last executing test programs:

11.333905276s ago: executing program 4 (id=3740):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="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", 0x1eb}], 0x1}}], 0x1, 0x20002090)
sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000001c0)=0x4, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @empty, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "dd9ec2725e91ea6d", "05d99db6ab485b40e683ca41c26d98f6e68cfbc034bd8dd3c6b0d4558c6c4afe", "bcbd8680", "0799451c8dddd626"}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000280), &(0x7f0000000500)=r6}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
writev(r2, &(0x7f0000001400), 0x0)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

9.479356902s ago: executing program 0 (id=3754):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r4=>0x0})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=<r9=>r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840)
unshare(0x2c020400)
write$nci(r5, &(0x7f0000000040)=ANY=[@ANYRES16=r9], 0x8)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010022bd7000000000008900000008000300", @ANYRES32=r4, @ANYBLOB="10c21d80040000800400008004000080"], 0x2c}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0)

9.1933298s ago: executing program 4 (id=3755):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
close(0x3)
write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
sendmmsg$inet(r1, &(0x7f00000050c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{&(0x7f00000008c0)="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", 0x556}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002400)="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", 0xfb}], 0x1}}], 0x2, 0x2000c044)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000080))
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000500)="1ee91e92dfae81cf429f630681d319b0b95d412ae896df07d59f65e6de8de664f245196b1878fefb48ca1d5efa2d0bf1dcf847cb973fabb665aa6913989efcb371bbeb0dda6443bb4e1f489f", 0x4c}], 0x1)

8.804912527s ago: executing program 1 (id=3757):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf8, 0x1a, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0xa, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff9, 0x10000002}, {0x6, 0x2a, 0x1f, 0x101}, {0x4, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x60}, [@sa_dir={0x5, 0x21, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001100)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000011c0)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4082, &(0x7f0000001000)=0x304)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$cgroup_devices(r1, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000040)={'c', ' *:* ', 'rwm\x00'}, 0xa)

8.361793847s ago: executing program 0 (id=3760):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="d30ea0a959d283c14124fe0bc2cd5fe74b89597e35c043018e39b6dee5e2a8f86edc24453a9f77dff508bfb2956b834f45f7092604efadef518eba4aaf5dc972eab5bd331a7d012b583e78f1e9b512c867b53a454e17edacd15dd96d26f44c37d0b8f05d0a21374848137fcdafcd0fbf60de87556d6d361d38005da763d63f138f89dce9fef56199d344a1b7a46cbc63b712642af4b9946e464ff14a25a8ad68454cd4c4b506a5c89bdee8a2a800690e", @ANYRES16=r2, @ANYBLOB="01000000000000000000250000000c0003800400040004000380180001801400020073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000940)={&(0x7f0000000140), 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x48}}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r7)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000e3dffd147e0a350dad8557162e07801b", @ANYRES16=r12, @ANYBLOB="07000200000000000000050000000c0003800400038004000100180001801400020073797a5f74756e0000000000000000000800050002000000"], 0x40}, 0x1, 0x3000000, 0x0, 0x4060850}, 0x400d4)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000851}, 0x890)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan0\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', <r14=>0x0})
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r15)
ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r17=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x38, r16, 0x1, 0x70bd2c, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd49920d352514742}, 0x4000000)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x54}}, 0x8080)
r18 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', <r19=>0x0})
sendmsg$nl_route_sched(r18, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newqdisc={0x28, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r19, {0x0, 0x1}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x1, 0xd, 0x40, 0x7, @vifc_lcl_ifindex=r19, @broadcast}, 0x10)

8.028229613s ago: executing program 1 (id=3762):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000, @private=0xa010101}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x2}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x8, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x20040000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xffffffffffffffb5, &(0x7f0000000580)=[{&(0x7f0000001cc0)="d80000001c0081064e81f782dbf7db132a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d66f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f87757b0d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93453f92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4c008884)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)=ANY=[], 0xa)
accept4$inet(r2, 0x0, &(0x7f0000000000), 0x800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
socket$inet_icmp(0x2, 0x2, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c110081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006f2a0800f0ffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x6, 0x26, &(0x7f0000000380)=""/38, 0x40f00, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x10, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xd, 0x2}, {0x3, 0x5, 0x5, 0x6}], 0x10, 0xd4}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf54c, '\x00', 0x0, r5, 0x0, 0x4, 0x4}, 0x50)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1b, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x0, 0xa, 0x4, 0x7, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @map_fd={0x18, 0x5, 0x1, 0x0, r8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000040)={0x0, 0x0, 0x400, 0x4}, 0x10, 0x0, r6}, 0x94)

3.898560969s ago: executing program 4 (id=3764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040800000000000000000000000a20000000000a01020000000000000000070000000900010073797a3000000000140000001000010000000000000000000084000a"], 0x48}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd008111000c000000a60c6111b712000011ff0000000000000000000000000000000001"], 0xfdef)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@can_newroute={0x144, 0x18, 0x200, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x4d, 0x7c, 0x61, 0x1, 0x8, "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", 0x0, "47829c1c6903648ccfdd5e7962e8c3b6792ca421"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000004c0)={0xa, &(0x7f0000000440)=[{0xea4, 0xcd, 0x7, 0x7}, {0x1, 0x80, 0x8}, {0x4, 0x2, 0x8, 0x4}, {0x1000, 0x1, 0x0, 0x1}, {0x400, 0x80, 0xf4, 0xfffffff4}, {0x7, 0xc9, 0x5, 0x80000001}, {0x7, 0x59, 0x1, 0x3}, {0x8434, 0x7, 0x2, 0x8001}, {0x1, 0x6, 0x84, 0x7560}, {0x57c4, 0xfb, 0x6}]}, 0x10)

3.374798058s ago: executing program 0 (id=3766):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000004", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf2541000000050018012b000000080022019e010000"], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x0, 0x10000}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, &(0x7f0000000040))
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x20}}], 0x1, 0x800)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000005c0)={&(0x7f0000000180)=0xffffffff, 0x8, &(0x7f0000000780)=[{}, {}], &(0x7f0000000500)})
bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1)
setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f0000000440)="00bc015bc9b974eab9c828234b337fb2daa9e50ed9a6fdfab91f5a1de563ffd5fd1789e4cf804d00843778300e7c0c13e32ae1f1a0ccb226c3cd4aabf9281b67c9830c4ae5fe0910bfe113cd5dc4082d39ba471462047fd881fc0d320fd88b73c8e3bf3baf9cb422d8978bfead69fe748b1aa219e964a910aec45bc2b86e5a6f256009", 0x83)
getsockopt$inet_opts(r8, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b)

3.323411202s ago: executing program 1 (id=3767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_dellink={0x34, 0x13, 0x1, 0x1, 0x0, {0x7, 0x0, 0x0, r6, 0x20004, 0x9118}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x3, 0x0, 0x1, [{0x8, 0xe, 0x0, 0x0, 0x8}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}]]}, 0x30}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "088200", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x1d, 0x2, 0x2, 0x4, 0x0, [@local]}]}}}}}, 0x0)
splice(r9, 0x0, r11, 0x0, 0xf3a, 0x0)
close(r10)
write(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000180), &(0x7f0000000240)=r11}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r11, 0x58, &(0x7f00000003c0)}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r3, @ANYRES32=r2, @ANYRES64=r3, @ANYRES8=r0, @ANYRESDEC=r3, @ANYRES16=r12], 0x2c}, 0x1, 0x0, 0x0, 0x21}, 0x0)
ioctl$SIOCX25SFACILITIES(r11, 0x89e3, &(0x7f0000000140)={0x3c, 0xfffffbff, 0x4, 0x4, 0x5, 0x81})

3.00909597s ago: executing program 4 (id=3768):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x7d, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0)
socket(0x33, 0x6, 0x4)

2.796142066s ago: executing program 1 (id=3770):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2)
recvmmsg(r2, &(0x7f000000b400)=[{{0x0, 0x4c, &(0x7f0000001b80), 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000040)=""/188, 0xbc}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/212, 0xdc}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xc94}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3fffffffffffe5f, 0x40, 0x0)
r3 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000)
setsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000940), 0xc)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00'})
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="1a040500d3fc03fc010047", 0xb, 0x4000004, 0x0, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmsg(r5, &(0x7f0000000b80)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)="0a5fb8831466d0c00ab5c798574aaf335682351b0a832d21da2c4065340cf89e5a50004c40f3bcd155", 0x29}, {&(0x7f0000000280)="b0e1ded1172ffd94930d1451c8a639", 0xf}, {&(0x7f0000000300)="49066d2c214a3813415e2f7ab797", 0xe}], 0x3, &(0x7f0000000980)=[{0x40, 0x3a, 0x2, "b3875950f58477544f69b0c9092c69768433cd351d51ffe3a087aef204a47b0a66a09a139779d046531504111229de"}, {0x100, 0x101, 0x4, "147661cc3ae79da972c9f1cb8681acadff90dda075e53b2e080d9881856421f308721fb720390695ed0123ae6e9e206f2f312de1946fae9e039028a162f3f48ee7a8306bcc4f1d45805921fbadb3c5f00f117118dc7f3684031685ad5c7d9e743a88281b1dfeb2a175e3c304379fe385e895061b124f950a65c95fc7b0158c8c7d79ad086b0393fcc76798b7ec38312eeed62922be1a65e7a39f823657d25253e7b6f8a943aa34baa8a7abec48a91649af2f71874706db89c2ea7c9d91368e27acd59229cdefc21a3d6fa538e33112b3f4fd52eaf49340a0be7f2519b6dd8a9c1d64677c185ba4be2eb817"}, {0x68, 0x107, 0x7, "b6d74b091e2819e73999f60a5175ae87011da120642f54c5b1a7ce80b3612e0e775411d7ce09a3ab9f46cd21c0f5bafeef4f214399d8e291ff59377821bceeb1a941ccc30000000001000000857982d3c8"}, {0x30, 0x113, 0x80, "354012100dadf2f66f87a361ab188a5305602165fcb19ba2a5ebac45015b"}], 0x1d8}, 0x4800)
ppoll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x4008}, {r4, 0x2}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x5, &(0x7f0000000780)={0x77359400}, &(0x7f00000007c0)={[0x6]}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.772358196s ago: executing program 3 (id=3771):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c00000006"], 0xb4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f61640034000280080004400000007d080005400000000108000340000000900800024000000001080008800000000000000040000000050900010073797a30000000000900020073797a3200000000140000000a00"/156], 0x9c}}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000014c0)={0x2, &(0x7f0000000000)=[{0x54, 0x6, 0x48, 0x2}, {0x6, 0x5, 0xf9, 0x204}]}, 0x10)
bind(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d677411ab72b0138fe8e6221853884452931788b21ca92eb3b9dc21d138a45853df89c047941ceb3e7636410ae70cb9d793dfed593b21b7c0655fe36445957b8515d4888af32a772d16c88468359280684b8d6e20924fcde50b9ee2768c46c432a", @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYBLOB="06dafb977c28828335ab13f1604118ecd3dc72180172a1fc8b39881d67e3c50f8e7a8c8a96805e8ff7e347f5cb225a37a22d1dc53571f8de0ce29c5624b064bb943496d3cc935f22a29a643f179adae99eada92c8ccf8821eeac10792aa17ad28b66029aea8e1b8d1b5bf4776af3c576c4a2ef38615dd387b797df267efa1a216a45796ba532afe12f9e2c9c", @ANYRES32=0x0], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r6, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001400b5950000000000cfee0000010000", @ANYRES32=0x0, @ANYBLOB="1400060003000000ffffffff0010000004000000080008000000000014000200fe8000000000000000000000000000bb"], 0x48}}, 0x0)
getsockname$inet(r5, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000240)=0x10)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000002c0)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}})
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00'})

2.602723617s ago: executing program 4 (id=3772):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000010004a0000000000000000000000000046681afc0067954e4cfed444925a9b3ae30fbd72e059f3f6fcfb5556aea914fd2601", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xa0, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x20}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x203}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000005}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x11, 0xffffffffffffffff, 0xd085b000)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10)
recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', <r5=>0x0, 0x7, 0x0, 0x7, 0x0, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x18, 0x3, [{0x0, 0x12, "3ffc0ded829a7372e0c8111a22f58d59"}]}, @timestamp_prespec={0x44, 0xc, 0xdc, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @end, @timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x0, [{@remote, 0x6}, {@empty, 0x4}, {@empty, 0x10}, {@broadcast, 0x7ff}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl1\x00', <r6=>0x0, 0x4, 0x7, 0x0, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x700, 0x80, 0x90000000, 0x7}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf2504000000080004000100000020000680060001000a00000014000400fc010000000000000000000000000000080003000700000028000680080003000a01010208000700", @ANYRES32=0x0, @ANYBLOB="14000400fe8000000000000000000000000000aa4000018014000400fc01000000000000000000000000000108000300e0000001060005004e240000060001000a0000000500020040000000050002006e000000480001800800060004000000050002001000000008000700", @ANYRES32=0x0, @ANYBLOB="060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="140004002001000000000000000000000000000108000700", @ANYRES32=r5, @ANYBLOB="080004000100010028000180140004000000000000000008000700000000000000000000f47da0da8dd6fec5634351543b5b2a3c0158c84665a75609b3ec92c81800d7b53b8bf7d5bae331b8a5fb5f982769b8b1f8983a00e0518ce8dc106afde2923be146035c05a51c0dab910e15a6b944c4b19ef178eed9c24451ec110234a618afc1993419fdd886fb641f7b39c351734f96aebacabbb2cd1f9c0467efd8f3c132ea069d1cca4e6f278acb6ca75c1dbf80f1c1f9a0bbec2e11f372d14d940810661f21b2f9ece797d031ac3b741dab257f6d301f34166cd623a295e8aa229bce6c2573f8c83903623688720a89", @ANYRES32=r6, @ANYBLOB="080006000a000000"], 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000000)={r10, 0x5f3f}, &(0x7f0000000080)=0x8)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000240)="887b891b75d03ab096477b663f3635bfea7555467b2c74a7151538f3dd7d1171e121f8effd4068ffb3940adcac50546349eec18f8d1315a0915b53f37150e9b9", 0x40}, {&(0x7f0000000280)="d5c066206d753ca6f7", 0x9}, {&(0x7f00000002c0)="247c112c2124da", 0x7}], 0x3)
r11 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e22, 0x7b, @mcast1, 0xfffffff8}, 0x1c)
r12 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r12, &(0x7f0000002bc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1, @remote, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0200"/32, @ANYRES32=0x0, @ANYBLOB="00040000"], 0x28}}], 0x1, 0x40000054)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14)

2.483796639s ago: executing program 2 (id=3773):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c050)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x5e21, @local}], 0x10)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
listen(r2, 0x7)
listen(r1, 0x7)
close(0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xfff3, 0xb}, {0xffe0, 0xfff3}, {0x9, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041006}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2a0026bd7000fcdbdf25770000000c0099000c000000340000000500ee00020000000800ef00080000000500ee00000000000500ee00720000000800ef0002000000fdffed000a000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4c14)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044)
socket$key(0xf, 0x3, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, 0x0, 0x20000004)
r7 = epoll_create(0x8)
r8 = socket$kcm(0xa, 0x5, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x1c, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$inet(r8, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x640100ff}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="20000000000000008400000008", @ANYRES16=r7, @ANYRES8], 0x20}, 0x0)
sendmsg$inet(r8, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0)

2.199523797s ago: executing program 3 (id=3774):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0}) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000003c0)='espintcp', 0x8)
close(0x3) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9d0}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r4, r2, 0x25, 0x0, @val=@iter={&(0x7f0000000c00), 0x10}}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES64=<r6=>0xffffffffffffffff, @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071211f0000000000950000000000"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) (async)
r8 = socket(0x1d, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r8, @ANYRES8=r5, @ANYRESHEX=r7, @ANYRESHEX=r6], 0xcdc}, 0x1, 0x0, 0x0, 0xa89cb915cf77a2dd}, 0x89)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r9)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffffffff0600000914000600626f6e645f736c6176655f31000000000f000700756e636f6e66696e65640000080005007f00000114000200fe80000000000000000000000000000d8b98c600fc020000000000000000000000000001"], 0x68}, 0x2, 0x34005}, 0x0) (async)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x30}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_ATM={0x0, 0x4, 0x2}, @TCA_CAKE_FWMARK={0x0, 0x12, 0xff}, @TCA_CAKE_DIFFSERV_MODE={0x0, 0x3, 0x2}, @TCA_CAKE_INGRESS={0x0, 0xf, 0x1}, @TCA_CAKE_RTT={0x0, 0x7, 0x81}, @TCA_CAKE_MEMORY={0x0, 0xa, 0xd}]}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3cb}]}, 0x5c}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x88, 0x30, 0x100, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x1, 0x0, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000001900000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r14, 0x112, 0x7, &(0x7f0000000b00)=0x1, &(0x7f0000000b40)=0x4) (async)
ioctl$FS_IOC_GETFSLABEL(r14, 0x400452c8, 0x0) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r13, 0x4048587b, &(0x7f00000009c0)={{r13, &(0x7f0000000140)='%\x00', 0x208501, &(0x7f0000000180)={@_ha_fsid={[0x1000, 0x6]}, {0x4, 0x101, 0x80000000, 0x4}}, 0x93c, &(0x7f00000001c0), &(0x7f00000002c0)=0x8}, 0x3, &(0x7f0000000940)=[{0x2, 0x8, &(0x7f0000000300)='\xcf\x00', &(0x7f0000000600)="7b76ca0fbe82d47a2ec07209dc01a65d3047bdb44da80b04353878129c92aa32339bbf73974d4f8537998a101aaad2c3c4a2085783ebf3a2d258c9448497e799aed620", 0x43, 0x2}, {0x3, 0xffffffff, &(0x7f0000000680)=')(!\x00', &(0x7f00000006c0)="0a1c53389899f011181633c8124f", 0xe, 0x30}, {0x2, 0x7, &(0x7f0000000700)='\x00', &(0x7f0000000740)="4a0792daf9ad907953626282fb260203cdaf77196018f021ea2671130a5a3315b6954e495a7e679b17fd025cd0e4878c8930539f73bce9376e362b51b05247664a661fd4d98d6fabbb3dc505eb953a9a77bc0aef6f50163eb2d5a5b8bed9c931ab16a9e2ef3b65ddc85564e65c6a864ede509f91d80efde05cc9371e8340e308302a2e2c87c5e16f9bd4f9ff67a73dc20675e86fc304e6276e9ebe08662716adf0dca7579f4549000bdc9d16c3489bf019908bf33fa469ba0fe5a9619b934b61b82c67a1ea9bc0615779c311dd5999e50c08fb1c9dbe75085fe0e5b00c", 0xdd, 0xa}]}) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)

2.035061916s ago: executing program 0 (id=3775):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x800, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}}) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000000000000008000000"], 0x50) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'bridge_slave_0\x00', 0xc312}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) (async)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) (async)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000004000000000000001009500000000004d647ef2ee69be8e0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', <r8=>0x0}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) (async)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={<r10=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES64=r8, @ANYRES32=r10, @ANYRES32=r8, @ANYRES8=r7, @ANYRESOCT=r4], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1c, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808000000000000000000000a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000000000000b7020000000000007b9af0ff00000000c509feff00000000c3aaf0fff1000000bf8600000000000007080000f8ffffffddf8e2000000000007040000f0ffffffb7020000080700000022000088b11652ec9747bb6a869e604e8b13", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
gettid()

2.03052797s ago: executing program 4 (id=3776):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newaddrlabel={0x1c, 0x48, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x4000000d}}, 0x1c}, 0x1, 0x0, 0x0, 0x40084c1}, 0x20000800)
unshare(0x6a040000)
unshare(0x60000080)
syz_80211_join_ibss(&(0x7f00000000c0)='wlan0\x00', &(0x7f0000000100)=@default_ibss_ssid, 0x6, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x7, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x5, 0x0, 0x911f, 0x100000001]}, &(0x7f0000000080)=0x78)

