T8888] syzkaller0: entered allmulticast mode
[  144.082455][ T8891] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  144.101697][ T8888] tipc: Resetting bearer <eth:syzkaller0>
[  144.110506][ T8888] syzkaller1: entered promiscuous mode
[  144.116709][ T8888] syzkaller1: entered allmulticast mode
[  144.132579][ T8887] tipc: Resetting bearer <eth:syzkaller0>
[  144.166765][ T8887] tipc: Disabling bearer <eth:syzkaller0>
[  144.771034][   T10] IPVS: starting estimator thread 0...
[  144.865583][ T8929] IPVS: using max 29 ests per chain, 69600 per kthread
[  145.237781][ T8949] netlink: 'syz.1.883': attribute type 1 has an invalid length.
[  145.245671][ T8949] netlink: 224 bytes leftover after parsing attributes in process `syz.1.883'.
[  146.731709][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'.
[  146.797504][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.807040][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.815227][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.826671][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.840836][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  146.864854][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.873374][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.883230][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.896081][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.908768][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  147.038481][ T9007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.900'.
[  147.230686][ T9014] netlink: 312 bytes leftover after parsing attributes in process `syz.1.902'.
[  147.589726][ T8996] chnl_net:caif_netlink_parms(): no params data found
[  147.605815][ T9027] syzkaller0: entered promiscuous mode
[  147.611391][ T9027] syzkaller0: entered allmulticast mode
[  147.896600][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'.
[  147.913049][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.924895][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'.
[  147.942252][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.987922][ T8996] bridge_slave_0: entered allmulticast mode
[  148.017013][ T8996] bridge_slave_0: entered promiscuous mode
[  148.040545][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.079043][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.108486][ T8996] bridge_slave_1: entered allmulticast mode
[  148.128377][ T8996] bridge_slave_1: entered promiscuous mode
[  148.218499][ T8996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.249340][ T8996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.368263][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  148.378226][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  148.387764][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  148.396714][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  148.409788][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  148.506425][ T9070] vlan0: entered promiscuous mode
[  148.511649][ T9070] bridge0: entered promiscuous mode
[  148.522295][ T8996] team0: Port device team_slave_0 added
[  148.531369][ T8996] team0: Port device team_slave_1 added
[  148.766255][ T9082] netlink: 140 bytes leftover after parsing attributes in process `syz.1.919'.
[  148.771784][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.784121][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  148.816812][ T8996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.879436][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.899218][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  148.944835][ T8996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.956085][ T5856] Bluetooth: hci5: command tx timeout
[  149.048182][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.917'.
[  149.126521][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'.
[  149.148027][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'.
[  149.192408][ T8996] hsr_slave_0: entered promiscuous mode
[  149.199923][ T8996] hsr_slave_1: entered promiscuous mode
[  149.210872][ T8996] debugfs: 'hsr0' already exists in 'hsr'
[  149.221995][ T8996] Cannot create hsr debugfs directory
[  149.383279][ T9110] bond2: entered promiscuous mode
[  149.388487][ T9110] bond2: entered allmulticast mode
[  149.395066][ T9110] 8021q: adding VLAN 0 to HW filter on device bond2
[  149.426650][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'.
[  149.489775][ T9120] netlink: 312 bytes leftover after parsing attributes in process `syz.2.926'.
[  150.270260][ T9164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.937'.
[  150.283401][ T9061] chnl_net:caif_netlink_parms(): no params data found
[  150.475173][ T5856] Bluetooth: hci6: command tx timeout
[  150.605891][ T8996] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  150.630561][ T8996] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  150.733237][ T8996] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  150.760549][ T8996] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  150.768610][ T9190] netlink: 48 bytes leftover after parsing attributes in process `syz.1.941'.
[  150.835285][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.843922][ T9061] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.856733][ T9061] bridge_slave_0: entered allmulticast mode
[  150.864365][ T9061] bridge_slave_0: entered promiscuous mode
[  150.873708][ T9061] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.882217][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.889589][ T9061] bridge_slave_1: entered allmulticast mode
[  150.897155][ T9061] bridge_slave_1: entered promiscuous mode
[  150.920107][ T9204] vxlan0: entered promiscuous mode
[  150.925481][ T9204] vxlan0: entered allmulticast mode
[  151.019583][ T9061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.034106][ T9061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.044104][ T5856] Bluetooth: hci5: command tx timeout
[  151.050679][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.080820][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.154177][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.163792][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.181051][ T9061] team0: Port device team_slave_0 added
[  151.213198][ T9061] team0: Port device team_slave_1 added
[  151.303141][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.311137][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.343578][ T9061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.367459][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.393792][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.460062][ T9061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.642714][ T9061] hsr_slave_0: entered promiscuous mode
[  151.652910][ T9061] hsr_slave_1: entered promiscuous mode
[  151.660270][ T9061] debugfs: 'hsr0' already exists in 'hsr'
[  151.666571][ T9061] Cannot create hsr debugfs directory
[  151.739821][ T9229] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  151.851526][ T9241] netlink: 'syz.2.954': attribute type 4 has an invalid length.
[  151.879316][ T9241] netlink: 152 bytes leftover after parsing attributes in process `syz.2.954'.
[  151.903800][ T9241] `: renamed from bond0
[  152.009206][ T9245] netlink: 14 bytes leftover after parsing attributes in process `syz.2.956'.
[  152.065025][ T9247] netlink: 'syz.3.957': attribute type 1 has an invalid length.
[  152.137428][ T9245] ` (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.147947][ T9245] ` (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.157886][ T9245] ` (unregistering): (slave bridge0): Releasing backup interface
[  152.168067][ T9245] ` (unregistering): Released all slaves
[  152.221189][ T9247] 8021q: adding VLAN 0 to HW filter on device bond2
[  152.310538][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.428788][ T9256] geneve3: entered promiscuous mode
[  152.434033][ T9256] geneve3: entered allmulticast mode
[  152.459719][ T8996] 8021q: adding VLAN 0 to HW filter on device team0
[  152.473595][   T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  152.485581][   T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  152.527956][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.535239][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.547428][   T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  152.557025][ T5856] Bluetooth: hci6: command tx timeout
[  152.562623][   T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  152.618141][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.625405][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.647984][ T9061] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  152.716298][ T9061] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  152.719603][ T9267] netlink: 'syz.3.962': attribute type 4 has an invalid length.
[  152.743505][ T9267] FAULT_INJECTION: forcing a failure.
[  152.743505][ T9267] name failslab, interval 1, probability 0, space 0, times 0
[  152.775169][ T9061] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  152.792187][ T9267] CPU: 0 UID: 0 PID: 9267 Comm: syz.3.962 Not tainted syzkaller #0 PREEMPT(full) 
[  152.792213][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  152.792225][ T9267] Call Trace:
[  152.792232][ T9267]  <TASK>
[  152.792240][ T9267]  dump_stack_lvl+0x189/0x250
[  152.792267][ T9267]  ? __pfx____ratelimit+0x10/0x10
[  152.792297][ T9267]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.792320][ T9267]  ? __pfx__printk+0x10/0x10
[  152.792355][ T9267]  ? __pfx___might_resched+0x10/0x10
[  152.792374][ T9267]  ? fs_reclaim_acquire+0x7d/0x100
[  152.792405][ T9267]  should_fail_ex+0x414/0x560
[  152.792437][ T9267]  should_failslab+0xa8/0x100
[  152.792464][ T9267]  __kmalloc_cache_noprof+0x70/0x3d0
[  152.792487][ T9267]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  152.792521][ T9267]  tcp_sendmsg_fastopen+0x1de/0x5e0
[  152.792556][ T9267]  tcp_sendmsg_locked+0x4cc9/0x5540
[  152.792589][ T9267]  ? tcp_sendmsg_locked+0x381/0x5540
[  152.792647][ T9267]  ? __lock_acquire+0xab9/0xd20
[  152.792679][ T9267]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  152.792704][ T9267]  ? __local_bh_enable_ip+0x12d/0x1c0
[  152.792727][ T9267]  ? __local_bh_enable_ip+0x12d/0x1c0
[  152.792757][ T9267]  tcp_sendmsg+0x2f/0x50
[  152.792783][ T9267]  __sock_sendmsg+0xe5/0x270
[  152.792809][ T9267]  __sys_sendto+0x3bd/0x520
[  152.792831][ T9267]  ? __pfx___sys_sendto+0x10/0x10
[  152.792848][ T9267]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  152.792889][ T9267]  ? __fget_files+0x3a0/0x420
[  152.792926][ T9267]  ? ksys_write+0x22a/0x250
[  152.792951][ T9267]  ? __pfx_ksys_write+0x10/0x10
[  152.792970][ T9267]  ? rcu_is_watching+0x15/0xb0
[  152.792997][ T9267]  __x64_sys_sendto+0xde/0x100
[  152.793021][ T9267]  do_syscall_64+0xfa/0x3b0
[  152.793042][ T9267]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.793070][ T9267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.793089][ T9267]  ? clear_bhb_loop+0x60/0xb0
[  152.793111][ T9267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.793128][ T9267] RIP: 0033:0x7f1727d8eec9
[  152.793146][ T9267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.793162][ T9267] RSP: 002b:00007f1728bf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  152.793182][ T9267] RAX: ffffffffffffffda RBX: 00007f1727fe5fa0 RCX: 00007f1727d8eec9
[  152.793196][ T9267] RDX: ffffffffffffff64 RSI: 0000000000000000 RDI: 0000000000000003
[  152.793208][ T9267] RBP: 00007f1728bf5090 R08: 0000000000000000 R09: 0000000000000000
[  152.793219][ T9267] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  152.793229][ T9267] R13: 00007f1727fe6038 R14: 00007f1727fe5fa0 R15: 00007ffd47b19b18
[  152.793257][ T9267]  </TASK>
[  153.056871][ T9061] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  153.133602][ T8996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  153.151142][ T5856] Bluetooth: hci5: command tx timeout
[  153.159470][ T8996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.581142][ T9061] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.762615][ T9061] 8021q: adding VLAN 0 to HW filter on device team0
[  153.782652][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.852567][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.860492][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.910419][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.917618][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.208982][ T9317] netlink: 'syz.1.973': attribute type 4 has an invalid length.
[  154.254274][ T9317] FAULT_INJECTION: forcing a failure.
[  154.254274][ T9317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.274914][ T9317] CPU: 0 UID: 0 PID: 9317 Comm: syz.1.973 Not tainted syzkaller #0 PREEMPT(full) 
[  154.274941][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  154.274953][ T9317] Call Trace:
[  154.274960][ T9317]  <TASK>
[  154.274968][ T9317]  dump_stack_lvl+0x189/0x250
[  154.274997][ T9317]  ? __pfx____ratelimit+0x10/0x10
[  154.275035][ T9317]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.275057][ T9317]  ? __pfx__printk+0x10/0x10
[  154.275099][ T9317]  should_fail_ex+0x414/0x560
[  154.275131][ T9317]  _copy_to_user+0x31/0xb0
[  154.275156][ T9317]  simple_read_from_buffer+0xe1/0x170
[  154.275186][ T9317]  proc_fail_nth_read+0x1b3/0x220
[  154.275208][ T9317]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  154.275230][ T9317]  ? rw_verify_area+0x2a6/0x4d0
[  154.275251][ T9317]  ? __lock_acquire+0xab9/0xd20
[  154.275267][ T9317]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  154.275289][ T9317]  vfs_read+0x1fd/0xa30
[  154.275310][ T9317]  ? fdget_pos+0x247/0x320
[  154.275341][ T9317]  ? __pfx___mutex_lock+0x10/0x10
[  154.275360][ T9317]  ? __pfx_vfs_read+0x10/0x10
[  154.275383][ T9317]  ? __fget_files+0x2a/0x420
[  154.275412][ T9317]  ? __fget_files+0x3a0/0x420
[  154.275436][ T9317]  ? __fget_files+0x2a/0x420
[  154.275471][ T9317]  ksys_read+0x145/0x250
[  154.275496][ T9317]  ? __pfx_ksys_read+0x10/0x10
[  154.275515][ T9317]  ? rcu_is_watching+0x15/0xb0
[  154.275543][ T9317]  ? do_syscall_64+0xbe/0x3b0
[  154.275567][ T9317]  do_syscall_64+0xfa/0x3b0
[  154.275585][ T9317]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.275613][ T9317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.275632][ T9317]  ? clear_bhb_loop+0x60/0xb0
[  154.275655][ T9317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.275674][ T9317] RIP: 0033:0x7f7a0678d8dc
[  154.275691][ T9317] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  154.275707][ T9317] RSP: 002b:00007f7a07586030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  154.275727][ T9317] RAX: ffffffffffffffda RBX: 00007f7a069e5fa0 RCX: 00007f7a0678d8dc
[  154.275741][ T9317] RDX: 000000000000000f RSI: 00007f7a075860a0 RDI: 0000000000000005
[  154.275753][ T9317] RBP: 00007f7a07586090 R08: 0000000000000000 R09: 0000000000000000
[  154.275763][ T9317] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  154.275775][ T9317] R13: 00007f7a069e6038 R14: 00007f7a069e5fa0 R15: 00007ffe529478f8
[  154.275808][ T9317]  </TASK>
[  154.620259][ T9323] vxcan1: tx address claim with dlc 0
[  154.632305][ T9324] __nla_validate_parse: 3 callbacks suppressed
[  154.632320][ T9324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.974'.
