last executing test programs:

3m15.490380035s ago: executing program 1 (id=3273):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x8001, 0x8c5b, 0x7}, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x820)

3m15.416628744s ago: executing program 1 (id=3274):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x1})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0)

3m15.263936285s ago: executing program 1 (id=3276):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f250fae1425ca457df16e", @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000008000300020000800e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x44}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff0000010003"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x8a, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@deltfilter={0x24, 0x2d, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0xffe0, 0xe}, {0x7, 0x6}}}, 0x24}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m13.067006046s ago: executing program 1 (id=3278):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x0)
recvfrom$unix(r1, &(0x7f0000000140)=""/49, 0x31, 0x120, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}})

3m11.204757695s ago: executing program 1 (id=3289):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000000040)=""/156, 0x9c}, {&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/86, 0x56}], 0x5, &(0x7f0000001340)=""/202, 0xca}, 0x2103)

3m11.128442988s ago: executing program 1 (id=3293):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000400)=0x1e)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008, 0x7}, {0x100000001, 0x8, 0xcc}, {0xf6}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000)

2m56.116080619s ago: executing program 32 (id=3293):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000400)=0x1e)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008, 0x7}, {0x100000001, 0x8, 0xcc}, {0xf6}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000)

1m58.228013047s ago: executing program 2 (id=4232):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r0, 0xd7735000)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x2, 0x300)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=@gettaction={0x28, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000040))

1m57.994471271s ago: executing program 2 (id=4236):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000000)={0xcf3, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000013700)={0xa9, 0xce1e, 0x0, 0x5, 0x4, 0x0, 0x5f5})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000013780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000137c0)={{r2}, "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"}) (async)
ppoll(&(0x7f00000147c0)=[{0xffffffffffffffff, 0x400}, {r0, 0x200}], 0x2, &(0x7f0000014800)={0x77359400}, &(0x7f0000014840)={[0x1]}, 0x8)
recvmsg(r0, &(0x7f0000014d00)={0x0, 0x0, &(0x7f0000014c00)=[{&(0x7f0000014880)=""/45, 0x2d}, {&(0x7f00000148c0)=""/139, 0x8b}, {&(0x7f0000014980)}, {&(0x7f00000149c0)=""/60, 0x3c}, {&(0x7f0000014a00)=""/173, 0xad}, {&(0x7f0000014ac0)=""/160, 0xa0}, {&(0x7f0000014b80)=""/76, 0x4c}], 0x7, &(0x7f0000014c80)=""/126, 0x7e}, 0x141) (async)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000014d40)={<r3=>0xffffffffffffffff}) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000014e00), 0xffffffffffffffff)
sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000015000)={&(0x7f0000014dc0)={0x10, 0x0, 0x0, 0x42180000}, 0xc, &(0x7f0000014fc0)={&(0x7f0000014e40)={0x164, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "1e1a809ff9dfd8b59e89fac2acafff42516edcff8167bc561372ca26b6f0b45cfde867af6aa9cf8c90556d5d67d86de50163fc6867e44fb2e6e04f1af359f9e55df404745565f2e24d19724d38d8801b2897d6f70a48b98cdadc87990414f3fa3a27ebb601d0736589084b1a1e44ab768bd6c51b6544aa5bda52583c4ce753fd1e39919f9786ef6a2377160dd2bc82e01613eb2735c351a9bcf8b7f8f3d49017d58d5837a316bb9f1ff69dea2ea6e59b20c22d9b3e33d019f6d1e770ad0db874"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r5, 0xa8577000)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000015040))
r6 = accept4$bt_l2cap(r3, &(0x7f0000015080), &(0x7f00000150c0)=0xe, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000015100)={<r7=>r2, 0x5, 0x741c, 0xe}) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000015180), r1)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000015240)={&(0x7f0000015140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000015200)={&(0x7f00000151c0)={0x28, r8, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfa, 0x49}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xfb}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x40801) (async)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0xdb197000) (async)
ioctl$FIOCLEX(r7, 0x5451) (async)
bind(r5, &(0x7f0000015280)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x3, 0x0, 0x1, {0xa, 0x4e20, 0x9, @mcast2, 0x7ff}}}, 0x80) (async)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bind(r9, &(0x7f0000015300)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}, 0x4}}, 0x80)
connect(r1, &(0x7f0000015380)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000015400)={0x4, [0x0, 0x0, 0x0, <r10=>0x0]}, &(0x7f0000015440)=0x14)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000015480)={r10, 0x101, 0x20}, &(0x7f00000154c0)=0xc) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000155c0)={&(0x7f0000015500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000015580)={&(0x7f0000015540)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xa4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x4801) (async)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000015640), r3)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000015700)={&(0x7f0000015600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000156c0)={&(0x7f0000015680)={0x2c, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe02ccd6298056c4}, 0x24004090)
ioctl$XFS_IOC_FSGEOMETRY_V4(r7, 0x8070587c, &(0x7f0000015740))

1m57.784125971s ago: executing program 2 (id=4242):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000019000d042dbd70973d5840586671aa00", @ANYRES32=r4, @ANYBLOB="46000600000400002400128009000100626f6e640000000014000280050001000200000005000e0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c)
listen(r5, 0x50) (async)
sendmsg$inet(r5, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_newneigh={0x6c, 0x1c, 0x400, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x20, 0x80, 0xa}, [@NDA_MASTER={0x8, 0x9, 0x9}, @NDA_VNI={0x8, 0x7, 0x7fff}, @NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_NH_ID={0x8, 0xd, 0xe}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="186000ad6b000001000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x90)

1m57.608234537s ago: executing program 2 (id=4245):
socket(0x40000000015, 0x805, 0x0) (async)
r0 = socket(0x40000000015, 0x805, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170928bd7000ffdbdf2501000000050607000000000008000900010000000800000000000000060002000100000008001700", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x808, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x808, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

1m57.418547355s ago: executing program 2 (id=4249):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e72476bea336db031c14bcdb9bc79140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a310000003539513728a49c406b0048000000030a01020000000000000000010000000900030073797a0480080002400000000008000140000000051400030076657468315f6d616376746170000000140000"], 0x90}}, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80010000100001000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/312], 0x180}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)

1m57.192075686s ago: executing program 2 (id=4253):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200b0}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x487ace48cd3dccf3, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb384, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4400d}, 0x4) (rerun: 64)
syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r4, &(0x7f0000002f00)=[{{&(0x7f00000017c0)={0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c, 0x0}}], 0x1, 0x64004000)
r5 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote, 'macvlan1\x00'}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async, rerun: 32)
setsockopt$inet6_mtu(r4, 0x29, 0x4e, 0x0, 0x0) (rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xffffffff, 0x240000, 0x400}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x4a, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

49.084471169s ago: executing program 33 (id=4253):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200b0}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x487ace48cd3dccf3, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb384, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4400d}, 0x4) (rerun: 64)
syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r4, &(0x7f0000002f00)=[{{&(0x7f00000017c0)={0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c, 0x0}}], 0x1, 0x64004000)
r5 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote, 'macvlan1\x00'}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async, rerun: 32)
setsockopt$inet6_mtu(r4, 0x29, 0x4e, 0x0, 0x0) (rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xffffffff, 0x240000, 0x400}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x4a, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

2.233279164s ago: executing program 6 (id=4916):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) (async)
ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f00000001c0))
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x1) (async)
close(r0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x2b21}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}]}}}]}, 0x5c}}, 0x24000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r4)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4)
sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8005)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0xffff0001)

1.860456842s ago: executing program 6 (id=4921):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000003100))
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)

1.675854773s ago: executing program 6 (id=4925):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x5)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
close(0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
getpeername(r0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x80)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0x9, 0x0)
sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0xc, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

1.635546494s ago: executing program 3 (id=4926):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)=ANY=[@ANYBLOB="300000001d0000022bbd7200fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="80000000bc9700000000000100"/24], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x804) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4044800) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaa8daaaaaaaaaaaa0086dd607428dd00183afffe8000000000000000000000000000bbff020000000000000000000000000001890090780000000000000000000000000000ffff00000000"], 0x0)
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000840)={0x120, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x18}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x28}}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x20000041) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040)=0x40, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xb}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "9c979b"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x4000010, 0xffffffffffffffff, 0x0) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0xffffff79}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) (async)
socket$packet(0x11, 0xa, 0x300)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000900000000000000028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa140004000a8900000000001b00000000000000010c0002800500c050b00fe12b155b81d5402ddf92a578f5c5378a1e32cce10740000000021800068014000400"], 0xac}}, 0x48c0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400050020010000000000000000000000000001ee6fe9aee018e1809cc8b3d754eac6f853d79ded20d3f5a149a5408c1796242f2a67b1f64122137030fa4d65dc999d3da4ae2f6ea236ce9b844d597e0cc7932da60cf1f1f19794594de577454d482d891ca6159f08423f9f5036a964122830ab23884c5884a2e54b8b85c4a4d40000000029d4415d33f8875d49ae0458ba999c196b7b7b1dbe2414319e06b408db33dacda2c1adda3474cba9cd4600c683e09254ab15f86e28495f1a5e99bbb676a4950c4a9259db1025fa782d84d28ebaddfe3c35ba849fd75e1a6c9cf020553f8d1fc367"], 0xac}}, 0x0) (async)
r7 = socket$packet(0x11, 0xa, 0x300)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
recvmmsg(r7, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async)
r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) (async)
getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x101, 0x100, 0x1, 0x1d36, 0x7, 0xfff]}, &(0x7f0000000340)=0x78)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9], 0x48}}, 0x0)
sendmsg$SOCK_DESTROY(r5, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x3f0}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

1.378107121s ago: executing program 4 (id=4930):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="4cf7", 0x2}], 0x1}}], 0x1, 0x4040001)
shutdown(r0, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r1=>r0, 0xffffffffffffffff, 0x100000000, 0xfffffffffffffffd})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)=<r2=>0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000200)={<r3=>0x0, 0x2, 0x1, 0x1})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000022c0)={{r0}, r2, 0x4, @unused=[0xfffffffffffffffd, 0x3, 0x7fffffffffffffff, 0x5], @devid=r3})
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00'})

1.180346473s ago: executing program 5 (id=4932):
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x8000)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@can_delroute={0x2c, 0x19, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1}, 0x6, 0x1, 0x0, 0x0, "85f79c75e3386ec2"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet(0x2, 0x3, 0x2)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

1.172565466s ago: executing program 0 (id=4933):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010300000000000000000000000005000100070000002971311888df5e5445617d6d9ed3eb158eced2f8c80e0595718db8"], 0x1c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x24004003)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000309000000000000004000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40088c0}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
syz_emit_ethernet(0x75, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb080045b400670000000000069078ac1414bbac1414aafffe4001003f099363319af9ddb8214a824041ca4e99277476cd02decebfa5db0000004bac48669e57bcb0d815db2b1f60a17b03ce888f5d44f487c1a8177d352c0e41f3bc54032f12fa1480e8cf9e28ba7c099e333b8a2f4784369f670e560c0eb3c77c4521a697122db9a6aa46394cb02f1c90e71757ebfba8385648dfd858", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000f90780000c8fd75a55cea55431a0df064535453f7c0b9376f3fa20800d19af9e68bd0c7b1c0d4c5a14e8ce3e28fd739913a5d1064c377167a00e7dc89bd8f93290b0000"], 0x0)
recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/119, 0x77}, 0x3c74a81f0248bd2d)

1.16718802s ago: executing program 4 (id=4934):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000006201000019000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2e}, 0x20)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={<r5=>0x0, 0x5e, "66ed069198cfb2cb212adc5fe3858c5b13d83f2b84fa5a5a192cebc879860b6bac225212893ef63ea57ab6ac20712378a7a546b65c8c5fbb9114c46ad8a16dd2ca93013f6f9159e47167560dbd59a91a7059e19832a7fac4e28aa5602a16"}, &(0x7f0000000280)=0x66)
setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000002c0)={r5, 0x9}, 0x8)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0x5, 0x2102a}, 0x2c)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010100}, @RTA_NH_ID={0x8, 0x1e, 0xffffc8ab}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket(0x10, 0x1, 0x366b)

1.012925499s ago: executing program 0 (id=4935):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0)
close(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x800, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x4084)

1.012215612s ago: executing program 5 (id=4936):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x884)
syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000140)=@random="a4002e79bf686325d0b94f", 0xb, 0x2)

887.562383ms ago: executing program 4 (id=4937):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0xf, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4008010)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

798.189035ms ago: executing program 0 (id=4938):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000280)={<r0=>0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x2100, &(0x7f0000000180)={@align=0x401, {0x9, 0x3, 0x80000001, 0x1}}, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0xc8})
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e21, 0x7f, @private0}, {0xa, 0x4e23, 0x8, @loopback, 0x8000}, 0x1, {[0xb4a, 0xfffffe00, 0x28a5e62f, 0x2, 0x4, 0x5, 0x60000000, 0x4]}}, 0x5c)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0xac880000)

780.941792ms ago: executing program 4 (id=4939):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x50)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x24, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000)

716.287382ms ago: executing program 5 (id=4940):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0)
ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)={0x3, @bcast})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000013"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0x15}, 0x20)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r4, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

701.785219ms ago: executing program 6 (id=4941):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) (async, rerun: 64)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x2, 0x18}, 0xc) (rerun: 64)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000200000000000000b5000000193706000000000008120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186100000e000000000000000b00000025a7f8ff010000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x7fff, 0x84, &(0x7f00000003c0)=""/132, 0x41100, 0x10, '\x00', 0x0, 0x18, r2, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x7345, r0, 0x3, &(0x7f0000000500)=[r1, r3, r1, r1], &(0x7f0000000540)=[{0x2, 0x1, 0x7, 0x5}, {0x2, 0x2, 0xe, 0x4}, {0x4, 0x5, 0x2, 0x8}], 0x10, 0x7}, 0x94) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32)
r9 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_NET_NS_FD={0x8, 0x1c, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
socket(0x1f, 0x1, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (rerun: 64)
sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async)
write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa0208004500002040000000032f9060c710e84edb7800001fe1"], 0x2e) (async)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="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"], 0x94}}, 0x0) (async)
setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 64)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000940)={<r13=>r2, &(0x7f0000000840)='GPL\x00', 0x100, &(0x7f0000000880)={@_ha_fsid={[0x3]}, {0x6, 0x6ff4, 0x5, 0x10}}, 0x6, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0x40}) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r13, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b00000000514000228bd7000fbdbdf2508000100020000000800030001000000080001000000000008000300010000000800010002000000080003000300000008000100000000000800030002000000080001000100000008000300020000ff0800010000000000080003000000000008000100000000000800030004000000080001000000000008000300020000000800010000000000080003000000000008000100010000000800030004000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000800)
getsockopt$inet6_tcp_int(r5, 0x6, 0x5, 0x0, &(0x7f00000000c0)) (async)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r14, 0x0) (async)
r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000ff010000010000000400000000a00500", @ANYRES32=r1, @ANYBLOB="1447000000000000000000009100000100800000e3fa758c0c0000000000003b5a0e8b592729", @ANYRES32=r4, @ANYRES32=r14, @ANYBLOB="03000000000000000200"/20, @ANYRES32=r15, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x50)

605.08306ms ago: executing program 3 (id=4942):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000e683cb000037773ce0be715355ab18ad5e68"], 0x14}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={<r1=>r0, 0x6, 0x40})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="10010000", @ANYRES16=r3, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x8000841}, 0x8080)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x4)