1.686887965s ago: executing program 3 (id=3777):
openat$tun(0xffffffffffffff9c, 0x0, 0x82482, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000c00bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d49db1b2a6082bb0e8b013bd1ee3612cd43cd2a3cb83754bb34081599ce2a33600d4120353e477237c1dcf66b6a353aa1832d60179da56951d2b77e91c3e73fc7285d1ed2722a30c10f9cfd4a20ae6dc32f5d90a9290b393daff597ad7d5d3e5a73b25002ad928c92bd3d1be2444ff00f6b7719f06ddca6b48db95a746032d5ca0d4c460bb30a43ed735504192cb6ce50eed19a552101cb7bbf82c4924e2a862bd51ebaeb8e15e5428a87b56b81eff64a75baf33ae2b67b55a724cbbe788a8d8ece234a81e90186aca593260d559c0cb2f2be882288db291b231b8d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.438234624s ago: executing program 3 (id=3778):
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f00000010c0)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000630000001500020000000000810195000000000000000000000000001ac0000000c77bd6"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xe1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000a004e200000000cfe880000000000000000000000000101030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e24fffffffffc00000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000e832001000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e230000816dff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000c230000000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000040100000000000000000000ff60991414bb05000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400c90007ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000004fe8000000000000000000000000000aa0900"/1040], 0x410)

1.35966336s ago: executing program 2 (id=3779):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000100)="05000000010001", 0x7)
write(r0, &(0x7f0000000200)="3000000019000100aaaaaaaaaa110142424242424242424242424242424242", 0x1f)
write(r0, &(0x7f0000000300)="46000000130001000242424242424242424242424242424242", 0x19)
write(r0, &(0x7f0000000400)="29000000010001", 0x7)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x23, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000040000000000000002d0000091114a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeff9}, 0x94)

1.298277147s ago: executing program 0 (id=3780):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000e00)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5ee}, @CTA_STATUS_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x8084)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x2014, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0xffffffffffffff55)
r4 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000bfa200000100000095000000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.246879312s ago: executing program 1 (id=3781):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @any, 0xfff6}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f00000020c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002080)={&(0x7f0000001240)={0xe0c, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x9}, 0x9, 0xe2, 0x9, 0x1, 0x27, 'syz1\x00', "60645cefcf4a8fcc7abcf6c0b28b97e9be56b8df8c855e9196657374c4325384", "3dd41660b856a7c4270bcb02fc8123f1ae5168631ab4a463246c70a6034534a6", [{0x2, 0x2, {0x0, 0xbf}}, {0x2, 0x5, {0x3, 0x100}}, {0x3, 0xfffb, {0x2, 0xe}}, {0x7, 0x101, {0x2, 0xff8}}, {0xb5, 0x42d, {0x1, 0x4}}, {0x89, 0x0, {0x2, 0x397619bb}}, {0x8, 0xd22, {0x2, 0x6367}}, {0xc, 0x5, {0x1, 0x101}}, {0x2, 0x2, {0x0, 0x5b48ff1e}}, {0x73a7, 0x5, {0x0, 0x8}}, {0x3, 0x8, {0x0, 0x7f}}, {0x5, 0x8100, {0x0, 0x3}}, {0x40, 0xffff, {0x2, 0x9}}, {0x6afd, 0x40, {0x1}}, {0x5, 0x51, {0x3, 0x8}}, {0x0, 0x1000, {0x1, 0x6}}, {0x3, 0xa5, {0x0, 0x7}}, {0x9, 0xf800, {0x2}}, {0x0, 0x8, {0x3, 0x1}}, {0x2, 0x6, {0x1, 0x9}}, {0x8e, 0xfffe, {0x1}}, {0xe, 0x3, {0x1, 0xfffeffff}}, {0x1, 0x10, {0x3, 0x3}}, {0xf76, 0x0, {0x0, 0x7}}, {0x6, 0x2, {0x0, 0x5}}, {0xbe11, 0x9, {0x2, 0xff}}, {0x4, 0x8, {0x2, 0x9}}, {0x49, 0xfff8, {0x0, 0x2}}, {0x1ff, 0x7, {0x2}}, {0x3, 0x1, {0x0, 0x401}}, {0x7fff, 0x2, {0x0, 0x3}}, {0x3, 0x4, {0x0, 0x3ff}}, {0x5, 0xf800, {0x3, 0xfffffffb}}, {0x9, 0x200, {0x2, 0x6}}, {0x8, 0xee2a, {0x2, 0x81}}, {0x9, 0x5, {0x2, 0x8}}, {0xe9, 0x8, {0x2, 0xfffffff0}}, {0xfc, 0x8, {0x0, 0x2}}, {0xae00, 0xc, {0x0, 0x6}}, {0x6c, 0x4, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x8, 0x5, 0xff, 0x3, 0xd, 'syz1\x00', "1f7d4cd2aae2fe907271da698cc865b3a096e52d4f8b86eeec0d130edf0a87bc", "56245fe58c026644b1267bf7812f83c7dc839f40a57164e54796b77733fecf9f", [{0xb3a, 0x1, {0x2}}, {0x7, 0x2, {0x1, 0x4}}, {0x7ff, 0x5, {0x2, 0x6}}, {0x7, 0x5, {0x2, 0x2}}, {0x7, 0x3, {0x3, 0x6}}, {0x0, 0xa81, {0x0, 0x7}}, {0x81, 0xfff, {0x2, 0x2}}, {0x6, 0x6, {0x2, 0xfffffffa}}, {0x30fa, 0xd, {0x3, 0xffffffc3}}, {0x0, 0x8664, {0x3, 0x6}}, {0x200, 0x1, {0x1, 0x1}}, {0x112a, 0x1, {0x3, 0x100}}, {0x9, 0x100, {0x1, 0x8}}, {0xa517, 0x8, {0x0, 0x8}}, {0xfff, 0x4f6, {0x3, 0xd34}}, {0x95a, 0x8, {0x2, 0x1ff}}, {0x0, 0x1, {0x3, 0x6b5c}}, {0x8, 0x0, {0x3, 0x2}}, {0x4, 0x8, {0x0, 0x3}}, {0xfff9, 0xffba, {0x1, 0x1000}}, {0x6, 0x5, {0x2, 0x2}}, {0x200, 0x4, {0x0, 0x8}}, {0xfff7, 0x0, {0x3, 0x80000000}}, {0x8, 0xe52, {0x2, 0x5bd}}, {0xb, 0x3, {0x1, 0x80}}, {0x7, 0x1, {0x0, 0x3}}, {0x3, 0x6, {0x2, 0x401}}, {0x9, 0x5, {0x1, 0x9}}, {0x0, 0xd, {0x3, 0x9}}, {0x22d, 0x67, {0x0, 0x9}}, {0x4, 0x1, {0x2, 0x7}}, {0x4, 0x5, {0x1, 0x6}}, {0x200, 0x6, {0x1, 0x9}}, {0x6, 0x8, {0x2, 0xfffff2b7}}, {0x84ab, 0xbe4, {0x2, 0x4}}, {0x9, 0xb22, {0x0, 0xfffffff3}}, {0xa46, 0x3, {0x3, 0xc}}, {0x7, 0x0, {0x3, 0x1000}}, {0x9, 0xffff, {0x1, 0x8000}}, {0x5, 0xfffe, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0xb5, 0x5, 0x5, 0xf0e0, 0x1, 'syz0\x00', "ca3975ac1aa2c506f62c1d81f02f0698fde80abfc49752641cc27dbca77e1d26", "3ba7a769a14def652355bf4c5cd3a64f8aa1376ecb789d07213e64818e2cf264", [{0xfffe, 0x9, {0x3, 0x401}}, {0x1, 0x7, {0x3, 0x7ff}}, {0x7ff, 0x5, {0x1, 0x6497}}, {0x1a8, 0xfd9, {0x3, 0xfff}}, {0xffff, 0x1, {0x3, 0x8}}, {0x4, 0x8, {0x3, 0x7}}, {0x0, 0x8, {0x1, 0x9}}, {0x8000, 0xa, {0x3, 0x9}}, {0xffff, 0x7, {0x3, 0x9}}, {0xb, 0x80, {0x2, 0x7}}, {0xf74f, 0x3, {0x0, 0x2}}, {0x2, 0x8, {0x0, 0x8000}}, {0xb, 0x0, {0x3, 0x7}}, {0xa6f, 0x5, {0x3, 0x9}}, {0x2, 0x2, {0x0, 0xc}}, {0x8000, 0x9b9, {0x2, 0x9}}, {0x6, 0x2, {0x2, 0x9}}, {0xb, 0x7bce, {0x1, 0x9}}, {0x40, 0x1, {0x2, 0x3}}, {0x2, 0x0, {0x0, 0x8}}, {0x1, 0x8, {0x2, 0x2}}, {0x1, 0x8000, {0x0, 0x7fff}}, {0x0, 0x10, {0x1}}, {0xe18, 0x7f, {0x2, 0x5}}, {0x1ff, 0xffff, {0x2, 0xd}}, {0x3a2a, 0x9, {0x2, 0xa6e}}, {0x90fa, 0x0, {0x0, 0x1}}, {0x6, 0x80, {0x0, 0x80000}}, {0xff, 0x7, {0x1, 0x8a9}}, {0x9, 0x5, {0x0, 0x8}}, {0x58d, 0x8, {0x2, 0xb}}, {0x8, 0x3af4, {0x1, 0x1000}}, {0x2, 0x2, {0x3, 0x10000}}, {0x0, 0x25d9, {0x2, 0x8}}, {0x2c83, 0x7, {0x0, 0x3}}, {0x2, 0x8, {0x0, 0x9}}, {0x3, 0x7, {0x4, 0x81}}, {0x40, 0xfff, {0x2, 0x8}}, {0xfff7, 0x74c, {0x1, 0x5}}, {0x400, 0x2, {0x3, 0xc}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x3, 0x3, 0x0, 0x1, 0x23, 'syz0\x00', "43c9408bf91fa2b17bc1a89b38419b54216e4f6c861259a073279d203981ae63", "794024b7236f73866a74db98ea9f28ab99c7c12cce504dc898d3a28761b45f5d", [{0x5, 0x7d, {0x3, 0x2}}, {0xfffd, 0x4, {0x1}}, {0xa, 0x987, {0x0, 0x5}}, {0x4, 0x83b6, {0x0, 0xffffffc0}}, {0x7, 0x8000, {0x1, 0x7}}, {0x5, 0x4, {0x1, 0x2}}, {0xc5ec, 0x1000, {0x6, 0x9}}, {0x1, 0x7, {0x2, 0x1}}, {0xe, 0x101, {0x0, 0xfffffffb}}, {0x2, 0x19, {0x2, 0x5}}, {0x100, 0x8, {0x3, 0x7e3}}, {0x8000, 0x3, {0x2, 0x3}}, {0x7, 0x3, {0x2, 0x8}}, {0x0, 0x100, {0x1, 0x5}}, {0x8, 0xb, {0x0, 0x100}}, {0x4, 0xfffd, {0x3, 0x6}}, {0xa39c, 0x0, {0x3, 0x9}}, {0x60, 0x7, {0x1, 0x52}}, {0xc26, 0x769, {0x2, 0x6}}, {0x7, 0x8, {0x3, 0x2}}, {0x2, 0x7fff, {0x2, 0x2}}, {0x4fd, 0x7, {0x3, 0x80000000}}, {0xdf32, 0x6, {0x1, 0x8}}, {0x6, 0xb00, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x2aa7}}, {0xdb, 0x7}, {0xd87b, 0x5, {0x1, 0x1}}, {0xd, 0x8, {0x0, 0x3}}, {0x2, 0x100, {0x0, 0x3}}, {0x9, 0xddfc, {0x1, 0x5}}, {0x8, 0x3, {0x0, 0x3}}, {0x8, 0x6, {0x1, 0x7fffffff}}, {0x618, 0x9, {0x1, 0x6983}}, {0x9, 0x0, {0x3, 0x8}}, {0x28d5, 0xffff, {0x1, 0xd}}, {0x0, 0x2, {0x3, 0xa}}, {0xfc01, 0x5, {0x1, 0x3}}, {0x8, 0x42cc, {0x3, 0xff}}, {0x6, 0xffff, {0x3, 0xa}}, {0x9e, 0x2, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x101}, 0x2, 0x7, 0x1000, 0x7ff, 0xc, 'syz1\x00', "4b956b833567f08bb52375e48af86124327ab495162437c1bccbad34dc9e8dd2", "90a3dbe69be50b33fb04051605a92b41e8b9d9d0573fed48f4e49417a0cefbc5", [{0x4, 0xcb2, {0x2, 0x4}}, {0xd4d, 0x1ff, {0x3, 0xe3}}, {0x4, 0x0, {0x2, 0x9}}, {0x2, 0xd, {0x0, 0x800}}, {0x28, 0x8, {0x1, 0x7fffffff}}, {0x2, 0x0, {0x3, 0xffff8001}}, {0x8, 0x1, {0x2, 0xfffffffd}}, {0x9, 0x3, {0x1, 0x8}}, {0x4, 0x0, {0x2, 0x8000}}, {0x8, 0x7}, {0x2, 0x7d0a, {0x0, 0x4}}, {0x7, 0x2, {0x3, 0xffff}}, {0x9, 0x2, {0x3, 0xdfc}}, {0x9, 0x6, {0x0, 0x9}}, {0x6, 0x80}, {0x6, 0xe, {0x1, 0x16334ea8}}, {0x8000, 0x7, {0x2, 0x6}}, {0x3, 0x2, {0x3}}, {0x15, 0x8, {0x1, 0x1}}, {0x0, 0x9, {0x0, 0xfffffff2}}, {0xf4, 0x1, {0x1, 0x7ff}}, {0x0, 0x8001, {0x2, 0x7}}, {0x7, 0x5, {0x3, 0x1000}}, {0x1, 0x9}, {0x7, 0x7f, {0x3, 0x5}}, {0x6, 0x1452, {0x2, 0x4}}, {0x705, 0x7, {0x0, 0x1}}, {0x0, 0xd, {0x3, 0x1}}, {0xa6db, 0x8, {0x3, 0xba9}}, {0x4, 0xdf20, {0x0, 0x1d1}}, {0x7fff, 0xc, {0x1, 0x6958}}, {0x8001, 0x0, {0x3, 0x1}}, {0x0, 0x9, {0x3}}, {0x8a9, 0x1, {0x1, 0x9}}, {0xa, 0x6, {0x2, 0x4}}, {0x0, 0x9, {0x3, 0x2}}, {0x8001, 0x401, {0x2, 0x5}}, {0x175, 0xa3, {0xf11fe5757f5d1675, 0xc1}}, {0x2, 0x8, {0x3, 0x4}}, {0x8001, 0x6, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x9, 0x3a, 0x6c9, 0x1, 0x23, 'syz0\x00', "326013d1c4ae231afd7bb486c7072c6b12bf299ccf7553166e591020bc77b907", "bbfe4cc8c679a865addbddf8c010cb078c35281e2274760a0c962c9a45cb0cbb", [{0xfff, 0x9, {0x2, 0x5}}, {0x5, 0x3, {0x0, 0x7}}, {0x9, 0x5, {0x0, 0x8}}, {0x1000, 0x7, {0x3, 0x101}}, {0xca22, 0x1000, {0x1}}, {0x401, 0x0, {0x1, 0x10}}, {0x1, 0x2, {0x1, 0x1}}, {0x3, 0x4, {0x1, 0x4}}, {0x188, 0x8, {0x2, 0x38}}, {0x101, 0x2, {0x3, 0x9}}, {0xfff, 0x1, {0x1, 0x3}}, {0x6, 0x3, {0x0, 0x6}}, {0xc, 0x5, {0x0, 0x3ff}}, {0x4, 0x0, {0x1}}, {0x2, 0x6, {0x3, 0x7}}, {0x10, 0x3, {0x2, 0x8}}, {0xd, 0x7ff, {0x2, 0x4}}, {0xe9, 0x0, {0x3, 0x5}}, {0x4, 0xfff8}, {0x6, 0xfff, {0x1, 0x8}}, {0x274e, 0x9, {0x3, 0x7fffffff}}, {0x5, 0x6, {0x1, 0x3}}, {0x7f, 0xa, {0x3, 0x1}}, {0xd, 0xe, {0x3, 0x3}}, {0x8, 0x100, {0x2, 0x77}}, {0x3, 0x7, {0x3, 0x9}}, {0x8, 0xe, {0x3, 0xffffffd1}}, {0x8, 0x7, {0x2, 0x7}}, {0x8, 0x8, {0x0, 0xf}}, {0x111, 0x6, {0x2}}, {0xf16b, 0x9, {0x2, 0x8256}}, {0x7, 0x7, {0x2, 0x1}}, {0x8, 0x6}, {0x7, 0xffff, {0x2, 0xf14}}, {0x5, 0x4, {0x1, 0x5}}, {0x9, 0x4, {0x2, 0x5}}, {0x1, 0x0, {0x1, 0xbe}}, {0x28, 0x1, {0x0, 0xf98}}, {0x4, 0x800, {0x0, 0x9}}, {0x5, 0x0, {0x0, 0x1}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6f}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000030180c200000f000800183a00fe80000000000000000000000000000d0000000000000000000000000000000183009078000b33c0fe8000000000000000000000000000bb"], 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x80009, @mcast2}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000033afffe880000000000000000000000000001ff020000000000000000000000000001"], 0x0)
socket$rds(0x15, 0x5, 0x0)
bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4}, 0x10)
close(0x4)

1.154002213s ago: executing program 3 (id=3782):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000180)=0xffff8934) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

999.420675ms ago: executing program 2 (id=3783):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000040000000500"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x7, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0xc8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x3a, 0x5, 0x1, 0xfffe, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000000000a002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010000000000000000000000000010000000000000000000000000000000000000002000000000000300000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002e5340000000000000014000e"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000efff00"], 0x10c}}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000040000000500"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x7, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0xc8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x3a, 0x5, 0x1, 0xfffe, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000000000a002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010000000000000000000000000010000000000000000000000000000000000000002000000000000300000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002e5340000000000000014000e"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000efff00"], 0x10c}}, 0x8000) (async)

586.12422ms ago: executing program 2 (id=3784):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c00000006"], 0xb4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f61640034000280080004400000007d080005400000000108000340000000900800024000000001080008800000000000000040000000050900010073797a30000000000900020073797a3200000000140000000a00"/156], 0x9c}}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000014c0)={0x2, &(0x7f0000000000)=[{0x54, 0x6, 0x48, 0x2}, {0x6, 0x5, 0xf9, 0x204}]}, 0x10)
bind(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d677411ab72b0138fe8e6221853884452931788b21ca92eb3b9dc21d138a45853df89c047941ceb3e7636410ae70cb9d793dfed593b21b7c0655fe36445957b8515d4888af32a772d16c88468359280684b8d6e20924fcde50b9ee2768c46c432a", @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYBLOB="06dafb977c28828335ab13f1604118ecd3dc72180172a1fc8b39881d67e3c50f8e7a8c8a96805e8ff7e347f5cb225a37a22d1dc53571f8de0ce29c5624b064bb943496d3cc935f22a29a643f179adae99eada92c8ccf8821eeac10792aa17ad28b66029aea8e1b8d1b5bf4776af3c576c4a2ef38615dd387b797df267efa1a216a45796ba532afe12f9e2c9c", @ANYRES32=0x0], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r5, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001400b5950000000000cfee0000010000", @ANYRES32=0x0, @ANYBLOB="1400060003000000ffffffff0010000004000000080008000000000014000200fe8000000000000000000000000000bb"], 0x48}}, 0x0)
getsockname$inet(r4, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000240)=0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f00000002c0)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}})
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)