[  154.648209][ T5856] Bluetooth: hci6: command tx timeout
[  154.691641][ T8996] veth0_vlan: entered promiscuous mode
[  154.706375][ T8996] veth1_vlan: entered promiscuous mode
[  154.806952][ T9327] netlink: 'syz.2.975': attribute type 4 has an invalid length.
[  154.820003][ T8996] veth0_macvtap: entered promiscuous mode
[  154.850040][ T8996] veth1_macvtap: entered promiscuous mode
[  154.886146][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.942438][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.950895][ T9333] bond0: entered allmulticast mode
[  154.959205][ T9333] bond_slave_0: entered allmulticast mode
[  154.967250][ T9333] bond_slave_1: entered allmulticast mode
[  154.984159][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.037032][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.085841][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.139991][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.142163][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'.
[  155.170233][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.189914][ T9342] netlink: 'syz.1.980': attribute type 10 has an invalid length.
[  155.198951][ T5856] Bluetooth: hci5: command tx timeout
[  155.217703][ T9342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.980'.
[  155.242785][ T9342] batadv0: entered promiscuous mode
[  155.261966][ T9342] batadv0: entered allmulticast mode
[  155.288268][ T9342] bridge0: port 3(batadv0) entered blocking state
[  155.305075][ T9342] bridge0: port 3(batadv0) entered disabled state
[  155.316774][ T9342] bridge0: port 3(batadv0) entered blocking state
[  155.323403][ T9342] bridge0: port 3(batadv0) entered forwarding state
[  155.377012][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.979'.
[  155.426291][ T9346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.442519][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.458401][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.468317][ T9346] syzkaller0: entered promiscuous mode
[  155.477304][ T9346] syzkaller0: entered allmulticast mode
[  155.507721][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.517518][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.518120][ T9346] tipc: Resetting bearer <eth:syzkaller0>
[  155.548174][ T9346] tipc: Resetting bearer <eth:syzkaller0>
[  155.579885][ T9346] tipc: Disabling bearer <eth:syzkaller0>
[  155.674055][ T9061] veth0_vlan: entered promiscuous mode
[  155.688203][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  155.697937][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  155.717005][ T9061] veth1_vlan: entered promiscuous mode
[  155.803172][ T9364] gre0: entered promiscuous mode
[  155.820883][ T9061] veth0_macvtap: entered promiscuous mode
[  155.857974][ T9061] veth1_macvtap: entered promiscuous mode
[  155.921087][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.953288][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.980188][   T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.036903][   T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.078996][   T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.090357][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'.
[  156.104254][ T9374] netlink: 224 bytes leftover after parsing attributes in process `syz.3.987'.
[  156.131072][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'.
[  156.168396][   T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.265948][ T9379] sock: sock_set_timeout: `syz.1.988' (pid 9379) tries to set negative timeout
[  156.364388][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.388595][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.464331][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.479182][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.517373][   T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0
[  156.540411][   T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0
[  156.562378][ T9389] netlink: 'syz.5.992': attribute type 7 has an invalid length.
[  156.580725][ T9389] netlink: 140 bytes leftover after parsing attributes in process `syz.5.992'.
[  156.592152][   T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0
[  156.606377][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0
[  156.715330][ T5856] Bluetooth: hci6: command tx timeout
[  157.228160][ T9430] netlink: 'syz.1.1001': attribute type 1 has an invalid length.
[  157.239787][ T9430] netlink: 'syz.1.1001': attribute type 2 has an invalid length.
[  157.260544][ T9430] netlink: 'syz.1.1001': attribute type 1 has an invalid length.
[  157.283853][ T9430] netlink: 'syz.1.1001': attribute type 2 has an invalid length.
[  157.295592][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1001'.
[  157.493590][ T9445] netlink: 'syz.5.1005': attribute type 29 has an invalid length.
[  157.516954][ T9445] netlink: 5448 bytes leftover after parsing attributes in process `syz.5.1005'.
[  157.537748][ T9445] netlink: 'syz.5.1005': attribute type 10 has an invalid length.
[  157.581758][ T9445] 8021q: adding VLAN 0 to HW filter on device team0
[  157.618981][ T9445] bond0: (slave team0): Enslaving as an active interface with an up link
[  157.833518][ T9466] ip6gre0: Master is either lo or non-ether device
[  158.864078][ T9518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.931477][ T9523] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20000
[  158.958435][ T9518] netlink: 'syz.5.1025': attribute type 1 has an invalid length.
[  159.072090][ T9529] raw_sendmsg: syz.3.1029 forgot to set AF_INET. Fix it!
[  159.329710][ T9539] syz.2.1033: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  159.365369][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.2.1033 Not tainted syzkaller #0 PREEMPT(full) 
[  159.365396][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  159.365409][ T9539] Call Trace:
[  159.365416][ T9539]  <TASK>
[  159.365425][ T9539]  dump_stack_lvl+0x189/0x250
[  159.365458][ T9539]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.365492][ T9539]  ? __pfx__printk+0x10/0x10
[  159.365522][ T9539]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  159.365549][ T9539]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  159.365577][ T9539]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  159.365610][ T9539]  warn_alloc+0x214/0x310
[  159.365639][ T9539]  ? stack_depot_save_flags+0x40/0x860
[  159.365671][ T9539]  ? __pfx_warn_alloc+0x10/0x10
[  159.365699][ T9539]  ? kasan_save_track+0x4f/0x80
[  159.365722][ T9539]  ? xskq_create+0x56/0x170
[  159.365750][ T9539]  ? xsk_init_queue+0xb0/0x110
[  159.365776][ T9539]  ? xsk_setsockopt+0x4dc/0x8d0
[  159.365801][ T9539]  ? do_sock_setsockopt+0x17c/0x1b0
[  159.365822][ T9539]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  159.365842][ T9539]  ? do_syscall_64+0xfa/0x3b0
[  159.365860][ T9539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.365889][ T9539]  __vmalloc_node_range_noprof+0x125/0x12f0
[  159.365949][ T9539]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  159.365983][ T9539]  ? __kasan_kmalloc+0x93/0xb0
[  159.366010][ T9539]  vmalloc_user_noprof+0xad/0xf0
[  159.366036][ T9539]  ? xskq_create+0xbf/0x170
[  159.366066][ T9539]  xskq_create+0xbf/0x170
[  159.366099][ T9539]  xsk_init_queue+0xb0/0x110
[  159.366131][ T9539]  xsk_setsockopt+0x4dc/0x8d0
[  159.366163][ T9539]  ? __pfx_xsk_setsockopt+0x10/0x10
[  159.366191][ T9539]  ? __pfx_aa_sk_perm+0x10/0x10
[  159.366220][ T9539]  ? aa_sock_opt_perm+0xff/0x1b0
[  159.366252][ T9539]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  159.366281][ T9539]  ? __pfx_xsk_setsockopt+0x10/0x10
[  159.366311][ T9539]  do_sock_setsockopt+0x17c/0x1b0
[  159.366339][ T9539]  __x64_sys_setsockopt+0x13f/0x1b0
[  159.366367][ T9539]  do_syscall_64+0xfa/0x3b0
[  159.366386][ T9539]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.366415][ T9539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.366438][ T9539]  ? clear_bhb_loop+0x60/0xb0
[  159.366468][ T9539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.366488][ T9539] RIP: 0033:0x7feedb78eec9
[  159.366505][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.366521][ T9539] RSP: 002b:00007feedc6b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  159.366542][ T9539] RAX: ffffffffffffffda RBX: 00007feedb9e5fa0 RCX: 00007feedb78eec9
[  159.366557][ T9539] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  159.366569][ T9539] RBP: 00007feedb811f91 R08: 0000000000000004 R09: 0000000000000000
[  159.366581][ T9539] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.366594][ T9539] R13: 00007feedb9e6038 R14: 00007feedb9e5fa0 R15: 00007ffc7912fa58
[  159.366627][ T9539]  </TASK>
[  159.366772][ T9539] Mem-Info:
[  159.678309][ T9539] active_anon:6511 inactive_anon:0 isolated_anon:0
[  159.678309][ T9539]  active_file:3275 inactive_file:39920 isolated_file:0
[  159.678309][ T9539]  unevictable:768 dirty:124 writeback:0
[  159.678309][ T9539]  slab_reclaimable:10991 slab_unreclaimable:103445
[  159.678309][ T9539]  mapped:39707 shmem:1374 pagetables:1364
[  159.678309][ T9539]  sec_pagetables:0 bounce:0
[  159.678309][ T9539]  kernel_misc_reclaimable:0
[  159.678309][ T9539]  free:1302755 free_pcp:15256 free_cma:0
[  159.725377][ T9539] Node 0 active_anon:26044kB inactive_anon:0kB active_file:13100kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158828kB dirty:488kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13244kB pagetables:5332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  159.872119][ T9544] __nla_validate_parse: 4 callbacks suppressed
[  159.872139][ T9544] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1035'.
[  159.925502][ T9539] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  159.956706][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'.
[  159.982998][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'.
[  160.001760][ T9539] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  160.054733][ T9539] lowmem_reserve[]: 0 2506 2506 2506 2506
[  160.071855][ T9539] Node 0 DMA32 free:1309924kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25944kB inactive_anon:0kB active_file:13100kB inactive_file:159160kB unevictable:4388kB writepending:484kB present:3129332kB managed:2566256kB mlocked:2868kB bounce:0kB free_pcp:39912kB local_pcp:20528kB free_cma:0kB
[  160.117287][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1039'.
[  160.131288][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1039'.
[  160.148112][ T9539] lowmem_reserve[]: 0 0 0 0 0
[  160.153337][ T9539] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  160.165990][ T9562] netlink: 'syz.1.1038': attribute type 1 has an invalid length.
[  160.196107][ T9539] lowmem_reserve[]: 0 0 0 0 0
[  160.200886][ T9539] Node 1 Normal free:3885796kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19040kB local_pcp:10880kB free_cma:0kB
[  160.237332][ T9539] lowmem_reserve[]: 0 0 0 0 0
[  160.242090][ T9539] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  160.258727][ T9539] Node 0 DMA32: 1*4kB (E) 2*8kB (UE) 25*16kB (UME) 2*32kB (ME) 4*64kB (UM) 12*128kB (UME) 2*256kB (UM) 9*512kB (UME) 10*1024kB (UME) 5*2048kB (UME) 313*4096kB (M) = 1309924kB
[  160.277247][ T9539] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  160.295739][ T9539] Node 1 Normal: 199*4kB (UM) 49*8kB (UME) 58*16kB (UME) 83*32kB (UME) 23*64kB (UME) 5*128kB (UME) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3885796kB
[  160.331344][ T9562] 8021q: adding VLAN 0 to HW filter on device bond3
[  160.360364][ T9539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  160.439094][ T9539] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.467044][ T9539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  160.524753][ T9539] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.546033][ T9539] 44543 total pagecache pages
[  160.550780][ T9539] 0 pages in swap cache
[  160.563850][ T9539] Free swap  = 124996kB
[  160.572160][ T9539] Total swap = 124996kB
[  160.578451][ T9539] 2097051 pages RAM
[  160.582280][ T9539] 0 pages HighMem/MovableOnly
[  160.590635][ T9539] 423781 pages reserved
[  160.602715][ T9539] 0 pages cma reserved
[  160.949407][ T9593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.976301][ T9610] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1052'.
[  161.001024][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1051'.
[  161.001024][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1051'.
[  161.524173][ T9636] netlink: 'syz.1.1061': attribute type 1 has an invalid length.
[  161.595085][    C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  161.617735][ T9645] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1062'.
[  161.624715][ T9643] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1062'.
[  161.732844][ T9644] 8021q: adding VLAN 0 to HW filter on device bond5
[  161.744230][ T9644] bond4: (slave bond5): making interface the new active one
[  161.752813][ T9644] bond4: (slave bond5): Enslaving as an active interface with an up link
[  161.798618][ T9645] bond1 (unregistering): Released all slaves
[  161.978179][ T9643] bond1 (unregistering): Released all slaves
[  162.142496][ T9673] syzkaller0: entered promiscuous mode
[  162.150229][ T9673] syzkaller0: entered allmulticast mode
[  162.162867][ T9673] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  162.346158][ T9676] sctp: [Deprecated]: syz.1.1070 (pid 9676) Use of int in max_burst socket option deprecated.
[  162.346158][ T9676] Use struct sctp_assoc_value instead
[  162.619394][ T9700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.370908][ T9738] syzkaller1: entered promiscuous mode
[  163.377619][ T9738] syzkaller1: entered allmulticast mode
[  163.387741][ T9738] netlink: 'syz.2.1089': attribute type 4 has an invalid length.
[  163.494371][ T9743] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  164.286536][ T9784] veth0_macvtap: left promiscuous mode
[  164.421205][ T9801] team0: Cannot enslave team device to itself
[  164.518140][ T9796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.794344][ T9825] netlink: 'syz.5.1116': attribute type 1 has an invalid length.
[  164.820896][ T9796] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.863257][ T9822] erspan0: entered promiscuous mode
[  164.869188][ T9822] erspan0: entered allmulticast mode
[  164.899505][ T9825] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  166.633894][ T9873] __nla_validate_parse: 14 callbacks suppressed
[  166.633913][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1127'.
[  166.770282][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'.
[  166.794850][ T9882] netlink: 'syz.3.1129': attribute type 3 has an invalid length.
[  166.808495][ T9873] hsr_slave_0 (unregistering): left promiscuous mode
[  167.111493][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'.
[  167.121420][ T9901] netlink: 'syz.3.1136': attribute type 20 has an invalid length.
[  167.192287][ T9904] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1135'.