603.322924ms ago: executing program 4 (id=4943):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff0100000000000000000000630166000000000095000000000000284ba9c3093aee9a936fac7ed2c900"], &(0x7f0000000240)='GPL\x00', 0x4}, 0x90)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='io.pressure\x00', 0x2, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000280)={0x8000000000000000, 0x200, 0x1})
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x35, 0x4000884}, 0x64)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x24, 0x3e, 0x107, 0x70bd27, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x117}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x440)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
splice(r6, 0x0, r4, 0x0, 0xf3a, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30009bda190000000000008400000001000000000000000c00"/47, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000003c0)=@generic={0x3, 0x7fffffffffffffff, 0x9})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
r11 = socket(0x8000000010, 0x2, 0x0)
write(r11, &(0x7f00000002c0)="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", 0xfc)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r13, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r12, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@TCA_NETEM_LOSS={0x48, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0xc, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x94}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000))

511.719681ms ago: executing program 5 (id=4944):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={<r2=>0x0}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x8}, &(0x7f0000000200)=0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94)

478.183065ms ago: executing program 6 (id=4945):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000200081dc00000000000000000200002b67cb0ef890b85cd98833c60600000000fb410f1e64ca61f6c13dcacdbeeaa556abc69935b057ff1a58c1c5bb81388d4e4cc69e060f824a04cf17717c46c8187014f3bb33b07aca7a0ff66273ce80eed3cfdd00aa2e9356c762b1b86e570b148966f676000017f0e71fc15d852a50a948ce8c4ad2ecd9eb44b194094e45678882141015deb964343063d9418c5b8e8318272aa33750be132f0d7db5480c1d267836991d946bb5c84015f39e6b8ba501dd4ca4004f27530be0b9a4c3e836e5eaaf0d9fd585246ecfd2443d405c324043a52c7578b701ceef89cd8e55954c04868d24e30f7166efa62b8c28aceabb8f9e6bff65df82be8111a8e45966a14face2afc1b22a"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x4008000)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}, "ffffff7f00000000"}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

444.313541ms ago: executing program 0 (id=4946):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d649080001000201000207000391aa057970513500b0406700912deb5b85932247", 0x33)

383.764031ms ago: executing program 3 (id=4947):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4)
bind$inet6(r1, 0x0, 0x0)

353.98447ms ago: executing program 5 (id=4948):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="184bf63407975de92542bd5d293ac451990000003b000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94)

339.316268ms ago: executing program 3 (id=4949):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r1, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43c3}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0xffffffffffffff18)

179.602883ms ago: executing program 3 (id=4950):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000000d0605000000000000000000000000000500050000000000000000000000006d61d106be382c6d61630000000500010007000000"], 0x38}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080))
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)

178.90624ms ago: executing program 0 (id=4951):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r1=>0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x300}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000000)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=<r9=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000c90)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040011}, 0x4040010)
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000600)=0x10000000)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000804}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r11, 0x301, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x801)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r10)
sendmsg$NL80211_CMD_DISASSOCIATE(r10, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r12, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x13, 0x2a, [@supported_rates={0x1, 0x5, [{0x48, 0x1}, {0x12}, {0xfee775363ffd917b, 0x1}, {0x48, 0x1}, {0x60}]}, @peer_mgmt={0x75, 0x6, {0x1, 0x7, @void, @val=0x31, @void}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c4}, 0x800)
gettid()
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEV(r13, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xa021002}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, r14, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c1}, 0x20008841)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000c00)={0x1, 0xffc, 0x40})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DISASSOCIATE(r15, &(0x7f0000000dc0)={&(0x7f0000000c40), 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xb0, r12, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_IE={0x86, 0x2a, [@mesh_chsw={0x76, 0x6, {0x8, 0x4, 0x5, 0x9e}}, @supported_rates={0x1, 0x5, [{0x36, 0x1}, {0x5}, {0x6c, 0x1}, {0x6c}, {0x36}]}, @perr={0x84, 0x69, {0x8, 0x7, [{{}, @device_b, 0x40, @void, 0x28}, {{0x0, 0x1}, @broadcast, 0x7fff, @value=@device_b, 0x9}, {{}, @device_a, 0x9, @void, 0x24}, {{}, @device_a, 0x8, @void, 0x32}, {{}, @device_b, 0xce, @void, 0x2e}, {{}, @broadcast, 0x7, @void, 0x22}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x8}]}}, @cf={0x4, 0x6, {0xb4, 0xfb, 0x8, 0x7}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

166.839178ms ago: executing program 5 (id=4952):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={r5, 0xffffffffffffffff, 0x0, r3}, 0x10)
setsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000000)=0x20, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x4040000)

150.777695ms ago: executing program 6 (id=4953):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@getchain={0x44, 0x66, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0xf}, {0xfff3, 0x7}, {0x4, 0xc}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0x3ff80000}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}]}, 0x44}}, 0x20008040)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', <r6=>r3, 0x4, 0x80, 0x4, 0x8, 0x14, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x4f, 0x8000, 0x1, 0xffffff7f}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x962d}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8009}, 0x800)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)
socket(0x10, 0x3, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@getchain={0x44, 0x66, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0xf}, {0xfff3, 0x7}, {0x4, 0xc}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0x3ff80000}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}]}, 0x44}}, 0x20008040) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', r3, 0x4, 0x80, 0x4, 0x8, 0x14, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x4f, 0x8000, 0x1, 0xffffff7f}}) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x962d}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8009}, 0x800) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async)

27.762978ms ago: executing program 4 (id=4954):
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600050a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="09042abd7000fddbdf252b0000000a0001007770636e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x2400c090)
pipe(&(0x7f0000000500)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) (async)
close(r6)

24.613807ms ago: executing program 0 (id=4955):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000540)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8c0}, @broadcast, @device_b, @from_mac, {0x4, 0xb12}}, 0x6090, 0x3b, @default, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x0, 0x0, {0x0, 0x37e, 0x0, 0xe8, 0x0, 0x1}, 0x6, 0x0, 0x5}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x222}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4855}, 0x48814)
recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x34028800}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/154, 0x9a}], 0x1, 0x0, 0x0, 0x84}, 0x20000000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r8, 0xd1a}, 0x8)
close(r1)

0s ago: executing program 3 (id=4956):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r1)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=<r6=>0x0)
sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0)

kernel console output (not intermixed with test programs):

