last executing test programs:

8.91998502s ago: executing program 3 (id=3252):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@fragment={0x0, 0x0, 0x3, 0x0, 0x0, 0x1}], {0x0, 0x0, 0x8}}}}}}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) (async, rerun: 32)
unshare(0x6020080)
unshare(0x26020480) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc117c000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x8044) (async, rerun: 32)
r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x9, 0xfffffffe, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

8.703022741s ago: executing program 3 (id=3257):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x19)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="05030200000000002c00128009000100626f6e64000000001c0002800500010001000000080003001000000008000200", @ANYRES32=0x0, @ANYBLOB="aa39008589e23aafc78f79a2e3"], 0x4c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xb}}]}}]}, 0x38}}, 0x0)
r3 = socket(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)

8.404239825s ago: executing program 3 (id=3260):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff20}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.228681254s ago: executing program 3 (id=3263):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000"], 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
sendmmsg$sock(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x30, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40841}, 0x20000041)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, r2)
socket(0x2b, 0x80801, 0x1)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000029c0)={&(0x7f00000003c0), &(0x7f0000000440)=""/125, 0x0, &(0x7f00000019c0)="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", 0x0, r0}, 0x38)

7.641287582s ago: executing program 3 (id=3269):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000002, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

7.386388688s ago: executing program 3 (id=3273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000198f0a2bdeb9e729d8b71bd3189ac2b6e7d14893e3d4c99763700eb225d54c699176f3d23596394119abae1c4bfebcb4c2fdd0f03a8811161c487ddea22c724ffb5d", @ANYRESDEC=r0, @ANYBLOB="00010000316f06e52fddbc00300006000b00010063656e657665e5ff1f00110001"], 0x64}}, 0x20000000)

4.37137776s ago: executing program 1 (id=3299):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf0000000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x6, 0x8000}}}}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r8, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r8, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x8, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)

3.883397777s ago: executing program 1 (id=3302):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

3.44809468s ago: executing program 1 (id=3307):
syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000006c0)=ANY=[], 0x35a) (rerun: 64)

3.2683865s ago: executing program 0 (id=3310):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x1)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x24, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005a0001ff7f000000000000000400fd80080003"], 0x1c}], 0x1}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)

3.198406704s ago: executing program 0 (id=3312):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x24}, 0x94)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)='\x00', 0x0}, 0x50)

3.05057766s ago: executing program 0 (id=3313):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x8001)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="e1ed6f2409000000c8e7a7232e84e348930eeb2518c47315734d", @ANYRES16=r0], 0xfdef)

2.87391059s ago: executing program 2 (id=3315):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000002840)={0x26, 'aead\x00', 0x3, 0xe, 'rfc7539(pcbc(fcrypt),blake2s-128)\x00'}, 0x1d)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="c6ca28b89c92565f07ec532830dca64aa4dc1d5b4794901b77f94ce799ad54ce88bf6dc7413b9d25e5174e91499140a3cb4951fa45c153e3b2ac8a8f1ea483826b19e37458aba4f87aea9338a016b0911fedffdd16c14ce12c75235ed5740abd3822ea7fae2024b97a28fe672cdd4f26ac15cc137b14795461ead5e60ca3a432de22aa190f98de53de42fc2eab534605a88cc68a3780cf5e49a0372f6dd6ffd387a4ae7896aef2b5ee80dbdca712c25f4f15b20f6b4e3bab75f5458a99822ffc28047abe31b16284e18cecc4296146b2e5ecbcc889c04dc97612e1c26da834241d8a69fae2cd9098e23fca2461e8cd4d89aa7368b901a688f12c398c2b"}], 0x0, 0x0, 0x0, 0x8050}, {0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="014b857f0ddf13df923cbd8bd0f2389af4fa44590be01cd52f009f83011bade2aa5683e7791220418da7d295abde57b578e09c270e11434c89284e5ab85bb2c1e756326716"}, {&(0x7f0000000400)="f8291d5c18a0b9503326c56ecc476c03ae37ed0fb6"}, {&(0x7f00000005c0)="6773bbffcfcab43d2c98499cf8c1d5aacd209a058ebb2de39b6102f99ed5f4b2f4f19f4c0fed94d46d38f783f23eaaa7ea358b5f83e9e7492dbafbe3dc3d90edaddb4eb61357cb9d7bd72bd5a3cd5e29189074d3c18cfb4e81ffd493b9bc9473c7960f4021b3b102dab64a3bfaf037c17282bbb96f1e94f492da0f6fcc296fb5be"}, {&(0x7f0000000680)="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"}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="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"}], 0x0, &(0x7f0000002740)=[@assoc, @op={0x0, 0x117, 0x3, 0x1}, @assoc={0x0, 0x117, 0x4, 0xbfea}, @op], 0x0, 0x8000}], 0x49249249249249d, 0x40800)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000500)=""/150, 0x96}], 0x2}, 0x8101)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001540)={0x3c, 0x0, 0x6a4104b68300861d, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x408b4)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0x400c840)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318})
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x6}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xd3}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x5c}}, 0x80)