[  167.203343][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'.
[  167.215875][ T9901] netlink: 'syz.3.1136': attribute type 20 has an invalid length.
[  167.302125][ T9910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1138'.
[  167.312251][ T9910] unsupported nlmsg_type 40
[  167.530261][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'.
[  167.593954][ T9927] xt_l2tp: invalid flags combination: 0
[  167.886776][ T9938] erspan0: entered allmulticast mode
[  168.076445][ T9951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1148'.
[  168.574106][ T9981] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  168.615098][ T9981] bond1 (unregistering): Released all slaves
[  169.011540][T10010] netlink: 'syz.1.1163': attribute type 4 has an invalid length.
[  169.203592][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1169'.
[  169.215260][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1169'.
[  169.326723][T10031] netlink: 'syz.3.1171': attribute type 3 has an invalid length.
[  169.437165][T10039] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.157860][T10056] vlan2: entered allmulticast mode
[  170.287643][T10084] pimreg3: entered allmulticast mode
[  170.709431][T10111] netlink: 'syz.3.1192': attribute type 4 has an invalid length.
[  170.934745][T10122] openvswitch: netlink: Geneve opt len 6 is not a multiple of 4.
[  171.036823][ T5856] Bluetooth: hci6: command tx timeout
[  171.090638][T10129] netlink: 'syz.6.1197': attribute type 1 has an invalid length.
[  171.237753][T10133] bond1 (unregistering): Released all slaves
[  171.342778][T10135] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  171.392887][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  171.413369][T10129] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.508673][T10148] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  171.542297][   T60] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  171.777853][T10161] netlink: 'syz.2.1205': attribute type 2 has an invalid length.
[  171.947850][T10167] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  172.102599][T10178] syz_tun: entered allmulticast mode
[  172.356388][T10190] netlink: 'syz.5.1213': attribute type 4 has an invalid length.
[  172.523861][T10205] __nla_validate_parse: 8 callbacks suppressed
[  172.523878][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'.
[  172.565328][T10205] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1217'.
[  172.596726][T10176] syz_tun: left allmulticast mode
[  172.603115][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'.
[  173.413208][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1226'.
[  173.695725][T10251] bond6 (unregistering): Released all slaves
[  173.885651][T10257] erspan0: left promiscuous mode
[  173.915241][T10257] erspan0: left allmulticast mode
[  174.048631][T10284] netlink: 'syz.1.1232': attribute type 10 has an invalid length.
[  174.182849][T10289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1233'.
[  174.213268][T10257] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.221056][T10257] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.571437][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.629931][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.825229][T10271] netlink: 'syz.3.1231': attribute type 12 has an invalid length.
[  174.845998][T10271] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1231'.
[  174.865191][T10284] bridge0: port 3(batadv0) entered disabled state
[  174.873186][T10284] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.881837][T10284] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.050094][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1234'.
[  175.054953][T10284] bridge0: port 3(batadv0) entered blocking state
[  175.065737][T10284] bridge0: port 3(batadv0) entered forwarding state
[  175.072635][T10284] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.079903][T10284] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.087434][T10284] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.094659][T10284] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.111532][T10284] bridge0: entered allmulticast mode
[  175.120368][T10284] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  175.125632][T10303] netlink: 'syz.6.1234': attribute type 1 has an invalid length.
[  175.145261][T10303] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1234'.
[  175.161724][T10303] netlink: 'syz.6.1234': attribute type 1 has an invalid length.
[  175.161899][   T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.206143][   T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.272824][   T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.307309][   T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.400155][T10320] netlink: 'syz.2.1241': attribute type 1 has an invalid length.
[  175.552643][T10325] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  175.566002][T10325] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  175.577185][T10325] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  175.592445][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'.
[  175.640802][T10329] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1242'.
[  175.734659][T10342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.789985][T10346] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20000
[  175.891811][T10342] tipc: Disabling bearer <eth:syzkaller0>
[  176.603299][ T5931] IPVS: starting estimator thread 0...
[  176.724598][T10395] IPVS: using max 27 ests per chain, 64800 per kthread
[  177.227539][T10417] veth1_to_bond: entered allmulticast mode
[  177.466438][T10417] veth1_to_bond (unregistering): left allmulticast mode
[  177.657490][T10447] __nla_validate_parse: 3 callbacks suppressed
[  177.657508][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'.
[  178.092334][T10469] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1276'.
[  178.684927][T10495] syzkaller1: entered promiscuous mode
[  178.690444][T10495] syzkaller1: entered allmulticast mode
[  178.937332][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'.
[  179.071576][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'.
[  179.106682][T10527] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1290'.
[  179.124422][T10523] netlink: 'syz.1.1289': attribute type 29 has an invalid length.
[  179.148589][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1288'.
[  179.172660][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'.
[  179.245182][T10525] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  179.260858][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1288'.
[  179.296909][T10525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1289'.
[  179.370455][T10546] 8021q: adding VLAN 0 to HW filter on device bond3
[  179.546900][T10550] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1295'.
[  179.741153][T10564] netlink: 'syz.5.1298': attribute type 2 has an invalid length.
[  179.819918][T10571] netlink: 'syz.3.1294': attribute type 1 has an invalid length.
[  179.923923][T10572] bond2: option lp_interval: invalid value (0)
[  179.932236][T10572] bond2: option lp_interval: allowed values 1 - 2147483647
[  179.949649][T10572] bond2 (unregistering): Released all slaves
[  180.465836][T10607] netlink: 'syz.2.1310': attribute type 1 has an invalid length.
[  180.488122][T10603] team_slave_0: mtu greater than device maximum
[  180.518175][T10603] netlink: 'syz.6.1309': attribute type 1 has an invalid length.
[  180.554437][T10603] netlink: 'syz.6.1309': attribute type 2 has an invalid length.
[  180.648826][T10607] bond4: entered promiscuous mode
[  180.659903][T10607] 8021q: adding VLAN 0 to HW filter on device bond4
[  180.709579][T10627] IPv4: Oversized IP packet from 127.202.26.0
[  180.830554][T10633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.949908][T10637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.958161][T10637] syzkaller0: entered promiscuous mode
[  180.963736][T10637] syzkaller0: entered allmulticast mode
[  181.071494][T10637] tipc: Resetting bearer <eth:syzkaller0>
[  181.096554][T10636] tipc: Resetting bearer <eth:syzkaller0>
[  181.257081][T10636] tipc: Disabling bearer <eth:syzkaller0>
[  181.343532][T10665] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  181.345767][T10652] syzkaller1: entered promiscuous mode
[  181.407653][T10652] syzkaller1: entered allmulticast mode
[  181.794176][T10676] xfrm1: entered promiscuous mode
[  181.799676][T10676] xfrm1: entered allmulticast mode
[  182.704791][T10735] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  182.717676][T10739] __nla_validate_parse: 9 callbacks suppressed
[  182.717694][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'.
[  183.031920][T10754] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1349'.
[  183.048554][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1350'.
[  183.116349][T10762] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1351'.
[  183.243349][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'.
[  183.491441][T10786] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1358'.
[  183.522934][T10785] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1358'.
[  183.721982][T10789] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1359'.
[  183.735447][T10789] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1359'.
[  183.755028][T10789] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1359'.
[  183.833550][T10806] netlink: 'syz.3.1364': attribute type 4 has an invalid length.
[  183.982300][T10817] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20002
[  184.067533][T10822] team0: No ports can be present during mode change
[  184.884973][T10852] tipc: Started in network mode
[  184.889992][T10852] tipc: Node identity f20ba2df92d1, cluster identity 4711
[  184.916334][T10852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.924051][T10853] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.963569][T10852] syzkaller0: entered promiscuous mode
[  184.988720][T10852] syzkaller0: entered allmulticast mode
[  185.110852][T10853] tipc: Resetting bearer <eth:syzkaller0>
[  185.145323][T10851] tipc: Resetting bearer <eth:syzkaller0>
[  185.264072][T10851] tipc: Disabling bearer <eth:syzkaller0>
[  185.534169][T10884] bond5: Unable to set down delay as MII monitoring is disabled
[  185.546559][T10884] bond5 (unregistering): Released all slaves
[  185.712276][T10898] ieee802154 phy0 wpan0: encryption failed: -22
[  185.904336][T10911] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  185.962904][T10916] netlink: 'syz.2.1397': attribute type 1 has an invalid length.
[  185.981534][T10916] netlink: 'syz.2.1397': attribute type 2 has an invalid length.
[  186.003106][T10916] netlink: 'syz.2.1397': attribute type 1 has an invalid length.
[  186.090457][T10920] veth0_to_team: entered promiscuous mode
[  186.124845][T10920] veth0_to_team: left promiscuous mode
[  186.184036][T10919] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  186.368219][T10940] netlink: 'syz.5.1406': attribute type 10 has an invalid length.
[  186.379917][T10943] netlink: 'syz.1.1408': attribute type 39 has an invalid length.
[  186.387335][T10940] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.395599][T10940] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.448029][T10940] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.455324][T10940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.462863][T10940] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.470148][T10940] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.499148][T10940] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  186.580938][T10950] bond3: entered promiscuous mode
[  186.586673][T10950] bond3: entered allmulticast mode
[  186.592370][T10950] 8021q: adding VLAN 0 to HW filter on device bond3
[  187.034259][T10986] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  187.331262][T11004] netlink: 'syz.2.1419': attribute type 10 has an invalid length.
[  187.607927][T11016] netlink: 'syz.3.1425': attribute type 1 has an invalid length.
[  187.622881][T11016] netlink: 'syz.3.1425': attribute type 2 has an invalid length.
[  187.651188][T11014] netlink: 'syz.3.1425': attribute type 1 has an invalid length.
[  187.678892][T11014] netlink: 'syz.3.1425': attribute type 2 has an invalid length.
[  187.823189][T11024] __nla_validate_parse: 15 callbacks suppressed
[  187.823207][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'.
[  187.983465][T11024] syz_tun (unregistering): left allmulticast mode
[  188.016123][T11024] syz_tun (unregistering): left promiscuous mode
[  188.037296][T11024] bridge0: port 3(syz_tun) entered disabled state
[  188.492454][T11059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1437'.
[  188.568870][T11056] 8021q: adding VLAN 0 to HW filter on device bond4
[  188.769012][T11073] bridge_slave_0: left promiscuous mode
[  188.807871][T11073] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.832485][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'.
[  188.872378][T11073] bridge_slave_1: left allmulticast mode
[  188.883143][T11073] bridge_slave_1: left promiscuous mode
[  188.890591][T11073] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.916245][T11073] team0: Port device team_slave_0 removed
[  188.938407][T11073] team0: Port device team_slave_1 removed
[  188.951348][T11073] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.962331][T11073] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.971879][T11073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  188.994029][T11082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1441'.
[  189.560707][T11118] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1453'.
[  189.585551][T11122] lo: entered allmulticast mode
[  189.614390][T11118] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  189.801333][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1461'.
[  189.830838][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1460'.
[  190.809234][T11200] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1481'.
[  191.165602][T11211] syzkaller0: entered promiscuous mode
[  191.206418][T11211] syzkaller0: entered allmulticast mode
[  191.242678][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1486'.
[  191.243195][T11220] bridge4: the hash_elasticity option has been deprecated and is always 16
[  191.470203][T11233] validate_nla: 2 callbacks suppressed
[  191.470221][T11233] netlink: 'syz.6.1489': attribute type 21 has an invalid length.
[  191.489129][T11233] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1489'.
[  191.988364][T11254] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  193.612106][T11286] __nla_validate_parse: 2 callbacks suppressed
[  193.612125][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1501'.
[  193.775227][T11293] netlink: 'syz.5.1505': attribute type 11 has an invalid length.
[  193.805874][T11293] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1505'.
[  193.822771][T11300] netlink: 'syz.1.1506': attribute type 17 has an invalid length.
[  193.833331][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'.
[  193.845160][T11300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1506'.
[  193.901053][T11300] erspan0: entered promiscuous mode
[  193.933938][T11300] gretap0: entered promiscuous mode
[  194.150178][T11316] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1511'.
[  194.208918][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1513'.
[  194.242124][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.317147][T11327] vxcan1 speed is unknown, defaulting to 1000
[  194.330203][T11327] vxcan1 speed is unknown, defaulting to 1000
[  194.379432][T11327] vxcan1 speed is unknown, defaulting to 1000
[  194.424108][T11337] veth1_macvtap: left promiscuous mode
[  194.487292][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1515'.
[  194.521920][T11337] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1515'.
[  194.540255][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1515'.
[  194.614920][T11327] infiniband syz2: set down
[  194.619713][T11327] infiniband syz2: added vxcan1
[  194.636794][   T55] vxcan1 speed is unknown, defaulting to 1000
[  194.695369][T11345] tipc: Started in network mode
[  194.711059][T11345] tipc: Node identity 8657323bdf71, cluster identity 4711
[  194.738026][T11345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.760729][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1519'.
[  194.773161][T11346] syzkaller0: entered promiscuous mode
[  194.783211][T11346] syzkaller0: entered allmulticast mode
[  194.799449][T11327] RDS/IB: syz2: added
[  194.817698][T11327] vxcan1 speed is unknown, defaulting to 1000
[  194.828266][T11345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.861734][T11345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.896117][T11345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.951746][T11345] tipc: Resetting bearer <eth:syzkaller0>
[  195.086977][T11345] tipc: Disabling bearer <eth:syzkaller0>
[  195.392061][T11327] vxcan1 speed is unknown, defaulting to 1000
[  195.783730][T11327] vxcan1 speed is unknown, defaulting to 1000
[  195.953136][T11397] netlink: 'syz.5.1533': attribute type 12 has an invalid length.