stering): Released all slaves
[  412.361088][   T12] bond8 (unregistering): Released all slaves
[  412.374634][   T12] bond9 (unregistering): Released all slaves
[  412.388554][   T12] bond10 (unregistering): (slave bond11): Releasing backup interface
[  412.398629][   T12] bond10 (unregistering): Released all slaves
[  412.420755][   T12] bond11 (unregistering): Released all slaves
[  412.434689][   T12] bond12 (unregistering): left allmulticast mode
[  412.441246][   T12] bond12 (unregistering): left promiscuous mode
[  412.449669][   T12] team0: Port device macvlan4 removed
[  412.460665][   T12] bond12 (unregistering): Released all slaves
[  412.477533][   T12] bond13 (unregistering): Released all slaves
[  412.490939][   T12] bond14 (unregistering): Released all slaves
[  412.504416][   T12] bond15 (unregistering): Released all slaves
[  412.521280][T17768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.534448][T17768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.564069][T17950] 8021q: VLANs not supported on gre0
[  412.571560][T17952] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  412.766909][T17768] team0: Port device team_slave_0 added
[  412.805777][T17768] team0: Port device team_slave_1 added
[  412.811431][   T12] tipc: Disabling bearer <udp:syz1>
[  412.819956][   T12] tipc: Left network mode
[  412.831398][T17970] syzkaller0: entered promiscuous mode
[  412.841434][T17970] syzkaller0: entered allmulticast mode
[  412.949221][T17980] netlink: 'syz.4.3170': attribute type 1 has an invalid length.
[  412.959810][T17982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3171'.
[  413.009058][T17984] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3171'.
[  413.027387][   T12] IPVS: stopping master sync thread 9481 ...
[  413.219150][T17768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.254699][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.343410][T17768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.382426][T17982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3171'.
[  413.383931][T17768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.403094][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.429915][T17768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.441485][T17984] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3171'.
[  413.715878][T17768] hsr_slave_0: entered promiscuous mode
[  413.723476][T17768] hsr_slave_1: entered promiscuous mode
[  413.734159][T17768] debugfs: 'hsr0' already exists in 'hsr'
[  413.739946][T17768] Cannot create hsr debugfs directory
[  413.992462][ T5145] Bluetooth: hci2: command tx timeout
[  414.146700][T18042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.161511][T18045] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  414.241160][T18038] macvlan0: entered promiscuous mode
[  414.243653][T18051] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  414.639772][   T12] hsr0: left allmulticast mode
[  414.646120][   T12] veth1_vlan: left promiscuous mode
[  414.651697][   T12] veth0_vlan: left promiscuous mode
[  414.772257][T18066] nbd0: detected capacity change from 0 to 127
[  414.788616][ T5145] block nbd0: Receive control failed (result -104)
[  415.649050][T18103] netlink: 'syz.0.3202': attribute type 4 has an invalid length.
[  415.830384][T18113] netlink: 'syz.2.3205': attribute type 1 has an invalid length.
[  415.905360][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3207'.
[  415.956802][T18113] 8021q: adding VLAN 0 to HW filter on device bond3
[  415.973072][T18119] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  415.998086][T18119] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3207'.
[  416.028169][   T12] IPVS: stop unused estimator thread 0...
[  416.072809][ T5145] Bluetooth: hci2: command tx timeout
[  416.191192][T18137] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  416.200441][T18137] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  416.316168][T18146] netlink: 'syz.2.3210': attribute type 1 has an invalid length.
[  416.458984][T18152] netlink: 'syz.2.3212': attribute type 16 has an invalid length.
[  416.468270][T18152] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3212'.
[  416.493652][ T8796] lec:lec_start_xmit: lec0:No lecd attached
[  416.542314][T18155] xt_CT: You must specify a L4 protocol and not use inversions on it
[  418.152113][ T5145] Bluetooth: hci2: command tx timeout
[  418.870262][T18119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  418.883592][T17768] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  418.958795][T17768] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  419.000476][T17768] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  419.053266][T17768] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  419.111735][T18205] netlink: 'syz.2.3216': attribute type 10 has an invalid length.
[  419.136174][T18205] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.3216'.
[  419.361640][T18216] netlink: 'syz.3.3220': attribute type 62 has an invalid length.
[  419.399851][T17768] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.455839][T17768] 8021q: adding VLAN 0 to HW filter on device team0
[  419.457794][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3222'.
[  419.495468][T14892] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.502689][T14892] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.555471][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.562718][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.733251][T18232] openvswitch: netlink: Unknown key attributes 2
[  419.754041][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'.
[  419.811402][T18237] netlink: 'syz.2.3226': attribute type 1 has an invalid length.
[  420.180933][T17768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.258050][T17768] veth0_vlan: entered promiscuous mode
[  420.278922][T17768] veth1_vlan: entered promiscuous mode
[  420.351479][T17768] veth0_macvtap: entered promiscuous mode
[  420.369388][T17768] veth1_macvtap: entered promiscuous mode
[  420.393772][T17768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.424989][T17768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.444154][T14884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.457639][T14884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.478235][T14889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.494148][T14889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.534013][T18274] syzkaller0: entered promiscuous mode
[  420.540556][T18274] syzkaller0: entered allmulticast mode
[  420.557022][T18274] netlink: 'syz.0.3237': attribute type 1 has an invalid length.
[  420.614203][T18274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3237'.
[  420.643283][T18274] 8021q: adding VLAN 0 to HW filter on device bond1
[  420.698668][T14884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.728423][T14884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.826750][T14884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.836331][T14884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.120777][T18304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.224884][T18304] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  421.279867][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'.
[  421.303370][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'.
[  421.418580][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  421.429074][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  421.438707][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  421.451222][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  421.461538][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  421.664631][T18319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3253'.
[  421.824535][T18327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3255'.
[  421.978139][T18339] netlink: 'syz.0.3258': attribute type 13 has an invalid length.
[  421.990890][T18339] netlink: 'syz.0.3258': attribute type 58 has an invalid length.
[  421.999069][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms
[  421.999102][    C1] lec:lec_tx_timeout: lec0
[  422.016355][T18339] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3258'.
[  422.099026][T18312] chnl_net:caif_netlink_parms(): no params data found
[  422.163935][T18350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3261'.
[  422.174810][T18350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3261'.
[  422.187081][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'.
[  422.350321][T18364] SET target dimension over the limit!
[  422.438559][T18366] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  422.452340][T18312] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.479429][T18312] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.487220][T18312] bridge_slave_0: entered allmulticast mode
[  422.497085][T18312] bridge_slave_0: entered promiscuous mode
[  422.507038][T18312] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.516632][T18312] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.520877][T18371] netlink: 'syz.2.3268': attribute type 21 has an invalid length.
[  422.524047][T18312] bridge_slave_1: entered allmulticast mode
[  422.540809][T18312] bridge_slave_1: entered promiscuous mode
[  422.547051][T18371] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3268'.
[  422.612533][T18312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.639573][T18312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.682867][T18312] team0: Port device team_slave_0 added
[  422.703747][T18312] team0: Port device team_slave_1 added
[  422.756624][T18312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.764617][T18312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.792868][T18312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.835762][T18312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.856497][T18312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.902484][T18312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.048837][T18312] hsr_slave_0: entered promiscuous mode
[  423.056321][T18312] hsr_slave_1: entered promiscuous mode
[  423.113062][T18312] debugfs: 'hsr0' already exists in 'hsr'
[  423.118868][T18312] Cannot create hsr debugfs directory
[  423.514028][ T5145] Bluetooth: hci0: command tx timeout
[  425.511245][T18372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  425.537815][T18312] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  425.580972][T18312] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  425.605759][ T5145] Bluetooth: hci0: command tx timeout
[  425.626924][T18312] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  425.686873][T18312] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  425.711427][T18410] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  425.722439][T18410] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  425.733194][T18410] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  425.794006][T18418] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  425.814208][T18426] netlink: 'syz.0.3281': attribute type 3 has an invalid length.
[  425.837685][T18426] netlink: 'syz.0.3281': attribute type 1 has an invalid length.
[  425.861853][T18426] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3281'.
[  425.882405][T18426] NCSI netlink: No device for ifindex 813332851
[  426.007588][T18312] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.050089][T18312] 8021q: adding VLAN 0 to HW filter on device team0
[  426.067495][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.074764][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.135801][T14889] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.143591][T14889] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.279843][T18444] tipc: Started in network mode
[  426.289424][T18444] tipc: Node identity da2fd50b3a8a, cluster identity 4711
[  426.298091][T18444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  426.334173][T18446] netlink: 'syz.3.3286': attribute type 1 has an invalid length.
[  426.398350][T18446] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  426.451131][T18455] __nla_validate_parse: 1 callbacks suppressed
[  426.451156][T18455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3287'.
[  426.477842][T18454] syzkaller0: MTU too low for tipc bearer
[  426.498363][T18454] tipc: Disabling bearer <eth:syzkaller0>
[  426.594274][T18454] netlink: 'syz.2.3285': attribute type 1 has an invalid length.
[  426.633109][T18454] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3285'.
[  426.725865][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3288'.
[  426.776056][T18312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.283522][T18312] veth0_vlan: entered promiscuous mode
[  427.308994][T18312] veth1_vlan: entered promiscuous mode
[  427.369556][T18312] veth0_macvtap: entered promiscuous mode
[  427.393965][T18312] veth1_macvtap: entered promiscuous mode
[  427.436398][T18312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.459730][T18312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.483598][T14884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.505565][T14884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.526548][T14884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.566898][T14889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.651744][T18482] syzkaller0: entered promiscuous mode
[  427.657428][T18482] syzkaller0: entered allmulticast mode
[  427.672481][ T5145] Bluetooth: hci0: command tx timeout
[  427.731243][T14889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.748712][T14889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.841516][T14895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.862414][T14895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.906789][T16079] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  427.951654][T16079] CPU: 0 UID: 0 PID: 16079 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  427.951681][T16079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  427.951693][T16079] Call Trace:
[  427.951700][T16079]  <TASK>
[  427.951708][T16079]  dump_stack_lvl+0xe8/0x150
[  427.951743][T16079]  dump_header+0xd3/0x4c0
[  427.951775][T16079]  oom_kill_process+0x3ab/0x970
[  427.951801][T16079]  out_of_memory+0x106c/0x1410
[  427.951821][T16079]  ? percpu_ref_put+0x19/0x180
[  427.951847][T16079]  ? __pfx___mutex_lock+0x10/0x10
[  427.951880][T16079]  ? __pfx_out_of_memory+0x10/0x10
[  427.951897][T16079]  ? do_raw_spin_unlock+0xf5/0x210
[  427.951929][T16079]  try_charge_memcg+0xc53/0x1560
[  427.951972][T16079]  ? __pfx_try_charge_memcg+0x10/0x10
[  427.952009][T16079]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  427.952037][T16079]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  427.952060][T16079]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  427.952086][T16079]  __swap_cache_prepare_and_add+0xe8/0x760
[  427.952117][T16079]  ? page_rmappable_folio+0x9a/0x170
[  427.952160][T16079]  swap_cache_alloc_folio+0xf1/0x240
[  427.952194][T16079]  swap_cluster_readahead+0x369/0x690
[  427.952222][T16079]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  427.952256][T16079]  ? get_vma_policy+0x27b/0x3c0
[  427.952283][T16079]  swapin_readahead+0x196/0xc50
[  427.952314][T16079]  ? __pfx_swapin_readahead+0x10/0x10
[  427.952336][T16079]  ? swap_table_get+0x1e/0x260
[  427.952362][T16079]  ? swap_table_get+0x1e/0x260
[  427.952387][T16079]  ? swap_table_get+0x1e/0x260
[  427.952415][T16079]  ? swap_table_get+0x216/0x260
[  427.952444][T16079]  ? swap_cache_get_folio+0x513/0x520
[  427.952478][T16079]  do_swap_page+0x56f/0x5a20
[  427.952531][T16079]  ? do_swap_page+0x127/0x5a20
[  427.952557][T16079]  ? __pfx_do_swap_page+0x10/0x10
[  427.952582][T16079]  ? __pte_offset_map+0x1ae/0x240
[  427.952606][T16079]  ? pte_offset_map_rw_nolock+0xea/0x160
[  427.952629][T16079]  handle_mm_fault+0x12d2/0x3310
[  427.952675][T16079]  ? handle_mm_fault+0xee/0x3310
[  427.952712][T16079]  ? __pfx_handle_mm_fault+0x10/0x10
[  427.952738][T16079]  ? lock_vma_under_rcu+0x45a/0x500
[  427.952790][T16079]  do_user_addr_fault+0xa73/0x1340
[  427.952824][T16079]  ? rcu_is_watching+0x15/0xb0
[  427.952851][T16079]  ? trace_page_fault_user+0x84/0x210
[  427.952879][T16079]  exc_page_fault+0x6a/0xc0
[  427.952904][T16079]  asm_exc_page_fault+0x26/0x30
[  427.952923][T16079] RIP: 0033:0x7fed5335d04e
[  427.952943][T16079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  427.952959][T16079] RSP: 002b:00007ffc495502a8 EFLAGS: 00010246
[  427.952977][T16079] RAX: 0000000000000000 RBX: 0000555573ebf500 RCX: 00007fed5335d04e
[  427.952991][T16079] RDX: 00007ffc49550300 RSI: 0000000000000000 RDI: 0000000000000000
[  427.953003][T16079] RBP: 00007ffc4955036c R08: 0000000000000000 R09: 0000000000000000
[  427.953014][T16079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  427.953026][T16079] R13: 00000000000927c0 R14: 0000000000068407 R15: 00007ffc495503c0
[  427.953061][T16079]  </TASK>
[  428.271453][T16079] memory: usage 307200kB, limit 307200kB, failcnt 403
[  428.288190][T16079] memory+swap: usage 307428kB, limit 9007199254740988kB, failcnt 0
[  428.296734][T16079] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  428.304213][T16079] Memory cgroup stats for /syz2:
[  428.304501][T16079] cache 0
[  428.312844][T16079] rss 0
[  428.347156][T16079] rss_huge 0
[  428.356110][T16079] shmem 0
[  428.359105][T16079] mapped_file 0
[  428.401144][T16079] dirty 0
[  428.424843][T16079] writeback 0
[  428.445869][T18495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3295'.
[  428.455066][T18495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3295'.
[  428.460419][T16079] workingset_refault_anon 0
[  428.473635][T16079] workingset_refault_file 0
[  428.478226][T16079] swap 233472
[  428.481598][T16079] swapcached 233472
[  428.488049][T16079] pgpgin 56001
[  428.491469][T16079] pgpgout 56001
[  428.498042][T16079] pgfault 103877
[  428.504370][T16079] pgmajfault 2
[  428.507782][T16079] inactive_anon 0
[  428.511485][T16079] active_anon 0
[  428.515138][T16079] inactive_file 0
[  428.520202][T16079] active_file 0
[  428.523337][T18497] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3295'.
[  428.523873][T16079] unevictable 0
[  428.539263][T16079] hierarchical_memory_limit 314572800
[  428.544824][T16079] hierarchical_memsw_limit 9223372036854771712
[  428.551456][T16079] total_cache 0
[  428.558657][T16079] total_rss 0
[  428.562176][T16079] total_rss_huge 0
[  428.566010][T16079] total_shmem 0
[  428.569516][T16079] total_mapped_file 0
[  428.573698][T16079] total_dirty 0
[  428.577180][T16079] total_writeback 0
[  428.581020][T16079] total_workingset_refault_anon 0
[  428.586685][T16079] total_workingset_refault_file 0
[  428.593317][T16079] total_swap 233472
[  428.597245][T16079] total_swapcached 233472
[  428.601652][T16079] total_pgpgin 56001
[  428.606130][T16079] total_pgpgout 56001
[  428.610237][T16079] total_pgfault 103877
[  428.614587][T16079] total_pgmajfault 2
[  428.618950][T16079] total_inactive_anon 0
[  428.623327][T16079] total_active_anon 0
[  428.627353][T16079] total_inactive_file 0
[  428.631536][T16079] total_active_file 0
[  428.638709][T16079] total_unevictable 0
[  428.642917][T16079] anon_cost 0
[  428.646277][T16079] file_cost 0
[  428.654537][T16079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3285,pid=18443,uid=0
[  428.671255][T16079] Memory cgroup out of memory: OOM victim 18443 (syz.2.3285) is already exiting. Skip killing the task
[  428.688656][T18497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.730890][T18497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.760755][T18497] bond0 (unregistering): Released all slaves
[  428.945054][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3297'.
[  428.978331][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3299'.
[  429.017666][T18506] bond4: entered promiscuous mode
[  429.023931][T18506] 8021q: adding VLAN 0 to HW filter on device bond4
[  429.049301][T18512] bridge1: entered promiscuous mode
[  429.055611][T18512] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  429.073164][T18510] tipc: Started in network mode
[  429.089372][T18510] tipc: Node identity 8a635afd2673, cluster identity 4711
[  429.119987][T18510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.254549][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'.
[  429.291173][T18516] syzkaller0: entered promiscuous mode
[  429.297136][T18516] syzkaller0: entered allmulticast mode
[  429.306836][T18516] tipc: Resetting bearer <eth:syzkaller0>