327.317613ms ago: executing program 0 (id=3785):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14f6877676a141f939ecc0c07000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
unshare(0x68040000)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r6, 0x0, 0x20040044)
r7 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000004e40)={0x3, 0x8, 0x3, 0x4, 0x100, 0x6, 0x2, 0x3}, &(0x7f0000004e80)={0x74, 0x6, 0x1, 0x3000000000000, 0x0, 0x801, 0x9}, &(0x7f0000004ec0)={0x4, 0xfffffffffffffffc, 0x8, 0x10001, 0x6, 0x4, 0x3, 0x4}, &(0x7f0000004f00)={0x0, 0x3938700}, &(0x7f0000004f80)={&(0x7f0000004f40), 0x8})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x26f13}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg(r8, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
write(r5, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8d8, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8c4, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x874, 0x2, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2a, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x70e, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xd, 0x2, 0x1, 0x10000, 0x200, 0xb, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c004, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x80, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x7, 0x90a, 0x7, 0x3, 0x2, 0x7ffffffe, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x5, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x47d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffdfe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x5, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x5, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0xfffffffd, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x0, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0x5, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = accept$phonet_pipe(r0, 0x0, &(0x7f0000001040))
writev(r11, &(0x7f0000001500)=[{&(0x7f00000010c0)="1f995ee8147befefe875b2a0cceb011f6f58f30b67dc8002a6b21c448920ad1da4915f821885a4183815c0835a3da691f681383a483a", 0x36}, {&(0x7f0000001100)="73fe9bbcc3621c323cd832129050bcdb44d50acc36b2a914d3cc1165ed4c369680fa1eee3fb9af48930d7723c15c7bf50c036f584c8028d39400d64316d0800491d326c24669746d7dcfb7199b3836d6e54daabad7037bc3bda6df2bad9618245f891a9c2916d917dc26ef98fa2afb6608bb0278fe082d20b3f1e9d51666f843b56170b17e1e25cf5bc582f0a66ea6747f3227a77430c92e8d198016da076a7f5c00708db0271c25b05108d74a3ebbc9abf1de04399db792d1d533096b88999f3e149b81a7c8bb13a4aa5eb006f094f4964f8be5", 0xd4}, {&(0x7f0000001200)="1b", 0x1}, {&(0x7f0000001240)="d07fdbcba649c9b0a915839ef390fd25f404486c4a672da823d1f30e6bfbbec464977de24ece9f0d29055f19aed73b80553f7b78ff37eadfc2679aad2bfe6ec00b4b866e8d3439c9248628e5e6d039e033e0407a718e2f17d650e5a84b322d6bd5a4898b4caa0ef3de23b40864d08da5eca9933474a75fb7da23f8ad296c203dfcbe6263284444225d2d877c1aa79141ec21e1f92bc2123e2f007d17d30b7fa66fe8077e769c7a03d464d6c2ebcfffd9f57b72ec3329aaf5ecf59d7ca3b55dc6ab8463c45e18c376a22e7b00e5d918982eacbc1700ca1fba771a68c992adb12aae96699854695d", 0xe7}, {&(0x7f0000001340)="a80938ecaf675fc1eb206d9922a8c8918c3214e91e316ddc6f0cee1bc12e38d31410761d14f21c5b943420efdf3dd11051c57c84c0c197b7269c2a735e0ae81288eda7db650c3e8e0a4acd470a56a3a11e9846bb78023ff4f69437b87f7613179eba4789e6833cfa3b6fe440d406b425a5983ddadca0bcb4e2e72d8dd2b937836d8a3aaab446f179bcc1a00c2d693084b5aa8a9d0bd5e099f767a772431b7a3d3f2be9019f32cd4c7a3da8fd4e11590fd79b50e7b9f72e3957777a26e0007ee9afc5aae182a267cc63fc8a7a0cd250548caa56eba643f0c5fc767e06506c3b556a0afa736c7662e4", 0xe8}, {&(0x7f0000001440)="acc27d4ea5a93ebe8bb84346c4c4e07789e5bbe48df380a5b89d4a25d992cfa10f6bd6976116c9bc29d6857dc5ba2ed5ce09d327e7b75b8dd96b0fd8db82e48b214269a2699d429d8f9d2bcd24c6149120606ceef92d7775ce8d970bd673f0471c51634386c91abf7c0e6f78c627a989e2e28bfd6b5c313cf01a29082f89ea2a874364c65818ba1c6470b70217c6e1b9aef17e1c38c399283b00d0a405202c4f5a36f68a2b92d985f8", 0xa9}], 0x6)
sendmmsg$inet6(r5, &(0x7f0000004dc0)=[{{&(0x7f0000001580)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f00000017c0)=[{&(0x7f00000015c0)="d76eb3c805aa3db6506391faf8d84d5847f157b0a6996deaf6045df17be39092ed83f9701eddbd2a90340393761ab06934c548e37eeecf1fabd521c3e64fcca56527beefa389c814bb61a5c78b245e0d322c57086c1b133f3a6e230199bc03cb00efb2ed5880c3f5c9c4645a11eaa017933ba0e1fc4e97e4971d69821cb628ccd78a3cc6deb0dbd78756c2bf2527f93b2e746ec759a5b4ab4ceb9002076ee36e3063e69543ab8aaa1c899e701b5b218705773b7706ecb57c37da688fd731578d12974ce6d198ebc28f6dfd401ee9fc9788cba24ba0ad641e08131939b4eb04aca8e8b829529996bdf78c28e41f", 0xed}, {&(0x7f00000016c0)="550bef49af1e08651c22d031f510dbfea5bac49f4847e87b973d1a3299482984a2b955e156d863753abeeecba5ad1f3ed104b3f7bcd3029e6facafe78e86b9712be5eba1e361f93867d05fed95154c7db6af03f1e0cc00282f837171", 0x5c}, {&(0x7f0000001740)="fadebc9e3915838a46fd6a274fa80ec7c6d99628e28279ed6493c7187aed3f00f391fd6630f3a8edff4b33ce5ecd7d6003fb4e754a8dbecce58a405b280dd4f96e909c6ab350c3", 0x47}], 0x3, &(0x7f0000001800)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x4, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0xf}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @rthdr={{0x68, 0x29, 0x39, {0x3a, 0xa, 0x0, 0xe, 0x0, [@empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1f}, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10000000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x100}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x84, 0x0, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts_2292={{0x1030, 0x29, 0x4, {0x88, 0x202, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x1, [0x0]}, @generic={0x3, 0x1000, "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"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}]}}}], 0x1120}}, {{&(0x7f0000003980)={0xa, 0x4e22, 0x7fffffff, @private2, 0xf9}, 0x1c, &(0x7f0000004d00)=[{&(0x7f00000039c0)="28d5150ac3e3d6a094204acbf16588422bcdd34ecd92721bf29355db83638a0cad1d3cbc20cfd2642df0c0c911e4d0ddf1738559c1bf8b0e3906b5f132a8d4053ee44e2b41e840fa359646645fe86d689597f2cc700729c5be725ac1a34c21b0eb5450c2c84cae92a3f28bcbc851325551dee3045384ce0d1d0accaf6c01049e51122c95f4688a001459933702b5ec87692a858f8c1fc2f642ab487779a85999f83870ada80c7477d56f011caca91fdacda1ea9186bc928e53956eae6480d11a27785b9bf3aa989d9f00ac6bbad71b5fe723c7bd82", 0xd5}, {&(0x7f0000003ac0)="e721d09b9d162e850343766c2b2f7bbaf4256420587c7f627f9f2aa7d625335bd34b84da2920fa08402c806b9d09718cd6db9e2ccd4c077c6b7e5215b9360057518254c1d8260723b963705a9f8854d29925f785d4364c32b3ab91c716e9ca2191a17115094ee0c9119c64c576a0b2674e1c3910c6f08b426159", 0x7a}, {&(0x7f0000003b40)="71029b4c4f304717427391fda97a16cdc984babb65a821d76aa4720a9272c5702c4a48049d8abedd173f4dd2f628ea66e855d270f1603702", 0x38}, {&(0x7f0000003b80)="9296e9773dc95db40e7c05c6a000cab66865a2c10a5110eb6f370cba9ad2a10478ecbd5d34b43a161dd445e96c39acf4f7361e44704b9e75391e8619f359b1f63fdd07fe8de3ec459197bd3dbe75151e6bd838f8bf37bc8f854025701428c4f834ce143dfadd26ebd6707f565d9a48119875546d4252779846c43f6175a0dbc993154d0d4748fc7b62acd476eade416b144aa74c8fcd889e7a51a596d64b408d0ef89d16234da5576c44df45a9cb993628a00f82a85a6ac016a65ef748d5fc7bf7e63f0d93d237aeea4b94f0d892c6b317", 0xd1}, {&(0x7f0000003c80)="e10e1197bc961a21aca0859f5fd0f8", 0xf}, {&(0x7f0000002940)="e4764d11402c8562765140664f74852ea49939c4679ba3aef531c0574fe9aaf1f78ed825e292e0d76036b6e1c22a5f7ec4924a55e064ae0d695f4e5a3112c834d10d4d24c006a542ee77374c4d091bd69c8b47942325ef99093b99bb18ae6fa8a9f5a42fe4b57031efeb44ad77dea18f47112a518b009c5635baa0cc71dfda8022d5bb9f12a7d5614bd121fdd8c563d12e4aea206da1f8", 0x97}, {&(0x7f0000003d00)="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", 0x1000}], 0x7, &(0x7f0000004d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x800}}], 0x18}}], 0x2, 0x2400c004)

324.128802ms ago: executing program 2 (id=3786):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x73, 0x0, &(0x7f0000000100)="63ee88f01e4d5a6cb5cb550daea9384efac6b521a8b84247efc3abf9a03f9ac9f2aa4a30c1ffccb2e36501a412895227f93fd13495d32efc4a3e79be553e0323506c4c361a0c9ef99e3715aa492eb371a17949139b76046500e322a229291e7184573022351e0ff3613a1d6b1e97e388534e39", 0x0, 0x9, 0x0, 0x96, 0x0, &(0x7f0000000180)="dfed3e04ebdfdaf1a1d185f7ca859ae1a04a877e24b7fea89d43ea1b081f79c839ef806aca9ae270d39d79b4b8e2956fb3d36cf903474c88de1e5224b38dc402911b1ef74beef4da84504cd441edd406b536cf8edd1dfa1daf8ff02cbb4f33eb507a2e9a33de8116e6bc46057f3581f3b968411f31fe55e30fb62fde994c6fe8af663ff45bb086c2d1ba73e45328fc7811e85977de23", 0x0, 0x2, 0x0, 0x5}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000300)='syzkaller\x00', 0xb, 0xd9, &(0x7f0000000340)=""/217, 0x41100, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0xa, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0x3, 0x3}, {0x3, 0x2, 0x10, 0x7}, {0x3, 0x3, 0x8, 0x9}, {0x4, 0x1, 0xa, 0x7}, {0x5, 0x2, 0xa, 0x7}], 0x10, 0x382d}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000740)={r1, 0x0, 0x71, 0x0, &(0x7f00000005c0)="a148569d7da4444b1a148b098376dc828c08183eba65ae8dcc8ba81558c1a389d98bac44d38e701edf1307bf3b306b3e28c37dbd30a27659d5780ef521bde5a6a461800db6436564b58b84f731d39b7157cafcf60f703aac9d235a69df9909234ae30576267b999aa6b30415d38828e8f4", 0x0, 0xf, 0x0, 0xc5, 0x0, &(0x7f0000000640)="2259276cda1225f56004803b4858f4479210a27e2b9c715bd925504f3cd54bd0518e6b340482588b7ef01111b472af4e3b879933b244b98d2690cbd7acb7bb0c5c1d11251ffa3c5c2a35783e08bc37535bdbb09bd0eae2e56be9faec4445b9e16e784083fdf9fa933316afd6357bdaecacee157bc07e868d13b799d10eadf09b4a8096ac8b719417fc70cd56e63118985390af9ab3ca7433647595c89238259e65d8dec564b089413ee7cc9782a8aa7b1b99411410d6752a05dbdf076df235c6d04dc5bb65", 0x0, 0x2, 0x0, 0xffff48c3}, 0x50) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000007c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg$unix(r2, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000840)=""/251, 0xfb}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/65, 0x41}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/34, 0x22}], 0x5}}, {{&(0x7f0000001b40), 0x6e, &(0x7f00000040c0)=[{&(0x7f0000001bc0)=""/115, 0x73}, {&(0x7f0000001c40)=""/65, 0x41}, {&(0x7f0000001cc0)=""/130, 0x82}, {&(0x7f0000001d80)=""/192, 0xc0}, {&(0x7f0000001e40)=""/200, 0xc8}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/255, 0xff}, {&(0x7f0000003040)=""/59, 0x3b}, {&(0x7f0000003080)=""/49, 0x31}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0xa, &(0x7f0000004180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000004280), 0x6e, &(0x7f0000005740)=[{&(0x7f0000004300)=""/122, 0x7a}, {&(0x7f0000004380)=""/194, 0xc2}, {&(0x7f0000004480)=""/241, 0xf1}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/104, 0x68}, {&(0x7f0000005600)=""/186, 0xba}, {&(0x7f00000056c0)=""/83, 0x53}], 0x7}}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f00000057c0)=""/83, 0x53}, {&(0x7f0000005840)=""/68, 0x44}, {&(0x7f00000058c0)=""/19, 0x13}], 0x3, &(0x7f0000005940)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000005980), 0x6e, &(0x7f0000005c00)=[{&(0x7f0000005a00)=""/10, 0xa}, {&(0x7f0000005a40)=""/178, 0xb2}, {&(0x7f0000005b00)=""/248, 0xf8}], 0x3, &(0x7f0000005c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000005d00)=@abs, 0x6e, &(0x7f0000005fc0)=[{&(0x7f0000005d80)=""/128, 0x80}, {&(0x7f0000005e00)=""/162, 0xa2}, {&(0x7f0000005ec0)=""/220, 0xdc}], 0x3, &(0x7f0000006000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r11=>0x0}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f00000074c0)=[{&(0x7f0000006100)=""/174, 0xae}, {&(0x7f00000061c0)=""/171, 0xab}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)}, {&(0x7f00000072c0)=""/223, 0xdf}, {&(0x7f00000073c0)=""/106, 0x6a}, {&(0x7f0000007440)=""/73, 0x49}], 0x7, &(0x7f0000007540)=[@rights={{0x1c, 0x1, 0x1, [<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x7, 0x41, &(0x7f0000007740)={0x77359400})
setsockopt$inet_buf(r9, 0x0, 0x2c, &(0x7f0000007780)="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", 0x1000) (async)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r12, 0x8008f513, &(0x7f0000008780))
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
vmsplice(r5, &(0x7f0000008ac0)=[{&(0x7f00000087c0)="7776300a551372386673835a7cad886d4ef4f730517ff3de6f5ded1f41548031082a8cb655a8f02f667987a6e5f4dd655bf9c83e3c13189cd3ed3ace23e8e4448ae35422e9fb9c9be507f23f7cdfc1b8a4754b90350e191df44830a1015de3ab1f2a98b39fb51a4ec381c522721ae34bd74889c131c12ab6a5281a9ce18b4d2f10701e17ba04136ce07bd3c0dc1c5dea8a267d0261e0d25c71f0e37512d82b542211c473b6cc1ad1de9d820e51988f40c5e014c7d385ec22", 0xb8}, {&(0x7f0000008880)="f8c13f692793b4cc95564782b386248a24a99b3fc72c242716737e4c47d74c9b5911b93f712eb09d0c67c7296f08777ed33219c7f1188bd6a4059ce5ab712dc4c25756c8a92aab1a58863bafe7065c2faa8f4960702a686c7524ab8339dc7abfd17e97c616a918377ed2e02eca9894be9ed1697cb485e64250d2183be7886e038a38cbe0bbf9126387d261a77b2ebf9199856a235f83963f880e9cf823aad42e2bb67d380790525cba91bfc54a5d27c75fe78842a5735c13011042be8de81f9e57a73fa5f71bb95bd9184adbc2", 0xcd}, {&(0x7f0000008980)="37f802c742b87063cfde39f307748f82ed4a0db79e3cb639e3afb75085a441917bc1f15c18064fa7a0f83063a5696e12b135852170c119f43b8c0105430bf0edfced45c9b3d1d8bc44421096b8bf0996abad37f026430bf17560b140b2e14cb8bb5ebcf123d7fd5ded66f00827faa93370e2a01b0e9efb28ed43cffdc8113eb0fd", 0x81}, {&(0x7f0000008a40)="62afe3b4aee2e67f4754fec649801e3f34ad5dec6980c72ea7c57aa69075da406fdec1b3288d3c3f6e974d540fbdf3f50ba7915e7fdd195238221af6c60f8e496af8cec6a4d35f0348d609054fd393239ad5b3a1959c81d45e962e2eaad93eea86fc8883ad39859d35a84a4708b367ba4bcf00", 0x73}], 0x4, 0x2) (async)
getsockopt$bt_BT_SNDMTU(r14, 0x112, 0xc, &(0x7f0000008b00)=0xa706, &(0x7f0000008b40)=0x2) (async)
close(r8) (async)
select(0x40, &(0x7f0000008b80)={0xbd, 0xb9, 0x8, 0x1, 0x8000000000, 0x4dda, 0x7, 0x6}, &(0x7f0000008bc0)={0x1, 0x6, 0x7ff, 0x1, 0x3, 0x2, 0x2, 0xffffffff7fffffff}, &(0x7f0000008c00)={0x86d4, 0x5, 0x3, 0xfffffffffffffffd, 0x92, 0x5, 0x4, 0xe}, &(0x7f0000008c40)) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000008c80)={'vxcan0\x00', <r16=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000008cc0)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x42, r16}) (async)
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008d40), r15)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000008e00)={&(0x7f0000008d00), 0xc, &(0x7f0000008dc0)={&(0x7f0000008d80)={0x14, r17, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
getsockopt$inet6_tcp_buf(r13, 0x6, 0x1f, &(0x7f0000008e40)=""/178, &(0x7f0000008f00)=0xb2) (async)
r18 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r18, 0x0, 0x48b, &(0x7f0000008f40)={0x2, 'batadv_slave_1\x00', 0x1}, 0x18) (async)
r19 = syz_open_procfs$namespace(r11, &(0x7f0000008f80)='ns/net\x00')
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f0000008fc0)={0x66c, 0x3f, 0xc2ba, @broadcast, 'team_slave_0\x00'}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000009240)={r6, 0x0, 0x3b, 0x75, &(0x7f0000009000)="d8236d7d6a330bf8dea6f21886032744928409be6b7933188bd60216e4e163903ae757c9c109335fca9b086b4f34b3d869b1abefaba98d6fc7802a", &(0x7f0000009040)=""/117, 0x3f03, 0x0, 0xd6, 0x80, &(0x7f00000090c0)="e7831d76a60c673ac3d08f912efed31e0a158acf0a8b9996396dd8f93f29fcdd831f7390cfa832df117d89fb3123be2234afdbe76bc3668b0fde321d7b5ecbecbb7eb49fe932d5671911ebbe4a14fb3aa6d80b4ad2bd6a7101cfaaac122557852943fa917e6217a0a43adcd58b4987156b57d5b54d2046dbbce678f59685dfeb8788d5c61a28596be5b76522947cc3464e5ae55dfa06da259ceed507ea06b624df247cc3635f2ce146ffd04b0a10970351eed87552dbca4f33ea849ca0081fdb21b61476afbb864f0dbfde9025b4cddfa323aa9d8f75", &(0x7f00000091c0)="37ccb9dea9251793b53988224ea0975163d0d4b76ecd66367a2bdb34f49944c286204f94779c76bae0fe38302ad2f22fb0226d4c4b3e16bcfca4a49f2bf274d14106f3acf1c39784f1f2d8ece2c30cac4d9425d9c270078288d3082804ac80e253a64f3c51de6efc8bae88290a19fa2b43e587abe3ae02b52267cd11194e1499", 0x2, 0x0, 0x5}, 0x50) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r19, 0xc0709411, &(0x7f000000a2c0)={{0x0, 0xffffffff, 0x200, 0x200, 0x1ea508cb, 0x3, 0x4, 0x0, 0x4, 0x8, 0x1, 0x0, 0x4, 0x5, 0x1}, 0x8, [0x0]})

135.604711ms ago: executing program 3 (id=3787):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xd8})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000005200dfa1fcffff800000000002"], 0x1c}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x3, 0x800, 0x81, 0x800})
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280), &(0x7f0000000400)=0x4)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x2, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x5, 0x20000000, 0x61}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00010027000900258bbfbfa5070017e10000000500010000400000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0)
r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='+cpuset -cpuset +net_cls +memory Bnet \x00hugetlb '], 0x2f)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008014}, 0x0)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