[  196.278403][T11327] vxcan1 speed is unknown, defaulting to 1000
[  197.039459][T11327] vxcan1 speed is unknown, defaulting to 1000
[  197.619352][T11479] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  197.759138][T11479] team1: entered promiscuous mode
[  197.764212][T11479] team1: entered allmulticast mode
[  197.770422][T11485] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  197.835126][T11485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.864639][T11327] vxcan1 speed is unknown, defaulting to 1000
[  198.210415][T11327] vxcan1 speed is unknown, defaulting to 1000
[  198.635430][T11513] sctp: [Deprecated]: syz.1.1562 (pid 11513) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.635430][T11513] Use struct sctp_sack_info instead
[  198.663404][T11515] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  198.663687][T11513] __nla_validate_parse: 12 callbacks suppressed
[  198.663701][T11513] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1562'.
[  198.713928][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'.
[  198.724406][T11513] bridge0: port 3(batadv0) entered disabled state
[  198.738138][T11513] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.755476][T11513] bridge_slave_0: left allmulticast mode
[  198.761159][T11513] bridge_slave_0: left promiscuous mode
[  198.800509][T11513] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.859601][T11513] bond0: (slave bridge0): Releasing backup interface
[  198.876168][T11513] bridge0 (unregistering): left allmulticast mode
[  198.962957][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1565'.
[  199.021156][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'.
[  199.253802][T11546] netlink: 'syz.3.1572': attribute type 1 has an invalid length.
[  199.274030][T11546] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1572'.
[  199.286268][T11546] block nbd1: not configured, cannot reconfigure
[  199.294885][T11551] netlink: 'syz.2.1573': attribute type 2 has an invalid length.
[  199.302637][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'.
[  199.326550][ T5928] IPVS: starting estimator thread 0...
[  199.441221][T11555] IPVS: using max 28 ests per chain, 67200 per kthread
[  199.603332][T11570] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1577'.
[  199.677075][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'.
[  199.715504][T11575] netlink: 'syz.1.1578': attribute type 10 has an invalid length.
[  200.403506][T11606] netlink: 'syz.6.1590': attribute type 1 has an invalid length.
[  200.457001][T11606] 8021q: adding VLAN 0 to HW filter on device bond3
[  200.497692][T11616] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1594'.
[  200.508637][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1594'.
[  200.525132][T11613] bond3: (slave geneve2): making interface the new active one
[  200.535618][T11613] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  200.572052][ T3598] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.593126][ T3598] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.611951][ T3598] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.615029][T11618] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  200.640256][ T3598] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.117183][T11653] netlink: 'syz.2.1606': attribute type 1 has an invalid length.
[  201.149767][T11653] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  201.156922][T11658] netlink: 'syz.6.1603': attribute type 1 has an invalid length.
[  201.328434][T11658] 8021q: adding VLAN 0 to HW filter on device bond4
[  201.396553][T11678] netlink: 'syz.3.1608': attribute type 1 has an invalid length.
[  201.428068][T11668] veth3: entered promiscuous mode
[  201.452489][T11669] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.460627][T11669] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.485088][T11658] bond4: entered allmulticast mode
[  201.956290][T11706] IPVS: set_ctl: invalid protocol: 0 172.30.1.7:20001
[  202.296547][T11724] bond5: (slave bond_slave_1): Device is not our slave
[  202.303641][T11724] bond5: option active_slave: invalid value (bond_slave_1)
[  202.319782][T11724] bond5 (unregistering): Released all slaves
[  202.345628][T11721] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  202.353033][T11721] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  202.635215][ T5856] Bluetooth: hci0: command tx timeout
[  203.007015][T11770] netlink: 'syz.3.1630': attribute type 10 has an invalid length.
[  203.034952][T11770] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.045367][T11770] bridge_slave_1: left allmulticast mode
[  203.051038][T11770] bridge_slave_1: left promiscuous mode
[  203.064083][T11770] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.098589][T11770] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  203.626805][T11785] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  203.649436][T11785] bond5 (unregistering): Released all slaves
[  203.972094][T11811] __nla_validate_parse: 13 callbacks suppressed
[  203.972114][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1644'.
[  204.082973][T11820] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1647'.
[  204.272677][T11835] geneve2: entered promiscuous mode
[  204.278279][T11835] geneve2: entered allmulticast mode
[  204.288479][T11832] netlink: 18 bytes leftover after parsing attributes in process `syz.5.1651'.
[  204.318670][T11836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.340392][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  204.349966][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  204.360190][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  204.651989][T11852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.657435][T11851] vlan0: entered promiscuous mode
[  204.679348][T11851] vlan0: entered allmulticast mode
[  204.695591][T11851] veth0_vlan: entered allmulticast mode
[  205.010121][T11863] netlink: 'syz.5.1661': attribute type 1 has an invalid length.
[  205.251434][T11872] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1664'.
[  205.268351][T11872] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1664'.
[  205.340661][T11878] netlink: 'syz.2.1667': attribute type 1 has an invalid length.
[  205.373809][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1667'.
[  205.439067][T11885] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1668'.
[  205.470903][T11879] netlink: 'syz.2.1667': attribute type 1 has an invalid length.
[  205.480314][T11886] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  205.495042][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1667'.
[  206.042847][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'.
[  206.043272][T11919] netlink: 'syz.5.1678': attribute type 1 has an invalid length.
[  206.058012][T11836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.071112][T11919] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1678'.
[  206.083868][T11920] netlink: 'syz.5.1678': attribute type 1 has an invalid length.
[  206.096689][T11836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  206.138683][T11923] netlink: 'syz.3.1677': attribute type 1 has an invalid length.
[  206.258393][T11836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.298609][T11836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  206.513375][T11931] 
: renamed from bridge_slave_0
[  206.591554][T11836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.622728][T11836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  206.952079][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  206.962131][   T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  207.008607][   T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  207.020027][   T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  207.051489][   T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  207.060331][   T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  207.101237][   T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  207.127011][   T60] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  208.048104][T11993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  208.197146][T11998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.658208][T12009] netem: change failed
[  208.783866][T12014] bond0: (slave bridge0): Releasing backup interface
[  208.804358][T12014] bond0: (slave team0): Releasing backup interface
[  208.860393][T12014] bridge_slave_0: left allmulticast mode
[  208.884952][T12014] bridge_slave_0: left promiscuous mode
[  208.893831][T12014] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.906349][T12014] bridge_slave_1: left allmulticast mode
[  208.912067][T12014] bridge_slave_1: left promiscuous mode
[  208.918616][T12014] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.931200][T12014] bond0: (slave bond_slave_0): Releasing backup interface
[  208.953954][T12014] bond0: (slave bond_slave_1): Releasing backup interface
[  208.984457][T12014] team0: Port device team_slave_0 removed
[  209.001026][T12014] team0: Port device team_slave_1 removed
[  209.010824][T12014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.019928][T12014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.031219][T12014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.039666][T12014] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.053215][T12014] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  209.071954][T12028] __nla_validate_parse: 7 callbacks suppressed
[  209.071976][T12028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1703'.
[  209.097704][T12009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.131092][T12021] syzkaller0: entered promiscuous mode
[  209.149680][T12021] syzkaller0: entered allmulticast mode
[  209.158321][T12024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1703'.
[  209.193379][T12026] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  209.228144][T12009] tipc: Resetting bearer <eth:syzkaller0>
[  209.237239][T12033] netlink: 'syz.5.1705': attribute type 10 has an invalid length.
[  209.246216][T12008] tipc: Resetting bearer <eth:syzkaller0>
[  209.264166][T12008] tipc: Disabling bearer <eth:syzkaller0>
[  209.291921][T12033] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  209.342193][T12037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.350815][T12037] syzkaller0: entered promiscuous mode
[  209.358941][T12037] syzkaller0: entered allmulticast mode
[  209.373283][T12037] ieee802154 phy0 wpan0: encryption failed: -22
[  209.449717][T12037] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  209.648568][T12049] netlink: 'syz.1.1710': attribute type 11 has an invalid length.
[  209.657305][T12049] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1710'.
[  209.668999][T12035] tipc: Resetting bearer <eth:syzkaller0>
[  209.673906][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'.
[  209.715596][T12035] tipc: Disabling bearer <eth:syzkaller0>
[  210.211225][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1718'.
[  211.354728][T12139] xt_bpf: check failed: parse error
[  211.381568][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1729'.
[  211.430871][T12138] netlink: 'syz.5.1729': attribute type 20 has an invalid length.
[  211.503049][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1729'.
[  211.526024][   T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  211.563292][T12138] netlink: 'syz.5.1729': attribute type 20 has an invalid length.
[  211.563431][   T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  211.607514][   T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  211.618190][   T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.699864][T12159] veth0_to_bridge: entered promiscuous mode
[  211.707003][T12158] veth0_to_bridge: left promiscuous mode
[  211.844832][T12170] netlink: 'syz.6.1740': attribute type 1 has an invalid length.
[  211.886633][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1738'.
[  212.080043][T12174] veth3: entered promiscuous mode
[  212.106317][T12174] bond5: (slave veth3): Enslaving as a backup interface with a down link
[  212.319797][T12200] vlan0: entered allmulticast mode
[  212.332180][T12200] hsr0: entered allmulticast mode
[  212.344828][T12200] hsr_slave_0: entered allmulticast mode
[  212.360821][T12200] hsr_slave_1: entered allmulticast mode
[  212.671070][T12223] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  212.712048][T12223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.715708][T12220] syzkaller1: entered promiscuous mode
[  212.745956][T12220] syzkaller1: entered allmulticast mode
[  212.771381][T12232] netlink: 'syz.3.1755': attribute type 7 has an invalid length.
[  212.783153][T12232] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1755'.
[  212.783335][T12230] netlink: 512 bytes leftover after parsing attributes in process `syz.6.1754'.
[  212.868999][T12233] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 2, id = 0
[  212.973825][T12239] netlink: 'syz.5.1757': attribute type 2 has an invalid length.
[  213.425876][T12265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.506545][T12270] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.565117][T12277] netlink: 'syz.5.1769': attribute type 21 has an invalid length.
[  213.579130][T12277] netlink: 'syz.5.1769': attribute type 22 has an invalid length.
[  213.591969][T12277] netlink: 'syz.5.1769': attribute type 23 has an invalid length.
[  213.601040][T12277] netlink: 'syz.5.1769': attribute type 25 has an invalid length.
[  213.609478][T12277] netlink: 'syz.5.1769': attribute type 26 has an invalid length.
[  213.637537][T12270] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.728412][T12270] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.852997][T12270] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.028791][ T3598] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.120719][ T3598] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.130423][ T3598] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.173155][ T3598] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.187559][T12311] __nla_validate_parse: 8 callbacks suppressed
[  214.187576][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'.
[  214.239269][T12309] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1778'.
[  214.259630][T12309] netlink: zone id is out of range
[  214.284150][T12309] netlink: zone id is out of range
[  214.292024][T12309] netlink: zone id is out of range
[  214.300548][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1779'.
[  214.334288][T12311] lo speed is unknown, defaulting to 1000
[  214.368292][T12309] netlink: zone id is out of range
[  214.381726][T12311] lo speed is unknown, defaulting to 1000
[  214.400994][T12309] netlink: zone id is out of range
[  214.406722][T12311] lo speed is unknown, defaulting to 1000
[  214.437725][T12309] netlink: zone id is out of range
[  214.448247][T12309] netlink: zone id is out of range
[  214.497589][T12309] netlink: zone id is out of range
[  214.817305][T12350] wg1 speed is unknown, defaulting to 1000
[  214.826162][T12350] wg1 speed is unknown, defaulting to 1000
[  214.842830][T12350] wg1 speed is unknown, defaulting to 1000
[  214.884123][T12350] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  214.905341][T12350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  214.971180][T12350] wg1 speed is unknown, defaulting to 1000
[  215.016009][T12350] wg1 speed is unknown, defaulting to 1000
[  215.031765][T12350] wg1 speed is unknown, defaulting to 1000
[  215.060223][T12350] wg1 speed is unknown, defaulting to 1000
[  215.068670][T12350] wg1 speed is unknown, defaulting to 1000
[  215.079774][T12350] wg1 speed is unknown, defaulting to 1000
[  215.088026][T12350] wg1 speed is unknown, defaulting to 1000
[  215.100123][T12363] 8021q: VLANs not supported on ip_vti0
[  215.144175][T12311] infiniband syz0: set down
[  215.149423][T10277] lo speed is unknown, defaulting to 1000
[  215.167172][T12311] infiniband syz0: added lo
[  215.183825][T12311] syz0: rxe_create_cq: returned err = -12
[  215.204375][T12311] infiniband syz0: Couldn't create ib_mad CQ
[  215.212533][T12311] infiniband syz0: Couldn't open port 1
[  215.316800][T12311] RDS/IB: syz0: added
[  215.347091][T12311] lo speed is unknown, defaulting to 1000
[  216.161677][T12311] lo speed is unknown, defaulting to 1000
[  216.353482][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1806'.
[  216.396395][T12436] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1806'.
[  216.546701][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'.
[  216.604163][T12448] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1810'.
[  216.638512][T12447] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1810'.
[  217.010444][T12311] lo speed is unknown, defaulting to 1000
[  217.016895][T12470] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  217.196469][T12480] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  217.243509][T12484] validate_nla: 5 callbacks suppressed
[  217.243527][T12484] netlink: 'syz.2.1820': attribute type 12 has an invalid length.