[  429.383980][T18509] tipc: Resetting bearer <eth:syzkaller0>
[  429.754444][ T5145] Bluetooth: hci0: command tx timeout
[  429.791282][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3305'.
[  431.905820][T18509] tipc: Disabling bearer <eth:syzkaller0>
[  431.932157][T18541] xfrm1: entered promiscuous mode
[  431.937430][T18541] xfrm1: entered allmulticast mode
[  431.945481][ T5879] tipc: Node number set to 2886753021
[  432.040060][T18566] x_tables: unsorted entry at hook 3
[  432.112780][T18568] atomic_op ffff8880298ca998 conn xmit_atomic 0000000000000000
[  432.124911][T18568] syzkaller0: entered promiscuous mode
[  432.130477][T18568] syzkaller0: entered allmulticast mode
[  432.215456][T18575] __nla_validate_parse: 2 callbacks suppressed
[  432.215476][T18575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3313'.
[  432.237831][T18575] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3313'.
[  432.248715][T18575] netlink: 'syz.2.3313': attribute type 6 has an invalid length.
[  432.257112][T18575] netlink: 'syz.2.3313': attribute type 5 has an invalid length.
[  432.286724][T18575] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3313'.
[  432.327036][T18578] netlink: 'syz.0.3314': attribute type 15 has an invalid length.
[  432.399645][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'.
[  432.618532][T18603] netlink: 'syz.0.3323': attribute type 10 has an invalid length.
[  432.638631][T18603] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.647329][T18603] bridge_slave_1: left allmulticast mode
[  432.653799][T18603] bridge_slave_1: left promiscuous mode
[  432.662107][T18603] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.801718][T18614] SET target dimension over the limit!
[  432.890155][T18616] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3327'.
[  433.105042][T18635] netlink: 'syz.3.3334': attribute type 1 has an invalid length.
[  433.119292][T18635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.197916][T18637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3335'.
[  433.214993][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'.
[  433.387018][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'.
[  433.440230][T18648] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3338'.
[  433.670349][T18656] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3341'.
[  433.769644][T18659] netlink: 'syz.4.3342': attribute type 2 has an invalid length.
[  433.920452][T18661] syzkaller0: entered allmulticast mode
[  433.941304][T18661] syzkaller0 (unregistering): left allmulticast mode
[  434.324934][T18676] netdevsim netdevsim2: Direct firmware load for 0 failed with error -2
[  434.334910][T18676] netdevsim netdevsim2: Falling back to sysfs fallback for: 0
[  434.729519][T18696] netlink: 'syz.4.3353': attribute type 2 has an invalid length.
[  435.091017][T18715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.197802][T18723] Bluetooth: MGMT ver 1.23
[  435.663159][T18753] netlink: 'syz.3.3372': attribute type 10 has an invalid length.
[  435.717139][T18753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.758540][T18753] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  435.764002][T18761] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  435.778231][T18760] Cannot find add_set index 2 as target
[  436.261695][T18794] netlink: 'syz.3.3380': attribute type 1 has an invalid length.
[  436.302485][T18796] ªªªªª»: renamed from vlan1 (while UP)
[  436.334852][T18798] netlink: 'syz.3.3382': attribute type 1 has an invalid length.
[  436.784998][T18824] sctp: [Deprecated]: syz.2.3389 (pid 18824) Use of struct sctp_assoc_value in delayed_ack socket option.
[  436.784998][T18824] Use struct sctp_sack_info instead
[  436.939153][T18832] bridge_slave_0: left allmulticast mode
[  436.963590][T18832] bridge_slave_0: left promiscuous mode
[  436.982995][T18832] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.020731][T18832] team0: Port device team_slave_0 removed
[  437.050035][T18832] team0: Port device team_slave_1 removed
[  437.080078][T18832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.105754][T18832] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.124028][T18832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.133657][T18832] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.150117][T18832] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  437.342033][T18863] __nla_validate_parse: 10 callbacks suppressed
[  437.342052][T18863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3399'.
[  437.524781][T18879] validate_nla: 4 callbacks suppressed
[  437.524803][T18879] netlink: 'syz.0.3402': attribute type 1 has an invalid length.
[  437.539209][T18879] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3402'.
[  437.846607][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'.
[  437.864151][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3405'.
[  437.885510][T14895] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  437.895708][T14895] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  437.907547][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'.
[  437.953981][T14893] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  437.971475][T14893] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  438.117102][T18906] veth1_to_bridge: entered allmulticast mode
[  438.137049][T18906] netlink: 'syz.3.3408': attribute type 21 has an invalid length.
[  438.158197][T18906] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3408'.
[  438.220678][T18906] netlink: 'syz.3.3408': attribute type 4 has an invalid length.
[  438.230423][T18906] netlink: 'syz.3.3408': attribute type 5 has an invalid length.
[  438.245122][T18906] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3408'.
[  438.287330][T18906] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3408'.
[  438.319563][T18916] syzkaller0: entered promiscuous mode
[  438.334552][T18916] syzkaller0: entered allmulticast mode
[  438.597351][T18930] netlink: 'syz.4.3412': attribute type 1 has an invalid length.
[  438.658373][T18934] sctp: [Deprecated]: syz.2.3413 (pid 18934) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.658373][T18934] Use struct sctp_sack_info instead
[  438.662633][T18930] 8021q: adding VLAN 0 to HW filter on device bond1
[  438.699484][T18930] 8021q: adding VLAN 0 to HW filter on device bond1
[  438.706904][T18930] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  438.718511][T18930] bond1: (slave vcan1): Error -95 calling set_mac_address
[  439.052022][T18954] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20000
[  439.466068][T18987] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  439.741649][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3431'.
[  439.750958][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3431'.
[  439.773586][T18999] netlink: 'syz.0.3431': attribute type 1 has an invalid length.
[  439.781475][T18999] netlink: 'syz.0.3431': attribute type 2 has an invalid length.
[  439.841491][T19008] xt_CONNSECMARK: invalid mode: 0
[  439.892293][T19011] IPv6: sit1: Disabled Multicast RS
[  439.899955][T19011] sit1: entered allmulticast mode
[  440.159479][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  440.169971][ T1303] lec:lec_start_xmit: lec0:No lecd attached
[  440.422967][T19041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  440.430647][T19041] IPv6: NLM_F_CREATE should be set when creating new route
[  440.444588][T19042] lo: entered allmulticast mode
[  440.453682][T19042] tunl0: entered allmulticast mode
[  440.463507][T19042] gre0: entered allmulticast mode
[  440.482618][T19042] gretap0: entered allmulticast mode
[  440.501007][T19042] erspan0: entered allmulticast mode
[  440.514061][T19042] ip_vti0: entered allmulticast mode
[  440.523465][T19042] ip6_vti0: entered allmulticast mode
[  440.533912][T19042] sit0: entered allmulticast mode
[  440.543664][T19042] ip6tnl0: entered allmulticast mode
[  440.551359][T19042] ip6gre0: entered allmulticast mode
[  440.559200][T19042] syz_tun: entered allmulticast mode
[  440.567227][T19042] ip6gretap0: entered allmulticast mode
[  440.575316][T19042] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.583052][T19042] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.591587][T19042] bridge0: entered allmulticast mode
[  440.600704][T19042] vcan0: entered allmulticast mode
[  440.607960][T19042] bond0: entered allmulticast mode
[  440.613338][T19042] bond_slave_0: entered allmulticast mode
[  440.620448][T19042] bond_slave_1: entered allmulticast mode
[  440.628993][T19042] team0: entered allmulticast mode
[  440.634272][T19042] team_slave_0: entered allmulticast mode
[  440.640139][T19042] team_slave_1: entered allmulticast mode
[  440.649148][T19042] nlmon0: entered allmulticast mode
[  440.656167][T19042] caif0: entered allmulticast mode
[  440.661510][T19042] batadv0: entered allmulticast mode
[  440.670186][T19042] vxcan0: entered allmulticast mode
[  440.676386][T19042] vxcan1: entered allmulticast mode
[  440.683563][T19042] veth0: entered allmulticast mode
[  440.690811][T19042] veth1: entered allmulticast mode
[  440.699160][T19042] wg0: entered allmulticast mode
[  440.706202][T19042] wg1: entered allmulticast mode
[  440.714359][T19042] wg2: entered allmulticast mode
[  440.723753][T19042] veth0_to_bridge: entered allmulticast mode
[  440.734972][T19042] veth1_to_bridge: entered allmulticast mode
[  440.745663][T19042] veth0_to_bond: entered allmulticast mode
[  440.755449][T19042] veth1_to_bond: entered allmulticast mode
[  440.765034][T19042] veth0_to_team: entered allmulticast mode
[  440.775843][T19042] veth1_to_team: entered allmulticast mode
[  440.785403][T19042] veth0_to_batadv: entered allmulticast mode
[  440.799272][T19042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.806914][T19042] batadv_slave_0: entered allmulticast mode
[  440.815800][T19042] veth1_to_batadv: entered allmulticast mode
[  440.825460][T19042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.835117][T19042] batadv_slave_1: entered allmulticast mode
[  440.844405][T19042] xfrm0: entered allmulticast mode
[  440.851090][T19042] veth0_to_hsr: entered allmulticast mode
[  440.859590][T19042] hsr_slave_0: entered allmulticast mode
[  440.866910][T19042] veth1_to_hsr: entered allmulticast mode
[  440.875028][T19042] hsr_slave_1: entered allmulticast mode
[  440.883678][T19042] hsr0: entered allmulticast mode
[  440.890390][T19042] veth1_virt_wifi: entered allmulticast mode
[  440.899190][T19042] veth0_virt_wifi: entered allmulticast mode
[  440.907331][T19042] virt_wifi0: entered allmulticast mode
[  440.914089][T19042] veth1_vlan: entered allmulticast mode
[  440.923450][T19042] veth0_vlan: entered allmulticast mode
[  440.938129][T19042] vlan0: entered allmulticast mode
[  440.944457][T19042] vlan1: entered allmulticast mode
[  440.949692][T19042] macvlan0: entered allmulticast mode
[  440.956504][T19042] macvlan1: entered allmulticast mode
[  440.964745][T19042] ipvlan0: entered allmulticast mode
[  440.970335][T19042] ipvlan1: entered allmulticast mode
[  440.977106][T19042] veth1_macvtap: entered allmulticast mode
[  440.985415][T19042] veth0_macvtap: entered allmulticast mode
[  440.995258][T19042] macvtap0: entered allmulticast mode
[  441.003397][T19042] macsec0: entered allmulticast mode
[  441.010907][T19042] geneve0: entered allmulticast mode
[  441.019407][T19042] geneve1: entered allmulticast mode
[  441.029070][T19042] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  441.039957][T19042] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  441.050042][T19042] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  441.059761][T19042] netdevsim netdevsim4 netdevsim3: entered allmulticast mode
[  441.076654][T19042] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode
[  441.088550][T19042] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode
[  441.097379][T19042] xfrm1: left promiscuous mode
[  441.104929][T19042] bond1: entered allmulticast mode
[  441.110177][T19042] syztnl0: entered allmulticast mode
[  441.119417][T19042] syzkaller0: entered allmulticast mode
[  441.144376][T14895] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.166755][T14895] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.176132][T14895] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.201955][T14895] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.202522][T19059] Bluetooth: MGMT ver 1.23
[  441.427109][T19066] syzkaller0: entered promiscuous mode
[  441.449715][T19066] syzkaller0: entered allmulticast mode
[  441.611631][T19090] openvswitch: netlink: IPv6 tunnel dst address is zero
[  441.747322][T19098] netlink: 'syz.2.3458': attribute type 21 has an invalid length.
[  441.934002][T19116] netlink: 'syz.2.3463': attribute type 1 has an invalid length.
[  442.090004][T19116] hsr_slave_0 (unregistering): left promiscuous mode
[  442.316374][T19137] hsr0: entered promiscuous mode
[  442.321532][T19137] macvlan2: entered allmulticast mode
[  442.328986][T19137] hsr0: entered allmulticast mode
[  442.335066][T19137] hsr_slave_0: entered allmulticast mode
[  442.340863][T19137] hsr_slave_1: entered allmulticast mode
[  442.538297][T19147] __nla_validate_parse: 7 callbacks suppressed
[  442.538316][T19147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3470'.
[  442.605335][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3471'.
[  442.657479][T19156] syzkaller0: entered promiscuous mode
[  442.681881][T19156] syzkaller0: entered allmulticast mode
[  442.842345][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  442.855415][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  442.864178][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  442.888329][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  442.897434][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  442.940116][T19171] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3476'.
[  442.949657][T19166] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3476'.
[  443.169456][T19167] chnl_net:caif_netlink_parms(): no params data found
[  443.240987][T19184] netlink: 'syz.4.3480': attribute type 178 has an invalid length.
[  443.311943][T19167] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.319265][T19167] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.326973][T19167] bridge_slave_0: entered allmulticast mode
[  443.334505][T19167] bridge_slave_0: entered promiscuous mode
[  443.345278][T19167] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.353909][T19167] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.361540][T19167] bridge_slave_1: entered allmulticast mode
[  443.369887][T19167] bridge_slave_1: entered promiscuous mode
[  443.415459][T19167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.427866][T19167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  443.461387][T19167] team0: Port device team_slave_0 added
[  443.470367][T19167] team0: Port device team_slave_1 added
[  443.471268][T19192] Cannot find set identified by id 0 to match
[  443.510613][T19167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.517721][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.550410][T19167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.568217][T19167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.575610][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.616552][T19167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  443.643861][T19194] : entered promiscuous mode
[  443.689443][T19197] tls_set_device_offload: netdev not found
[  443.764505][T19167] hsr_slave_0: entered promiscuous mode
[  443.776156][T19167] hsr_slave_1: entered promiscuous mode
[  443.790756][T19167] debugfs: 'hsr0' already exists in 'hsr'
[  443.801097][T19167] Cannot create hsr debugfs directory
[  443.972164][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3489'.
[  444.018893][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3490'.
[  444.118114][T19214] tipc: Started in network mode
[  444.132453][T19214] tipc: Node identity c69c18d7728d, cluster identity 4711
[  444.139933][T19214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.194111][T19214] syzkaller0: entered promiscuous mode
[  444.214880][T19214] syzkaller0: entered allmulticast mode
[  444.358866][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'.
[  444.371360][T19214] nbd: socks must be embedded in a SOCK_ITEM attr
[  444.379057][T19229] openvswitch: netlink: nsh attr 255 is out of range max 3
[  444.404933][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'.
[  444.423564][T19214] tipc: Resetting bearer <eth:syzkaller0>
[  444.455600][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3496'.
[  444.494893][T19213] tipc: Resetting bearer <eth:syzkaller0>
[  444.534032][T19213] tipc: Disabling bearer <eth:syzkaller0>
[  444.586214][T19167] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  444.592583][T19245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3496'.
[  444.653556][T19240] syzkaller1: entered promiscuous mode
[  444.665464][T19240] syzkaller1: entered allmulticast mode
[  444.686053][T19167] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  444.884085][T19167] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  444.921142][T19167] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  444.952703][ T5145] Bluetooth: hci3: command tx timeout
[  445.071254][T19167] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.117094][T19167] 8021q: adding VLAN 0 to HW filter on device team0
[  445.139987][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.147272][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.183371][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.190692][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.274999][   T11] block nbd0: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 30 seconds
[  445.288012][   T11] block nbd0: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 30 seconds
[  445.301995][   T11] block nbd0: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 30 seconds
[  445.315526][   T11] block nbd0: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 30 seconds
[  445.556316][T19296] openvswitch: netlink: IP tunnel TTL not specified.
[  445.606210][T19302] bridge0: port 3(veth0_to_bridge) entered blocking state
[  445.616915][T19302] bridge0: port 3(veth0_to_bridge) entered disabled state
[  445.626619][T19302] veth0_to_bridge: entered promiscuous mode
[  445.763103][T19297] syzkaller1: entered promiscuous mode
[  445.768739][T19297] syzkaller1: entered allmulticast mode
[  445.810151][T19315] netlink: 'syz.3.3511': attribute type 9 has an invalid length.
[  445.992067][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  446.000691][    C1] lec:lec_tx_timeout: lec0
[  446.022682][T19167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.483137][T19359] Bluetooth: MGMT ver 1.23
[  446.785658][T19167] veth0_vlan: entered promiscuous mode
[  446.800176][T19372] syzkaller1: entered promiscuous mode
[  446.808057][T19372] syzkaller1: entered allmulticast mode
[  446.831399][T19167] veth1_vlan: entered promiscuous mode
[  446.925931][T19167] veth0_macvtap: entered promiscuous mode
[  446.940777][T19167] veth1_macvtap: entered promiscuous mode
[  446.980360][T19167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.011399][T19167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.032225][ T5145] Bluetooth: hci3: command tx timeout
[  447.038865][T14893] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.055361][T14893] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.075528][T14893] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.085325][T14893] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.259499][T14884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.276583][T14884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.317392][T14893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.329459][T14893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.348040][T19394] netlink: 'syz.0.3533': attribute type 1 has an invalid length.
[  447.406468][T19394] 8021q: adding VLAN 0 to HW filter on device bond2
[  447.571933][T19404] __nla_validate_parse: 3 callbacks suppressed
[  447.571953][T19404] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.3473'.
[  447.632864][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3535'.
[  447.830184][T19415] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  447.935401][   T30] audit: type=1800 audit(1775450565.780:8): pid=19418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3541" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  447.935889][T19418] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  448.025132][T19418] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  448.035678][T19418] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  448.133555][T19418] syz.0.3541 (19418) used greatest stack depth: 16840 bytes left