91.478352ms ago: executing program 1 (id=3788):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25030117800c00160006ac0f00000000001400010005"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000080850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 2 (id=3789):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0xb8, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x84, 0x8, 0xfffffffa, 0xffffffff}, 0xfe, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb8}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x4c, 0x12, 0x905, 0x70bd28, 0x25dfdbfe, {0x21, 0x9, 0xb, 0x0, {0x4e22, 0x4e27, [0xfffffffc, 0x923, 0x0, 0x6], [0x401, 0x4, 0x3, 0x2], 0x0, [0x10000, 0x2005]}, 0x31, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x50, r8, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

kernel console output (not intermixed with test programs):

nvalid value (3)
[  622.667488][T18858] bond13 (unregistering): Released all slaves
[  623.419243][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2931'.
[  623.745011][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'.
[  624.355536][T18888] ip_tables: iptables: counters copy to user failed while replacing table
[  624.602296][T18902] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  625.485001][T18919] SET target dimension over the limit!
[  625.761684][T18931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2942'.
[  625.852069][T18931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2942'.
[  625.965063][T18952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2942'.
[  626.718994][T18959] syzkaller0: entered promiscuous mode
[  626.719019][T18959] syzkaller0: entered allmulticast mode
[  626.770072][T18959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  627.074619][T18968] tipc: Resetting bearer <eth:syzkaller0>
[  627.205009][T18958] tipc: Resetting bearer <eth:syzkaller0>
[  627.363860][T18958] tipc: Disabling bearer <eth:syzkaller0>
[  627.609898][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  627.613175][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  627.639132][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  627.648897][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  627.650471][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  628.243171][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  629.254546][T19019] netlink: 'syz.4.2960': attribute type 4 has an invalid length.
[  629.304037][T19018] netlink: 'syz.4.2960': attribute type 4 has an invalid length.
[  629.578931][T19029] ip6gre2: entered promiscuous mode
[  629.579177][T19029] ip6gre2: entered allmulticast mode
[  629.582105][T19018] sctp: [Deprecated]: syz.4.2960 (pid 19018) Use of struct sctp_assoc_value in delayed_ack socket option.
[  629.582105][T19018] Use struct sctp_sack_info instead
[  629.589702][T19033] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  629.700561][T11153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.700610][T11153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  629.700641][T11153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.700671][T11153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39052 - 0
[  629.763963][ T4936] Bluetooth: hci5: command tx timeout
[  630.120794][T11153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.120834][T11153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  630.120862][T11153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.120889][T11153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39052 - 0
[  630.180164][T19040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2962'.
[  630.223480][ T1397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  630.223793][ T1397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  630.253539][T10950] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  630.255424][ T1397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.255449][ T1397] syzkaller0: tun_net_xmit 76
[  630.260834][T19040] syzkaller0: create flow: hash 2496128997 index 1
[  630.279386][ T1397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.279415][ T1397] syzkaller0: tun_net_xmit 48
[  630.295453][T10948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.295519][T10948] syzkaller0: tun_net_xmit 76
[  630.319270][T18985] lo speed is unknown, defaulting to 1000
[  630.434501][T10948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.434530][T10948] syzkaller0: tun_net_xmit 76
[  630.528742][T11153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.528783][T11153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  630.528813][T11153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.528843][T11153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39052 - 0
[  630.654665][T19034] syzkaller0: delete flow: hash 2496128997 index 1
[  630.965702][T10950] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  631.125699][T10950] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  631.302845][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2968'.
[  631.409838][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'.
[  631.853946][ T4936] Bluetooth: hci5: command tx timeout
[  632.022935][T19091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2971'.
[  632.225376][T11153] team0: left allmulticast mode
[  632.225401][T11153] bridge1: left allmulticast mode
[  632.269646][T11153] team0: left promiscuous mode
[  632.269668][T11153] bridge1: left promiscuous mode
[  632.272511][T11153] bridge0: port 3(team0) entered disabled state
[  632.314117][T11153] vlan0: left allmulticast mode
[  632.314142][T11153] geneve0: left allmulticast mode
[  632.321192][T11153] vlan0: left promiscuous mode
[  632.321213][T11153] geneve0: left promiscuous mode
[  632.322819][T11153] bridge0: port 2(vlan0) entered disabled state
[  632.358912][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2972'.
[  632.358946][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2972'.
[  632.359020][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2972'.
[  632.361250][T11153] bond8: left allmulticast mode
[  632.361448][T11153] bond8: left promiscuous mode
[  632.361724][T11153] bridge0: port 1(bond8) entered disabled state
[  632.676649][T19109] IPv6: NLM_F_REPLACE set, but no existing node found!
[  632.778573][T19110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2974'.
[  633.040744][T19125] netlink: 'syz.3.2976': attribute type 1 has an invalid length.
[  633.040934][T19126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2976'.
[  633.072837][T19127] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2976'.
[  633.489122][T11153] bond3 (unregistering): (slave erspan1): Releasing active interface
[  633.898526][T11153] team0: Port device bridge1 removed
[  633.923223][ T4936] Bluetooth: hci5: command tx timeout
[  633.982850][T11153] team0: Port device bridge6 removed
[  634.055917][T11153] bond0 (unregistering): Released all slaves
[  634.068072][T11153] bond1 (unregistering): Released all slaves
[  634.106617][T11153] bond2 (unregistering): Released all slaves
[  634.129329][T11153] bond3 (unregistering): Released all slaves
[  634.160961][T11153] bond4 (unregistering): Released all slaves
[  634.182347][T11153] bond5 (unregistering): Released all slaves
[  634.209897][T11153] bond6 (unregistering): Released all slaves
[  634.254007][T11153] bond7 (unregistering): (slave veth5): Releasing active interface
[  634.255094][T11153] bond7 (unregistering): Released all slaves
[  634.283751][T11153] bond8 (unregistering): Released all slaves
[  634.483210][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  634.724144][T19138] netlink: 'syz.2.2979': attribute type 1 has an invalid length.
[  634.726887][T19138] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[  634.864976][T19126] bond13: (slave veth10): Enslaving as an active interface with a down link
[  634.979731][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  635.150329][T19151] netlink: 'syz.2.2980': attribute type 4 has an invalid length.
[  635.191404][T11153] : left promiscuous mode
[  635.465349][T19159] batadv0: entered promiscuous mode
[  635.465750][T19159] macvtap2: entered promiscuous mode
[  635.465954][T19159] macvtap2: entered allmulticast mode
[  635.465969][T19159] batadv0: entered allmulticast mode
[  635.467619][T19159] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  635.469123][T19159] batadv0: left allmulticast mode
[  635.469330][T19159] batadv0: left promiscuous mode
[  635.532676][T11153] tipc: Disabling bearer <udp:syz2>
[  635.541210][T11153] tipc: Left network mode
[  636.003030][ T4936] Bluetooth: hci5: command tx timeout
[  636.087351][T19171] FAULT_INJECTION: forcing a failure.
[  636.087351][T19171] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.087389][T19171] CPU: 1 UID: 0 PID: 19171 Comm: syz.3.2985 Not tainted syzkaller #0 PREEMPT(full) 
[  636.087416][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  636.087431][T19171] Call Trace:
[  636.087440][T19171]  <TASK>
[  636.087450][T19171]  dump_stack_lvl+0xe8/0x150
[  636.087489][T19171]  should_fail_ex+0x410/0x560
[  636.087523][T19171]  _copy_from_iter+0x1d3/0x1660
[  636.087550][T19171]  ? __alloc_skb+0x27a/0x7a0
[  636.087582][T19171]  ? __alloc_skb+0x27a/0x7a0
[  636.087610][T19171]  ? __alloc_skb+0x27a/0x7a0
[  636.087639][T19171]  ? __pfx__copy_from_iter+0x10/0x10
[  636.087664][T19171]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  636.087700][T19171]  ? __alloc_skb+0x27a/0x7a0
[  636.087724][T19171]  ? __alloc_skb+0x27a/0x7a0
[  636.087758][T19171]  ? netlink_sendmsg+0x650/0xb40
[  636.087779][T19171]  ? skb_put+0x112/0x210
[  636.087811][T19171]  netlink_sendmsg+0x6c0/0xb40
[  636.087844][T19171]  ? __pfx_netlink_sendmsg+0x10/0x10
[  636.087875][T19171]  ? apparmor_socket_sendmsg+0x98/0x360
[  636.087903][T19171]  ? __pfx_netlink_sendmsg+0x10/0x10
[  636.087925][T19171]  sock_sendmsg_nosec+0x13a/0x180
[  636.087951][T19171]  ____sys_sendmsg+0x54e/0x850
[  636.087989][T19171]  ? __pfx_____sys_sendmsg+0x10/0x10
[  636.088031][T19171]  ? import_iovec+0x73/0xa0
[  636.088064][T19171]  ___sys_sendmsg+0x2a5/0x360
[  636.088094][T19171]  ? __lock_acquire+0x747/0x2de0
[  636.088124][T19171]  ? __pfx____sys_sendmsg+0x10/0x10
[  636.088194][T19171]  ? __fget_files+0x2a/0x420
[  636.088237][T19171]  ? __fget_files+0x3a2/0x420
[  636.088279][T19171]  __x64_sys_sendmsg+0x1b1/0x290
[  636.088314][T19171]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  636.088370][T19171]  do_syscall_64+0x166/0x520
[  636.088399][T19171]  ? trace_irq_disable+0x3b/0x140
[  636.088423][T19171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.088446][T19171]  ? clear_bhb_loop+0x70/0xc0
[  636.088475][T19171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.088498][T19171] RIP: 0033:0x7f2bf7b9e159
[  636.088519][T19171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.088539][T19171] RSP: 002b:00007f2bf8b1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.088565][T19171] RAX: ffffffffffffffda RBX: 00007f2bf7e25fa0 RCX: 00007f2bf7b9e159
[  636.088583][T19171] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  636.088597][T19171] RBP: 00007f2bf8b1b090 R08: 0000000000000000 R09: 0000000000000000
[  636.088612][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.088627][T19171] R13: 00007f2bf7e26038 R14: 00007f2bf7e25fa0 R15: 00007ffe13657608
[  636.088663][T19171]  </TASK>
[  636.340559][T19173] __nla_validate_parse: 2 callbacks suppressed
[  636.340619][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'.
[  636.340681][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'.
[  636.459768][T19170] veth0: entered promiscuous mode
[  636.558650][T19168] veth0: left promiscuous mode
[  637.337244][T19203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2986'.
[  638.222338][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  638.359385][T19213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  638.697172][T19224] Unsupported ieee802154 address type: 0
[  638.746172][T18985] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.746323][T18985] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.746470][T18985] bridge_slave_0: entered allmulticast mode
[  638.749809][T18985] bridge_slave_0: entered promiscuous mode
[  638.787137][T18985] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.787320][T18985] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.787482][T18985] bridge_slave_1: entered allmulticast mode
[  638.791042][T18985] bridge_slave_1: entered promiscuous mode
[  638.958175][T19231] FAULT_INJECTION: forcing a failure.
[  638.958175][T19231] name failslab, interval 1, probability 0, space 0, times 0
[  638.958211][T19231] CPU: 1 UID: 0 PID: 19231 Comm: syz.4.2996 Not tainted syzkaller #0 PREEMPT(full) 
[  638.958237][T19231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  638.958252][T19231] Call Trace:
[  638.958260][T19231]  <TASK>
[  638.958271][T19231]  dump_stack_lvl+0xe8/0x150
[  638.958309][T19231]  should_fail_ex+0x410/0x560
[  638.958341][T19231]  should_failslab+0xa8/0x100
[  638.958369][T19231]  ? skb_clone+0x212/0x3a0
[  638.958402][T19231]  kmem_cache_alloc_noprof+0xa1/0x600
[  638.958440][T19231]  ? skb_clone+0x212/0x3a0
[  638.958479][T19231]  skb_clone+0x212/0x3a0
[  638.958523][T19231]  __netlink_deliver_tap+0x355/0x6e0
[  638.958574][T19231]  ? netlink_deliver_tap+0x2e/0x1b0
[  638.958611][T19231]  netlink_deliver_tap+0x19c/0x1b0
[  638.958648][T19231]  netlink_unicast+0x781/0x940
[  638.958692][T19231]  netlink_sendmsg+0x813/0xb40
[  638.958724][T19231]  ? __pfx_netlink_sendmsg+0x10/0x10
[  638.958755][T19231]  ? apparmor_socket_sendmsg+0x98/0x360
[  638.958784][T19231]  ? __pfx_netlink_sendmsg+0x10/0x10
[  638.958804][T19231]  sock_sendmsg_nosec+0x13a/0x180
[  638.958830][T19231]  ____sys_sendmsg+0x54e/0x850
[  638.958868][T19231]  ? __pfx_____sys_sendmsg+0x10/0x10
[  638.958908][T19231]  ? import_iovec+0x73/0xa0
[  638.958942][T19231]  ___sys_sendmsg+0x2a5/0x360
[  638.958971][T19231]  ? __lock_acquire+0x747/0x2de0
[  638.959001][T19231]  ? __pfx____sys_sendmsg+0x10/0x10
[  638.959071][T19231]  ? __fget_files+0x2a/0x420
[  638.959102][T19231]  ? __fget_files+0x3a2/0x420
[  638.959144][T19231]  __x64_sys_sendmsg+0x1b1/0x290
[  638.959179][T19231]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  638.959234][T19231]  do_syscall_64+0x166/0x520
[  638.959262][T19231]  ? trace_irq_disable+0x3b/0x140
[  638.959285][T19231]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.959309][T19231]  ? clear_bhb_loop+0x70/0xc0
[  638.959337][T19231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.959361][T19231] RIP: 0033:0x7fe72579e159
[  638.959381][T19231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.959402][T19231] RSP: 002b:00007fe7265e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  638.959427][T19231] RAX: ffffffffffffffda RBX: 00007fe725a25fa0 RCX: 00007fe72579e159
[  638.959444][T19231] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  638.959460][T19231] RBP: 00007fe7265e8090 R08: 0000000000000000 R09: 0000000000000000
[  638.959475][T19231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.959497][T19231] R13: 00007fe725a26038 R14: 00007fe725a25fa0 R15: 00007ffe9e412cb8
[  638.959534][T19231]  </TASK>
[  639.342984][T19229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2994'.
[  639.662753][T18985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.763984][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  639.786521][T19235] bond7: (slave dummy0): Releasing active interface
[  639.965593][T19235] bond0: (slave bond_slave_0): Releasing backup interface
[  640.227916][T19235] bond0: (slave bond_slave_1): Releasing backup interface
[  640.485428][T19235] team0: Port device team_slave_0 removed
[  640.578682][T19235] team0: Port device team_slave_1 removed
[  640.590144][T19235] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  640.590172][T19235] batman_adv: batadv0: Removing interface: batadv_slave_0
[  640.599596][T19235] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  640.599624][T19235] batman_adv: batadv0: Removing interface: batadv_slave_1
[  640.648132][T19235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  640.789456][T18985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.028065][T11153] hsr_slave_1: left promiscuous mode
[  641.041235][T19266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3001'.
[  641.041793][T19266] smc: ib device syz2 ibport 1 applied user defined pnetid S
[  641.159992][T11153] veth1_vlan: left promiscuous mode
[  641.160031][T11153] veth0_vlan: left promiscuous mode
[  641.574414][T19280] IPv6: Can't replace route, no match found
[  642.007284][T19285] FAULT_INJECTION: forcing a failure.
[  642.007284][T19285] name failslab, interval 1, probability 0, space 0, times 0
[  642.007321][T19285] CPU: 0 UID: 0 PID: 19285 Comm: syz.2.3007 Not tainted syzkaller #0 PREEMPT(full) 
[  642.007344][T19285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  642.007357][T19285] Call Trace:
[  642.007366][T19285]  <TASK>
[  642.007376][T19285]  dump_stack_lvl+0xe8/0x150
[  642.007413][T19285]  should_fail_ex+0x410/0x560
[  642.007443][T19285]  ? __alloc_skb+0x1db/0x7a0
[  642.007469][T19285]  should_failslab+0xa8/0x100
[  642.007497][T19285]  ? __alloc_skb+0x1db/0x7a0
[  642.007522][T19285]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  642.007558][T19285]  ? __alloc_skb+0x18d/0x7a0
[  642.007584][T19285]  ? __alloc_skb+0x1db/0x7a0
[  642.007617][T19285]  __alloc_skb+0x1db/0x7a0
[  642.007653][T19285]  netlink_ack+0x136/0xb30
[  642.007700][T19285]  netlink_rcv_skb+0x2a4/0x4a0
[  642.007735][T19285]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  642.007769][T19285]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  642.007814][T19285]  ? bpf_lsm_capable+0x9/0x20
[  642.007833][T19285]  ? security_capable+0x7e/0x2c0
[  642.007867][T19285]  nfnetlink_rcv+0x2b9/0x28c0
[  642.007908][T19285]  ? __dev_queue_xmit+0x29b/0x3820
[  642.007942][T19285]  ? __dev_queue_xmit+0x29b/0x3820
[  642.007978][T19285]  ? __local_bh_enable_ip+0xd6/0x140
[  642.008008][T19285]  ? lockdep_hardirqs_on+0x7b/0x110
[  642.008035][T19285]  ? __dev_queue_xmit+0x29b/0x3820
[  642.008066][T19285]  ? __local_bh_enable_ip+0xd6/0x140
[  642.008094][T19285]  ? __dev_queue_xmit+0x29b/0x3820
[  642.008126][T19285]  ? __dev_queue_xmit+0x1edc/0x3820
[  642.008172][T19285]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  642.008213][T19285]  ? __pfx___dev_queue_xmit+0x10/0x10
[  642.008256][T19285]  ? __copy_skb_header+0xa3/0x4a0
[  642.008308][T19285]  ? skb_clone+0x246/0x3a0
[  642.008344][T19285]  ? __netlink_deliver_tap+0x681/0x6e0
[  642.008377][T19285]  ? netlink_deliver_tap+0x2e/0x1b0
[  642.008418][T19285]  ? netlink_deliver_tap+0x2e/0x1b0
[  642.008451][T19285]  ? netlink_deliver_tap+0x2e/0x1b0
[  642.008492][T19285]  netlink_unicast+0x7bd/0x940
[  642.008535][T19285]  netlink_sendmsg+0x813/0xb40
[  642.008567][T19285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.008597][T19285]  ? apparmor_socket_sendmsg+0x98/0x360
[  642.008624][T19285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.008644][T19285]  sock_sendmsg_nosec+0x13a/0x180
[  642.008670][T19285]  ____sys_sendmsg+0x54e/0x850
[  642.008706][T19285]  ? __pfx_____sys_sendmsg+0x10/0x10
[  642.008747][T19285]  ? import_iovec+0x73/0xa0
[  642.008778][T19285]  ___sys_sendmsg+0x2a5/0x360
[  642.008807][T19285]  ? __lock_acquire+0x747/0x2de0
[  642.008836][T19285]  ? __pfx____sys_sendmsg+0x10/0x10
[  642.008913][T19285]  ? __fget_files+0x2a/0x420
[  642.008940][T19285]  ? __fget_files+0x3a2/0x420
[  642.008980][T19285]  __x64_sys_sendmsg+0x1b1/0x290
[  642.009011][T19285]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  642.009061][T19285]  do_syscall_64+0x166/0x520
[  642.009088][T19285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.009110][T19285]  ? clear_bhb_loop+0x70/0xc0
[  642.009135][T19285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.009157][T19285] RIP: 0033:0x7f03c8b9e159
[  642.009178][T19285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.009197][T19285] RSP: 002b:00007f03c9b25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  642.009223][T19285] RAX: ffffffffffffffda RBX: 00007f03c8e25fa0 RCX: 00007f03c8b9e159
[  642.009240][T19285] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  642.009255][T19285] RBP: 00007f03c9b25090 R08: 0000000000000000 R09: 0000000000000000
[  642.009269][T19285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.009283][T19285] R13: 00007f03c8e26038 R14: 00007f03c8e25fa0 R15: 00007fffbeb37338
[  642.009320][T19285]  </TASK>
[  643.408658][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  643.539807][T18985] team0: Port device team_slave_0 added
[  643.590413][T18985] team0: Port device team_slave_1 added
[  643.603355][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  643.851203][T18985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.851223][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.851251][T18985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.879890][T18985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.879943][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.880027][T18985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  644.004115][T18985] hsr_slave_0: entered promiscuous mode
[  644.005281][T18985] hsr_slave_1: entered promiscuous mode
[  644.060077][T19296] netlink: 5396 bytes leftover after parsing attributes in process `syz.3.3009'.
[  644.060104][T19296] openvswitch: netlink: Flow key attr not present in new flow.
[  644.182164][T19302] batman_adv: batadv0: Adding interface: macvlan3
[  644.182184][T19302] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  644.182219][T19302] batman_adv: batadv0: Interface activated: macvlan3
[  644.625498][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3013'.
[  644.721636][T19317] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma?
[  645.564569][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4
[  646.035735][T19342] x_tables: duplicate underflow at hook 4
[  646.327361][T11153] IPVS: stop unused estimator thread 0...
[  646.418679][T19354] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  646.696316][T19360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  646.784576][T19351] bond13: entered promiscuous mode
[  646.819696][T19351] 8021q: adding VLAN 0 to HW filter on device bond13
[  647.498072][T19384] FAULT_INJECTION: forcing a failure.
[  647.498072][T19384] name failslab, interval 1, probability 0, space 0, times 0
[  647.498111][T19384] CPU: 1 UID: 0 PID: 19384 Comm: syz.1.3029 Not tainted syzkaller #0 PREEMPT(full) 
[  647.498136][T19384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  647.498151][T19384] Call Trace:
[  647.498160][T19384]  <TASK>
[  647.498170][T19384]  dump_stack_lvl+0xe8/0x150
[  647.498210][T19384]  should_fail_ex+0x410/0x560
[  647.498246][T19384]  should_failslab+0xa8/0x100
[  647.498276][T19384]  ? skb_clone+0x212/0x3a0
[  647.498309][T19384]  kmem_cache_alloc_noprof+0xa1/0x600
[  647.498349][T19384]  ? skb_clone+0x212/0x3a0
[  647.498387][T19384]  skb_clone+0x212/0x3a0
[  647.498425][T19384]  __netlink_deliver_tap+0x355/0x6e0
[  647.498473][T19384]  ? netlink_deliver_tap+0x2e/0x1b0
[  647.498511][T19384]  netlink_deliver_tap+0x19c/0x1b0
[  647.498549][T19384]  netlink_sendskb+0x68/0x140
[  647.498586][T19384]  netlink_rcv_skb+0x2a4/0x4a0
[  647.498622][T19384]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  647.498659][T19384]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  647.498708][T19384]  ? bpf_lsm_capable+0x9/0x20
[  647.498729][T19384]  ? security_capable+0x7e/0x2c0
[  647.498765][T19384]  nfnetlink_rcv+0x2b9/0x28c0
[  647.498801][T19384]  ? __dev_queue_xmit+0x29b/0x3820
[  647.498838][T19384]  ? __dev_queue_xmit+0x29b/0x3820
[  647.498883][T19384]  ? __local_bh_enable_ip+0xd6/0x140
[  647.498915][T19384]  ? lockdep_hardirqs_on+0x7b/0x110
[  647.498945][T19384]  ? __dev_queue_xmit+0x29b/0x3820
[  647.498982][T19384]  ? __local_bh_enable_ip+0xd6/0x140
[  647.499016][T19384]  ? __dev_queue_xmit+0x29b/0x3820
[  647.499053][T19384]  ? __dev_queue_xmit+0x1edc/0x3820
[  647.499102][T19384]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  647.499146][T19384]  ? __pfx___dev_queue_xmit+0x10/0x10
[  647.499192][T19384]  ? __copy_skb_header+0xa3/0x4a0
[  647.499247][T19384]  ? skb_clone+0x246/0x3a0
[  647.499283][T19384]  ? __netlink_deliver_tap+0x681/0x6e0
[  647.499318][T19384]  ? netlink_deliver_tap+0x2e/0x1b0
[  647.499360][T19384]  ? netlink_deliver_tap+0x2e/0x1b0
[  647.499395][T19384]  ? netlink_deliver_tap+0x2e/0x1b0
[  647.499437][T19384]  netlink_unicast+0x7bd/0x940
[  647.499483][T19384]  netlink_sendmsg+0x813/0xb40
[  647.499516][T19384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  647.499548][T19384]  ? apparmor_socket_sendmsg+0x98/0x360
[  647.499576][T19384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  647.499598][T19384]  sock_sendmsg_nosec+0x13a/0x180
[  647.499625][T19384]  ____sys_sendmsg+0x54e/0x850
[  647.499663][T19384]  ? __pfx_____sys_sendmsg+0x10/0x10
[  647.499720][T19384]  ? import_iovec+0x73/0xa0
[  647.499755][T19384]  ___sys_sendmsg+0x2a5/0x360