[  217.275818][T12484] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1820'.
[  217.412668][T12487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.445002][T12487] syzkaller0: entered promiscuous mode
[  217.459669][T12487] syzkaller0: entered allmulticast mode
[  217.490668][T12487] tipc: Resetting bearer <eth:syzkaller0>
[  217.514116][T12486] tipc: Resetting bearer <eth:syzkaller0>
[  217.573488][T12486] tipc: Disabling bearer <eth:syzkaller0>
[  217.609616][T12311] lo speed is unknown, defaulting to 1000
[  217.657591][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1825'.
[  218.053791][ T6361] udevd[6361]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  218.108086][ T7531] udevd[7531]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  218.220860][T12511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.265905][T12511] syzkaller0: entered promiscuous mode
[  218.271707][T12511] syzkaller0: entered allmulticast mode
[  218.288685][T12511] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  218.359461][T12511] tipc: Resetting bearer <eth:syzkaller0>
[  218.382604][T12510] tipc: Resetting bearer <eth:syzkaller0>
[  218.412760][T12510] tipc: Disabling bearer <eth:syzkaller0>
[  218.441905][T12311] lo speed is unknown, defaulting to 1000
[  218.463048][T12520] netlink: 'syz.2.1832': attribute type 1 has an invalid length.
[  219.012405][T12543] syzkaller1: entered promiscuous mode
[  219.182143][T12311] lo speed is unknown, defaulting to 1000
[  219.511794][T12585] __nla_validate_parse: 2 callbacks suppressed
[  219.511812][T12585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1846'.
[  219.761297][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'.
[  219.781720][T12593] delete_channel: no stack
[  219.966098][ T5856] block nbd1: Receive control failed (result -32)
[  220.013259][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1853'.
[  220.024889][T12311] lo speed is unknown, defaulting to 1000
[  220.028251][T12607] sctp: [Deprecated]: syz.2.1854 (pid 12607) Use of int in max_burst socket option.
[  220.028251][T12607] Use struct sctp_assoc_value instead
[  220.056102][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1853'.
[  220.148379][T12612] netlink: 'syz.2.1854': attribute type 11 has an invalid length.
[  220.418060][T12624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1858'.
[  220.418079][T12621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.421196][T12622] syzkaller0: entered promiscuous mode
[  220.456625][T12622] syzkaller0: entered allmulticast mode
[  220.681088][T12632] dvmrp0: entered allmulticast mode
[  220.712250][T12633] tipc: Resetting bearer <eth:syzkaller0>
[  220.739537][T12633] tipc: Disabling bearer <eth:syzkaller0>
[  220.970813][T12654] netlink: 'syz.2.1866': attribute type 1 has an invalid length.
[  220.979771][T12654] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1866'.
[  221.113142][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1870'.
[  221.334385][T12678] netlink: 'syz.5.1873': attribute type 39 has an invalid length.
[  221.534260][T12694] netlink: 'syz.3.1880': attribute type 1 has an invalid length.
[  221.570077][T12694] 8021q: adding VLAN 0 to HW filter on device bond5
[  221.580898][T12689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.582541][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'.
[  221.688509][T12689] syzkaller0: entered promiscuous mode
[  221.694162][T12689] syzkaller0: entered allmulticast mode
[  221.700842][T12689] tipc: Resetting bearer <eth:syzkaller0>
[  221.761352][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1882'.
[  221.800589][T12694] bond5 (unregistering): Released all slaves
[  221.821174][T12688] tipc: Resetting bearer <eth:syzkaller0>
[  222.443220][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1893'.
[  222.452786][T12744] netlink: 'syz.5.1892': attribute type 1 has an invalid length.
[  222.668839][T10280] tipc: Node number set to 3098928048
[  223.531659][T12688] tipc: Disabling bearer <eth:syzkaller0>
[  223.678664][T12766] netlink: 'syz.3.1897': attribute type 10 has an invalid length.
[  224.040109][T12792] netlink: 'syz.6.1907': attribute type 8 has an invalid length.
[  224.730930][T12827] __nla_validate_parse: 2 callbacks suppressed
[  224.730949][T12827] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1918'.
[  224.752139][T12827] nbd: illegal input index -8454144
[  224.762925][T12833] netlink: 'syz.3.1921': attribute type 3 has an invalid length.
[  224.781337][T12831] netlink: 'syz.2.1920': attribute type 10 has an invalid length.
[  224.817870][T12831] batman_adv: batadv0: Adding interface: team0
[  224.834371][T12831] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.867835][T12831] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  225.307714][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'.
[  225.310035][T12867] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1929'.
[  225.569603][T12885] bridge3: entered promiscuous mode
[  225.575567][T12885] bridge3: entered allmulticast mode
[  225.698359][T12896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1938'.
[  225.741205][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1938'.
[  225.751640][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1938'.
[  225.760901][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1939'.
[  225.770314][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1938'.
[  225.782402][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1938'.
[  225.867706][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1941'.
[  226.291509][T12931] lo speed is unknown, defaulting to 1000
[  226.334931][T12934] netlink: 'syz.6.1948': attribute type 1 has an invalid length.
[  226.346235][T12936] netlink: 'syz.5.1950': attribute type 39 has an invalid length.
[  226.427200][T12941] bond6: (slave bridge3): making interface the new active one
[  226.436739][T12941] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  226.732062][T12956] tc_dump_action: action bad kind
[  226.837484][T12931] wg1 speed is unknown, defaulting to 1000
[  226.848175][T12959] netlink: 'syz.1.1956': attribute type 10 has an invalid length.
[  226.880344][T12959] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  226.889783][T12959] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  226.907412][T12963] hsr_slave_0: left promiscuous mode
[  226.915367][T12963] hsr_slave_1: left promiscuous mode
[  227.628310][T13000] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  227.793889][T13010] netlink: 'syz.6.1972': attribute type 1 has an invalid length.
[  227.852297][T13010] 8021q: adding VLAN 0 to HW filter on device bond7
[  227.903332][T13012] bond7: (slave geneve3): making interface the new active one
[  227.914451][T13012] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  227.927513][T13010] netlink: 'syz.6.1972': attribute type 1 has an invalid length.
[  228.334957][T13043] netlink: 'syz.1.1979': attribute type 1 has an invalid length.
[  228.876811][T13079] netlink: 'syz.5.1991': attribute type 1 has an invalid length.
[  229.505597][T13125] netlink: 'syz.5.2005': attribute type 1 has an invalid length.
[  229.698217][T13136] IPVS: set_ctl: invalid protocol: 18 100.1.1.1:20004
[  229.732496][T13136] bridge_slave_0: left allmulticast mode
[  229.745693][T13136] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.823019][T13145] netlink: 'syz.6.2014': attribute type 11 has an invalid length.
[  229.836473][T13145] __nla_validate_parse: 16 callbacks suppressed
[  229.836490][T13145] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2014'.
[  230.439733][   T55] IPVS: starting estimator thread 0...
[  230.512261][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2025'.
[  230.539995][T13189] netlink: 'syz.3.2027': attribute type 10 has an invalid length.
[  230.551688][T13186] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2026'.
[  230.561896][T13185] vlan2: entered promiscuous mode
[  230.567052][T13181] IPVS: using max 33 ests per chain, 79200 per kthread
[  230.584114][T13185] hsr_slave_1: entered promiscuous mode
[  230.597186][T13185] vlan2: entered allmulticast mode
[  230.609478][T13185] hsr_slave_1: entered allmulticast mode
[  230.616507][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2026'.
[  230.694692][T13200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2028'.
[  230.836524][T13189] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  230.866699][T13196] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  230.867931][T13191] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  230.901447][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'.
[  230.921889][T13210] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6
[  231.114949][ T5157] Bluetooth: hci6: command 0x0405 tx timeout
[  231.233817][T13226] net_ratelimit: 21 callbacks suppressed
[  231.233835][T13226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.279735][T13226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2034'.
[  231.300065][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'.
[  231.324621][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'.
[  231.401389][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2036'.
[  231.428938][T13236] netlink: 'syz.5.2035': attribute type 4 has an invalid length.
[  231.619963][T13241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.101083][T13260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.201542][T13260] syzkaller0: entered promiscuous mode
[  232.210904][T13260] syzkaller0: entered allmulticast mode
[  232.220752][T13260] tipc: Resetting bearer <eth:syzkaller0>
[  232.227526][T13264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.235613][T13267] syzkaller0: entered promiscuous mode
[  232.241085][T13267] syzkaller0: entered allmulticast mode
[  232.267938][T13264] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  232.294773][T13259] tipc: Resetting bearer <eth:syzkaller0>
[  233.154695][T10283] tipc: Node number set to 1495675451
[  233.357510][   T55] tipc: Node number set to 1624941279
[  234.002843][T13259] tipc: Disabling bearer <eth:syzkaller0>
[  234.015995][T13267] tipc: Resetting bearer <eth:syzkaller0>
[  234.024025][T13263] tipc: Resetting bearer <eth:syzkaller0>
[  234.066065][T13263] tipc: Disabling bearer <eth:syzkaller0>
[  234.334885][T13299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.379247][T13299] syzkaller0: entered promiscuous mode
[  234.407188][T13299] syzkaller0: entered allmulticast mode
[  234.624037][T13299] tipc: Resetting bearer <eth:syzkaller0>
[  234.639901][T13298] tipc: Resetting bearer <eth:syzkaller0>
[  234.745556][T13298] tipc: Disabling bearer <eth:syzkaller0>
[  234.807822][T13331] netlink: zone id is out of range
[  234.830390][T13331] netlink: zone id is out of range
[  234.836278][T13331] netlink: zone id is out of range
[  234.852134][T13331] netlink: get zone limit has 8 unknown bytes
[  234.862577][T13332] netlink: 'syz.3.2065': attribute type 21 has an invalid length.
[  234.898422][T13334] ip6tnl4: entered promiscuous mode
[  234.903893][T13332] __nla_validate_parse: 8 callbacks suppressed
[  234.903908][T13332] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2065'.
[  235.060005][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'.
[  235.098478][T13341] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  235.109222][T13351] netlink: 'syz.2.2072': attribute type 26 has an invalid length.
[  235.117921][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'.
[  235.129485][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'.
[  235.130724][T13341] bond8 (unregistering): Released all slaves
[  235.138839][T13354] netlink: 'syz.2.2072': attribute type 26 has an invalid length.
[  235.152910][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'.
[  235.243045][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'.
[  235.264027][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'.
[  235.293009][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2074'.
[  235.305179][T13351] netlink: 'syz.2.2072': attribute type 26 has an invalid length.
[  235.313011][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'.
[  235.340222][T13354] netlink: 'syz.2.2072': attribute type 26 has an invalid length.
[  235.349594][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'.
[  235.385198][T13363] wg1 speed is unknown, defaulting to 1000
[  235.899797][T13386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.952967][T13393] syzkaller0: entered promiscuous mode
[  235.966852][T13393] syzkaller0: entered allmulticast mode
[  236.109349][T13411] netlink: 'syz.6.2090': attribute type 6 has an invalid length.
[  236.170623][T13406] bridge2: entered allmulticast mode
[  236.200919][T13385] tipc: Resetting bearer <eth:syzkaller0>
[  236.243607][T13385] tipc: Disabling bearer <eth:syzkaller0>
[  236.249851][T13413] netlink: 'syz.6.2090': attribute type 6 has an invalid length.
[  236.272502][T13417] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy�ڇv���[�D�w��z
[  236.361816][T13427] netlink: 'syz.1.2093': attribute type 1 has an invalid length.