[  448.239082][T19439] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3546'.
[  448.580135][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3552'.
[  448.598960][T19464] netlink: 'syz.5.3552': attribute type 39 has an invalid length.
[  449.115265][ T5838] Bluetooth: hci3: command tx timeout
[  449.158845][T19489] netlink: 'syz.5.3558': attribute type 1 has an invalid length.
[  449.278322][T19489] 8021q: adding VLAN 0 to HW filter on device bond1
[  449.309708][T19492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3559'.
[  449.350979][T19489] netlink: 'syz.5.3558': attribute type 1 has an invalid length.
[  449.361420][T19494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3559'.
[  449.390028][T19489] vxlan0: entered promiscuous mode
[  449.405784][T19503] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3562'.
[  449.499260][T19503] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3562'.
[  449.673604][T19520] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  449.719068][T19519] macvlan0: entered promiscuous mode
[  449.737364][T19524] IPVS: length: 24 != 12312
[  449.882170][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'.
[  450.079949][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.112812][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3575'.
[  450.278672][T19561] netlink: 'syz.4.3578': attribute type 11 has an invalid length.
[  450.316165][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  450.326914][T19561] netlink: 'syz.4.3578': attribute type 11 has an invalid length.
[  450.349322][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  450.366470][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  450.384287][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  450.439819][T19573] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.520707][T19580] netlink: 'syz.4.3584': attribute type 1 has an invalid length.
[  450.628797][T19589] netlink: 'syz.5.3585': attribute type 29 has an invalid length.
[  450.640903][T19580] 8021q: adding VLAN 0 to HW filter on device bond2
[  450.750986][T19587] bond2: (slave veth3): Enslaving as an active interface with a down link
[  450.796513][T19580] 8021q: adding VLAN 0 to HW filter on device batadv1
[  450.805402][T19580] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  450.995527][T19597] erspan0: entered promiscuous mode
[  451.009559][T19598] erspan0: left promiscuous mode
[  451.115673][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.194166][ T5838] Bluetooth: hci3: command tx timeout
[  451.482464][T19624] netlink: 'syz.5.3594': attribute type 1 has an invalid length.
[  451.490997][T19624] netlink: 'syz.5.3594': attribute type 2 has an invalid length.
[  451.507756][T19623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  451.613104][T19628] netlink: 'syz.3.3596': attribute type 3 has an invalid length.
[  451.701092][T19632] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  451.768477][T19639] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  451.797275][T19639] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  451.805266][T19639] gretap1: entered promiscuous mode
[  451.810583][T19639] gretap1: entered allmulticast mode
[  451.942603][T19649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.965427][T19649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.992455][T19649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.015902][T19654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.062103][T19654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.158198][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.254986][T19665] veth1_macvtap: left promiscuous mode
[  452.473806][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.761673][T19698] xt_connbytes: Forcing CT accounting to be enabled
[  452.907488][T19698] xt_CT: No such helper "netbios-ns"
[  453.192289][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.321039][T19736] __nla_validate_parse: 10 callbacks suppressed
[  453.321059][T19736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3625'.
[  453.625931][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'.
[  453.870307][T19762] syzkaller0: entered promiscuous mode
[  453.879074][T19762] syzkaller0: entered allmulticast mode
[  453.910125][T19764] : entered promiscuous mode
[  454.262783][T19787] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  454.373903][T19793] validate_nla: 2 callbacks suppressed
[  454.373925][T19793] netlink: 'syz.4.3637': attribute type 39 has an invalid length.
[  456.055681][T19802] netlink: 'syz.5.3640': attribute type 7 has an invalid length.
[  456.100157][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'.
[  456.237442][ T5145] Bluetooth: hci3: command 0x0405 tx timeout
[  456.313605][ T5886] net_ratelimit: 4 callbacks suppressed
[  456.313626][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.527637][T19829] netlink: 'syz.5.3643': attribute type 13 has an invalid length.
[  456.553656][T19827] netlink: 'syz.2.3646': attribute type 1 has an invalid length.
[  456.640133][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.667988][T19829] erspan0: refused to change device tx_queue_len
[  456.689947][T19831] xt_CT: You must specify a L4 protocol and not use inversions on it
[  456.704391][T19829] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  456.859739][T19827] bond5: entered promiscuous mode
[  456.935658][T19827] 8021q: adding VLAN 0 to HW filter on device bond5
[  456.979364][T19832] 8021q: adding VLAN 0 to HW filter on device bond5
[  456.999949][T19832] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  457.028182][T19832] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  457.045070][T19832] bond5: (slave vti0): making interface the new active one
[  457.070073][T19832] vti0: entered promiscuous mode
[  457.077777][T19832] bond5: (slave vti0): Enslaving as an active interface with an up link
[  457.142916][T19852] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3651'.
[  457.352386][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.373759][T19862] netlink: 'syz.3.3656': attribute type 1 has an invalid length.
[  457.493902][T19862] bond1: entered promiscuous mode
[  457.499674][T19862] 8021q: adding VLAN 0 to HW filter on device bond1
[  457.717687][T19880] netlink: 'syz.4.3660': attribute type 1 has an invalid length.
[  457.765988][T19880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3660'.
[  457.797721][T19887] netlink: 'syz.4.3660': attribute type 62 has an invalid length.
[  457.835226][T19880] netlink: 'syz.4.3660': attribute type 1 has an invalid length.
[  457.848514][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3660'.
[  457.862141][T19880] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3660'.
[  457.880223][T19892] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  457.881105][T19880] netlink: 'syz.4.3660': attribute type 1 has an invalid length.
[  457.908964][T19887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3660'.
[  458.233829][T19913] veth0_to_bridge: left promiscuous mode
[  458.240774][T19913] bridge0: port 3(veth0_to_bridge) entered disabled state
[  458.265061][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3670'.
[  458.276600][T19913] bridge_slave_0: left promiscuous mode
[  458.284046][T19913] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.298104][T19913] bridge_slave_1: left promiscuous mode
[  458.304658][T19913] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.318941][T19913] bond0: (slave bond_slave_0): Releasing backup interface
[  458.333289][T19913] bond0: (slave bond_slave_1): Releasing backup interface
[  458.350503][T19913] team0: Port device team_slave_0 removed
[  458.360177][T19913] team0: Port device team_slave_1 removed
[  458.366946][T19913] batman_adv: batadv0: Removing interface: batadv_slave_0
[  458.375783][T19913] batman_adv: batadv0: Removing interface: batadv_slave_1
[  458.384248][T19913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  458.393263][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.410093][T19914] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.418796][T19914] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.735736][T19935] wireguard0: entered promiscuous mode
[  458.749600][T19935] wireguard0: entered allmulticast mode
[  458.789300][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.798719][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.815501][T19953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.824191][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.832997][ T5886] IPVS: starting estimator thread 0...
[  458.870988][T19935] team0: Port device wireguard0 added
[  458.948935][T19954] IPVS: using max 27 ests per chain, 64800 per kthread
[  459.182630][T19964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3682'.
[  459.191684][T19964] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3682'.
[  459.226696][T19964] netlink: 'syz.4.3682': attribute type 5 has an invalid length.
[  459.235824][T19964] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3682'.
[  459.382914][T19979] vcan0: entered allmulticast mode
[  459.553406][T19993] netlink: 'syz.4.3689': attribute type 6 has an invalid length.
[  459.595839][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3690'.
[  459.874183][T20008] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3693'.
[  459.980057][T20011] netlink: 'syz.0.3697': attribute type 28 has an invalid length.
[  460.466982][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3703'.
[  460.620259][T20048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3704'.
[  460.929176][T20062] netlink: 'syz.2.3712': attribute type 10 has an invalid length.
[  460.954614][T20062] bridge_slave_1: left allmulticast mode
[  460.970608][T20062] bridge_slave_1: left promiscuous mode
[  460.979737][T20062] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.034299][T20062] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  461.147503][T20076] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3716'.
[  461.180635][T20076] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  461.302645][T20083] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3718'.
[  461.515208][ T1219] net_ratelimit: 5 callbacks suppressed
[  461.515229][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.577600][T20097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.586740][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.630419][T20106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3723'.
[  461.828181][T20113] team0: No ports can be present during mode change
[  461.857922][T20113] sctp: [Deprecated]: syz.5.3728 (pid 20113) Use of struct sctp_assoc_value in delayed_ack socket option.
[  461.857922][T20113] Use struct sctp_sack_info instead
[  461.866684][T20117] netlink: 'syz.4.3729': attribute type 1 has an invalid length.
[  461.883047][T20117] netlink: 'syz.4.3729': attribute type 1 has an invalid length.
[  461.890930][T20117] netlink: 'syz.4.3729': attribute type 8 has an invalid length.
[  462.033287][T20122] sit1: entered promiscuous mode
[  462.039540][T20122] sit1: entered allmulticast mode
[  462.554425][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.686796][T20119] Bluetooth: hci0: Opcode 0x080f failed: -4
[  462.705159][T20164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.714694][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.726144][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.885805][T20170] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  462.898510][T20170] bond6 (unregistering): Released all slaves
[  463.593426][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.644836][T20213] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  463.661951][T20213] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  463.670519][T20213] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  463.833442][T19387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.911977][ T5838] Bluetooth: hci0: command 0x080f tx timeout
[  464.257276][T20232] __nla_validate_parse: 11 callbacks suppressed
[  464.257298][T20232] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3759'.
[  464.478524][T19387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.544552][T20244] netlink: 'syz.5.3761': attribute type 2 has an invalid length.
[  464.570996][T20244] netlink: 'syz.5.3761': attribute type 1 has an invalid length.
[  464.594549][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3762'.
[  464.599140][T20252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3765'.
[  464.786681][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'.
[  464.957175][   T30] audit: type=1107 audit(1775450582.800:9): pid=20273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ûèŽë—_d°W7”¸VNðÛÛ2lj ½îÌ�¬D€ÁÇg	ø¸VÕO´yý"Rx~\:é(¢¯~_©ºš_§z¹ý!kÙ!¦'õ©�gE÷UŠ•««½èh³V +XÀ¡ÊÉ]»@ÃAò¤Ý�£iq|lŒié†×cü¯\ž3÷�&l�Îù—Èùã.ïª<¤\žç\Þ6­‰ˆjÕ¬À¥ÕNØ ø+bB°ŠLY¹F‚!~nüvq­×þƒ«Iq‚�çØ
[  464.957175][   T30] [:M�©$6›P‹/Q™x¤åM"íóßkí!”1ü{Ød[E‘[’h6¥”]퇷|€¢õÅ'
[  465.052753][T20282] tipc: New replicast peer: 172.20.20.187
[  465.060541][T20282] tipc: Enabled bearer <udp:syz2>, priority 10
[  465.105027][T20290] netlink: 'syz.3.3776': attribute type 1 has an invalid length.
[  465.565362][T20305] netlink: 'syz.3.3780': attribute type 1 has an invalid length.
[  465.738289][T20315] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3782'.
[  465.795990][T20320] xt_addrtype: ipv6 does not support BROADCAST matching
[  465.855617][T20322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3785'.
[  466.084364][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  466.180639][T20341] bond3: option lp_interval: invalid value (0)
[  466.187445][T20341] bond3: option lp_interval: allowed values 1 - 2147483647
[  466.202852][T20348] netlink: 'syz.3.3791': attribute type 15 has an invalid length.
[  466.212760][T20341] bond3 (unregistering): Released all slaves
[  466.220909][T20348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3791'.
[  466.293323][T20353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3793'.
[  466.447534][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'.
[  466.456539][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3795'.
[  466.807829][T20378] xt_hashlimit: size too large, truncated to 1048576
[  466.913871][T20383] netlink: 'syz.2.3801': attribute type 1 has an invalid length.
[  469.650317][T20431] ipvlan4: entered allmulticast mode
[  469.656045][T20431] batadv_slave_1: entered allmulticast mode
[  469.664300][T20431] batman_adv: batadv0: Adding interface: ipvlan4
[  469.670962][T20431] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  469.699224][T20431] batman_adv: batadv0: Interface activated: ipvlan4
[  469.890856][T20441] netlink: 'syz.3.3816': attribute type 4 has an invalid length.
[  469.898785][T20441] __nla_validate_parse: 1 callbacks suppressed
[  469.898804][T20441] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3816'.
[  470.006848][T20400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  470.042083][T20440] netlink: 'syz.3.3816': attribute type 1 has an invalid length.
[  470.049878][T20440] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.3816'.
[  470.109268][T20441] netlink: 'syz.3.3816': attribute type 1 has an invalid length.
[  470.146624][T20441] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.3816'.
[  470.430533][T20466] netlink: 'syz.2.3821': attribute type 1 has an invalid length.
[  470.635509][T20472] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.840285][T20472] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.900044][T20499] netlink: 'syz.0.3828': attribute type 1 has an invalid length.
[  470.911666][T20499] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  470.945467][T20472] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.954908][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'.
[  470.980553][T20505] net_ratelimit: 3 callbacks suppressed
[  470.980574][T20505] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  471.039815][T20472] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.241291][T14896] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.289821][T14896] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.316560][   T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.349034][   T49] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.427730][T20520] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[  471.611397][T20532] tipc: Started in network mode
[  471.616855][T20532] tipc: Node identity 010000000000000001, cluster identity 4711
[  471.858299][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3844'.
[  472.243721][T20570] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3852'.
[  472.334375][T20573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'.
[  472.355715][T20573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'.
[  472.646147][T20590] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  472.815794][T20600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'.
[  472.994965][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3862'.
[  473.244749][T20621] syzkaller0: entered promiscuous mode
[  473.250390][T20621] syzkaller0: entered allmulticast mode
[  473.390265][T20630] netlink: 'syz.3.3870': attribute type 9 has an invalid length.
[  473.428305][T20636] netlink: 'syz.2.3873': attribute type 4 has an invalid length.
[  473.474026][T20636] vlan2: entered allmulticast mode
[  473.479222][T20636] erspan0: entered allmulticast mode
[  474.137433][T14896] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  474.154737][T20691] openvswitch: netlink: Message has 255 unknown bytes.
[  474.961053][T20715] __nla_validate_parse: 15 callbacks suppressed
[  474.961077][T20715] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3892'.
[  475.355085][   T11] block nbd0: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 60 seconds
[  475.367545][   T11] block nbd0: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 60 seconds
[  475.378597][   T11] block nbd0: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 60 seconds
[  475.389625][   T11] block nbd0: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 60 seconds
[  475.648584][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3897'.
[  476.315632][T20739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3898'.
[  476.469111][T20748] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3901'.
[  476.479387][T20748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3901'.
[  476.535600][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3905'.
[  476.545694][T20751] syzkaller0: entered promiscuous mode
[  476.551216][T20751] syzkaller0: entered allmulticast mode
[  476.595771][T20751] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3903'.
[  476.607831][T20751] netlink: 'syz.2.3903': attribute type 3 has an invalid length.
[  476.743299][T20766] openvswitch: netlink: IPv4 tun info is not correct
[  476.768820][T20766] netlink: 'syz.0.3908': attribute type 1 has an invalid length.
[  476.880810][T20766] 8021q: adding VLAN 0 to HW filter on device bond4
[  476.943227][T20761] bond4: (slave geneve2): making interface the new active one
[  476.962347][T20770] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3909'.
[  476.984252][T20778] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3909'.
[  476.998397][T20761] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  477.149606][T20793] netlink: 'syz.0.3914': attribute type 10 has an invalid length.
[  477.160579][T20793] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  477.248435][T20797] netlink: 'syz.5.3916': attribute type 3 has an invalid length.
[  477.354747][T20798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3915'.
[  477.476316][T20813] netlink: 'syz.3.3921': attribute type 1 has an invalid length.
[  477.548819][T20813] 8021q: adding VLAN 0 to HW filter on device bond2
[  477.720101][T20829] netlink: 'syz.0.3924': attribute type 2 has an invalid length.
[  477.878976][T20838] netlink: 'syz.5.3927': attribute type 10 has an invalid length.
[  477.923816][T20841] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  477.980994][T20838] team0: Device ipvlan1 failed to register rx_handler
[  478.187994][T20853] openvswitch: netlink: IP tunnel dst address not specified
[  478.739434][T20891] 8021q: VLANs not supported on gre0