2.66533939s ago: executing program 2 (id=3316):
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0xffff}, 0xe)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001"], 0x4c}}, 0x0)

2.533923893s ago: executing program 0 (id=3318):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x2b, 0x1, 0x0) (async)
r1 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="b2", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="14"], 0x18, 0x4}}], 0x1, 0x4000000)
setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4)
recvmmsg(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0xb1}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x100c0, 0x0)
listen(r1, 0x6) (async)
listen(r1, 0x6)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000012300)={0x0, 0x0, &(0x7f00000122c0)={&(0x7f0000009b40)=ANY=[@ANYBLOB="140000001000010079c24301000000000a00000a34000000030a01040000ecffffff0000070010070900030073797a3200000000080005dd47d38dfd09000a0073797a31000000001c000000160a01010000000000000000000000020800074000000005140000001100010000320000000000000300000a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x8018)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000e40)={0x0, 0xfda0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x400)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) (async)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x1}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000008c0)=@nl=@unspec, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/145, 0x91}, {&(0x7f0000000a00)=""/138, 0x8a}, {&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000000b80)=""/137, 0x89}, {&(0x7f0000000c40)=""/116, 0x74}], 0x5}, 0x2100)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) (async)
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000804}, 0x8850) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000804}, 0x8850)
ioctl$XFS_IOC_AG_GEOMETRY(r4, 0xc080583d, &(0x7f0000000700)={0xc, 0x4, 0x7ff, 0x7, 0xf, 0x0, 0x642, 0xffffffff})

2.061839347s ago: executing program 0 (id=3320):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4000, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x6}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "e475994996288d72", "aefc24e933a9e17452f1f6a4fb90e626", "33bb36b9", "e955e457b4a1a552"}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd29, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x14040001}, 0x800)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071105b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc9357f57f741c167, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000140)=0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.815589145s ago: executing program 2 (id=3321):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x34, r3, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x6015}, 0x20008010)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000d40)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000080)={'full', 0x20, 0x7, 0x20, 0xfffdfffffffffff5}, 0x2f)

1.775067529s ago: executing program 0 (id=3322):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket(0x1, 0x1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x14, 0x841, 0x1, 0x7ffff, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x26, r4, 0x200, 0x70bd29, 0x25dfdbfb}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', <r7=>0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}})
connect$can_bcm(r6, &(0x7f00000006c0)={0x1d, r7}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=<r8=>r5, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r9 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$netlink(r9, 0xffffffffffffffff, 0x44)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000001080)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@srh={0x6}, @routing]}}}}}}}, 0x0)
write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r11, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r11, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', <r12=>0x0, 0x2f, 0x1, 0xd, 0xdc, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, 0x1, 0x7800, 0x7, 0x7}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8, 0x30, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b7040000010000008500000015000000", @ANYRESHEX, @ANYRES16=r8, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC, @ANYRES64=r4, @ANYRESOCT=r6], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