[  236.383289][T13418] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy�ڇv���[�D�w��zR'
[  236.399510][T13418] CPU: 0 UID: 0 PID: 13418 Comm: syz.2.2091 Not tainted syzkaller #0 PREEMPT(full) 
[  236.399536][T13418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  236.399548][T13418] Call Trace:
[  236.399556][T13418]  <TASK>
[  236.399563][T13418]  dump_stack_lvl+0x189/0x250
[  236.399596][T13418]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.399620][T13418]  ? __pfx__printk+0x10/0x10
[  236.399656][T13418]  ? kernfs_path_from_node+0x2f/0x290
[  236.399676][T13418]  ? kernfs_path_from_node+0x250/0x290
[  236.399694][T13418]  ? kernfs_path_from_node+0x2f/0x290
[  236.399717][T13418]  sysfs_warn_dup+0x8e/0xa0
[  236.399747][T13418]  sysfs_do_create_link_sd+0xc0/0x110
[  236.399780][T13418]  device_add_class_symlinks+0x1cf/0x240
[  236.399808][T13418]  device_add+0x475/0xb50
[  236.399840][T13418]  wiphy_register+0x1c81/0x2aa0
[  236.399883][T13418]  ? __pfx_wiphy_register+0x10/0x10
[  236.399905][T13418]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  236.399942][T13418]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  236.399976][T13418]  ieee80211_register_hw+0x3473/0x40d0
[  236.400021][T13418]  ? ieee80211_register_hw+0x14a1/0x40d0
[  236.400053][T13418]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  236.400077][T13418]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  236.400112][T13418]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  236.400139][T13418]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  236.400177][T13418]  ? __hrtimer_setup+0x187/0x210
[  236.400197][T13418]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  236.400224][T13418]  mac80211_hwsim_new_radio+0x2f7a/0x5210
[  236.400282][T13418]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  236.400302][T13418]  ? trace_kmalloc+0x1f/0xd0
[  236.400321][T13418]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  236.400351][T13418]  ? kstrndup+0xbf/0x160
[  236.400393][T13418]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  236.400427][T13418]  ? __pfx___nla_validate_parse+0x10/0x10
[  236.400467][T13418]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  236.400505][T13418]  ? __nla_parse+0x40/0x60
[  236.400528][T13418]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  236.400565][T13418]  genl_family_rcv_msg_doit+0x212/0x300
[  236.400600][T13418]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  236.400639][T13418]  ? bpf_lsm_capable+0x9/0x20
[  236.400660][T13418]  ? security_capable+0x7e/0x2e0
[  236.400695][T13418]  genl_rcv_msg+0x60e/0x790
[  236.400727][T13418]  ? __pfx_genl_rcv_msg+0x10/0x10
[  236.400751][T13418]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  236.400789][T13418]  netlink_rcv_skb+0x205/0x470
[  236.400807][T13418]  ? __lock_acquire+0xab9/0xd20
[  236.400826][T13418]  ? __pfx_genl_rcv_msg+0x10/0x10
[  236.400859][T13418]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  236.400903][T13418]  ? down_read+0x1ad/0x2e0
[  236.400928][T13418]  genl_rcv+0x28/0x40
[  236.400950][T13418]  netlink_unicast+0x82c/0x9e0
[  236.400991][T13418]  ? __pfx_netlink_unicast+0x10/0x10
[  236.401023][T13418]  ? netlink_sendmsg+0x642/0xb30
[  236.401041][T13418]  ? skb_put+0x11b/0x210
[  236.401067][T13418]  netlink_sendmsg+0x805/0xb30
[  236.401100][T13418]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.401125][T13418]  ? aa_sock_msg_perm+0xf1/0x1d0
[  236.401154][T13418]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  236.401182][T13418]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.401205][T13418]  __sock_sendmsg+0x219/0x270
[  236.401237][T13418]  ____sys_sendmsg+0x505/0x830
[  236.401267][T13418]  ? __pfx_____sys_sendmsg+0x10/0x10
[  236.401301][T13418]  ? import_iovec+0x74/0xa0
[  236.401335][T13418]  ___sys_sendmsg+0x21f/0x2a0
[  236.401362][T13418]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.401429][T13418]  ? __fget_files+0x2a/0x420
[  236.401454][T13418]  ? __fget_files+0x3a0/0x420
[  236.401493][T13418]  __x64_sys_sendmsg+0x19b/0x260
[  236.401520][T13418]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.401556][T13418]  ? rcu_is_watching+0x15/0xb0
[  236.401584][T13418]  ? do_syscall_64+0xbe/0x3b0
[  236.401609][T13418]  do_syscall_64+0xfa/0x3b0
[  236.401627][T13418]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.401656][T13418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.401675][T13418]  ? clear_bhb_loop+0x60/0xb0
[  236.401700][T13418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.401719][T13418] RIP: 0033:0x7feedb78eec9
[  236.401736][T13418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.401753][T13418] RSP: 002b:00007feedc692038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.401775][T13418] RAX: ffffffffffffffda RBX: 00007feedb9e6090 RCX: 00007feedb78eec9
[  236.401789][T13418] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  236.401801][T13418] RBP: 00007feedb811f91 R08: 0000000000000000 R09: 0000000000000000
[  236.401813][T13418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.401825][T13418] R13: 00007feedb9e6128 R14: 00007feedb9e6090 R15: 00007ffc7912fa58
[  236.401860][T13418]  </TASK>
[  237.013515][T13433] netlink: 'syz.6.2095': attribute type 2 has an invalid length.
[  237.015644][T13427] bond7: entered promiscuous mode
[  237.027488][T13427] 8021q: adding VLAN 0 to HW filter on device bond7
[  237.090606][T13430] 8021q: adding VLAN 0 to HW filter on device bond7
[  237.098896][T13430] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  237.109644][T13430] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  237.133932][T13430] bond7: (slave wireguard0): making interface the new active one
[  237.142052][T13430] wireguard0: entered promiscuous mode
[  237.146192][T13441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.150028][T13430] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  237.612273][   T30] audit: type=1107 audit(1759641468.605:3): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j)���+�F�S���㑽i�7"	Ύ���<Z';O'G��Vď�پ�t�`fl����0�e�M��x��:e��ҥ�X 2�IQ�WUůk���J�ʦ������c�U��v'
[  237.919204][T13481] vcan0: entered allmulticast mode
[  237.979465][T13484] netlink: 'syz.6.2108': attribute type 1 has an invalid length.
[  238.096592][T13500] netlink: 'syz.1.2111': attribute type 11 has an invalid length.
[  238.136005][T13500] netlink: 'syz.1.2111': attribute type 11 has an invalid length.
[  238.797438][T13533] nbd2: detected capacity change from 0 to 63
[  238.807348][ T5157] block nbd2: Receive control failed (result -32)
[  238.810472][ T7531] block nbd2: Send control failed (result -32)
[  238.895556][ T7531] block nbd2: Request send failed, requeueing
[  238.940917][   T56] block nbd2: Dead connection, failed to find a fallback
[  238.948690][   T56] block nbd2: shutting down sockets
[  238.954342][   T56] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.965223][   T56] Buffer I/O error on dev nbd2, logical block 0, async page read
[  238.973228][ T7531] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.998008][ T7531] Buffer I/O error on dev nbd2, logical block 1, async page read
[  239.025139][ T7531] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.085349][ T7531] Buffer I/O error on dev nbd2, logical block 2, async page read
[  239.151408][ T7531] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.175935][ T7531] Buffer I/O error on dev nbd2, logical block 3, async page read
[  239.191592][T13540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.207956][ T7531] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.223620][ T7531] Buffer I/O error on dev nbd2, logical block 0, async page read
[  239.233929][ T7531] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.321525][ T7531] Buffer I/O error on dev nbd2, logical block 1, async page read
[  239.363281][ T7531] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.393880][ T7531] Buffer I/O error on dev nbd2, logical block 2, async page read
[  239.407009][ T7531] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.420909][T13559] IPv6: sit1: Disabled Multicast RS
[  239.424873][ T7531] Buffer I/O error on dev nbd2, logical block 3, async page read
[  239.444286][ T7531] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.458608][T13559] sit1: entered allmulticast mode
[  239.479121][ T7531] Buffer I/O error on dev nbd2, logical block 0, async page read
[  239.501550][ T7531] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.521770][ T7531] Buffer I/O error on dev nbd2, logical block 1, async page read
[  239.556291][ T7531] ldm_validate_partition_table(): Disk read failed.
[  239.572765][ T7531] Dev nbd2: unable to read RDB block 0
[  239.597179][ T7531]  nbd2: unable to read partition table
[  239.619508][ T7531] ldm_validate_partition_table(): Disk read failed.
[  239.628979][ T7531] Dev nbd2: unable to read RDB block 0
[  239.637321][ T7531]  nbd2: unable to read partition table
[  239.697371][T13565] bond8: Unable to set up delay as MII monitoring is disabled
[  239.750424][T13565] bond8 (unregistering): Released all slaves
[  239.940467][T13582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.948636][T13582] syzkaller0: entered promiscuous mode
[  239.954143][T13582] syzkaller0: entered allmulticast mode
[  239.966368][T13582] tipc: Resetting bearer <eth:syzkaller0>
[  239.975162][T13581] tipc: Resetting bearer <eth:syzkaller0>
[  240.086354][T13581] tipc: Disabling bearer <eth:syzkaller0>
[  240.286094][T13599] validate_nla: 3 callbacks suppressed
[  240.286112][T13599] netlink: 'syz.6.2137': attribute type 12 has an invalid length.
[  240.309466][T13598] __nla_validate_parse: 9 callbacks suppressed
[  240.309484][T13598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2135'.
[  240.466610][T13598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2135'.
[  240.689539][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'.
[  240.698985][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2140'.
[  240.709183][T13631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2140'.
[  240.877931][T13640] macsec0: entered promiscuous mode
[  240.965296][T13649] netlink: 'syz.3.2149': attribute type 7 has an invalid length.
[  241.130849][T13664] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  241.339870][T13678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2157'.
[  241.408353][T13678] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2157'.
[  241.519579][T13690] IPv6: sit2: Disabled Multicast RS
[  241.658011][T13699] C: renamed from lo
[  241.668930][T13699] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  241.684644][T13699] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  241.716115][T13699] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  241.758099][T13699] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  241.774222][T13699] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  241.813148][T13699] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  241.854297][T13699] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  241.874845][T13699] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  242.192863][T13731] bridge3: entered promiscuous mode
[  242.224563][T13731] bridge3: entered allmulticast mode
[  242.527941][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2177'.
[  242.552636][T13747] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2177'.
[  242.742325][T13760] net_ratelimit: 25 callbacks suppressed
[  242.742343][T13760] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  242.972072][T13772] sctp: [Deprecated]: syz.5.2187 (pid 13772) Use of struct sctp_assoc_value in delayed_ack socket option.
[  242.972072][T13772] Use struct sctp_sack_info instead
[  243.045992][T13774] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  243.050132][T13772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2187'.
[  243.633900][ T3598] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.662983][ T3598] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.757283][ T3598] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.779217][ T3598] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.862951][ T5157] Bluetooth: hci6: link tx timeout
[  243.870102][ T5157] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  243.880510][ T5157] Bluetooth: hci6: link tx timeout
[  243.886494][ T5157] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  243.894280][ T5157] Bluetooth: hci6: link tx timeout
[  243.899828][ T5157] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  244.016812][T13848] netlink: 'syz.2.2205': attribute type 1 has an invalid length.
[  244.046792][T13829] netlink: 'syz.1.2200': attribute type 29 has an invalid length.
[  244.147084][T13848] 8021q: adding VLAN 0 to HW filter on device bond5
[  244.187929][T13829] netlink: 'syz.1.2200': attribute type 29 has an invalid length.
[  244.267046][T13855] veth5: entered allmulticast mode
[  244.285889][T13858] bond5: entered allmulticast mode
[  244.344975][T13865] netlink: 'syz.6.2209': attribute type 7 has an invalid length.
[  244.437686][T13875] netlink: 'syz.5.2211': attribute type 64 has an invalid length.
[  244.462739][T13875] netlink: 'syz.5.2211': attribute type 64 has an invalid length.
[  244.485483][T13875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.869220][T10280] hid (null): unknown global tag 0xe
[  244.877184][T10280] hid (null): nested delimiters
[  245.318208][T13926] netlink: 'syz.3.2224': attribute type 1 has an invalid length.
[  245.336627][T13926] netlink: 'syz.3.2224': attribute type 2 has an invalid length.
[  245.348627][T13928] __nla_validate_parse: 12 callbacks suppressed
[  245.348641][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2225'.
[  245.399116][T13932] bridge0: port 1(ipvlan3) entered blocking state
[  245.415875][T13932] bridge0: port 1(ipvlan3) entered disabled state
[  245.429716][T13932] ipvlan3: entered allmulticast mode
[  245.444197][T13932] bridge0: entered allmulticast mode
[  245.471454][T13932] ipvlan3: left allmulticast mode
[  245.509727][T13939] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2225'.
[  245.517558][T13932] bridge0: left allmulticast mode
[  245.607896][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2229'.
[  245.619612][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2229'.
[  245.728711][T13949] openvswitch: netlink: IP tunnel dst address not specified
[  245.745868][T13949] IPVS: sh: FWM 3 0x00000003 - no destination available
[  245.884950][T13954] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  245.926523][ T5157] Bluetooth: hci6: command 0x0405 tx timeout
[  245.973066][T13963] netlink: 'syz.5.2235': attribute type 1 has an invalid length.
[  245.993244][T13963] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2235'.
[  246.041857][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2235'.
[  246.158886][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'.