[  478.875594][T20895] netlink: 'syz.0.3942': attribute type 14 has an invalid length.
[  478.891952][T20895] netlink: 'syz.0.3942': attribute type 13 has an invalid length.
[  479.363965][T20927] chnl_net:caif_netlink_parms(): no params data found
[  479.476812][T20927] chnl_net:caif_netlink_parms(): no params data found
[  479.549998][T20936] team0: Device gtp0 is up. Set it down before adding it as a team port
[  479.589836][T20927] chnl_net:caif_netlink_parms(): no params data found
[  479.680346][T20927] chnl_net:caif_netlink_parms(): no params data found
[  479.778165][T20949] openvswitch: netlink: IPv4 tun info is not correct
[  479.796065][T20949] netlink: 'syz.2.3961': attribute type 2 has an invalid length.
[  479.816197][T20927] chnl_net:caif_netlink_parms(): no params data found
[  479.979901][T20954] veth1?”oc£d
: renamed from vlan1
[  479.997825][T20927] chnl_net:caif_netlink_parms(): no params data found
[  480.066158][T20927] __nla_validate_parse: 21 callbacks suppressed
[  480.066179][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3954'.
[  480.098494][T20927] chnl_net:caif_netlink_parms(): no params data found
[  480.197242][T20977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  480.714281][T21003] netlink: 'syz.3.3977': attribute type 11 has an invalid length.
[  480.734297][T21003] netlink: 'syz.3.3977': attribute type 11 has an invalid length.
[  480.761866][T21003] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3977'.
[  480.987776][T14893] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  481.008900][T14893] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  481.078637][T14893] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  481.142572][T14893] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  481.521627][T21048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3987'.
[  481.532976][T21052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3989'.
[  481.673919][ T8796] lec:lec_start_xmit: lec0:No lecd attached
[  481.875941][T21068] tap0: tun_chr_ioctl cmd 1074025672
[  481.898978][T21068] tap0: ignored: set checksum disabled
[  481.934935][T21074] netlink: 'syz.5.3994': attribute type 39 has an invalid length.
[  482.077834][T21080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  482.978928][T21136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4007'.
[  482.989612][T21140] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4008'.
[  483.085174][T21146] netlink: 'syz.4.4010': attribute type 1 has an invalid length.
[  483.180104][T21146] bond3: entered promiscuous mode
[  483.198647][T21146] 8021q: adding VLAN 0 to HW filter on device bond3
[  483.280788][T21154] dvmrp1: entered allmulticast mode
[  483.299261][T21158] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4015'.
[  483.299398][T21156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4014'.
[  483.352668][T21156] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4014'.
[  483.628518][T21182] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  483.820525][T21196] netlink: 'syz.2.4024': attribute type 2 has an invalid length.
[  483.899808][T21196] netlink: 'syz.2.4024': attribute type 2 has an invalid length.
[  484.003608][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4027'.
[  484.313311][T21227] rdma_op ffff88803fc419f0 conn xmit_rdma 0000000000000000
[  484.483477][T21241] bridge_slave_1: entered promiscuous mode
[  485.391341][T21285] __nla_validate_parse: 6 callbacks suppressed
[  485.391364][T21285] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4049'.
[  485.419965][T21285] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4049'.
[  485.626990][T21297] netlink: 'syz.2.4054': attribute type 51 has an invalid length.
[  485.651345][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4053'.
[  485.706112][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4053'.
[  485.716853][T21302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4055'.
[  485.955142][T21306] lo: left allmulticast mode
[  485.967236][T21306] tunl0: left allmulticast mode
[  485.996604][T21306] gre0: left allmulticast mode
[  486.035637][T21306] gretap0: left allmulticast mode
[  486.041237][T21306] erspan0: left allmulticast mode
[  486.085670][T21306] ip_vti0: left allmulticast mode
[  486.251648][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4059'.
[  486.951784][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms
[  486.959929][    C1] lec:lec_tx_timeout: lec0
[  486.969684][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4070'.
[  487.077733][T21365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4071'.
[  487.132723][T21367] 8021q: VLANs not supported on syzkaller1
[  487.139371][T21367] netlink: 'syz.4.4072': attribute type 29 has an invalid length.
[  487.148372][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'.
[  487.345117][T21376] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  487.357755][T21376] bond4 (unregistering): Released all slaves
[  487.396597][ T1219] IPVS: starting estimator thread 0...
[  487.402423][T21379] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  487.495005][T21381] IPVS: using max 24 ests per chain, 57600 per kthread
[  487.506044][T21384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4076'.
[  487.689922][T21393] bond0: entered promiscuous mode
[  487.698418][T21393] bond0: left promiscuous mode
[  487.777093][T21395] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  488.314484][ T5145] Bluetooth: hci5: command 0x0406 tx timeout
[  489.114204][T21319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  489.123481][T21325] netlink: 'syz.5.4060': attribute type 1 has an invalid length.
[  489.346739][T21408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  489.360222][T21408] +
: renamed from syzkaller0
[  489.375469][T21408] tipc: Disabling bearer <eth:syzkaller0>
[  489.547439][T21428] netlink: 'syz.5.4087': attribute type 4 has an invalid length.
[  489.963607][T21458] erspan0: entered allmulticast mode
[  490.200721][T21465] bond6: (slave ip6gre0): Device is not bonding slave
[  490.208142][T21465] bond6: option active_slave: invalid value (ip6gre0)
[  490.220676][T21465] bond6 (unregistering): Released all slaves
[  490.323786][T21479] sctp: [Deprecated]: syz.4.4104 (pid 21479) Use of struct sctp_assoc_value in delayed_ack socket option.
[  490.323786][T21479] Use struct sctp_sack_info instead
[  490.494946][T21491] netlink: 'syz.0.4107': attribute type 2 has an invalid length.
[  490.614197][T21499] __nla_validate_parse: 14 callbacks suppressed
[  490.614219][T21499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4109'.
[  490.626279][T21501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4110'.
[  490.784489][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4112'.
[  490.796000][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4112'.
[  491.031465][T21515] netlink: 'syz.2.4115': attribute type 2 has an invalid length.
[  491.064144][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4115'.
[  491.395906][T21530] netlink: 'syz.2.4121': attribute type 1 has an invalid length.
[  491.405130][T21530] netlink: 'syz.2.4121': attribute type 2 has an invalid length.
[  491.425487][T21530] netlink: 'syz.2.4121': attribute type 1 has an invalid length.
[  491.439673][T21530] netlink: 'syz.2.4121': attribute type 2 has an invalid length.
[  491.448642][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4120'.
[  491.468980][T21534] netlink: 'syz.5.4120': attribute type 1 has an invalid length.
[  491.635673][T21528] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  491.651473][T21528] bond4 (unregistering): Released all slaves
[  491.707451][T21543] syzkaller0: entered promiscuous mode
[  491.752024][T21543] syzkaller0: entered allmulticast mode
[  491.810192][T21555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4127'.
[  491.861264][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4128'.
[  491.976042][T21559] 8021q: adding VLAN 0 to HW filter on device bond6
[  492.005847][T21560] 8021q: adding VLAN 0 to HW filter on device batadv2
[  492.018206][T21560] bond6: (slave batadv2): making interface the new active one
[  492.035223][T21560] bond6: (slave batadv2): Enslaving as an active interface with an up link
[  492.955612][T21607] validate_nla: 2 callbacks suppressed
[  492.955632][T21607] netlink: 'syz.4.4138': attribute type 63 has an invalid length.
[  493.088912][T21614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4140'.
[  493.144290][T21616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4141'.
[  493.264892][T21621] macvtap1: entered promiscuous mode
[  493.270466][T21621] macvtap1: entered allmulticast mode
[  493.282717][T21621] veth1_vlan: entered allmulticast mode
[  493.300440][T21621] macvtap2: entered promiscuous mode
[  493.306054][T21621] macvtap2: entered allmulticast mode
[  493.356379][T21627] netlink: 'syz.4.4144': attribute type 9 has an invalid length.
[  493.546450][T21641] mac80211_hwsim hwsim35 ÿ
: renamed from wlan1 (while UP)
[  493.998824][T21657] nbd: nbd64 already in use
[  494.942515][T21708] netlink: 'syz.3.4164': attribute type 1 has an invalid length.
[  494.960103][T21708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  495.085714][T21720] netlink: 'syz.4.4166': attribute type 1 has an invalid length.
[  495.278601][T21734] IPv6: NLM_F_CREATE should be specified when creating new route
[  495.284420][T21737] netlink: 'syz.2.4170': attribute type 1 has an invalid length.
[  495.317045][T21736] netlink: 'syz.2.4170': attribute type 1 has an invalid length.
[  495.401590][T21737] bond7: entered promiscuous mode
[  495.411535][T21737] 8021q: adding VLAN 0 to HW filter on device bond7
[  495.622152][T21758] __nla_validate_parse: 10 callbacks suppressed
[  495.622171][T21758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4172'.
[  495.725659][T21763] netlink: 'syz.5.4174': attribute type 23 has an invalid length.
[  495.754956][T21762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4173'.
[  495.794346][T21765] syzkaller0: entered promiscuous mode
[  495.800044][T21765] syzkaller0: entered allmulticast mode
[  496.055481][T21780] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4179'.
[  496.519778][T21813] x_tables: unsorted underflow at hook 4
[  496.527102][T21812] tc_dump_action: action bad kind
[  496.820983][T21824] syzkaller0: entered promiscuous mode
[  496.832419][T21824] syzkaller0: entered allmulticast mode
[  496.877164][   T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  496.883777][T21834] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4192'.
[  496.899401][   T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  496.955673][T21838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  497.096487][T21846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'.
[  498.608602][   T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  498.617755][   T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  498.950734][T21874] netlink: 'syz.2.4202': attribute type 1 has an invalid length.
[  499.072281][T21874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4202'.
[  499.090041][T21874] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4202'.
[  499.106191][T21879] ip6gre1: entered allmulticast mode
[  499.416731][T21900] syzkaller1: tun_chr_ioctl cmd 1074025677
[  499.433998][T19387] syzkaller1: tun_net_xmit 90
[  499.439288][T21900] syzkaller1: Linktype set failed because interface is up
[  499.578850][T21907] netlink: 'syz.3.4213': attribute type 3 has an invalid length.
[  499.588412][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4214'.
[  499.639778][T21913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  499.903891][T21931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4221'.
[  500.016926][T21938] sch_fq: defrate 0 ignored.
[  500.059179][T21939] sch_fq: defrate 0 ignored.
[  500.394340][T21959] syzkaller0: entered promiscuous mode
[  500.400147][T21959] syzkaller0: entered allmulticast mode
[  500.409912][T21959] 0: reclassify loop, rule prio 0, protocol 800
[  500.787039][T21988] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4239'.
[  501.136966][T22008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4245'.
[  501.600624][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  501.609608][ T1303] lec:lec_start_xmit: lec0:No lecd attached
[  502.060431][T22056] netlink: 'syz.0.4260': attribute type 2 has an invalid length.
[  502.071228][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4260'.
[  502.088784][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'.
[  502.098369][T22056] netlink: 'syz.0.4260': attribute type 14 has an invalid length.
[  502.109314][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4260'.
[  502.538383][T22087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4268'.
[  502.562852][T22088] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  502.755394][T22098] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4272'.
[  502.806678][T22099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4271'.
[  503.110343][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4277'.
[  503.133659][T22110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4277'.
[  503.577074][T22138] sctp: [Deprecated]: syz.0.4280 (pid 22138) Use of struct sctp_assoc_value in delayed_ack socket option.
[  503.577074][T22138] Use struct sctp_sack_info instead
[  503.679747][ T5145] Bluetooth: hci1: command 0x0406 tx timeout
[  503.688231][T22137] 8021q: adding VLAN 0 to HW filter on device bond5
[  503.725708][T22147] netlink: 'syz.3.4283': attribute type 1 has an invalid length.
[  503.953152][T22153] xt_ecn: cannot match TCP bits for non-tcp packets
[  504.259445][T22170] netlink: 'syz.0.4289': attribute type 5 has an invalid length.
[  505.107177][T22215] xt_TCPMSS: Only works on TCP SYN packets
[  505.436698][   T11] block nbd0: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 90 seconds
[  505.447685][   T11] block nbd0: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 90 seconds
[  505.458796][   T11] block nbd0: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 90 seconds
[  505.470958][   T11] block nbd0: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 90 seconds
[  506.951886][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms
[  506.959947][    C1] lec:lec_tx_timeout: lec0
[  510.202872][ T5195] udevd[5195]: worker [13448] /devices/virtual/block/nbd0 is taking a long time
[  529.272101][T22348] Bluetooth: hci4: command 0x0406 tx timeout
[  535.512305][   T11] block nbd0: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 120 seconds
[  535.524361][   T11] block nbd0: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 120 seconds
[  535.535538][   T11] block nbd0: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 120 seconds
[  535.547352][   T11] block nbd0: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 120 seconds
[  539.512122][T22348] Bluetooth: hci2: command 0x0406 tx timeout
[  544.631936][ T5838] Bluetooth: hci0: command 0x080f tx timeout
[  545.052491][ T8796] lec:lec_start_xmit: lec0:No lecd attached
[  550.071858][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  550.079923][    C1] lec:lec_tx_timeout: lec0
[  563.036872][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  563.046006][ T1303] lec:lec_start_xmit: lec0:No lecd attached
[  565.593315][   T11] block nbd0: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 150 seconds
[  565.604310][   T11] block nbd0: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 150 seconds
[  565.615370][   T11] block nbd0: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 150 seconds
[  565.627453][   T11] block nbd0: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 150 seconds
[  568.062170][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  568.070658][    C1] lec:lec_tx_timeout: lec0
[  569.633209][T22360] xt_hashlimit: size too large, truncated to 1048576
[  569.706484][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  569.725910][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  569.741500][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  569.757461][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  569.772902][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  570.182285][T22395] __nla_validate_parse: 10 callbacks suppressed
[  570.182306][T22395] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.4321'.
[  570.182625][T22396] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.4321'.
[  570.188613][T22395] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  570.216406][T22396] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  570.248939][T22371] chnl_net:caif_netlink_parms(): no params data found
[  570.525914][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.536503][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.545476][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.554755][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.568917][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.578884][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.587517][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.596207][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.604546][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.613181][T22418] netlink: 'syz.5.4327': attribute type 83 has an invalid length.
[  570.626457][T22419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  570.719305][T22422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.795550][T22371] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.806374][T22371] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.821398][T22371] bridge_slave_0: entered allmulticast mode
[  570.835423][T22371] bridge_slave_0: entered promiscuous mode
[  570.896614][T22422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.919580][T22371] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.938103][T22371] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.946354][T22371] bridge_slave_1: entered allmulticast mode
[  570.957852][T22371] bridge_slave_1: entered promiscuous mode
[  570.986778][T22422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  571.052804][T22371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.068434][T22371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.134192][T22422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  571.184284][T22454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4336'.
[  571.254284][T22371] team0: Port device team_slave_0 added
[  571.279744][T22371] team0: Port device team_slave_1 added
[  571.492458][T22371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  571.507544][T22371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.544662][T22371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  571.594095][T22371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.601612][T22371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.631294][T22371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.643169][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  571.665017][T14893] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  571.726204][T14896] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  571.759026][T14893] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  571.774521][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'.
[  571.830704][T22371] hsr_slave_0: entered promiscuous mode
[  571.837982][ T5838] Bluetooth: hci6: command tx timeout
[  571.853526][T22371] hsr_slave_1: entered promiscuous mode
[  571.860413][T22371] debugfs: 'hsr0' already exists in 'hsr'
[  571.871639][T22371] Cannot create hsr debugfs directory
[  572.104595][T22496] SET target dimension over the limit!
[  572.108063][T22494] pim6reg1: entered promiscuous mode
[  572.116388][T22494] pim6reg1: entered allmulticast mode
[  572.141551][T22498] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4351'.
[  572.153245][T22494] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4349'.
[  572.165187][T22494] netlink: 59 bytes leftover after parsing attributes in process `syz.5.4349'.
[  572.179147][T22500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4352'.
[  572.530595][T22371] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  572.544949][T22521] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  572.560432][T22371] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  572.594446][T22371] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  572.643748][T22525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4359'.
[  572.653166][T22371] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  572.889233][T22550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4363'.