[  647.499784][T19384]  ? __lock_acquire+0x747/0x2de0
[  647.499814][T19384]  ? __pfx____sys_sendmsg+0x10/0x10
[  647.499893][T19384]  ? __fget_files+0x2a/0x420
[  647.499924][T19384]  ? __fget_files+0x3a2/0x420
[  647.499968][T19384]  __x64_sys_sendmsg+0x1b1/0x290
[  647.500004][T19384]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  647.500060][T19384]  do_syscall_64+0x166/0x520
[  647.500089][T19384]  ? trace_irq_disable+0x3b/0x140
[  647.500112][T19384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.500137][T19384]  ? clear_bhb_loop+0x70/0xc0
[  647.500166][T19384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.500190][T19384] RIP: 0033:0x7f332239e159
[  647.500213][T19384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.500233][T19384] RSP: 002b:00007f3323287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  647.500259][T19384] RAX: ffffffffffffffda RBX: 00007f3322625fa0 RCX: 00007f332239e159
[  647.500277][T19384] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  647.500292][T19384] RBP: 00007f3323287090 R08: 0000000000000000 R09: 0000000000000000
[  647.500307][T19384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  647.500321][T19384] R13: 00007f3322626038 R14: 00007f3322625fa0 R15: 00007ffc77b321b8
[  647.500358][T19384]  </TASK>
[  647.832692][T19364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  648.119960][T19387] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3030'.
[  648.494161][T19391] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3030'.
[  648.903730][T19414] nbd: must specify a size in bytes for the device
[  649.047651][T19413] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3035'.
[  649.356120][T19418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  649.381574][T19418] syzkaller0: entered promiscuous mode
[  649.427114][T19418] syzkaller0: entered allmulticast mode
[  649.812118][T19424] tipc: Resetting bearer <eth:syzkaller0>
[  650.170981][T19417] tipc: Resetting bearer <eth:syzkaller0>
[  650.286257][T19417] tipc: Disabling bearer <eth:syzkaller0>
[  650.370740][T19443] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  650.646219][T18985] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  650.671640][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  650.681122][T18985] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  650.698528][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  650.701302][T18985] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  650.787047][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  650.789921][T18985] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  650.831358][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  651.158632][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3048'.
[  651.493515][T19477] bond0: (slave bond_slave_1): Releasing backup interface
[  651.865617][T18985] 8021q: adding VLAN 0 to HW filter on device bond0
[  651.935858][T18985] 8021q: adding VLAN 0 to HW filter on device team0
[  651.989424][T16240] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.989550][T16240] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.052096][T11153] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.052213][T11153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  655.046176][T19517] TC_ACT_REPEAT abuse ?
[  655.046231][T19519] syzkaller0: entered promiscuous mode
[  655.046251][T19519] syzkaller0: entered allmulticast mode
[  655.083404][T19519] 0: reclassify loop, rule prio 0, protocol 800
[  655.758664][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3056'.
[  655.815073][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3058'.
[  656.333227][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'.
[  656.362600][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'.
[  657.373937][T18985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  657.858305][T18985] veth0_vlan: entered promiscuous mode
[  658.431029][T18985] veth1_vlan: entered promiscuous mode
[  658.626300][T18985] veth0_macvtap: entered promiscuous mode
[  658.655918][T18985] veth1_macvtap: entered promiscuous mode
[  658.767585][T18985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  658.817556][T18985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  658.920325][T19630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  658.920345][T19630] IPv6: NLM_F_CREATE should be set when creating new route
[  658.920398][T19630] IPv6: NLM_F_CREATE should be set when creating new route
[  658.920426][T19630] IPv6: NLM_F_CREATE should be set when creating new route
[  658.941855][T19630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  658.963361][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  658.964623][T11149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.967490][T11153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.967652][T11153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.998295][T11153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  659.491332][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.491359][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.801191][T19645] netlink: 'syz.2.3072': attribute type 12 has an invalid length.
[  659.882233][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.882259][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.174031][T19662] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3075'.
[  660.197970][T19655] netlink: 'syz.1.3074': attribute type 1 has an invalid length.
[  660.197997][T19655] netlink: 16110 bytes leftover after parsing attributes in process `syz.1.3074'.
[  660.202389][T19659] netlink: 'syz.1.3074': attribute type 1 has an invalid length.
[  660.202412][T19659] netlink: 16110 bytes leftover after parsing attributes in process `syz.1.3074'.
[  660.479759][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'.
[  660.554035][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'.
[  660.554077][T19654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3075'.
[  660.751929][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'.
[  660.751971][T19654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3075'.
[  660.883189][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  661.503893][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'.
[  661.503919][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3078'.
[  661.722204][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  661.734723][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  661.743173][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  661.746493][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  661.748163][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  662.476661][T19707] syzkaller0: entered promiscuous mode
[  662.476687][T19707] syzkaller0: entered allmulticast mode
[  662.514551][T19707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  662.546901][T19704] tipc: Resetting bearer <eth:syzkaller0>
[  662.624434][T19704] tipc: Disabling bearer <eth:syzkaller0>
[  663.261107][T19728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  663.367480][T19727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'.
[  663.367510][T19727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'.
[  663.435310][T19692] lo speed is unknown, defaulting to 1000
[  663.460140][T19730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  663.795454][T19745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'.
[  663.843473][ T5625] Bluetooth: hci1: command tx timeout
[  664.189815][T19758] netlink: 'syz.3.3091': attribute type 12 has an invalid length.
[  664.239951][T19758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'.
[  664.374946][T19765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3093'.
[  665.366143][T19787] IPVS: sh: FWM 3 0x00000003 - no destination available
[  665.465514][T19796] IPVS: sh: FWM 3 0x00000003 - no destination available
[  665.924674][ T5625] Bluetooth: hci1: command tx timeout
[  666.244771][T19812] IPv6: NLM_F_CREATE should be specified when creating new route
[  666.510638][T19812] ip6tnl2: entered allmulticast mode
[  666.552275][T19692] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.552395][T19692] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.552572][T19692] bridge_slave_0: entered allmulticast mode
[  666.605730][T19692] bridge_slave_0: entered promiscuous mode
[  666.634276][T19692] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.639173][T19692] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.639375][T19692] bridge_slave_1: entered allmulticast mode
[  666.689674][T19692] bridge_slave_1: entered promiscuous mode
[  667.075850][T19692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.120674][T19692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.279985][ T1397] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  667.280234][ T1397] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  667.303163][T10950] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  667.495317][T19692] team0: Port device team_slave_0 added
[  667.552811][T19692] team0: Port device team_slave_1 added
[  667.703807][T10950] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  668.003846][ T5625] Bluetooth: hci1: command tx timeout
[  668.020516][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'.
[  668.083315][T10943] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  668.175961][T19692] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.175982][T19692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.176807][T19692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.243239][T19692] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.243261][T19692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.243292][T19692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.298873][T19850] bridge_slave_1: left allmulticast mode
[  668.298904][T19850] bridge_slave_1: left promiscuous mode
[  668.299191][T19850] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.341308][T19850] bridge_slave_0: left allmulticast mode
[  668.341339][T19850] bridge_slave_0: left promiscuous mode
[  668.341601][T19850] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.772897][    C0] sched: DL replenish lagged too much
[  668.833827][T19834] lo speed is unknown, defaulting to 1000
[  668.861355][T19858] batman_adv: batadv0: Adding interface: syzkaller0
[  668.861382][T19858] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.861419][T19858] batman_adv: batadv0: Interface activated: syzkaller0
[  668.914408][T19846] batman_adv: batadv0: Interface deactivated: syzkaller0
[  669.006317][T19846] batman_adv: batadv0: Removing interface: syzkaller0
[  669.210300][T19692] hsr_slave_0: entered promiscuous mode
[  669.225267][T19692] hsr_slave_1: entered promiscuous mode
[  669.229683][T19692] debugfs: 'hsr0' already exists in 'hsr'
[  669.229709][T19692] Cannot create hsr debugfs directory
[  670.027150][T19880] netlink: 'syz.2.3103': attribute type 15 has an invalid length.
[  670.027178][T19880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3103'.
[  670.083455][ T5625] Bluetooth: hci1: command tx timeout
[  670.504587][T19844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  670.964831][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  671.089413][T19889] netlink: 'syz.0.3109': attribute type 8 has an invalid length.
[  671.089438][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3109'.
[  671.089478][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'.
[  671.762590][T19692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  671.762641][T19692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.438535][T19911] nbd4: detected capacity change from 0 to 63
[  672.476933][ T5625] block nbd4: Receive control failed (result -32)
[  672.503284][ T1693] block nbd4: Dead connection, failed to find a fallback
[  672.621241][T19692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  672.621284][T19692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.081067][T19919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3112'.
[  673.097960][T19919] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3112'.
[  673.322513][T19692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  673.322569][T19692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.482268][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'.
[  673.482302][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'.
[  673.482376][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'.
[  673.968186][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'.
[  674.039381][T19692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.039425][T19692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.467284][T19951] netlink: 'syz.3.3116': attribute type 10 has an invalid length.
[  674.694353][T19956] pim6reg: entered allmulticast mode
[  674.757490][T19951] team0: Device veth0_vlan failed to register rx_handler
[  674.817025][T19949] pim6reg: left allmulticast mode
[  676.747301][T19692] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  676.769236][T19992] xt_ipcomp: unknown flags 1D
[  676.811313][T19692] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  676.828328][T19692] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  676.896895][T19692] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  676.918152][T19692] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  676.980101][T19692] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  676.997219][T19692] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  677.041436][T19991] netlink: NAT attribute has 8 unknown bytes
[  677.041476][T19991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  677.076595][T19692] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  677.499521][T20009] xfrm1: entered promiscuous mode
[  677.499734][T20009] xfrm1: entered allmulticast mode
[  678.060727][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'.
[  678.163134][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  678.540234][T19692] 8021q: adding VLAN 0 to HW filter on device bond0
[  678.709119][T19692] 8021q: adding VLAN 0 to HW filter on device team0
[  678.746739][T11160] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.746866][T11160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  678.837329][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.837451][ T6127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.978917][T20076] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  679.980693][T20074] IPVS: stopping master sync thread 20076 ...
[  680.103378][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.103403][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.103416][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.103429][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.105231][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.105250][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.105264][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.105277][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.106470][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.106488][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.106501][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.106514][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.107824][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.107843][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.107856][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.107869][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.109182][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.109201][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.109214][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.109227][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.110583][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.110600][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.110614][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.110627][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.111950][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.111969][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.111982][T20077] Bluetooth: hci0: unsupported parameter 5134
[  680.111996][T20077] Bluetooth: hci0: unsupported parameter 8192
[  680.148116][T20074] netlink: 'syz.3.3141': attribute type 1 has an invalid length.
[  681.865106][T20118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  681.966843][T20127] netlink: 712 bytes leftover after parsing attributes in process `syz.2.3148'.
[  682.187723][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3149'.
[  682.430183][T19692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.549566][T20139] syzkaller0: entered promiscuous mode
[  682.549592][T20139] syzkaller0: entered allmulticast mode
[  682.664158][T20136] 0: reclassify loop, rule prio 0, protocol 800
[  682.708199][T20141] netlink: 'syz.0.3153': attribute type 11 has an invalid length.
[  682.771139][T20151] 0: reclassify loop, rule prio 0, protocol 800
[  682.878221][T19692] veth0_vlan: entered promiscuous mode
[  682.906722][T20152] netlink: 'syz.0.3153': attribute type 11 has an invalid length.
[  682.979935][T19692] veth1_vlan: entered promiscuous mode
[  683.458700][T20159] syzkaller0: entered promiscuous mode
[  683.458728][T20159] syzkaller0: entered allmulticast mode
[  683.671376][T19692] veth0_macvtap: entered promiscuous mode
[  683.736483][T19692] veth1_macvtap: entered promiscuous mode
[  684.309486][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3164'.
[  688.527693][T19692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  688.568814][T19692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  688.657200][ T6127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  688.697178][T20210] netlink: 'syz.0.3169': attribute type 21 has an invalid length.
[  691.685543][   T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  691.852221][ T6127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  691.853085][T11147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  692.246262][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  692.565950][T20235] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3175'.
[  692.618202][T20231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3175'.
[  692.619714][T20235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3175'.
[  693.083770][T20247] netlink: 'syz.4.3177': attribute type 4 has an invalid length.
[  693.119855][T20230] syzkaller1: entered promiscuous mode
[  693.119882][T20230] syzkaller1: entered allmulticast mode
[  693.141454][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  693.141478][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  693.628823][ T6127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  693.628848][ T6127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  694.209032][T20262] syzkaller0: entered promiscuous mode
[  694.209058][T20262] syzkaller0: entered allmulticast mode
[  694.787950][T20271] netlink: 'syz.1.3077': attribute type 1 has an invalid length.
[  694.787978][T20271] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3077'.
[  694.803232][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  695.057620][ T4936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  695.074089][ T4936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  695.092272][ T4936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  695.114331][ T4936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  695.119666][ T4936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  695.184315][T20279] Bluetooth: hci0: unsupported parameter 1280
[  695.184339][T20279] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  695.185662][T20280] Bluetooth: hci0: unsupported parameter 1280
[  695.185682][T20280] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  695.471001][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'.
[  695.490464][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'.
[  695.901419][T20297] netlink: 'syz.3.3187': attribute type 1 has an invalid length.
[  696.451591][T20301] veth12: entered allmulticast mode
[  696.534259][T20308] bond10: (slave veth0_to_bond): Releasing active interface
[  696.568903][T20308] bond14: (slave veth0_to_bond): making interface the new active one
[  696.587304][T20308] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  697.203059][ T4936] Bluetooth: hci2: command tx timeout
[  697.254507][T20359] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  697.786229][T20274] lo speed is unknown, defaulting to 1000
[  698.600538][T20381] netlink: 'syz.4.3201': attribute type 3 has an invalid length.
[  698.786844][T20364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  699.283755][ T4936] Bluetooth: hci2: command tx timeout
[  699.814728][T20409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3209'.
[  699.815069][T20409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3209'.
[  700.009136][T20274] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.011854][T20274] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.012032][T20274] bridge_slave_0: entered allmulticast mode
[  700.046383][T20274] bridge_slave_0: entered promiscuous mode
[  700.071744][T20274] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.071870][T20274] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.072043][T20274] bridge_slave_1: entered allmulticast mode
[  700.116745][T20274] bridge_slave_1: entered promiscuous mode
[  700.241896][T20419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3208'.
[  700.308176][T20419] netlink: 4760 bytes leftover after parsing attributes in process `syz.3.3208'.
[  700.349389][T20419] netlink: 4760 bytes leftover after parsing attributes in process `syz.3.3208'.
[  700.410486][T20274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  700.476275][T20274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  700.741854][T20274] team0: Port device team_slave_0 added
[  700.765062][T20274] team0: Port device team_slave_1 added
[  700.890916][T20274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.890936][T20274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  700.890964][T20274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  700.937803][T20274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  700.937823][T20274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  700.937853][T20274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  701.036651][T20432] netlink: 'syz.0.3214': attribute type 2 has an invalid length.
[  701.036674][T20432] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3214'.
[  701.101678][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  701.241172][T20427] netlink: 'syz.3.3212': attribute type 6 has an invalid length.
[  701.249891][T20427] x_tables: duplicate underflow at hook 3
[  701.316621][T20433] ip6erspan0: entered allmulticast mode
[  701.363205][ T4936] Bluetooth: hci2: command tx timeout
[  701.621433][T20274] hsr_slave_0: entered promiscuous mode
[  701.622603][T20274] hsr_slave_1: entered promiscuous mode
[  701.637856][T20274] debugfs: 'hsr0' already exists in 'hsr'
[  701.637881][T20274] Cannot create hsr debugfs directory
[  703.444095][ T4936] Bluetooth: hci2: command tx timeout
[  703.536053][T20470] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3223'.
[  703.536082][T20470] openvswitch: netlink: Flow key attr not present in new flow.
[  703.836284][T20481] netlink: 'syz.4.3226': attribute type 1 has an invalid length.
[  704.160933][T20274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.461865][T20484] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  704.499212][T20490] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  704.802254][T20274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.013540][T20274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.277326][T20517] ip6erspan0: entered allmulticast mode
[  705.586692][T20274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.977883][T20530] bridge15: the hash_elasticity option has been deprecated and is always 16
[  705.983383][T20530] bridge15: entered allmulticast mode
[  706.388182][T20543] Cannot find set identified by id 0 to match
[  706.392453][T20544] nbd: socks must be embedded in a SOCK_ITEM attr
[  706.728739][T20556] vcan0: tx address claim with dlc 0
[  707.037139][T20564] netlink: 'syz.0.3243': attribute type 1 has an invalid length.
[  707.410679][T20565] macvtap1: entered allmulticast mode
[  707.411151][T20274] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  707.477216][T20274] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  707.480039][T20274] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  707.482638][T20577] openvswitch: netlink: VXLAN extension message has 5 unknown bytes.
[  707.489182][T20567] netlink: 'syz.0.3243': attribute type 1 has an invalid length.
[  707.537757][T20274] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  707.567467][T20574] macvtap2: entered allmulticast mode
[  707.586810][T20564] bond1: (slave bridge0): making interface the new active one