[  246.285214][T13973] lo: entered allmulticast mode
[  246.301959][T13973] tunl0: entered allmulticast mode
[  246.327867][T13973] gre0: left promiscuous mode
[  246.332703][T13973] gre0: entered allmulticast mode
[  246.356120][T13973] gretap0: entered allmulticast mode
[  246.393656][T13973] ip_vti0: entered allmulticast mode
[  246.468845][T13973] ip6_vti0: entered allmulticast mode
[  246.500529][T13973] sit0: entered allmulticast mode
[  246.546194][T13973] ip6tnl0: entered allmulticast mode
[  246.621428][T13973] ip6gre0: entered allmulticast mode
[  246.657667][T13973] syz_tun: entered allmulticast mode
[  246.728988][T13973] ip6gretap0: entered allmulticast mode
[  246.750075][T13973] bridge0: entered allmulticast mode
[  246.766747][T10280] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe
[  246.770682][T13973] vcan0: entered allmulticast mode
[  246.786936][T10280] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed
[  246.796977][T10280] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22
[  246.828574][T13973] bond0: entered allmulticast mode
[  246.842294][T13973] bridge_slave_1: entered allmulticast mode
[  246.857118][T13973] team0: entered allmulticast mode
[  246.873538][T13973] nlmon0: entered allmulticast mode
[  246.897240][T13973] caif0: entered allmulticast mode
[  246.906995][T13973] batadv0: entered allmulticast mode
[  246.938023][T13973] veth0: entered allmulticast mode
[  246.951693][T13973] veth1: entered allmulticast mode
[  247.001176][T13973] wg1: entered allmulticast mode
[  247.026638][T13973] wg2: entered allmulticast mode
[  247.040603][T13973] veth0_to_bridge: entered allmulticast mode
[  247.057995][T13973] bridge_slave_0: entered allmulticast mode
[  247.070439][T13973] veth1_to_bridge: entered allmulticast mode
[  247.087932][T13973] veth0_to_bond: entered allmulticast mode
[  247.098867][T13973] bond_slave_0: entered allmulticast mode
[  247.106290][T13973] veth1_to_bond: entered allmulticast mode
[  247.117751][T13973] bond_slave_1: entered allmulticast mode
[  247.124079][T13973] veth0_to_team: entered allmulticast mode
[  247.137180][T13973] team_slave_0: entered allmulticast mode
[  247.145889][T13973] veth1_to_team: entered allmulticast mode
[  247.158733][T13973] team_slave_1: entered allmulticast mode
[  247.165822][T13973] veth0_to_batadv: entered allmulticast mode
[  247.179525][T13973] batadv_slave_0: entered allmulticast mode
[  247.192944][T13973] xfrm0: entered allmulticast mode
[  247.204317][T13973] veth1_to_hsr: entered allmulticast mode
[  247.216250][T13973] hsr_slave_1: entered allmulticast mode
[  247.227283][T13973] hsr0: entered allmulticast mode
[  247.237364][T13973] veth1_virt_wifi: entered allmulticast mode
[  247.248430][T13973] veth0_virt_wifi: entered allmulticast mode
[  247.262494][T13973] veth1_vlan: entered allmulticast mode
[  247.285769][T13973] vlan0: left promiscuous mode
[  247.291900][T13973] vlan1: entered allmulticast mode
[  247.299133][T13973] macvlan0: entered allmulticast mode
[  247.317641][T13973] macvlan1: entered allmulticast mode
[  247.334426][T13973] ipvlan0: entered allmulticast mode
[  247.340397][T13973] ipvlan1: entered allmulticast mode
[  247.349205][T13973] veth1_macvtap: entered allmulticast mode
[  247.359540][T13973] veth0_macvtap: entered allmulticast mode
[  247.369248][T13973] macvtap0: entered allmulticast mode
[  247.378959][T13973] macsec0: entered allmulticast mode
[  247.385129][T13973] geneve0: entered allmulticast mode
[  247.397164][T13973] geneve1: entered allmulticast mode
[  247.414386][T13973] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  247.421525][T13973] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  247.430804][T13973] netdevsim netdevsim5 netdevsim1: entered allmulticast mode
[  247.442588][T13973] netdevsim netdevsim5 netdevsim2: entered allmulticast mode
[  247.508894][T13973] netdevsim netdevsim5 netdevsim3: entered allmulticast mode
[  247.531191][T13973] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  247.551410][T13973] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  247.561101][T13973] bridge1: entered allmulticast mode
[  247.567569][T13973] bridge2: entered allmulticast mode
[  247.573773][T13973] gre1: entered allmulticast mode
[  247.586898][T13973] @: entered allmulticast mode
[  247.596460][T13973] ip6erspan0: entered allmulticast mode
[  247.602144][T13973] �iE: entered allmulticast mode
[  247.607948][T13973] bond1: entered allmulticast mode
[  247.616022][T13973] gre2: entered allmulticast mode
[  247.625159][T13973] ip6tnl1: entered allmulticast mode
[  247.630701][T13973] macsec1: entered allmulticast mode
[  247.637534][T13973] gre3: entered allmulticast mode
[  247.642875][T13973] veth2: entered allmulticast mode
[  247.648619][T13973] veth3: entered allmulticast mode
[  247.653827][T13973] syztnl0: entered allmulticast mode
[  247.659653][T13973] ;: entered allmulticast mode
[  247.664838][T13973] veth4: entered allmulticast mode
[  247.696436][T13972] team0: Mode changed to "loadbalance"
[  247.818780][T14011] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  247.835798][ T3537] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.855193][ T3537] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.872672][ T3537] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.893735][ T3537] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.943841][ T3537] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.965880][ T3537] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.002152][ T3537] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.022081][ T3537] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.128586][T14022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2247'.
[  248.161386][T14024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2248'.
[  248.434425][T14039] syzkaller1: entered promiscuous mode
[  248.439853][T14038] netlink: 'syz.1.2252': attribute type 8 has an invalid length.
[  248.448255][T14039] syzkaller1: entered allmulticast mode
[  248.630872][T14047] netlink: 'syz.1.2256': attribute type 29 has an invalid length.
[  248.640183][T14047] netlink: 'syz.1.2256': attribute type 29 has an invalid length.
[  248.679948][T14053] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  248.688706][T14053] batman_adv: batadv0: Adding interface: netdevsim0
[  248.697978][T14053] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.750653][T14053] batman_adv: batadv0: Interface activated: netdevsim0
[  248.766390][T14055] sctp: [Deprecated]: syz.5.2259 (pid 14055) Use of int in max_burst socket option.
[  248.766390][T14055] Use struct sctp_assoc_value instead
[  248.856211][T14059] xfrm1: entered allmulticast mode
[  248.861817][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'.
[  248.871242][T14061] netlink: 'syz.2.2261': attribute type 30 has an invalid length.
[  248.897039][   T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.907835][   T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.917128][   T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.926705][   T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.031339][T14067] netlink: 'syz.2.2263': attribute type 12 has an invalid length.
[  249.042305][T14067] netlink: 'syz.2.2263': attribute type 12 has an invalid length.
[  249.162681][T14073] openvswitch: netlink: Duplicate key (type 32).
[  249.416753][T14091] netlink: 'syz.3.2272': attribute type 4 has an invalid length.
[  249.471627][T14088] 8021q: adding VLAN 0 to HW filter on device bond6
[  249.491165][T14088] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  249.518562][T14098] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  249.552738][T14097] veth0: entered promiscuous mode
[  249.582715][T14098] veth0 (unregistering): left promiscuous mode
[  250.161798][T14134] GUP no longer grows the stack in syz.6.2283 (14134): 200000006000-200000008000 (200000005000)
[  250.201499][T14134] CPU: 0 UID: 0 PID: 14134 Comm: syz.6.2283 Not tainted syzkaller #0 PREEMPT(full) 
[  250.201525][T14134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  250.201547][T14134] Call Trace:
[  250.201554][T14134]  <TASK>
[  250.201561][T14134]  dump_stack_lvl+0x189/0x250
[  250.201590][T14134]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.201612][T14134]  ? __pfx__printk+0x10/0x10
[  250.201636][T14134]  ? find_vma+0xe7/0x160
[  250.201674][T14134]  __get_user_pages+0x24d0/0x2ce0
[  250.201692][T14134]  ? __lock_acquire+0xab9/0xd20
[  250.201739][T14134]  ? __gup_longterm_locked+0xc63/0x1660
[  250.201771][T14134]  __gup_longterm_locked+0xde4/0x1660
[  250.201809][T14134]  ? sanity_check_pinned_pages+0x123a/0x1300
[  250.201840][T14134]  gup_fast_fallback+0x1e6a/0x2010
[  250.201898][T14134]  ? __pfx_gup_fast_fallback+0x10/0x10
[  250.201924][T14134]  ? __lock_acquire+0xab9/0xd20
[  250.201950][T14134]  ? pin_user_pages_fast+0x4d/0xb0
[  250.201976][T14134]  iov_iter_extract_pages+0x35a/0x5e0
[  250.202018][T14134]  extract_iter_to_sg+0xe46/0x24e0
[  250.202066][T14134]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  250.202096][T14134]  ? __local_bh_enable_ip+0x12d/0x1c0
[  250.202117][T14134]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.202149][T14134]  ? __local_bh_enable_ip+0x12d/0x1c0
[  250.202168][T14134]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  250.202196][T14134]  ? __asan_memset+0x22/0x50
[  250.202218][T14134]  hash_sendmsg+0x4f4/0x11d0
[  250.202269][T14134]  ? __pfx_hash_sendmsg+0x10/0x10
[  250.202293][T14134]  __sock_sendmsg+0x219/0x270
[  250.202326][T14134]  ____sys_sendmsg+0x52d/0x830
[  250.202357][T14134]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.202394][T14134]  ? import_iovec+0x74/0xa0
[  250.202421][T14134]  ___sys_sendmsg+0x21f/0x2a0
[  250.202448][T14134]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.202513][T14134]  ? __fget_files+0x2a/0x420
[  250.202537][T14134]  ? __fget_files+0x3a0/0x420
[  250.202575][T14134]  __sys_sendmmsg+0x227/0x430
[  250.202603][T14134]  ? __pfx___sys_sendmmsg+0x10/0x10
[  250.202622][T14134]  ? do_futex+0x395/0x420
[  250.202653][T14134]  ? fd_install+0x97/0x540
[  250.202698][T14134]  ? rcu_is_watching+0x15/0xb0
[  250.202725][T14134]  __x64_sys_sendmmsg+0xa0/0xc0
[  250.202748][T14134]  do_syscall_64+0xfa/0x3b0
[  250.202766][T14134]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.202793][T14134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.202812][T14134]  ? clear_bhb_loop+0x60/0xb0
[  250.202837][T14134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.202855][T14134] RIP: 0033:0x7f055078eec9
[  250.202873][T14134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.202889][T14134] RSP: 002b:00007f05515a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  250.202909][T14134] RAX: ffffffffffffffda RBX: 00007f05509e6090 RCX: 00007f055078eec9
[  250.202924][T14134] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007
[  250.202935][T14134] RBP: 00007f0550811f91 R08: 0000000000000000 R09: 0000000000000000
[  250.202948][T14134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.202959][T14134] R13: 00007f05509e6128 R14: 00007f05509e6090 R15: 00007ffce4f272b8
[  250.202999][T14134]  </TASK>
[  250.551364][T14124] __nla_validate_parse: 8 callbacks suppressed
[  250.551382][T14124] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2280'.
[  250.717514][T14145] validate_nla: 1 callbacks suppressed
[  250.717532][T14145] netlink: 'syz.3.2287': attribute type 1 has an invalid length.
[  250.924760][T14145] 8021q: adding VLAN 0 to HW filter on device bond5
[  250.984103][T14160] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2292'.
[  251.004453][T14160] netlink: 'syz.1.2292': attribute type 1 has an invalid length.
[  251.239831][T14173] netlink: 'syz.1.2296': attribute type 1 has an invalid length.
[  251.518283][T14174] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address
[  251.544346][T14174] bond10: (slave vxcan5): Error -95 calling set_mac_address
[  251.592374][T14202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'.
[  251.670108][T14205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2304'.
[  251.872172][T14220] netlink: 'syz.1.2307': attribute type 1 has an invalid length.
[  252.094418][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2311'.
[  252.115537][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2311'.
[  252.137657][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2311'.
[  252.187754][T14235] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.213836][T14241] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  252.282833][T14235] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.300306][T14248] netlink: 'syz.5.2315': attribute type 1 has an invalid length.
[  252.392831][T14235] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.414025][T14253] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2318'.
[  252.474248][T14235] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.781654][ T3537] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.794449][ T3537] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.839133][ T3537] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.892201][ T3537] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.350958][T14309] netlink: 404 bytes leftover after parsing attributes in process `syz.3.2331'.
[  253.631641][T14324] openvswitch: netlink: Key 26 has unexpected len 0 expected 16
[  253.724035][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'.
[  254.121959][T14349] netlink: 'syz.3.2343': attribute type 1 has an invalid length.
[  254.210838][T14347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.232185][T14358] netlink: 'syz.1.2348': attribute type 10 has an invalid length.
[  254.243515][T14348] pim6reg1: entered promiscuous mode
[  254.254969][T14348] pim6reg1: entered allmulticast mode
[  254.266266][T14352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.326832][T14362] netlink: 'syz.2.2350': attribute type 1 has an invalid length.
[  254.375825][T14359] syzkaller0: entered promiscuous mode
[  254.381317][T14359] syzkaller0: entered allmulticast mode
[  254.541455][T14347] tipc: Resetting bearer <eth:syzkaller0>
[  254.598029][T14384] netlink: 'syz.3.2352': attribute type 5 has an invalid length.
[  254.618078][T14347] tipc: Disabling bearer <eth:syzkaller0>
[  254.640017][T14387] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  254.810119][T14391] team_slave_0: entered promiscuous mode
[  254.816159][T14391] team_slave_1: entered promiscuous mode
[  254.847771][T14391] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  255.624128][T14446] veth0_to_bond: entered allmulticast mode
[  255.631047][T14448] __nla_validate_parse: 9 callbacks suppressed
[  255.631063][T14448] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2373'.
[  255.680341][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  255.692540][T14448] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2373'.
[  255.722190][T14450] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2374'.
[  255.735826][T14458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2373'.
[  255.739531][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2375'.
[  255.814547][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2375'.
[  255.851848][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2375'.
[  255.943724][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2377'.
[  256.103956][T14467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  256.171620][T14470] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2378'.
[  256.174702][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2378'.
[  256.195370][T14470] netem: invalid attributes len -24
[  256.444892][T14486] team0: Mode "" not found
[  256.459286][T14489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.523709][T14497] netlink: 'syz.1.2387': attribute type 12 has an invalid length.
[  258.265193][T14580] netlink: 'syz.6.2407': attribute type 2 has an invalid length.
[  260.043040][T14652] wg1 speed is unknown, defaulting to 1000
[  260.943980][T14685] netlink: 'syz.6.2437': attribute type 1 has an invalid length.
[  260.971746][T14689] __nla_validate_parse: 13 callbacks suppressed
[  260.971766][T14689] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2438'.
[  261.060499][T14685] bond8: entered promiscuous mode
[  261.066555][T14685] 8021q: adding VLAN 0 to HW filter on device bond8
[  261.608221][T14719] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2448'.