[  573.043263][T22556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  573.096102][T22371] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.145647][T22371] 8021q: adding VLAN 0 to HW filter on device team0
[  573.198300][T14896] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.205554][T14896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.267449][T14893] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.274707][T14893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  573.913733][ T5838] Bluetooth: hci6: command tx timeout
[  574.009857][T22598] 8021q: adding VLAN 0 to HW filter on device bond4
[  574.046430][T22605] bond4: (slave geneve2): making interface the new active one
[  574.056467][T22605] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  574.077379][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.085944][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.115775][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.138334][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  574.169070][T22371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  574.465404][T22617] Cannot find map_set index 65533 as target
[  574.504946][T22601] 8021q: VLANs not supported on team0
[  574.526540][T22622] xt_CT: You must specify a L4 protocol and not use inversions on it
[  574.834703][T22371] veth0_vlan: entered promiscuous mode
[  574.850993][T22371] veth1_vlan: entered promiscuous mode
[  574.928651][T22371] veth0_macvtap: entered promiscuous mode
[  574.959145][T22371] veth1_macvtap: entered promiscuous mode
[  575.025339][T22371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  575.089702][T22371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  575.140090][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  575.181850][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  575.190728][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  575.214591][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.396651][T22661] __nla_validate_parse: 7 callbacks suppressed
[  575.396671][T22661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4393'.
[  575.425966][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.442659][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.513512][T14896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.524945][T14896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.532849][T22665] tipc: Enabled bearer <ib:gretap0>, priority 10
[  575.559874][T22667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4395'.
[  575.633902][T22672] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4396'.
[  575.796262][T22679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4398'.
[  575.823038][T22679] validate_nla: 62 callbacks suppressed
[  575.823058][T22679] netlink: 'syz.3.4398': attribute type 7 has an invalid length.
[  575.837487][T22679] netlink: 'syz.3.4398': attribute type 8 has an invalid length.
[  575.862303][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4398'.
[  575.929461][T22690] netlink: 'syz.5.4400': attribute type 11 has an invalid length.
[  575.939161][T22690] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.4400'.
[  575.997453][ T5838] Bluetooth: hci6: command tx timeout
[  576.685142][T22715] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  576.706216][ T1219] tipc: Node number set to 3021019351
[  576.721961][T22715] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  576.874228][T22736] batman_adv: batadv0: Adding interface: dummy0
[  576.880804][T22736] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.907737][T22736] batman_adv: batadv0: Interface activated: dummy0
[  576.940720][T22743] batadv0: mtu less than device minimum
[  576.949258][T22743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  576.961767][T22743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  576.973930][T22743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  576.985942][T22743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  576.998011][T22743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  577.010021][T22743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  577.022177][T22743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  577.034155][T22743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  577.046359][T22743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  577.199841][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4413'.
[  578.073379][ T5838] Bluetooth: hci6: command tx timeout
[  580.151935][ T5838] Bluetooth: hci6: command tx timeout
[  580.412408][T22772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  580.667997][T22809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4430'.
[  580.829045][T22822] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4434'.
[  580.866745][T22830] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0
[  580.867161][T22825] IPVS: stopping master sync thread 22830 ...
[  580.915016][T22828] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20000
[  580.995648][T22833] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20000
[  581.099684][T22839] netlink: 'syz.4.4437': attribute type 2 has an invalid length.
[  581.497819][T22872] netlink: 'syz.6.4441': attribute type 10 has an invalid length.
[  581.959250][T22850] hsr0: left allmulticast mode
[  581.971893][T22850] hsr_slave_0: left allmulticast mode
[  581.985802][T22850] hsr_slave_1: left allmulticast mode
[  582.002156][T22850] batman_adv: batadv0: Interface deactivated: ipvlan4
[  582.100956][T22869] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.126514][T22869] batman_adv: batadv0: Interface deactivated: dummy0
[  582.263096][T22882] sctp: [Deprecated]: syz.3.4445 (pid 22882) Use of struct sctp_assoc_value in delayed_ack socket option.
[  582.263096][T22882] Use struct sctp_sack_info instead
[  582.286206][T22869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.324272][T22869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  582.448667][T22872] team0: Port device dummy0 added
[  582.456246][T14893] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  582.475602][T14893] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.524212][T14893] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  582.542472][T14893] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.598653][T22897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.630134][T14893] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  582.643616][T22897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4449'.
[  582.649373][T22900] netlink: 'syz.6.4450': attribute type 1 has an invalid length.
[  582.653048][T14893] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.755531][T14893] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  582.765173][T14893] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.786883][T14893] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.833365][T14893] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.869646][T14893] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.915070][T14893] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  583.000407][T22918] netlink: 'syz.3.4456': attribute type 4 has an invalid length.
[  583.035699][T22921] veth0: entered promiscuous mode
[  583.041466][T22920] SET target dimension over the limit!
[  583.041498][T22922] SET target dimension over the limit!
[  583.196529][T22926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4458'.
[  583.547225][T22912] veth0: left promiscuous mode
[  583.624691][T22945] netlink: 'syz.4.4465': attribute type 9 has an invalid length.
[  583.650577][T22945] netlink: 'syz.4.4465': attribute type 11 has an invalid length.
[  583.699858][T22950] net_ratelimit: 10 callbacks suppressed
[  583.699878][T22950] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[  583.700728][T22945] netlink: 'syz.4.4465': attribute type 12 has an invalid length.
[  583.760656][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4468'.
[  583.772718][T22945] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.4465'.
[  583.793957][T22945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4465'.
[  583.895117][T22955] nbd1: detected capacity change from 0 to 127
[  583.906312][ T5838] block nbd1: Receive control failed (result -104)
[  584.107695][T22983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4471'.
[  584.658180][T23006] netlink: 'syz.0.4480': attribute type 1 has an invalid length.
[  584.781290][T23006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4480'.
[  584.909726][T23021] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4483'.
[  585.092724][T22988] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  585.276171][T23042] netlink: 'syz.4.4490': attribute type 1 has an invalid length.
[  585.284181][T23042] netlink: 'syz.4.4490': attribute type 4 has an invalid length.
[  585.736959][T23063] __nla_validate_parse: 4 callbacks suppressed
[  585.736979][T23063] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4496'.
[  585.795560][T23063] xt_bpf: check failed: parse error
[  586.090411][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'.
[  586.144920][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'.
[  586.196611][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'.
[  586.262541][T23078] validate_nla: 4 callbacks suppressed
[  586.262561][T23078] netlink: 'syz.5.4501': attribute type 4 has an invalid length.
[  586.293061][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'.
[  586.312322][ T5838] Bluetooth: hci0: command 0x080f tx timeout
[  586.314673][T23083] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4503'.
[  586.327997][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'.
[  586.340900][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'.
[  586.402466][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'.
[  586.436423][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'.
[  586.482949][T23087] syzkaller0: entered promiscuous mode
[  586.506454][T23087] syzkaller0: entered allmulticast mode
[  586.736594][T23104] tap0: tun_chr_ioctl cmd 1074025672
[  586.743979][T23104] tap0: ignored: set checksum disabled
[  586.807669][T23107] xt_limit: Overflow, try lower: 271964/0
[  587.403843][T23153] tipc: Enabled bearer <ib:macvtap0>, priority 5
[  587.526362][T23157] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  587.786595][T23176] netem: change failed
[  587.797037][T23176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  587.813999][T23176] netlink: 'syz.5.4527': attribute type 14 has an invalid length.
[  587.822977][T23176] netlink: 'syz.5.4527': attribute type 13 has an invalid length.
[  588.425175][T23204] netlink: 'syz.6.4536': attribute type 1 has an invalid length.
[  588.703202][T23223] x_tables: duplicate entry at hook 2
[  588.881576][T23233] vlan1: entered allmulticast mode
[  588.887548][T23233] bridge3: entered allmulticast mode
[  589.200616][T23251] netlink: 'syz.4.4551': attribute type 1 has an invalid length.
[  589.281617][T23256] sctp: [Deprecated]: syz.3.4552 (pid 23256) Use of int in max_burst socket option.
[  589.281617][T23256] Use struct sctp_assoc_value instead
[  589.785959][T23290] netlink: 'syz.4.4565': attribute type 21 has an invalid length.
[  589.860898][T23293] tipc: Started in network mode
[  589.866767][T23293] tipc: Node identity 46e3990470d1, cluster identity 4711
[  589.874527][T23293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.884358][T23293] syzkaller0: entered promiscuous mode
[  589.890287][T23293] syzkaller0: entered allmulticast mode
[  589.907339][T23293] tipc: Resetting bearer <eth:syzkaller0>
[  589.919794][T23292] tipc: Resetting bearer <eth:syzkaller0>
[  589.926519][T23295] openvswitch: netlink: Message has -2 unknown bytes.
[  589.955486][T23292] tipc: Disabling bearer <eth:syzkaller0>
[  590.447963][T23325] bridge0: entered promiscuous mode
[  590.496467][T23325] bridge0: left promiscuous mode
[  590.768304][T23348] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  590.840515][T23354] __nla_validate_parse: 38 callbacks suppressed
[  590.840539][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4582'.
[  590.984763][T23361] Bluetooth: MGMT ver 1.23
[  591.151044][T23366] can: request_module (can-proto-0) failed.
[  591.204175][T23375] ip6gre0: Master is either lo or non-ether device
[  591.524410][T23388] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  591.588007][T23388] bond7 (unregistering): Released all slaves
[  591.956980][T23426] netlink: 512 bytes leftover after parsing attributes in process `syz.3.4601'.
[  592.069494][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4600'.
[  592.544793][T23458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4608'.
[  593.487564][T23508] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4621'.
[  593.507072][T23504] pim6reg1: entered promiscuous mode
[  593.513188][T23504] pim6reg1: entered allmulticast mode
[  593.579905][T23512] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  593.974459][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4630'.
[  593.991323][T23541] sock: sock_set_timeout: `syz.5.4630' (pid 23541) tries to set negative timeout
[  594.147524][T23555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4634'.
[  594.211294][T23559] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  594.315082][T23559] xt_socket: unknown flags 0x50
[  594.448094][T23579] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4641'.
[  594.583605][T23584] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  594.626891][T23590] : entered promiscuous mode
[  594.784691][T23603] 8021q: VLANs not supported on tunl0
[  594.830519][T23608] tipc: Started in network mode
[  594.835930][T23608] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  594.846916][T23608] tipc: Enabled bearer <eth:macvtap0>, priority 5
[  594.856175][T23608] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4651'.
[  594.932483][T23611] netlink: 'syz.5.4653': attribute type 2 has an invalid length.
[  594.974676][T23611] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4653'.
[  595.325223][T23634] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  595.393085][T23638] netlink: 'syz.5.4662': attribute type 2 has an invalid length.
[  595.683760][   T11] block nbd0: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 180 seconds
[  595.694691][   T11] block nbd0: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 180 seconds
[  595.705873][   T11] block nbd0: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 180 seconds
[  595.717777][   T11] block nbd0: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 180 seconds
[  595.961871][T22866] tipc: Node number set to 9480874
[  596.066806][T23678] __nla_validate_parse: 4 callbacks suppressed
[  596.066821][T23678] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4674'.
[  598.382947][T23643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  598.524770][T23683] netlink: 'syz.5.4677': attribute type 1 has an invalid length.
[  598.542217][T23683] netlink: 'syz.5.4677': attribute type 2 has an invalid length.
[  598.550000][T23683] netlink: 'syz.5.4677': attribute type 1 has an invalid length.
[  598.623385][T23683] netlink: 'syz.5.4677': attribute type 3 has an invalid length.
[  598.641538][T23683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4677'.
[  598.664902][T23688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4678'.
[  598.927361][T23701] sit0: left allmulticast mode
[  599.019874][T23705] netlink: 'syz.6.4684': attribute type 1 has an invalid length.
[  599.029904][T23705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4684'.
[  599.090939][T23712] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  599.219810][T23721] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4690'.
[  599.464713][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4694'.
[  599.876219][T23759] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4702'.
[  599.887882][T23759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4702'.
[  599.983731][T23764] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4703'.
[  600.099088][T23770] 8021q: VLANs not supported on wg2
[  600.210302][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4707'.
[  600.221206][T23775] xt_TPROXY: Can be used only with -p tcp or -p udp
[  600.231040][T23777] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  600.236287][T23779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  600.315422][T23782] netlink: 'syz.0.4709': attribute type 10 has an invalid length.
[  600.765425][T23808] netlink: 'syz.4.4714': attribute type 2 has an invalid length.
[  600.815212][T23807] netlink: 'syz.6.4718': attribute type 1 has an invalid length.
[  600.825239][T23807] netlink: 'syz.6.4718': attribute type 1 has an invalid length.
[  600.946328][T23814] dvmrp1: left allmulticast mode
[  601.318086][T23836] __nla_validate_parse: 6 callbacks suppressed
[  601.318108][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4726'.
[  601.372222][T23836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4726'.
[  601.381220][T23838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4726'.
[  601.452458][T23836] geneve3: entered promiscuous mode
[  601.457745][T23836] geneve3: entered allmulticast mode
[  601.498355][T14884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.512487][T14884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.524234][T23842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  601.665074][T14884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  601.688365][T23846] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  601.691607][T14884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.744430][T23846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4731'.
[  601.785811][T23846] netlink: 'syz.6.4731': attribute type 7 has an invalid length.
[  601.802769][T23846] netlink: 'syz.6.4731': attribute type 8 has an invalid length.
[  601.802982][T23851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4732'.
[  601.810730][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4731'.
[  601.931232][T23864] bond5: entered promiscuous mode
[  601.957586][T23864] 8021q: adding VLAN 0 to HW filter on device bond5
[  602.177754][T23874] netlink: 'syz.0.4735': attribute type 1 has an invalid length.
[  604.762981][T23849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  604.962325][T23893] netlink: 'syz.4.4744': attribute type 1 has an invalid length.
[  604.971462][T23893] netlink: 'syz.4.4744': attribute type 7 has an invalid length.
[  604.990960][T23893] netlink: 'syz.4.4744': attribute type 8 has an invalid length.
[  605.011498][T23893] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4744'.
[  605.049387][T23893] NCSI netlink: No device for ifindex 65584
[  605.092062][T23898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4745'.
[  605.127018][T23902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4746'.
[  605.624281][T23932] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4752'.
[  605.775212][T23940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  606.008429][T23948] netlink: 'syz.0.4757': attribute type 2 has an invalid length.
[  606.090199][T22348] Bluetooth: hci3: command 0x0405 tx timeout
[  606.931638][T23977] netlink: 'syz.5.4766': attribute type 4 has an invalid length.
[  606.980436][T23977] __nla_validate_parse: 58 callbacks suppressed
[  606.980455][T23977] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4766'.
[  607.275170][T23996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4768'.
[  607.999332][T24035] syzkaller0: entered promiscuous mode
[  608.019705][T24035] syzkaller0: entered allmulticast mode
[  608.178625][ T8796] lec:lec_start_xmit: lec0:No lecd attached
[  608.786278][T24059] netlink: 'syz.0.4788': attribute type 1 has an invalid length.
[  608.794543][T24059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4788'.
[  608.803661][T24059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4788'.
[  610.168566][T24069] bond4: option miimon: invalid value (18446744073709551585)
[  610.177796][T24069] bond4: option miimon: allowed values 0 - 2147483647
[  610.205696][T24069] bond4 (unregistering): Released all slaves
[  610.459478][T24093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4797'.
[  610.558548][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4797'.
[  610.562397][T24093] gtp0: entered promiscuous mode
[  610.572738][T24093] gtp0: entered allmulticast mode
[  610.740157][T24107] netlink: zone id is out of range
[  610.751872][T24107] netlink: zone id is out of range