[  707.588481][T20564] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  707.626079][T20582] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  707.891621][T20274] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  707.917493][T20274] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  708.039539][T20591] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3245'.
[  708.055601][T20565] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  708.110656][T20591] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3245'.
[  708.154460][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3246'.
[  708.166213][T20580] macvtap3: entered allmulticast mode
[  708.237801][T20274] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  708.305217][T20274] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  708.331171][T20595] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  708.448713][T20595] batman_adv: batadv0: Removing interface: batadv_slave_0
[  708.516478][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'.
[  708.843152][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3249'.
[  708.950289][T20624] netlink: 'syz.4.3249': attribute type 54 has an invalid length.
[  708.950313][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'.
[  709.095953][T20619] ovs-system: entered promiscuous mode
[  709.379908][T20274] 8021q: adding VLAN 0 to HW filter on device bond0
[  709.422449][T20637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3254'.
[  709.618949][T20643] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3256'.
[  709.869364][T20274] 8021q: adding VLAN 0 to HW filter on device team0
[  709.914928][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.915080][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state
[  709.998677][T11160] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.998858][T11160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  710.673528][T20672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3264'.
[  710.680081][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3263'.
[  711.052105][T20682] netlink: 'syz.4.3265': attribute type 1 has an invalid length.
[  711.262587][T20692] veth0_to_bond: left promiscuous mode
[  711.342103][T20692] bond15: (slave veth0_to_bond): making interface the new active one
[  711.369198][T20692] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  711.412471][T20697] macvlan2: entered promiscuous mode
[  711.412497][T20697] macvlan2: entered allmulticast mode
[  712.221193][T20729] syzkaller1: entered promiscuous mode
[  712.221412][T20729] syzkaller1: entered allmulticast mode
[  712.790514][T20274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  713.122561][T20274] veth0_vlan: entered promiscuous mode
[  713.217967][T20758] bond0: Error: CAN devices cannot be enslaved
[  713.262324][T20770] bond0: Error: CAN devices cannot be enslaved
[  713.272552][T20274] veth1_vlan: entered promiscuous mode
[  713.552261][T20274] veth0_macvtap: entered promiscuous mode
[  713.586027][T20274] veth1_macvtap: entered promiscuous mode
[  713.718737][T20274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  713.761804][T20274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  713.893418][T20785] ip_tables: iptables: counters copy to user failed while replacing table
[  713.934815][T11153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  713.935179][T11153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  713.960964][  T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  713.961007][  T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  714.134934][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.134959][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.375386][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.375408][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.684120][T20812] tipc: Started in network mode
[  714.684152][T20812] tipc: Node identity 7ef35ee2fc99, cluster identity 4711
[  714.684317][T20812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  715.000256][T20822] __nla_validate_parse: 67 callbacks suppressed
[  715.000281][T20822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3289'.
[  715.090266][T20824] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  715.189946][T20831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3289'.
[  715.449451][T20814] tipc: Disabling bearer <eth:syzkaller0>
[  715.882620][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  715.896383][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  715.903342][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  715.926659][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  715.936598][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  716.703956][T20863] ipvlan2: entered allmulticast mode
[  716.703983][T20863] macvlan1: entered allmulticast mode
[  716.703999][T20863] veth1_vlan: entered allmulticast mode
[  716.741952][T20863] batman_adv: batadv0: Adding interface: ipvlan2
[  716.741973][T20863] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  716.742007][T20863] batman_adv: batadv0: Interface activated: ipvlan2
[  716.828553][T20869] vxcan0: tx drop: invalid da for name 0x00000000000000c8
[  717.226236][T20877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3302'.
[  717.226275][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3302'.
[  717.280423][ T1397] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.280464][ T1397] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.281118][ T1397] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  717.344855][T20881] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3303'.
[  717.481864][T20880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3302'.
[  717.583162][T20877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3302'.
[  717.624913][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3302'.
[  717.831798][ T1397] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.831837][ T1397] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.831875][ T1397] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  717.898224][T20894] netlink: 'syz.0.3304': attribute type 1 has an invalid length.
[  717.949591][T20849] lo speed is unknown, defaulting to 1000
[  717.971041][T20890] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  718.003694][ T4936] Bluetooth: hci4: command tx timeout
[  718.480068][T20894] 8021q: adding VLAN 0 to HW filter on device bond2
[  718.649068][T20901] bond2: (slave veth0_to_bond): making interface the new active one
[  718.668670][T20901] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  718.754148][T20904] macvlan2: entered promiscuous mode
[  718.754172][T20904] macvlan2: entered allmulticast mode
[  718.758629][T20904] bond2: entered promiscuous mode
[  718.758655][T20904] veth0_to_bond: entered promiscuous mode
[  718.759555][T20904] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  718.762517][T20904] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  718.762799][T20904] bond2: left promiscuous mode
[  718.762816][T20904] veth0_to_bond: left promiscuous mode
[  718.774327][T20913] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3308'.
[  718.992238][ T1397] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  718.992278][ T1397] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.992305][ T1397] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  719.086890][T20919] set_target_v3_checkentry: 23 callbacks suppressed
[  719.086912][T20919] Cannot find add_set index 0 as target
[  719.087048][T20919] Cannot find add_set index 0 as target
[  719.087173][T20919] Cannot find add_set index 0 as target
[  719.087299][T20919] Cannot find add_set index 0 as target
[  719.087430][T20919] Cannot find add_set index 0 as target
[  719.087552][T20919] Cannot find add_set index 0 as target
[  719.087674][T20919] Cannot find add_set index 0 as target
[  719.089618][T20919] Cannot find add_set index 0 as target
[  719.089738][T20919] Cannot find add_set index 0 as target
[  719.089836][T20919] Cannot find add_set index 0 as target
[  719.385946][T20922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3310'.
[  719.546256][ T1397] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  719.546297][ T1397] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.546325][ T1397] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  720.083991][ T4936] Bluetooth: hci4: command tx timeout
[  720.123525][T20940] __nla_validate_parse: 1 callbacks suppressed
[  720.123546][T20940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3315'.
[  720.413477][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  720.570135][T20956] Bluetooth: ISO socket layer initialized
[  720.596453][T20955] Bluetooth: hci0: unsupported parameter 5135
[  720.596479][T20955] Bluetooth: hci0: unsupported parameter 8192
[  720.596494][T20955] Bluetooth: hci0: unsupported parameter 5135
[  720.596507][T20955] Bluetooth: hci0: unsupported parameter 8192
[  721.255750][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'.
[  721.683862][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  721.904143][ T1397] macvlan2: left allmulticast mode
[  721.904168][ T1397] ip6gretap0: left allmulticast mode
[  721.904686][ T1397] macvlan2: left promiscuous mode
[  721.904956][ T1397] bridge0: port 3(macvlan2) entered disabled state
[  721.925061][ T1397] bridge_slave_1: left allmulticast mode
[  721.925090][ T1397] bridge_slave_1: left promiscuous mode
[  721.925316][ T1397] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.147202][ T1397] bridge_slave_0: left allmulticast mode
[  722.147232][ T1397] bridge_slave_0: left promiscuous mode
[  722.147478][ T1397] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.164218][ T4936] Bluetooth: hci4: command tx timeout
[  723.038826][T20995] x_tables: duplicate underflow at hook 2
[  723.441030][ T1397] bond8 (unregistering): (slave ip6gre2): Releasing backup interface
[  723.441060][ T1397] ip6gre2 (unregistering): left promiscuous mode
[  723.492362][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3329'.
[  724.046553][ T1397] bond11 (unregistering): (slave geneve5): Releasing active interface
[  724.102450][ T1397] bond1 (unregistering): (slave geneve2): Releasing active interface
[  724.200118][ T1397] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  724.240451][ T1397] bond5 (unregistering): (slave bridge1): Releasing backup interface
[  724.240482][ T1397] bridge1 (unregistering): left promiscuous mode
[  724.251740][ T4936] Bluetooth: hci4: command tx timeout
[  724.536200][ T1397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  724.552969][ T1397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  724.555154][ T1397] bond0 (unregistering): Released all slaves
[  724.600026][T16234] smbdirect: ib_dev[s] removed
[  724.651872][ T1397] bond1 (unregistering): Released all slaves
[  724.677220][ T1397] bond2 (unregistering): (slave bond3): Releasing backup interface
[  724.678192][ T1397] bond2 (unregistering): Released all slaves
[  724.714858][ T1397] bond3 (unregistering): Released all slaves
[  724.742422][ T1397] bond4 (unregistering): Released all slaves
[  724.784391][ T1397] bond5 (unregistering): Released all slaves
[  724.806018][ T1397] bond6 (unregistering): Released all slaves
[  724.826686][ T1397] bond7 (unregistering): Released all slaves
[  724.852661][ T1397] bond8 (unregistering): Released all slaves
[  724.881855][ T1397] bond9 (unregistering): Released all slaves
[  724.916087][ T1397] bond10 (unregistering): Released all slaves
[  724.939093][ T1397] bond11 (unregistering): Released all slaves
[  724.971658][ T1397] bond12 (unregistering): Released all slaves
[  724.996019][ T1397] bond13 (unregistering): (slave veth10): Releasing active interface
[  724.998240][ T1397] bond13 (unregistering): Released all slaves
[  725.039183][ T1397] bond14 (unregistering): (slave veth0_to_bond): Releasing active interface
[  725.041461][ T1397] bond14 (unregistering): Released all slaves
[  725.230008][T10943] infiniband s: ib_query_port failed (-19)
[  725.642420][ T1397] tipc: Disabling bearer <udp:syz0>
[  725.642561][ T1397] tipc: Left network mode
[  725.811856][ T1397] IPVS: stopping backup sync thread 17372 ...
[  725.861243][T21026] netlink: 'syz.1.3332': attribute type 10 has an invalid length.
[  725.939762][T21026] team0: Port device dummy0 added
[  725.945916][T21027] netlink: 'syz.1.3332': attribute type 10 has an invalid length.
[  725.996430][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'.
[  726.016785][T21027] team0: Port device dummy0 removed
[  726.993698][T21053] netlink: 'syz.1.3336': attribute type 1 has an invalid length.
[  726.993722][T21053] netlink: 'syz.1.3336': attribute type 4 has an invalid length.
[  726.993737][T21053] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3336'.
[  726.999994][T21053] netlink: 'syz.1.3336': attribute type 1 has an invalid length.
[  727.000017][T21053] netlink: 'syz.1.3336': attribute type 4 has an invalid length.
[  727.000032][T21053] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3336'.
[  727.159835][T20849] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.159958][T20849] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.160133][T20849] bridge_slave_0: entered allmulticast mode
[  727.198587][T20849] bridge_slave_0: entered promiscuous mode
[  727.282748][T20849] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.297014][T20849] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.297214][T20849] bridge_slave_1: entered allmulticast mode
[  727.345291][T20849] bridge_slave_1: entered promiscuous mode
[  727.814578][T20849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  727.978988][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  727.980890][T21078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3339'.
[  728.254709][T20849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  728.540799][T20849] team0: Port device team_slave_0 added
[  728.652596][T21083] bridge_slave_0: left allmulticast mode
[  728.663600][T21083] bridge_slave_0: left promiscuous mode
[  728.665308][T21083] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.753930][T21083] bridge_slave_1: left allmulticast mode
[  728.753962][T21083] bridge_slave_1: left promiscuous mode
[  728.754283][T21083] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.795096][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3344'.
[  728.809797][T21100] xt_TCPMSS: Only works on TCP SYN packets
[  728.844114][T21083] bond0: (slave bond_slave_0): Releasing backup interface
[  728.944993][T21083] bond0: (slave bond_slave_1): Releasing backup interface
[  728.974235][T21083] team0: Port device team_slave_0 removed
[  729.012415][T21083] team0: Port device team_slave_1 removed
[  729.020992][T21083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  729.021020][T21083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  729.046339][T21083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  729.046365][T21083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  729.070752][T21083] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  729.105610][T20849] team0: Port device team_slave_1 added
[  729.159585][T20849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  729.159605][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  729.159635][T20849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  729.213147][T20849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  729.213167][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  729.213197][T20849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  729.334400][ T1397] hsr_slave_0: left promiscuous mode
[  729.335500][ T1397] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  729.335556][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_1
[  729.371495][ T1397] veth0_macvtap: left promiscuous mode
[  729.371741][ T1397] veth1_vlan: left promiscuous mode
[  729.931709][ T1397] team_slave_1 (unregistering): left promiscuous mode
[  729.941119][ T1397] team0 (unregistering): Port device team_slave_1 removed
[  729.968038][ T1397] team_slave_0 (unregistering): left promiscuous mode
[  729.969071][ T1397] team0 (unregistering): Port device team_slave_0 removed
[  730.241183][T21097] team0: Mode changed to "loadbalance"
[  730.242428][T21100] bridge_slave_1: left allmulticast mode
[  730.242453][T21100] bridge_slave_1: left promiscuous mode
[  730.242693][T21100] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.280538][T21100] bridge_slave_0: left allmulticast mode
[  730.280569][T21100] bridge_slave_0: left promiscuous mode
[  730.280810][T21100] bridge0: port 1(bridge_slave_0) entered disabled state
[  730.552744][T20849] hsr_slave_0: entered promiscuous mode
[  730.563939][T20849] hsr_slave_1: entered promiscuous mode
[  730.564733][T20849] debugfs: 'hsr0' already exists in 'hsr'
[  730.564755][T20849] Cannot create hsr debugfs directory
[  730.742697][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'.
[  731.150068][T21129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3349'.
[  731.388058][ T1397] IPVS: stop unused estimator thread 0...
[  732.040747][T19995] udevd[19995]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  732.068091][T21151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3355'.
[  732.135823][T19995] udevd[19995]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  732.676431][T21157] syzkaller1: entered promiscuous mode
[  732.676457][T21157] syzkaller1: entered allmulticast mode
[  733.083999][T21190] netlink: 'syz.4.3363': attribute type 2 has an invalid length.
[  733.278313][T21190] : entered promiscuous mode
[  733.379741][T21192] batman_adv: batadv0: Adding interface: macvlan2
[  733.379761][T21192] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  733.379795][T21192] batman_adv: batadv0: Interface activated: macvlan2
[  733.496066][T21198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  733.987787][T21207] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  733.995685][T21209] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  734.025673][T20849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  734.052279][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  734.061963][T20849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  734.086677][T21205] openvswitch: netlink: IP tunnel dst address not specified
[  734.086835][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  734.136887][T20849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  734.154337][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  734.155348][T20849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  734.717014][T20849] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  735.008034][T21219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  735.491172][T21239] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3372'.
[  735.671571][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3375'.
[  735.671605][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3375'.
[  735.671678][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3375'.
[  735.750883][T20849] 8021q: adding VLAN 0 to HW filter on device bond0
[  735.784278][T20849] 8021q: adding VLAN 0 to HW filter on device team0
[  735.835597][T20849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  735.835625][T20849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  735.936837][T11147] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.936955][T11147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  735.967376][T11147] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.967499][T11147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.539750][T21274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3377'.
[  737.487983][T21295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3381'.
[  737.513403][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3383'.
[  737.514924][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3383'.
[  737.607375][T21295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3381'.
[  737.607595][T21295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3381'.
[  737.634993][T21304] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  737.699579][T21295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3381'.
[  737.699787][T21295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3381'.
[  737.817013][T21295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3381'.
[  737.817047][T21295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3381'.
[  739.004996][T11153] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  739.006618][T16234] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  739.007161][T16234] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  739.009270][T16234] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  739.086836][T20849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  739.155615][T20849] veth0_vlan: entered promiscuous mode
[  739.182064][T20849] veth1_vlan: entered promiscuous mode
[  739.333037][T20849] veth0_macvtap: entered promiscuous mode
[  739.435610][T20849] veth1_macvtap: entered promiscuous mode
[  739.581393][T20849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  739.690533][T20849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  739.773235][T11160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  739.778894][ T1397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  739.778941][ T1397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  739.778979][ T1397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  740.445764][T11159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  740.445788][T11159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  740.447754][T21358] lo speed is unknown, defaulting to 1000
[  741.088648][T16234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.088673][T16234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.223304][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.271215][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.271418][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.271610][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.271796][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.271973][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.272158][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.331654][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.331913][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.332096][T21386] netlink: 'syz.4.3396': attribute type 3 has an invalid length.
[  741.758189][T21395] __nla_validate_parse: 179 callbacks suppressed
[  741.758212][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'.
[  741.758246][T21395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3397'.
[  741.801751][T21390] 8021q: adding VLAN 0 to HW filter on device bond16
[  742.205178][T21402] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3398'.
[  742.242499][T21395] geneve2: entered promiscuous mode
[  742.242526][T21395] geneve2: entered allmulticast mode
[  742.346729][ T6127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  742.354356][ T6127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  742.376109][ T1397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  742.378592][  T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  742.537387][T21409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3398'.
[  742.537433][T21409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3398'.
[  743.479555][T21418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3402'.
[  743.848766][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  743.868834][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  743.871551][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  743.901575][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  743.920670][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  745.197743][T21450] Cannot find set identified by id 0 to match
[  745.438168][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'.
[  745.537178][T21461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3407'.
[  745.667939][T21461] IPv6: Can't replace route, no match found
[  745.718623][T21456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3407'.
[  745.776292][T21462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3406'.
[  745.947565][T21422] lo speed is unknown, defaulting to 1000
[  745.991390][T21459] macsec0: entered promiscuous mode
[  746.004566][ T4936] Bluetooth: hci3: command tx timeout
[  746.116837][T21459] veth1_macvtap: left promiscuous mode
[  746.210038][T21459] macsec0 (unregistering): left promiscuous mode
[  746.494674][T21485] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  747.233156][T21485] __nla_validate_parse: 1 callbacks suppressed
[  747.233179][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3413'.
[  747.456532][T21495] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  747.493785][T21495] bond1 (unregistering): Released all slaves
[  747.781478][T21487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3414'.
[  748.000114][T21516] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3418'.