[  261.625437][T14720] netlink: 'syz.6.2450': attribute type 58 has an invalid length.
[  261.644432][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2450'.
[  261.679148][T14727] sctp: [Deprecated]: syz.6.2450 (pid 14727) Use of struct sctp_assoc_value in delayed_ack socket option.
[  261.679148][T14727] Use struct sctp_sack_info instead
[  262.357399][T14783] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2466'.
[  262.410874][T14785] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  262.417409][T14785] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  262.452112][T14785] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  262.458611][T14785] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  262.855306][T14805] veth0: entered promiscuous mode
[  262.922182][T14804] veth0: left promiscuous mode
[  263.003749][T14812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2474'.
[  263.023495][T14812] netlink: 'syz.2.2474': attribute type 33 has an invalid length.
[  263.120692][T14814] netlink: 'syz.1.2475': attribute type 4 has an invalid length.
[  263.199414][T14818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  263.236571][T14822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  263.258201][T14832] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2477'.
[  263.680368][T14861] pimreg: entered allmulticast mode
[  263.711323][T14862] bond0: (slave syz_tun): Releasing backup interface
[  263.773741][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2487'.
[  263.791895][T14862] bond0: (slave bridge_slave_1): Releasing backup interface
[  263.821594][T14862] bond0: (slave bond_slave_0): Releasing backup interface
[  263.856912][T14862] bond0: (slave bond_slave_1): Releasing backup interface
[  263.877909][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'.
[  263.900322][T14862] team0: Port device team_slave_0 removed
[  263.900940][T14870] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2489'.
[  263.948243][T14862] team0: Port device team_slave_1 removed
[  263.955561][T14862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.974060][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2489'.
[  263.981189][T14862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.008942][T14862] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  264.467615][T14906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.898219][T14925] netlink: 'syz.5.2506': attribute type 6 has an invalid length.
[  264.910728][T14925] netlink: 'syz.5.2506': attribute type 5 has an invalid length.
[  264.922323][T14923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.932348][T14923] syzkaller0: entered promiscuous mode
[  264.943495][T14923] syzkaller0: entered allmulticast mode
[  264.961264][T14923] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  265.011756][T14923] tipc: Resetting bearer <eth:syzkaller0>
[  265.039553][T14922] tipc: Resetting bearer <eth:syzkaller0>
[  265.135181][T14922] tipc: Disabling bearer <eth:syzkaller0>
[  265.256807][T14944] team0: Mode changed to "broadcast"
[  265.458201][T14951] syzkaller0: refused to change device tx_queue_len
[  265.603097][T14963] netlink: 'syz.6.2521': attribute type 4 has an invalid length.
[  273.114946][ T5856] Bluetooth: hci5: command 0x0406 tx timeout
[  278.074953][   T31] INFO: task syz.0.732:8462 blocked for more than 143 seconds.
[  278.082531][   T31]       Not tainted syzkaller #0
[  278.087759][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  278.096793][   T31] task:syz.0.732       state:D stack:25624 pid:8462  tgid:8460  ppid:5841   task_flags:0x400140 flags:0x00080002
[  278.108941][   T31] Call Trace:
[  278.112233][   T31]  <TASK>
[  278.115344][   T31]  __schedule+0x1798/0x4cc0
[  278.119904][   T31]  ? __lock_acquire+0xab9/0xd20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  278.125387][   T31]  ? __lock_acquire+0xab9/0xd20
[  278.130556][   T31]  ? __pfx___schedule+0x10/0x10
[  278.135541][   T31]  ? schedule+0x91/0x360
[  278.140083][   T31]  schedule+0x165/0x360
[  278.144266][   T31]  schedule_preempt_disabled+0x13/0x30
[  278.149869][   T31]  __mutex_lock+0x7e6/0x1350
[  278.155050][   T31]  ? __mutex_lock+0x5bb/0x1350
[  278.159841][   T31]  ? nfsd_nl_version_get_doit+0x16e/0xb60
[  278.224331][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  278.236260][   T31]  ? __nlmsg_put+0xef/0x1b0
[  278.240816][   T31]  ? genlmsg_put+0x137/0x2e0
[  278.294721][   T31]  nfsd_nl_version_get_doit+0x16e/0xb60
[  278.300383][   T31]  ? __local_bh_enable_ip+0x12d/0x1c0
[  278.315007][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  278.321199][   T31]  genl_family_rcv_msg_doit+0x212/0x300
[  278.328621][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  278.335128][   T31]  genl_rcv_msg+0x60e/0x790
[  278.339666][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  278.346591][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  278.352704][   T31]  ? __asan_memcpy+0x40/0x70
[  278.377215][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  278.382752][   T31]  netlink_rcv_skb+0x205/0x470
[  278.394526][   T31]  ? __lock_acquire+0xab9/0xd20
[  278.399514][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  278.414757][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  278.420098][   T31]  ? down_read+0x1ad/0x2e0
[  278.435002][   T31]  genl_rcv+0x28/0x40
[  278.439041][   T31]  netlink_unicast+0x82c/0x9e0
[  278.443906][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  278.464868][   T31]  ? netlink_sendmsg+0x642/0xb30
[  278.469839][   T31]  ? skb_put+0x11b/0x210
[  278.474103][   T31]  netlink_sendmsg+0x805/0xb30
[  278.498180][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.503508][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  278.524809][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  278.530140][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.544552][   T31]  __sock_sendmsg+0x219/0x270
[  278.549287][   T31]  ____sys_sendmsg+0x505/0x830
[  278.554074][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  278.574924][   T31]  ? import_iovec+0x74/0xa0
[  278.579480][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  278.584179][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  278.608307][   T31]  ? __fget_files+0x2a/0x420
[  278.612940][   T31]  ? __fget_files+0x3a0/0x420
[  278.641104][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  278.646736][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  278.652230][   T31]  ? rcu_is_watching+0x15/0xb0
[  278.664869][   T31]  ? do_syscall_64+0xbe/0x3b0
[  278.669585][   T31]  do_syscall_64+0xfa/0x3b0
[  278.674099][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.702809][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.709840][   T31]  ? clear_bhb_loop+0x60/0xb0
[  278.718587][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.724785][   T31] RIP: 0033:0x7fb3e7b8eec9
[  278.729213][   T31] RSP: 002b:00007fb3e8a2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  278.740865][   T31] RAX: ffffffffffffffda RBX: 00007fb3e7de5fa0 RCX: 00007fb3e7b8eec9
[  278.749243][   T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  278.757739][   T31] RBP: 00007fb3e7c11f91 R08: 0000000000000000 R09: 0000000000000000
[  278.766259][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.774243][   T31] R13: 00007fb3e7de6038 R14: 00007fb3e7de5fa0 R15: 00007ffdf7210d68
[  278.782776][   T31]  </TASK>
[  278.786174][   T31] 
[  278.786174][   T31] Showing all locks held in the system:
[  278.793943][   T31] 1 lock held by khungtaskd/31:
[  278.800233][   T31]  #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  278.810442][   T31] 3 locks held by kworker/1:2/1674:
[  278.816188][   T31]  #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  278.830121][   T31]  #1: ffffc9000420fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  278.856316][   T31]  #2: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  278.907218][   T31] 2 locks held by getty/5605:
[  278.911929][   T31]  #0: ffff88802f5a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  278.922178][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  278.932735][   T31] 1 lock held by syz-executor/5852:
[  278.941390][   T31] 2 locks held by syz.4.695/8364:
[  278.946787][   T31]  #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  278.975627][   T31]  #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  279.004789][   T31] 2 locks held by syz.0.732/8462:
[  279.009849][   T31]  #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  279.045159][   T31]  #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60
[  279.084545][   T31] 5 locks held by syz-executor/8996:
[  279.089861][   T31]  #0: ffff88807887cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  279.111385][   T31]  #1: ffff88807887c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  279.121527][   T31]  #2: ffffffff8f2299e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  279.131888][   T31]  #3: ffff8880269e9b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  279.141839][   T31]  #4: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  279.153092][   T31] 3 locks held by syz-executor/9061:
[  279.158735][   T31]  #0: ffff888079f38dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  279.169254][   T31]  #1: ffff888079f380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  279.179280][   T31]  #2: ffffffff8f2299e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  279.189619][   T31] 4 locks held by kworker/1:8/10270:
[  279.195934][   T31]  #0: ffff8880b8939fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  279.206310][   T31]  #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  279.215391][   T31]  #2: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[  279.224384][   T31]  #3: ffffffff99789bd8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420
[  279.235563][   T31] 
[  279.237905][   T31] =============================================
[  279.237905][   T31] 
[  279.246996][   T31] NMI backtrace for cpu 0
[  279.247013][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  279.247033][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  279.247045][   T31] Call Trace:
[  279.247052][   T31]  <TASK>
[  279.247061][   T31]  dump_stack_lvl+0x189/0x250
[  279.247092][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.247117][   T31]  ? __pfx__printk+0x10/0x10
[  279.247158][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  279.247189][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  279.247218][   T31]  ? __pfx__printk+0x10/0x10
[  279.247256][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  279.247278][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  279.247307][   T31]  watchdog+0xf93/0xfe0
[  279.247331][   T31]  ? watchdog+0x1de/0xfe0
[  279.247354][   T31]  kthread+0x711/0x8a0
[  279.247382][   T31]  ? __pfx_watchdog+0x10/0x10
[  279.247399][   T31]  ? __pfx_kthread+0x10/0x10
[  279.247425][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  279.247450][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.247475][   T31]  ? __pfx_kthread+0x10/0x10
[  279.247500][   T31]  ret_from_fork+0x436/0x7d0
[  279.247520][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  279.247540][   T31]  ? __switch_to_asm+0x39/0x70
[  279.247559][   T31]  ? __switch_to_asm+0x33/0x70
[  279.247576][   T31]  ? __pfx_kthread+0x10/0x10
[  279.247597][   T31]  ret_from_fork_asm+0x1a/0x30
[  279.247631][   T31]  </TASK>
[  279.247640][   T31] Sending NMI from CPU 0 to CPUs 1:
[  279.396251][    C1] NMI backtrace for cpu 1
[  279.396269][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  279.396293][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  279.396305][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  279.396337][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c9 15 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  279.396353][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[  279.396369][    C1] RAX: a2fbe69694863400 RBX: ffffffff81953917 RCX: a2fbe69694863400
[  279.396383][    C1] RDX: 0000000000000001 RSI: ffffffff8d50d356 RDI: ffffffff8b9ec4e0
[  279.396396][    C1] RBP: ffffc90000197f20 R08: ffff8880b8932fdb R09: 1ffff110171265fb
[  279.396409][    C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f5b8630
[  279.396423][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003956b58
[  279.396435][    C1] FS:  0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000
[  279.396450][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  279.396463][    C1] CR2: 00007ffcdfac69d8 CR3: 000000000db36000 CR4: 00000000003526f0
[  279.396478][    C1] Call Trace:
[  279.396484][    C1]  <TASK>
[  279.396490][    C1]  default_idle+0x13/0x20
[  279.396510][    C1]  default_idle_call+0x73/0xb0
[  279.396530][    C1]  do_idle+0x1e7/0x510
[  279.396548][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  279.396568][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.396595][    C1]  ? __pfx_do_idle+0x10/0x10
[  279.396616][    C1]  ? do_idle+0x4e9/0x510
[  279.396635][    C1]  cpu_startup_entry+0x44/0x60
[  279.396653][    C1]  start_secondary+0x101/0x110
[  279.396669][    C1]  common_startup_64+0x13e/0x147
[  279.396701][    C1]  </TASK>
[  279.397456][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  279.578724][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  279.587917][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  279.597957][   T31] Call Trace:
[  279.601227][   T31]  <TASK>
[  279.604155][   T31]  dump_stack_lvl+0x99/0x250
[  279.608761][   T31]  ? __asan_memcpy+0x40/0x70
[  279.613340][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.618532][   T31]  ? __pfx__printk+0x10/0x10
[  279.623127][   T31]  vpanic+0x281/0x750
[  279.627115][   T31]  ? __pfx_vpanic+0x10/0x10
[  279.631615][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  279.637255][   T31]  ? preempt_schedule+0xae/0xc0
[  279.642107][   T31]  ? preempt_schedule_common+0x83/0xd0
[  279.647568][   T31]  panic+0xb9/0xc0
[  279.651317][   T31]  ? __pfx_panic+0x10/0x10
[  279.655728][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  279.661102][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  279.667343][   T31]  watchdog+0xfd2/0xfe0
[  279.671502][   T31]  ? watchdog+0x1de/0xfe0
[  279.675822][   T31]  kthread+0x711/0x8a0
[  279.679896][   T31]  ? __pfx_watchdog+0x10/0x10
[  279.684560][   T31]  ? __pfx_kthread+0x10/0x10
[  279.689151][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  279.694342][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.699536][   T31]  ? __pfx_kthread+0x10/0x10
[  279.704130][   T31]  ret_from_fork+0x436/0x7d0
[  279.708712][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  279.713903][   T31]  ? __switch_to_asm+0x39/0x70
[  279.718659][   T31]  ? __switch_to_asm+0x33/0x70
[  279.723417][   T31]  ? __pfx_kthread+0x10/0x10
[  279.728001][   T31]  ret_from_fork_asm+0x1a/0x30
[  279.732770][   T31]  </TASK>
[  279.735918][   T31] Kernel Offset: disabled
[  279.740260][   T31] Rebooting in 86400 seconds..