[  610.757058][T24107] netlink: zone id is out of range
[  610.777227][T24107] netlink: zone id is out of range
[  610.812990][T24107] netlink: zone id is out of range
[  610.824414][T24107] netlink: zone id is out of range
[  610.825086][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4802'.
[  610.831355][T24111] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4803'.
[  610.853002][T24107] netlink: zone id is out of range
[  610.860340][T24112] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4803'.
[  610.869622][T24107] netlink: set zone limit has 4 unknown bytes
[  610.922126][T24116] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4805'.
[  611.054338][T24122] vlan2: entered allmulticast mode
[  611.061113][T24122] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode
[  611.072398][T24122] netlink: 'syz.0.4807': attribute type 1 has an invalid length.
[  611.648025][T24166] tipc: Cannot configure node identity twice
[  611.817560][T24179] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  611.926157][T24184] netlink: 'syz.5.4826': attribute type 1 has an invalid length.
[  611.960688][T24184] 8021q: adding VLAN 0 to HW filter on device bond6
[  612.009799][T24184] bond6: (slave veth5): Enslaving as an active interface with a down link
[  612.073522][T24184] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  612.113359][T24184] netlink: 'syz.5.4826': attribute type 1 has an invalid length.
[  612.121145][T24184] netlink: 'syz.5.4826': attribute type 2 has an invalid length.
[  612.276914][T24196] __nla_validate_parse: 7 callbacks suppressed
[  612.276935][T24196] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4829'.
[  612.353037][T24203] ip6gre0: Master is either lo or non-ether device
[  612.358374][T24207] xt_cgroup: invalid path, errno=-2
[  612.366236][T24208] netlink: 'syz.4.4834': attribute type 4 has an invalid length.
[  612.478083][T24212] sctp: [Deprecated]: syz.5.4835 (pid 24212) Use of int in maxseg socket option.
[  612.478083][T24212] Use struct sctp_assoc_value instead
[  612.510161][T24213] atomic_op ffff888033ad6198 conn xmit_atomic 0000000000000000
[  612.526817][T24212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4835'.
[  612.647985][ T1219] IPVS: starting estimator thread 0...
[  612.742060][T24228] IPVS: using max 27 ests per chain, 64800 per kthread
[  612.881243][T24235] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  613.217951][T24257] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  613.239351][T24257] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  613.254829][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4849'.
[  613.413276][T24268] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4852'.
[  613.543152][T24276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  613.550651][T24276] IPv6: NLM_F_CREATE should be set when creating new route
[  613.557964][T24276] IPv6: NLM_F_CREATE should be set when creating new route
[  613.589622][T24283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4857'.
[  613.614312][T24283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4857'.
[  613.666104][T24285] netlink: 'syz.5.4857': attribute type 5 has an invalid length.
[  613.720075][T24291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4859'.
[  613.739688][T24292] netlink: 'syz.0.4861': attribute type 1 has an invalid length.
[  613.749816][T22864] IPVS: starting estimator thread 0...
[  613.824796][T24297] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4863'.
[  613.842990][T24294] IPVS: using max 26 ests per chain, 62400 per kthread
[  613.847323][T24297] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  613.881021][T24300] bond7: (slave ip6gretap2): making interface the new active one
[  613.890352][T24300] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  613.895228][T24297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4863'.
[  613.909359][T24300] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  613.940557][T24300] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link
[  613.950264][T24304] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4863'.
[  613.991740][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms
[  613.999808][    C1] lec:lec_tx_timeout: lec0
[  614.234244][   T11] block nbd1: Possible stuck request ffff888026c50000: control (read@0,1024B). Runtime 30 seconds
[  614.245352][   T11] block nbd1: Possible stuck request ffff888026c50200: control (read@1024,1024B). Runtime 30 seconds
[  614.257400][   T11] block nbd1: Possible stuck request ffff888026c50400: control (read@2048,1024B). Runtime 30 seconds
[  614.268880][   T11] block nbd1: Possible stuck request ffff888026c50600: control (read@3072,1024B). Runtime 30 seconds
[  614.402175][T24326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  614.409762][T24326] syzkaller0: entered promiscuous mode
[  614.415971][T24326] syzkaller0: entered allmulticast mode
[  614.439877][T24326] tipc: Resetting bearer <eth:syzkaller0>
[  614.490905][T24323] tipc: Resetting bearer <eth:syzkaller0>
[  614.515633][T24340] netlink: 'syz.5.4877': attribute type 2 has an invalid length.
[  614.527305][T24340] netlink: 'syz.5.4877': attribute type 1 has an invalid length.
[  614.601567][T24323] tipc: Disabling bearer <eth:syzkaller0>
[  614.804014][T24355] netlink: 'syz.0.4883': attribute type 3 has an invalid length.
[  615.050334][T24368] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  615.074269][T24368] bond8 (unregistering): Released all slaves
[  615.131897][T14900] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  615.155278][T14900] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  615.184141][T14900] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  615.222344][T14900] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  615.684580][T24408] vlan2: entered allmulticast mode
[  615.689834][T24408] gretap0: entered allmulticast mode
[  615.800325][T16152] udevd[16152]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  616.189739][T24441] netlink: 'syz.6.4908': attribute type 4 has an invalid length.
[  616.371496][T24455] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001
[  616.597034][T24469] ip6tnl1: entered allmulticast mode
[  616.934492][T24491] netlink: 'syz.5.4923': attribute type 1 has an invalid length.
[  616.957734][T24496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  617.174914][T24503] 8021q: adding VLAN 0 to HW filter on device batadv1
[  617.193305][T24503] team0: Device batadv1 is of different type
[  617.668745][T24535] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  617.711955][T24541] __nla_validate_parse: 12 callbacks suppressed
[  617.711977][T24541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4936'.
[  617.814812][T24542] macvlan2: entered promiscuous mode
[  617.821896][T24542] macvlan2: entered allmulticast mode
[  617.828363][T24542] bond7: (slave macvlan2): Opening slave failed
[  617.852835][T14895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.867063][T14895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.176657][T24562] : left promiscuous mode
[  618.254117][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4945'.
[  618.268455][T24565] netlink: 'syz.4.4943': attribute type 12 has an invalid length.
[  618.287085][T24571] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  618.303280][T24565] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4943'.
[  618.341884][T24565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4943'.
[  618.604623][T24582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4950'.
[  619.007443][T24617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4957'.
[  619.226614][T24631] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.4964'.
[  619.265845][T24631] unsupported nlmsg_type 40
[  622.372538][ T5195] udevd[5195]: worker [13448] /devices/virtual/block/nbd0 timeout; kill it
[  622.382357][ T5195] udevd[5195]: seq 22291 '/devices/virtual/block/nbd0' killed
[  624.476215][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  624.485745][ T1303] lec:lec_start_xmit: lec0:No lecd attached
[  625.752415][   T11] block nbd0: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 210 seconds
[  625.764611][   T11] block nbd0: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 210 seconds
[  625.776005][   T11] block nbd0: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 210 seconds
[  625.787239][   T11] block nbd0: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 210 seconds
[  630.001882][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms
[  630.010018][    C1] lec:lec_tx_timeout: lec0
[  644.312116][   T11] block nbd1: Possible stuck request ffff888026c50000: control (read@0,1024B). Runtime 60 seconds
[  644.323031][   T11] block nbd1: Possible stuck request ffff888026c50200: control (read@1024,1024B). Runtime 60 seconds
[  644.334124][   T11] block nbd1: Possible stuck request ffff888026c50400: control (read@2048,1024B). Runtime 60 seconds
[  644.345367][   T11] block nbd1: Possible stuck request ffff888026c50600: control (read@3072,1024B). Runtime 60 seconds
[  646.421429][ T5195] udevd[5195]: worker [18487] /devices/virtual/block/nbd1 is taking a long time
[  652.634034][   T31] INFO: task syz.2.4253:22030 blocked for more than 143 seconds.
[  652.642195][   T31]       Not tainted syzkaller #0
[  652.647152][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  652.656246][   T31] task:syz.2.4253      state:D stack:27144 pid:22030 tgid:22028 ppid:16079  task_flags:0x400040 flags:0x00080002
[  652.668539][   T31] Call Trace:
[  652.672072][   T31]  <TASK>
[  652.675044][   T31]  __schedule+0x15dd/0x52d0
[  652.679602][   T31]  ? __pfx___schedule+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  652.685706][   T31]  ? schedule+0x90/0x360
[  652.690645][   T31]  schedule+0x164/0x360
[  652.694998][   T31]  schedule_preempt_disabled+0x13/0x30
[  652.700663][   T31]  __mutex_lock+0x7fe/0x1300
[  652.705437][   T31]  ? __mutex_lock+0x5ac/0x1300
[  652.710251][   T31]  ? nfsd_nl_version_get_doit+0x17c/0xc40
[  652.716221][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  652.721563][   T31]  ? __nlmsg_put+0xef/0x1b0
[  652.781884][   T31]  ? genlmsg_put+0x137/0x2e0
[  652.787515][   T31]  nfsd_nl_version_get_doit+0x17c/0xc40
[  652.833109][   T31]  ? kmem_cache_free+0x187/0x630
[  652.838131][   T31]  ? nlmon_xmit+0xb0/0x100
[  652.861846][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  652.868025][   T31]  ? dev_hard_start_xmit+0x802/0x870
[  652.877211][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  652.883443][   T31]  ? __asan_memcpy+0x40/0x70
[  652.888084][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  652.896435][   T31]  genl_rcv_msg+0x61c/0x7a0
[  652.901026][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  652.906207][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  652.912388][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  652.917428][   T31]  netlink_rcv_skb+0x232/0x4b0
[  652.922546][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  652.927600][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  652.933653][   T31]  ? down_read+0x272/0x2e0
[  652.938101][   T31]  ? genl_rcv+0xd/0x40
[  652.942851][   T31]  genl_rcv+0x28/0x40
[  652.946899][   T31]  netlink_unicast+0x80f/0x9b0
[  652.951878][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  652.957342][   T31]  ? netlink_sendmsg+0x650/0xb40
[  652.962438][   T31]  ? skb_put+0x11b/0x210
[  652.966727][   T31]  netlink_sendmsg+0x813/0xb40
[  652.971515][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  652.976935][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  652.982168][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  652.987507][   T31]  ____sys_sendmsg+0x972/0x9f0
[  652.993309][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  652.998652][   T31]  ? import_iovec+0x73/0xa0
[  653.003411][   T31]  ___sys_sendmsg+0x2a5/0x360
[  653.008215][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  653.013639][   T31]  ? __fget_files+0x2a/0x420
[  653.018258][   T31]  ? __fget_files+0x3a0/0x420
[  653.023029][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  653.028029][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  653.034043][   T31]  ? __se_sys_rt_sigprocmask+0x22f/0x2a0
[  653.039724][   T31]  ? do_user_addr_fault+0xc6f/0x1340
[  653.045220][   T31]  do_syscall_64+0x14d/0xf80
[  653.049860][   T31]  ? trace_irq_disable+0x3b/0x150
[  653.055232][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.061416][   T31]  ? clear_bhb_loop+0x40/0x90
[  653.066199][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.072190][   T31] RIP: 0033:0x7fed5339c819
[  653.076620][   T31] RSP: 002b:00007fed542ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  653.085282][   T31] RAX: ffffffffffffffda RBX: 00007fed53616090 RCX: 00007fed5339c819
[  653.094482][   T31] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003
[  653.102587][   T31] RBP: 00007fed53432c91 R08: 0000000000000000 R09: 0000000000000000
[  653.110593][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  653.118971][   T31] R13: 00007fed53616128 R14: 00007fed53616090 R15: 00007ffc4954ffc8
[  653.127147][   T31]  </TASK>
[  653.130224][   T31] 
[  653.130224][   T31] Showing all locks held in the system:
[  653.155900][   T31] 1 lock held by khungtaskd/31:
[  653.160909][   T31]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  653.211856][   T31] 2 locks held by getty/5581:
[  653.216589][   T31]  #0: ffff888036e6e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  653.282105][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  653.341800][   T31] 3 locks held by kworker/0:7/5943:
[  653.347088][   T31]  #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  653.402894][   T31]  #1: ffffc90004497c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  653.432993][   T31]  #2: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  653.471782][   T31] 1 lock held by udevd/13448:
[  653.476611][   T31]  #0: ffff888026b31358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  653.514332][   T31] 1 lock held by syz-executor/16624:
[  653.519682][   T31] 1 lock held by syz-executor/17159:
[  653.553478][   T31] 1 lock held by syz-executor/18312:
[  653.558836][   T31] 2 locks held by syz.1.3293/18484:
[  653.594153][   T31]  #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  653.623345][   T31]  #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  653.651807][   T31] 1 lock held by udevd/18487:
[  653.656542][   T31]  #0: ffff888026b35358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  653.692612][   T31] 2 locks held by syz.2.4253/22030:
[  653.697894][   T31]  #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  653.722946][   T31]  #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40
[  653.742148][   T31] 
[  653.744526][   T31] =============================================
[  653.744526][   T31] 
[  653.801810][   T31] NMI backtrace for cpu 1
[  653.801833][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  653.801854][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  653.801865][   T31] Call Trace:
[  653.801873][   T31]  <TASK>
[  653.801882][   T31]  dump_stack_lvl+0xe8/0x150
[  653.801915][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  653.801938][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  653.801966][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  653.801999][   T31]  sys_info+0x135/0x170
[  653.802025][   T31]  watchdog+0xfd9/0x1030
[  653.802051][   T31]  ? watchdog+0x21a/0x1030
[  653.802078][   T31]  kthread+0x388/0x470
[  653.802098][   T31]  ? __pfx_watchdog+0x10/0x10
[  653.802114][   T31]  ? __pfx_kthread+0x10/0x10
[  653.802135][   T31]  ret_from_fork+0x51e/0xb90
[  653.802164][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  653.802189][   T31]  ? __switch_to+0xc7d/0x1450
[  653.802216][   T31]  ? __pfx_kthread+0x10/0x10
[  653.802236][   T31]  ret_from_fork_asm+0x1a/0x30
[  653.802282][   T31]  </TASK>
[  653.802290][   T31] Sending NMI from CPU 1 to CPUs 0:
[  653.918734][    C0] NMI backtrace for cpu 0
[  653.918755][    C0] CPU: 0 UID: 0 PID: 19167 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  653.918773][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  653.918782][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x70
[  653.918816][    C0] Code: 28 db 56 11 65 8b 15 49 db 56 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 a4 16 00 00 00 74 2c 8b 91 80 16 00 00 <83> fa 02 75 21 48 8b 91 88 16 00 00 48 8b 32 48 8d 7e 01 8b 89 84
[  653.918828][    C0] RSP: 0018:ffffc9000c457aa0 EFLAGS: 00000246
[  653.918844][    C0] RAX: ffffffff823c2e46 RBX: ffffea0002ad7468 RCX: ffff8880554a0000
[  653.918856][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0002ad7440
[  653.918866][    C0] RBP: 0000000000000000 R08: ffffea0002ad7477 R09: 1ffffd400055ae8e
[  653.918876][    C0] R10: dffffc0000000000 R11: fffff9400055ae8f R12: ffffea0002ad7440
[  653.918887][    C0] R13: 0000000000000000 R14: ffffea0002ad7440 R15: 000000984097da19
[  653.918898][    C0] FS:  0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000
[  653.918917][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  653.918928][    C0] CR2: 0000564799629f40 CR3: 000000000e54c000 CR4: 00000000003526f0
[  653.918944][    C0] Call Trace:
[  653.918950][    C0]  <TASK>
[  653.918956][    C0]  page_ext_get+0x16/0x2e0
[  653.918976][    C0]  __reset_page_owner+0x28/0x1f0
[  653.918993][    C0]  __free_frozen_pages+0xc2b/0xdb0
[  653.919013][    C0]  ? ___free_pages+0xb2/0x220
[  653.919032][    C0]  vfree+0x25a/0x400
[  653.919048][    C0]  ? __pfx_kcov_close+0x10/0x10
[  653.919068][    C0]  kcov_close+0x28/0x50
[  653.919087][    C0]  __fput+0x44f/0xa70
[  653.919113][    C0]  task_work_run+0x1d9/0x270
[  653.919131][    C0]  ? __pfx_task_work_run+0x10/0x10
[  653.919148][    C0]  ? kmem_cache_free+0x187/0x630
[  653.919165][    C0]  ? do_exit+0x70a/0x23c0
[  653.919182][    C0]  do_exit+0x70f/0x23c0
[  653.919201][    C0]  ? __pfx_do_exit+0x10/0x10
[  653.919214][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  653.919235][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  653.919254][    C0]  do_group_exit+0x21b/0x2d0
[  653.919272][    C0]  __x64_sys_exit_group+0x3f/0x40
[  653.919287][    C0]  x64_sys_call+0x221a/0x2240
[  653.919308][    C0]  do_syscall_64+0x14d/0xf80
[  653.919326][    C0]  ? trace_irq_disable+0x3b/0x150
[  653.919339][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.919355][    C0]  ? clear_bhb_loop+0x40/0x90
[  653.919372][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.919387][    C0] RIP: 0033:0x7fe2f799c819
[  653.919400][    C0] Code: Unable to access opcode bytes at 0x7fe2f799c7ef.
[  653.919408][    C0] RSP: 002b:00007ffc8d67e5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  653.919423][    C0] RAX: ffffffffffffffda RBX: 00007fe2f7a33bd9 RCX: 00007fe2f799c819
[  653.919434][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  653.919443][    C0] RBP: 00007fe2f7a33beb R08: 0000000000000000 R09: 00000000000927c0
[  653.919452][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  653.919462][    C0] R13: 00000000000927c0 R14: 0000000000097391 R15: 00007ffc8d67e770
[  653.919481][    C0]  </TASK>
[  654.255876][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  654.263057][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  654.272209][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  654.282286][   T31] Call Trace:
[  654.285564][   T31]  <TASK>
[  654.288503][   T31]  vpanic+0x56c/0xa60
[  654.292498][   T31]  ? __pfx___schedule+0x10/0x10
[  654.297344][   T31]  ? __pfx_vpanic+0x10/0x10
[  654.301851][   T31]  ? __pfx_console_unlock+0x10/0x10
[  654.307236][   T31]  panic+0xc5/0xd0
[  654.311020][   T31]  ? __pfx_panic+0x10/0x10
[  654.315436][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  654.320810][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  654.327000][   T31]  watchdog+0x1023/0x1030
[  654.331337][   T31]  ? watchdog+0x21a/0x1030
[  654.335748][   T31]  kthread+0x388/0x470
[  654.339810][   T31]  ? __pfx_watchdog+0x10/0x10
[  654.344478][   T31]  ? __pfx_kthread+0x10/0x10
[  654.349080][   T31]  ret_from_fork+0x51e/0xb90
[  654.353872][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  654.359061][   T31]  ? __switch_to+0xc7d/0x1450
[  654.363777][   T31]  ? __pfx_kthread+0x10/0x10
[  654.368452][   T31]  ret_from_fork_asm+0x1a/0x30
[  654.373259][   T31]  </TASK>
[  654.376440][   T31] Kernel Offset: disabled
[  654.380778][   T31] Rebooting in 86400 seconds..