[  748.056343][T21515] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3418'.
[  748.086533][ T4936] Bluetooth: hci3: command tx timeout
[  748.385636][T21521] bridge0: port 3(bond0) entered blocking state
[  748.385742][T21521] bridge0: port 3(bond0) entered disabled state
[  748.385900][T21521] bond0: entered allmulticast mode
[  748.385919][T21521] bond_slave_0: entered allmulticast mode
[  748.385936][T21521] bond_slave_1: entered allmulticast mode
[  748.455442][T21521] bond0: entered promiscuous mode
[  748.455470][T21521] bond_slave_0: entered promiscuous mode
[  748.455675][T21521] bond_slave_1: entered promiscuous mode
[  748.456595][T21521] bridge0: port 3(bond0) entered blocking state
[  748.456691][T21521] bridge0: port 3(bond0) entered forwarding state
[  748.504852][T21521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3419'.
[  749.016905][T21521] hsr_slave_1 (unregistering): left promiscuous mode
[  749.296685][T21545] xt_ipcomp: unknown flags 1D
[  749.413932][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3424'.
[  749.581704][T21553] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3425'.
[  749.688836][T21559] validate_nla: 25 callbacks suppressed
[  749.688858][T21559] netlink: 'syz.3.3425': attribute type 1 has an invalid length.
[  749.904194][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3425'.
[  750.164552][ T4936] Bluetooth: hci3: command tx timeout
[  750.406184][T21548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  750.406214][T21548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  750.407384][T21548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  750.407406][T21548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  750.800352][T21559] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  750.857563][T21565] bridge1: entered promiscuous mode
[  752.253421][ T4936] Bluetooth: hci3: command tx timeout
[  752.589385][T21610] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  752.910018][T21620] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3432'.
[  752.929900][T21422] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.930095][T21422] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.930348][T21422] bridge_slave_0: entered allmulticast mode
[  752.965437][T21422] bridge_slave_0: entered promiscuous mode
[  752.978081][T21422] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.978223][T21422] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.978375][T21422] bridge_slave_1: entered allmulticast mode
[  753.007760][T21422] bridge_slave_1: entered promiscuous mode
[  753.066469][T21617] bond_slave_0: entered promiscuous mode
[  753.066674][T21617] bond_slave_0: entered allmulticast mode
[  753.300647][T21617] bond0: (slave bond_slave_0): Releasing backup interface
[  753.318021][T21617] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  754.145146][T21592] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.348523][T21600] lo speed is unknown, defaulting to 1000
[  754.422171][T21654] syz_tun: entered allmulticast mode
[  754.471586][  T152] bond2: (slave veth0_to_bond): link status definitely down, disabling slave
[  754.493996][ T5625] Bluetooth: hci5: command 0x0406 tx timeout
[  754.530646][  T152] bond2: now running without any active interface!
[  754.609766][T21639] dvmrp6: entered allmulticast mode
[  754.681367][T21637] syz_tun: left allmulticast mode
[  754.764614][T21422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.832673][T21592] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.925862][T21422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  755.228454][T21592] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.425976][T21422] team0: Port device team_slave_0 added
[  755.540866][T21592] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.597134][T21422] team0: Port device team_slave_1 added
[  755.720237][T21422] batman_adv: batadv0: Adding interface: batadv_slave_0
[  755.720257][T21422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  755.720286][T21422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  755.888489][T21422] batman_adv: batadv0: Adding interface: batadv_slave_1
[  755.888509][T21422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  755.888539][T21422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  756.146440][T21677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3439'.
[  756.466881][T21422] hsr_slave_0: entered promiscuous mode
[  756.508214][T21422] hsr_slave_1: entered promiscuous mode
[  756.512113][T21422] debugfs: 'hsr0' already exists in 'hsr'
[  756.512137][T21422] Cannot create hsr debugfs directory
[  757.239921][   T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  757.782581][T21701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3441'.
[  758.103619][  T152] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  758.113588][  T152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  758.113717][  T152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  758.677107][T21422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  758.677147][T21422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.970136][T21717] veth3: entered allmulticast mode
[  759.380173][T21422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  759.380214][T21422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.936936][T21422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  759.936981][T21422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.166649][T21759] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  760.187827][   T65] IPVS: starting estimator thread 0...
[  760.256047][T21422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  760.256089][T21422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.286458][T21762] IPVS: using max 30 ests per chain, 72000 per kthread
[  760.396839][T21759] netlink: 'syz.3.3454': attribute type 1 has an invalid length.
[  760.397771][T21760] netlink: 'syz.3.3454': attribute type 1 has an invalid length.
[  760.509575][T21766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3454'.
[  760.509882][T21765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3454'.
[  760.527074][T21759] 8021q: adding VLAN 0 to HW filter on device bond1
[  760.543906][T21764] bond1: entered promiscuous mode
[  760.543930][T21764] bond1: entered allmulticast mode
[  761.333320][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'.
[  761.637063][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'.
[  761.637420][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'.
[  761.638050][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'.
[  761.638214][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'.
[  761.658880][T21422] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  761.721015][T21422] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  761.961437][T21422] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  762.001930][T21422] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  762.020531][T21422] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  762.078479][T21422] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  762.089123][T21422] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  762.128848][T21422] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  762.615576][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'.
[  762.640517][T21830] syzkaller0: entered promiscuous mode
[  762.640541][T21830] syzkaller0: entered allmulticast mode
[  762.642396][T21833] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3470'.
[  762.810090][T21422] 8021q: adding VLAN 0 to HW filter on device bond0
[  763.168416][T21837] bond0: left allmulticast mode
[  763.168441][T21837] bond_slave_0: left allmulticast mode
[  763.168460][T21837] bond_slave_1: left allmulticast mode
[  763.168506][T21837] bond0: left promiscuous mode
[  763.168520][T21837] bond_slave_0: left promiscuous mode
[  763.176436][T21837] bond_slave_1: left promiscuous mode
[  763.177764][T21837] bridge0: port 3(bond0) entered disabled state
[  763.332181][T21837] bridge_slave_0: left allmulticast mode
[  763.332211][T21837] bridge_slave_0: left promiscuous mode
[  763.332446][T21837] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.494599][T21837] bridge_slave_1: left allmulticast mode
[  763.494628][T21837] bridge_slave_1: left promiscuous mode
[  763.494829][T21837] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.607436][T21837] bond0: (slave bond_slave_0): Releasing backup interface
[  763.713700][T21837] bond0: (slave bond_slave_1): Releasing backup interface
[  763.943442][T21837] team0: Port device team_slave_0 removed
[  764.080685][T21837] team0: Port device team_slave_1 removed
[  764.091363][T21837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  764.091390][T21837] batman_adv: batadv0: Removing interface: batadv_slave_0
[  764.115109][T21837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  764.115137][T21837] batman_adv: batadv0: Removing interface: batadv_slave_1
[  764.141938][T21837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  764.501993][T21864] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3472'.
[  764.506150][T21845] dvmrp0: entered allmulticast mode
[  764.772597][T21422] 8021q: adding VLAN 0 to HW filter on device team0
[  764.923669][T16234] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.923763][T16234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  765.011911][T16234] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.012025][T16234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  765.930478][T21900] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  766.031102][T21908] tc_dump_action: action bad kind
[  766.099437][T21910] __nla_validate_parse: 1 callbacks suppressed
[  766.099457][T21910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3481'.
[  767.054073][T21940] FAULT_INJECTION: forcing a failure.
[  767.054073][T21940] name failslab, interval 1, probability 0, space 0, times 0
[  767.054108][T21940] CPU: 1 UID: 0 PID: 21940 Comm: syz.0.3485 Not tainted syzkaller #0 PREEMPT(full) 
[  767.054132][T21940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  767.054146][T21940] Call Trace:
[  767.054154][T21940]  <TASK>
[  767.054164][T21940]  dump_stack_lvl+0xe8/0x150
[  767.054202][T21940]  should_fail_ex+0x410/0x560
[  767.054233][T21940]  should_failslab+0xa8/0x100
[  767.054260][T21940]  ? skb_clone+0x212/0x3a0
[  767.054291][T21940]  kmem_cache_alloc_noprof+0xa1/0x600
[  767.054327][T21940]  ? skb_clone+0x212/0x3a0
[  767.054373][T21940]  skb_clone+0x212/0x3a0
[  767.054407][T21940]  __netlink_deliver_tap+0x355/0x6e0
[  767.054453][T21940]  ? netlink_deliver_tap+0x2e/0x1b0
[  767.054488][T21940]  netlink_deliver_tap+0x19c/0x1b0
[  767.054524][T21940]  netlink_unicast+0x781/0x940
[  767.054566][T21940]  netlink_sendmsg+0x813/0xb40
[  767.054597][T21940]  ? __pfx_netlink_sendmsg+0x10/0x10
[  767.054627][T21940]  ? apparmor_socket_sendmsg+0x98/0x360
[  767.054654][T21940]  ? __pfx_netlink_sendmsg+0x10/0x10
[  767.054674][T21940]  sock_sendmsg_nosec+0x13a/0x180
[  767.054699][T21940]  ____sys_sendmsg+0x54e/0x850
[  767.054738][T21940]  ? __pfx_____sys_sendmsg+0x10/0x10
[  767.054777][T21940]  ? import_iovec+0x73/0xa0
[  767.054808][T21940]  ___sys_sendmsg+0x2a5/0x360
[  767.054836][T21940]  ? __lock_acquire+0x747/0x2de0
[  767.054864][T21940]  ? __pfx____sys_sendmsg+0x10/0x10
[  767.054932][T21940]  ? __fget_files+0x2a/0x420
[  767.054961][T21940]  ? __fget_files+0x3a2/0x420
[  767.055001][T21940]  __x64_sys_sendmsg+0x1b1/0x290
[  767.055034][T21940]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  767.055087][T21940]  do_syscall_64+0x166/0x520
[  767.055114][T21940]  ? trace_irq_disable+0x3b/0x140
[  767.055137][T21940]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.055160][T21940]  ? clear_bhb_loop+0x70/0xc0
[  767.055187][T21940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.055208][T21940] RIP: 0033:0x7fc38cb9e159
[  767.055229][T21940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.055248][T21940] RSP: 002b:00007fc38da12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  767.055271][T21940] RAX: ffffffffffffffda RBX: 00007fc38ce25fa0 RCX: 00007fc38cb9e159
[  767.055289][T21940] RDX: 0000000000008084 RSI: 0000200000000000 RDI: 0000000000000003
[  767.055302][T21940] RBP: 00007fc38da12090 R08: 0000000000000000 R09: 0000000000000000
[  767.055317][T21940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  767.055328][T21940] R13: 00007fc38ce26038 R14: 00007fc38ce25fa0 R15: 00007ffd7cefb0c8
[  767.055393][T21940]  </TASK>
[  767.455753][T21941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3486'.
[  767.764721][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  768.192058][T21960] netlink: 'syz.3.3492': attribute type 1 has an invalid length.
[  768.365873][T21960] bond2: entered promiscuous mode
[  768.382360][T21960] 8021q: adding VLAN 0 to HW filter on device bond2
[  768.433300][T21963] ipvlan0: entered allmulticast mode
[  768.433324][T21963] bond2: entered allmulticast mode
[  768.732161][T21422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.787530][T21970] ipvlan1: entered allmulticast mode
[  769.090005][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3495'.
[  769.204297][T21960] bond2: (slave bridge1): making interface the new active one
[  769.204326][T21960] bridge1: entered promiscuous mode
[  769.204518][T21960] bridge1: entered allmulticast mode
[  769.211426][T21960] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  769.448688][T21995] macvlan1: entered promiscuous mode
[  769.525400][T22005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3496'.
[  769.533397][T21995] macvlan1: left promiscuous mode
[  770.197513][T22018] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3499'.
[  770.201779][T22018] gretap0: entered promiscuous mode
[  770.389957][T22018] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3499'.
[  770.390075][T22018] 0ªî{X¹¦: renamed from gretap0
[  770.417186][T22018] 0ªî{X¹¦: left promiscuous mode
[  770.417212][T22018] 0ªî{X¹¦: entered allmulticast mode
[  770.422772][T22018] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  770.707990][T21422] veth0_vlan: entered promiscuous mode
[  770.757793][T21422] veth1_vlan: entered promiscuous mode
[  770.978108][T21422] veth0_macvtap: entered promiscuous mode
[  771.009704][T21422] veth1_macvtap: entered promiscuous mode
[  771.130543][T22040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3506'.
[  771.149227][T21422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  771.180586][   T31] audit: type=1800 audit(1790264263.972:6): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3505" name=B702 dev="tmpfs" ino=461 res=0 errno=0
[  771.436022][T21422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  771.490482][T22048] x_tables: duplicate underflow at hook 1
[  771.515901][T22048] netlink: 'syz.0.3504': attribute type 2 has an invalid length.
[  771.640100][T11153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  771.731728][   T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  771.920431][  T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  771.921017][  T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  772.030850][T22058] batman_adv: batadv0: Adding interface: gretap1
[  772.030873][T22058] batman_adv: batadv0: The MTU of interface gretap1 is too small (1396) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  772.031200][T22058] batman_adv: batadv0: Interface activated: gretap1
[  772.383129][T22062] netlink: 'syz.1.3508': attribute type 1 has an invalid length.
[  772.448419][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3508'.
[  772.581725][T22062] 8021q: adding VLAN 0 to HW filter on device bond1
[  772.591749][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  772.591773][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  772.961923][T22068] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  773.095664][T22085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3512'.
[  773.141188][T22071] bond1: entered promiscuous mode
[  773.141217][T22071] bond1: entered allmulticast mode
[  773.181056][T22066] macvlan2: entered promiscuous mode
[  773.181081][T22066] macvlan2: entered allmulticast mode
[  773.182415][T22066] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  773.201921][T22066] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  773.639807][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.639832][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.979583][T22102] openvswitch: netlink: Key type 9220 is out of range max 32
[  774.142682][T22103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'.
[  774.487106][T22117] FAULT_INJECTION: forcing a failure.
[  774.487106][T22117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  774.487143][T22117] CPU: 1 UID: 0 PID: 22117 Comm: syz.2.3521 Not tainted syzkaller #0 PREEMPT(full) 
[  774.487170][T22117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  774.487185][T22117] Call Trace:
[  774.487193][T22117]  <TASK>
[  774.487204][T22117]  dump_stack_lvl+0xe8/0x150
[  774.487243][T22117]  should_fail_ex+0x410/0x560
[  774.487278][T22117]  _copy_to_user+0x31/0xb0
[  774.487311][T22117]  simple_read_from_buffer+0xe1/0x170
[  774.487351][T22117]  proc_fail_nth_read+0x1bb/0x230
[  774.487386][T22117]  ? common_file_perm+0x20e/0x2b0
[  774.487417][T22117]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  774.487456][T22117]  ? rw_verify_area+0x24a/0x4c0
[  774.487491][T22117]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  774.487527][T22117]  vfs_read+0x213/0xa80
[  774.487566][T22117]  ? __pfx___mutex_lock+0x10/0x10
[  774.487598][T22117]  ? __pfx_vfs_read+0x10/0x10
[  774.487631][T22117]  ? __fget_files+0x2a/0x420
[  774.487667][T22117]  ? __fget_files+0x3a2/0x420
[  774.487697][T22117]  ? __fget_files+0x2a/0x420
[  774.487737][T22117]  ksys_read+0x150/0x270
[  774.487775][T22117]  ? __pfx_ksys_read+0x10/0x10
[  774.487832][T22117]  do_syscall_64+0x166/0x520
[  774.487865][T22117]  ? trace_irq_disable+0x3b/0x140
[  774.487888][T22117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.487912][T22117]  ? clear_bhb_loop+0x70/0xc0
[  774.487924][T22113] sctp: [Deprecated]: syz.3.3520 (pid 22113) Use of int in max_burst socket option.
[  774.487924][T22113] Use struct sctp_assoc_value instead
[  774.487940][T22117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.487964][T22117] RIP: 0033:0x7fdcbfd5e98e
[  774.487987][T22117] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  774.488008][T22117] RSP: 002b:00007fdcc0ca6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  774.488033][T22117] RAX: ffffffffffffffda RBX: 00007fdcc0ca76c0 RCX: 00007fdcbfd5e98e
[  774.488051][T22117] RDX: 000000000000000f RSI: 00007fdcc0ca70a0 RDI: 0000000000000004
[  774.488067][T22117] RBP: 00007fdcc0ca7090 R08: 0000000000000000 R09: 0000000000000000
[  774.488082][T22117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  774.488096][T22117] R13: 00007fdcc0026038 R14: 00007fdcc0025fa0 R15: 00007ffc415db618
[  774.488134][T22117]  </TASK>
[  775.474377][T22120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'.
[  775.765882][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3526'.
[  775.988928][T22149] netlink: 'syz.2.3530': attribute type 1 has an invalid length.
[  776.121492][T22148] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  776.121533][T22148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  776.212785][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3531'.
[  776.218685][T22149] 8021q: adding VLAN 0 to HW filter on device bond1
[  776.339938][T22157] netlink: 'syz.1.3532': attribute type 1 has an invalid length.
[  776.339963][T22157] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3532'.
[  776.339980][T22157] netlink: 'syz.1.3532': attribute type 1 has an invalid length.
[  776.444263][T22164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3533'.
[  776.578949][T22152] bond1: (slave gretap1): making interface the new active one
[  776.617198][T22152] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  776.731935][T22176] x_tables: duplicate underflow at hook 1
[  776.932364][T22180] netlink: 'syz.1.3540': attribute type 30 has an invalid length.
[  777.504346][T22187] ip_tables: iptables: counters copy to user failed while replacing table
[  778.003021][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  778.311332][T22196] 8021q: adding VLAN 0 to HW filter on device bond0
[  778.324404][T22196] 8021q: adding VLAN 0 to HW filter on device team0
[  778.382902][T22196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  778.721474][T22196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  778.721504][T22196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  778.770338][T22196] veth1_vlan: left promiscuous mode
[  778.778663][T22196] veth0_vlan: left promiscuous mode
[  778.792613][T22196] veth0_vlan: entered promiscuous mode
[  778.818315][T22196] veth1_vlan: entered promiscuous mode
[  778.865914][T22196] veth1_macvtap: left promiscuous mode
[  778.870798][T22196] veth0_macvtap: left promiscuous mode
[  778.888309][T22196] veth0_macvtap: entered promiscuous mode
[  778.902416][T22196] veth1_macvtap: entered promiscuous mode
[  778.961176][T22196] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  778.979810][T22196] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  778.981330][T22196] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  778.982575][T22196] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  779.014753][T22196] geneve2: left promiscuous mode
[  779.017363][T22196] bond1: left promiscuous mode
[  779.019841][T22196] 8021q: adding VLAN 0 to HW filter on device bond1
[  779.080367][T11160] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  779.080670][T11160] bond1: (slave veth0_to_bond): making interface the new active one
[  779.080688][T11160] veth0_to_bond: entered allmulticast mode
[  779.096333][T11160] bond1: active interface up!
[  779.489837][  T152] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  779.880316][T22273] netlink: 'syz.2.3552': attribute type 1 has an invalid length.
[  780.079997][T22273] bond2: entered promiscuous mode
[  780.110908][T22273] 8021q: adding VLAN 0 to HW filter on device bond2
[  780.530343][T22281] 8021q: adding VLAN 0 to HW filter on device bond2
[  780.531544][T22281] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address
[  780.531590][T22281] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  780.600402][T22281] bond2: (slave xfrm1): making interface the new active one
[  780.600437][T22281] xfrm1: entered promiscuous mode
[  780.732998][T22281] xfrm1: left promiscuous mode
[  781.348064][T22316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  782.543789][T22350] openvswitch: netlink: VXLAN extension 248 out of range max 1
[  782.629978][T22353] netlink: 'syz.3.3569': attribute type 4 has an invalid length.
[  782.685084][T22355] netlink: 'syz.3.3569': attribute type 4 has an invalid length.
[  783.010007][T22362] openvswitch: netlink: Geneve opt len 66 is not a multiple of 4.
[  783.138781][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  784.395219][T22396] netlink: 'syz.3.3580': attribute type 1 has an invalid length.
[  784.502320][T22396] 8021q: adding VLAN 0 to HW filter on device bond3
[  784.546121][T22396] bond3: (slave gretap2): making interface the new active one
[  784.549551][T22396] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  784.609232][T22414] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3582'.
[  784.720992][T11147] tipc: Subscription rejected, illegal request
[  784.731611][T22412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3582'.
[  784.760508][T22411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3583'.
[  784.779001][T22414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3582'.
[  784.794000][T22409] vlan2: entered promiscuous mode
[  784.794020][T22409] bond0: entered promiscuous mode
[  785.078431][T22412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3582'.
[  785.196209][T22418] syzkaller0: entered promiscuous mode
[  785.196233][T22418] syzkaller0: entered allmulticast mode
[  785.393079][T22428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3586'.
[  785.791438][T22436] bond4: entered promiscuous mode
[  785.791473][T22436] bond4: entered allmulticast mode
[  785.851353][T22450] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004
[  785.873263][   T65] IPVS: starting estimator thread 0...
[  785.964518][T22451] IPVS: using max 26 ests per chain, 62400 per kthread
[  786.259240][T22462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3592'.
[  786.394353][T22462] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  786.619286][T22468] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3596'.
[  787.072963][T22485] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3599'.
[  787.299963][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3601'.
[  787.568926][T22496] erspan0: entered promiscuous mode
[  787.596871][T22494] openvswitch: netlink: Message has 8 unknown bytes.
[  787.596910][T22494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  787.705408][T22496] erspan0: left promiscuous mode
[  789.774081][T22547] __nla_validate_parse: 5 callbacks suppressed
[  789.774107][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'.
[  789.774131][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'.
[  789.774259][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'.
[  789.862536][T22550] netlink: 'syz.4.3616': attribute type 30 has an invalid length.
[  790.012755][T22550] bond1: option arp_missed_max: invalid value (0)
[  790.012783][T22550] bond1: option arp_missed_max: allowed values 1 - 255
[  790.033631][T22552] netlink: 'syz.0.3615': attribute type 2 has an invalid length.
[  790.033655][T22552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3615'.
[  790.044273][T22550] bond1 (unregistering): Released all slaves
[  790.454675][T22552] : entered promiscuous mode
[  790.626461][T22576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3624'.
[  790.671084][T22559] bond3 (unregistering): Released all slaves
[  790.803338][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  790.909828][T22580] bond2 (unregistering): Released all slaves
[  791.583758][T22609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3632'.
[  791.691972][T22612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3630'.
[  791.793329][T22612] IPv6: Can't replace route, no match found
[  791.874790][T22612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3630'.
[  792.290925][T22622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3636'.
[  792.830675][T22643] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  793.526389][T22640] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  793.664183][T22656] pim6reg0: tun_chr_ioctl cmd 35111
[  794.037453][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'.
[  794.653365][T22686] gre0: entered promiscuous mode
[  794.653392][T22686] gre0: entered allmulticast mode
[  794.723236][ T4936] Bluetooth: hci1: command 0x0401 tx timeout
[  795.606220][T22718] __nla_validate_parse: 5 callbacks suppressed
[  795.606244][T22718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3667'.
[  795.787848][T22724] syzkaller0: entered promiscuous mode
[  795.787876][T22724] syzkaller0: entered allmulticast mode
[  795.792778][T22726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3669'.
[  795.868836][T22726] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  795.882276][T22726] bond1 (unregistering): Released all slaves
[  795.945880][T22733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3669'.
[  795.992627][T22724] tipc: Started in network mode
[  795.992665][T22724] tipc: Node identity a628b539b16, cluster identity 4711
[  796.011513][T22724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  796.025426][T22729] netlink: 'syz.4.3669': attribute type 13 has an invalid length.
[  796.025449][T22729] netlink: 'syz.4.3669': attribute type 12 has an invalid length.
[  796.065631][T22724] tipc: Resetting bearer <eth:syzkaller0>
[  796.089213][T22735] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  796.094139][T22735] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  796.094463][T22735] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  796.308275][T22735] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  796.321328][T22733] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  796.348387][T22733] bond1 (unregistering): Released all slaves
[  796.570406][T22736] netlink: 'syz.4.3669': attribute type 13 has an invalid length.
[  796.570447][T22736] netlink: 'syz.4.3669': attribute type 12 has an invalid length.
[  796.605755][T22724] tipc: Resetting bearer <eth:syzkaller0>
[  796.804997][T22724] tipc: Disabling bearer <eth:syzkaller0>
[  796.947914][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3672'.
[  797.056769][   T31] audit: type=1804 audit(1790264289.852:7): pid=22751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3674" name="/newroot/143/memory.events" dev="tmpfs" ino=743 res=1 errno=0
[  797.057005][T22749] x_tables: duplicate entry at hook 1
[  797.061157][   T31] audit: type=1800 audit(1790264289.852:8): pid=22751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3674" name="memory.events" dev="tmpfs" ino=743 res=0 errno=0
[  797.253993][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'.
[  797.257555][T22760] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3675'.
[  797.260618][T22760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3675'.
[  797.294335][ T5625] Bluetooth: hci3: command 0x0405 tx timeout
[  797.510612][T22767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3677'.
[  797.531744][T22767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3677'.
[  797.531777][T22767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3677'.
[  797.626014][T22770] xt_time: invalid argument - start or stop time greater than 23:59:59
[  797.998413][T22774] ip6t_srh: unknown srh match flags  4000
[  798.275331][T22768] hsr_slave_1 (unregistering): left promiscuous mode
[  798.324827][ T6127] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  798.324917][ T6127] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  798.324991][ T6127] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  798.325074][ T6127] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  798.717876][T22784] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  798.746612][T22786] openvswitch: netlink: Tunnel attr 166 out of range max 16
[  799.523086][T22811] batadv0: entered promiscuous mode
[  799.565222][T22811] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004
[  799.927996][T22819] netlink: 'syz.0.3695': attribute type 1 has an invalid length.
[  800.277209][T22832] gretap0: entered allmulticast mode
[  800.298301][T22832] bond3: (slave gretap0): making interface the new active one
[  800.301769][T22832] bond3: (slave gretap0): Enslaving as an active interface with an up link
[  800.565064][ T4936] Bluetooth: hci1: command 0x0401 tx timeout
[  800.793139][T22835] __nla_validate_parse: 158 callbacks suppressed
[  800.793164][T22835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'.
[  800.793185][T22835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'.
[  801.510011][T22870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3703'.
[  801.554277][T22870] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3703'.
[  801.663289][T22872] xt_esp: unknown flags DD
[  802.055158][T22851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3700'.
[  802.093123][  T152] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  802.094058][  T152] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  802.094108][  T152] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  802.094151][  T152] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  802.139930][T22873] syzkaller0: entered promiscuous mode
[  802.140000][T22873] syzkaller0: entered allmulticast mode
[  802.544238][T22889] syzkaller0: entered promiscuous mode
[  802.544265][T22889] syzkaller0: entered allmulticast mode
[  802.556585][T22889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3707'.
[  802.781115][T22890] lo speed is unknown, defaulting to 1000
[  803.061719][T22907] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3711'.
[  804.180528][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3719'.
[  805.000179][T22934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  805.478097][T22954] syzkaller0: entered promiscuous mode
[  805.478309][T22954] syzkaller0: entered allmulticast mode
[  805.622651][T22954] tipc: Started in network mode
[  805.622689][T22954] tipc: Node identity 5ec6ccae1fa7, cluster identity 4711
[  805.653653][T22954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  805.699705][T22953] tipc: Resetting bearer <eth:syzkaller0>
[  805.758967][T22953] tipc: Disabling bearer <eth:syzkaller0>
[  806.499254][   T31] audit: type=1804 audit(1790264299.292:9): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3731" name="/newroot/96/cgroup.controllers" dev="tmpfs" ino=507 res=1 errno=0
[  806.508843][   T31] audit: type=1800 audit(1790264299.302:10): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3731" name="cgroup.controllers" dev="tmpfs" ino=507 res=0 errno=0
[  806.567114][   T31] audit: type=1800 audit(1790264299.362:11): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3731" name="cgroup.controllers" dev="tmpfs" ino=507 res=0 errno=0
[  806.708922][T22988] netlink: Unknown conntrack attr (0)
[  806.938520][T22996] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3734'.
[  806.960275][T22996] netlink: 'syz.2.3734': attribute type 10 has an invalid length.
[  807.065448][T22996] team0 (unregistering): Port device team_slave_0 removed
[  807.098821][T22996] team0 (unregistering): Port device team_slave_1 removed
[  807.204951][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3736'.
[  807.328385][T23001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  807.507744][T23005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3738'.
[  808.069923][T23020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3742'.
[  808.187844][T23022] netlink: 'syz.0.3743': attribute type 1 has an invalid length.
[  808.187878][T23022] netlink: 'syz.0.3743': attribute type 2 has an invalid length.
[  808.188221][T23022] netlink: 'syz.0.3743': attribute type 1 has an invalid length.
[  808.188239][T23022] netlink: 'syz.0.3743': attribute type 2 has an invalid length.
[  808.188474][T23022] netlink: 'syz.0.3743': attribute type 1 has an invalid length.
[  808.188492][T23022] netlink: 'syz.0.3743': attribute type 2 has an invalid length.
[  808.188733][T23022] netlink: 'syz.0.3743': attribute type 1 has an invalid length.
[  808.188751][T23022] netlink: 'syz.0.3743': attribute type 2 has an invalid length.
[  808.188989][T23022] netlink: 'syz.0.3743': attribute type 1 has an invalid length.
[  808.753700][T23032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3746'.
[  808.753735][T23032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3746'.
[  809.656804][T23070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3754'.
[  809.815444][T23070] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  810.359064][T23065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  810.497928][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'.
[  813.909092][ T4987] udevd[4987]: worker [19501] /devices/virtual/block/nbd4 is taking a long time
[  814.767794][T23094] ip6erspan0: entered allmulticast mode
[  814.892161][T23099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3762'.
[  815.283171][T23134] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  816.457739][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3771'.
[  816.636153][T23171] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3772'.
[  816.822341][T23174] bridge0: entered promiscuous mode
[  816.822368][T23174] bridge0: entered allmulticast mode
[  817.020135][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  817.059254][T23181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3774'.
[  817.074854][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3774'.
[  817.226013][T23183] lo speed is unknown, defaulting to 1000
[  817.250244][T23189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3775'.
[  817.253007][T23179] lo speed is unknown, defaulting to 1000
[  817.977425][T23211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3783'.
[  818.067914][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'.
[  818.097073][T23213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3783'.
[  818.130502][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'.
[  818.812430][T23233] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 1, id = 0
[  818.827523][T23225] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  818.945172][T23236] validate_nla: 38 callbacks suppressed
[  818.945203][T23236] netlink: 'syz.1.3788': attribute type 1 has an invalid length.
[  818.970409][   T32] INFO: task kworker/1:1H:1693 blocked for more than 143 seconds.
[  818.970433][   T32]       Not tainted syzkaller #0
[  818.970445][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  818.970454][   T32] task:kworker/1:1H    state:D stack:25960 pid:1693  tgid:1693  ppid:2      task_flags:0x4208060 flags:0x00080000
[  818.970517][   T32] Workqueue: kblockd blk_mq_run_work_fn
[  818.970553][   T32] Call Trace:
[  818.970561][   T32]  <TASK>
[  818.970576][   T32]  __schedule+0x17db/0x58f0
[  818.972569][   T32]  ? __pfx___schedule+0x10/0x10
[  818.972618][   T32]  ? schedule+0x90/0x2b0
[  818.972650][   T32]  schedule+0x164/0x2b0
[  818.972689][   T32]  schedule_timeout+0x152/0x2c0
[  818.972715][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[  818.972742][   T32]  ? __pfx_process_timeout+0x10/0x10
[  818.972882][   T32]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  818.972913][   T32]  ? prepare_to_wait_event+0x436/0x480
[  818.972956][   T32]  nbd_queue_rq+0x96f/0xff0
[  818.972997][   T32]  ? __pfx_nbd_queue_rq+0x10/0x10
[  818.973025][   T32]  ? __pfx_autoremove_wake_function+0x10/0x10
[  818.973071][   T32]  blk_mq_dispatch_rq_list+0x499/0x1990
[  818.973116][   T32]  ? sbitmap_get+0x229/0x390
[  818.973153][   T32]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  818.973181][   T32]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  818.973218][   T32]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  818.973271][   T32]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  818.973312][   T32]  ? lock_acquire+0x115/0x350
[  818.973344][   T32]  ? process_scheduled_works+0x97a/0x1630
[  818.973382][   T32]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  818.973415][   T32]  ? blk_mq_run_work_fn+0x144/0x300
[  818.973448][   T32]  blk_mq_run_work_fn+0x16c/0x300
[  818.973483][   T32]  ? process_scheduled_works+0x97a/0x1630
[  818.973515][   T32]  process_scheduled_works+0xc3d/0x1630
[  818.973583][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  818.973623][   T32]  ? assign_work+0x3cf/0x5d0
[  818.973661][   T32]  worker_thread+0xa47/0xfb0
[  818.973716][   T32]  ? __kthread_parkme+0x71/0x1f0
[  818.973763][   T32]  kthread+0x38b/0x480
[  818.973788][   T32]  ? __pfx_worker_thread+0x10/0x10
[  818.973819][   T32]  ? __pfx_kthread+0x10/0x10
[  818.973845][   T32]  ret_from_fork+0x514/0xb70
[  818.973873][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  818.973897][   T32]  ? __switch_to+0xc89/0x1420
[  818.973934][   T32]  ? __pfx_kthread+0x10/0x10
[  818.973960][   T32]  ret_from_fork_asm+0x1a/0x30
[  818.
** replaying previous printk message **
[  818.984116][   T32]  </TASK>
[  818.984367][   T32] 
[  818.984367][   T32] Showing all locks held in the system:
[  818.984383][   T32] locks held by pr/ttyS0/16: 1, last CPU#1:
[  818.984401][   T32]  #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  818.984473][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  818.984490][   T32]  #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  818.984552][   T32] locks held by kworker/u8:4/65: 5, last CPU#0:
[  818.984570][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  818.984636][   T32]  #1: ffffc9000200fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  818.984709][   T32]  #2: ffffffff8ebe9930 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20
[  818.984768][   T32]  #3: ffffffff8ee38920 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240
[  818.984828][   T32]  #4: ffffffff8ebff6e0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30
[  818.984901][   T32] locks held by kworker/u8:6/152: 5, last CPU#0:
[  818.984940][   T32]  #0: ffff8880217ee140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  818.985011][   T32]  #1: ffffc90002d77c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  818.985122][   T32]  #2: ffff888078009440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  818.985194][   T32]  #3: ffff88802c27dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  818.985264][   T32]  #4: ffff8880b8628298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10
[  818.985337][   T32] locks held by kworker/1:1H/1693: 4, on CPU#1:
[  818.985354][   T32]  #0: ffff88801eaf3d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  818.985419][   T32]  #1: ffffc90005edfc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  818.985485][   T32]  #2: ffff888026e1c098 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300
[  818.985551][   T32]  #3: ffff888026fbe178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  818.985624][   T32] locks held by getty/5375: 2, on CPU#0:
[  818.985642][   T32]  #0: ffff88807f8230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  819.075176][   T32]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  819.075257][   T32] locks held by kworker/u9:4/5625: 3, on CPU#0:
[  819.075276][   T32]  #0: ffff888054643140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  819.075342][   T32]  #1: ffffc90003f77c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  819.075413][   T32]  #2: ffff88805e160ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0
[  819.075472][   T32] locks held by kworker/u8:32/11159: 3, last CPU#0:
[  819.075487][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  819.075546][   T32]  #1: ffffc9000e6dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: ktime_get_real_ts64+0xa9/0x3d0
[  819.113538][   T32]  #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0
[  819.113703][   T32] locks held by udevd/19501: 1, on CPU#1:
[  819.113748][   T32]  #0: ffff88802594b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  819.114459][   T32] locks held by kworker/1:57/22250: 3, on CPU#1:
[  819.114509][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  819.114683][   T32]  #1: ffffc90006f2fc40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  819.114841][   T32]  #2: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  819.115015][   T32] locks held by syz.4.3776/23179: 5, on CPU#1:
[  819.115057][   T32]  #0: ffffffff90244f08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780
[  819.115218][   T32]  #1: ffffffff8ffa0508 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0
[  819.115360][   T32]  #2: ffffffff8ffa06c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0
[  819.115514][   T32]  #3: ffff88807a2a1020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650
[  819.115605][   T32]  #4: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  819.115661][   T32] locks held by syz.4.3776/23183: 3, on CPU#0:
[  819.115678][   T32]  #0: ffffffff90244f08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780
[  819.115733][   T32]  #1: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0
[  819.115896][   T32]  #2: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  819.116064][   T32] locks held by syz.0.3785/23232: 6, last CPU#0:
[  819.116107][   T32]  #0: ffffffff90244f08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780
[  819.116256][   T32]  #1: ffffffff8ffa0508 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0
[  819.116406][   T32]  #2: ffffffff8ffa06c8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0
[  819.116553][   T32]  #3: ffff888079a69020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650
[  819.116707][   T32]  #4: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  819.116853][   T32]  #5: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  819.176786][   T32] locks held by syz.3.3787/23237: 1, on CPU#1:
[  819.176839][   T32]  #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70
[  819.177002][   T32] locks held by syz.3.3787/23242: 1, last CPU#0:
[  819.177046][   T32]  #0: ffffffff8f4f1938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470
[  819.177208][   T32] locks held by syz.1.3788/23236: 2, last CPU#0:
[  819.177250][   T32]  #0: ffff8880274e69b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  819.177435][   T32]  #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  819.189642][   T32] 
[  819.189670][   T32] =============================================
[  819.189670][   T32] 
[  819.189722][   T32] NMI backtrace for cpu 0
[  819.189772][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  819.189836][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  819.189877][   T32] Call Trace:
[  819.189900][   T32]  <TASK>
[  819.189929][   T32]  dump_stack_lvl+0xe8/0x150
[  819.190021][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  819.190046][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  819.190084][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  819.190112][   T32]  sys_info+0x135/0x170
[  819.190232][   T32]  watchdog+0xfd7/0x1030
[  819.190329][   T32]  ? watchdog+0x1c7/0x1030
[  819.190424][   T32]  kthread+0x38b/0x480
[  819.190488][   T32]  ? __pfx_watchdog+0x10/0x10
[  819.190542][   T32]  ? __pfx_kthread+0x10/0x10
[  819.190605][   T32]  ret_from_fork+0x514/0xb70
[  819.190675][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  819.190731][   T32]  ? __switch_to+0xc89/0x1420
[  819.190825][   T32]  ? __pfx_kthread+0x10/0x10
[  819.190889][   T32]  ret_from_fork_asm+0x1a/0x30
[  819.191025][   T32]  </TASK>
[  819.191184][   T32] Sending NMI from CPU 0 to CPUs 1:
[  819.191320][    C1] NMI backtrace for cpu 1
[  819.191334][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  819.191357][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  819.191369][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  819.191395][    C1] Code: e8 2e de 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef e5 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 54 76 06 cc 44 89 f9 80 e1 07
[  819.191411][    C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[  819.191428][    C1] RAX: 1ffffffff35a8200 RBX: 00000000000003fd RCX: 0000000000000000
[  819.191442][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  819.191454][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  819.191467][    C1] R10: dffffc0000000000 R11: ffffffff8572f400 R12: dffffc0000000000
[  819.191481][    C1] R13: 0000000000000000 R14: ffffffff9ad410c0 R15: 0000000000000000
[  819.191494][    C1] FS:  0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000
[  819.191510][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  819.191524][    C1] CR2: 00007fdcc0c65d58 CR3: 00000000357be000 CR4: 00000000003526f0
[  819.191541][    C1] Call Trace:
[  819.191549][    C1]  <TASK>
[  819.191558][    C1]  wait_for_lsr+0x184/0x2f0
[  819.191582][    C1]  __serial8250_console_fifo_write+0xcd/0x3e0
[  819.191614][    C1]  serial8250_console_write+0xaa1/0x1200
[  819.191641][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  819.191670][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  819.191690][    C1]  ? __schedule+0x17f1/0x58f0
[  819.191720][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  819.191751][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  819.191776][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  819.191805][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  819.191828][    C1]  nbcon_kthread_func+0x679/0x880
[  819.191852][    C1]  ? nbcon_kthread_func+0x163/0x880
[  819.191870][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  819.191895][    C1]  ? __kthread_parkme+0x71/0x1f0
[  819.191923][    C1]  ? __kthread_parkme+0x199/0x1f0
[  819.191953][    C1]  kthread+0x38b/0x480
[  819.191971][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  819.191990][    C1]  ? __pfx_kthread+0x10/0x10
[  819.192009][    C1]  ret_from_fork+0x514/0xb70
[  819.192029][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  819.192046][    C1]  ? __switch_to+0xc89/0x1420
[  819.192073][    C1]  ? __pfx_kthread+0x10/0x10
[  819.192092][    C1]  ret_from_fork_asm+0x1a/0x30
[  819.192131][    C1]  </TASK>
[  819.237725][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  820.206085][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  820.215234][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  820.225323][   T32] Call Trace:
[  820.228637][   T32]  <TASK>
[  820.231625][   T32]  vpanic+0x56d/0xa60
[  820.235657][   T32]  ? __pfx___schedule+0x10/0x10
[  820.240538][   T32]  ? __pfx_vpanic+0x10/0x10
[  820.245090][   T32]  panic+0xc5/0xd0
[  820.248858][   T32]  ? __pfx_panic+0x10/0x10
[  820.253317][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  820.258968][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  820.264383][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  820.270583][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  820.276769][   T32]  watchdog+0x1030/0x1030
[  820.281176][   T32]  ? watchdog+0x1c7/0x1030
[  820.285637][   T32]  kthread+0x38b/0x480
[  820.289772][   T32]  ? __pfx_watchdog+0x10/0x10
[  820.294478][   T32]  ? __pfx_kthread+0x10/0x10
[  820.299106][   T32]  ret_from_fork+0x514/0xb70
[  820.303722][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  820.308862][   T32]  ? __switch_to+0xc89/0x1420
[  820.313577][   T32]  ? __pfx_kthread+0x10/0x10
[  820.318202][   T32]  ret_from_fork_asm+0x1a/0x30
[  820.323011][   T32]  </TASK>
[  820.326658][   T32] Kernel Offset: disabled
[  820.331091][   T32] Rebooting in 86400 seconds..