1.654719446s ago: executing program 1 (id=3323):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213001e0200000000000000f8dbdf25"], 0x33fe0}}, 0x4000050)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(r4, 0x0, 0x0, 0x40)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe000, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c703000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0710000000000000000000000000000001000000", @ANYRES8=r5, @ANYRES32, @ANYRES32=r6], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fe000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000bfa20000000000000702000078ffffffb703000008000000b70400004d44e5c585000000820000009500"/72], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r10)
sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="d4020000611a044404e3e8e026c055f003507969c63f455705b5139118b23c76839010a32db71012e987a8ece6a9885b979d80a30103ce51f238a7c5a1daf33df4f274dc33de58a00c33955bae13c679c1d2418cfb2d7a28435908a6bfab86460268d5f81021aa57f2be5ac01db4bbe4485ccddf7c826dc3f8981fd9eee94400d4ef3a2b6c91d3c2cc474004410944905243a21125b0128a4e17e31ee3db0cbc82b4", @ANYRES16=r11, @ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r7}, 0x14)
syz_emit_ethernet(0xd81, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080045ce0d73006800009d1190787f0000010a0101024e224e200d5f907804000000ffff00000700000000000000f80533d195c4cf6b265b52c6f2203a12ebe5c1703007ba24e0f9f0eef2150f89be27f724a29e31977322da29231d44ec6e2c6c13fb676bc14a3938e828f5ae6c35d1e69fdc903af5da86beefa2b8feba700ed57d174e28b2cd0753d5e75577af1d137054de664c9f1cb8f3e2f7bda71f9ee25b465923656ce7ae053e318f7e9491bc4ccc9f2b29a875e45df6105bb6045f765180e67e90881703d73735b5e480995466b19753e855a542aa6c57bd7b7e2fd081bdaea0df0d0d4bf9a4bddca3c195015cc8b9a57f719247f437f125151f5b71e1b49d65416940290edc2bf31b246f331b94db06b3f30c2df173c69ca82f334f70f8da910a98f80adc613343d0bb04575f9eb0364290f42bb4df8a952098c93a862c6b7d9bc8ae12304d793cba7abbffc564a5ef526053658f7be341d25fc7183f547ca12f05ca2f3b370de3f23cb08884aafbe51c9f2592a03dfdfe0f80e8efa5f68604fc5ccd85dcfb0b2718346b97803a70096db23d8d03e04df86526655db3650a857508dc3ecd4d194d5c6ef4383c4d78ab88007771c3f5d3dd10860599fac7bdbbe6780226b52b0d583dcc8f62817c866887a576d2ac86fb237d491a51c85de09899735206ea85ff004c1aeb5410f2c49a950402b7813f323e2dd231650fbfd7b0c885e5d86246948b192fc41bcdc4ee8a8d447b1d4473913fa026a31e83c2368f6176dd2dbe781b1a6a05bedfea547309054673ebb309e7fb259f4cee3bc2023177e59ad085f4fc0ee1594dd165302cb6820077a4082bafc7a3c0fa1a8f8aca99795ea7b4149c3afca38d0b3235000508f31c2b137596dabe8b9f48ad689ee8375f6d3b7d2a6016728b08851bc13bbb556f22b8204bcf1c4639031a2c07b1412b2e4dab2e7bf6f65d82244d5d8155033c1de82ab767f16a5e39cb9b604c38b5e36dd339af59ecea82494657ec39d657f8b0c0fec11557e30c13aedb65e098cbae1a54adcaa793dc73d29b5d8aa6a6c32c38b62b45e8e243a720ebfd469b69152a067cb308f5b2ceb0d2bf8f7d32afea00593d6943cf72a24a9078a5159cb4427f13a54752557a2876c03a7b0ad01a161ee506b98899153597989ad5409c99f4521612916d9070e68abcbaa1a9b7f56881a30a2c8e087619122d3ccb2f8503966d1fc2298580331fcaeb12f416af6a917e8d868c9827db39e32bd6dd7c2b0f9210a1eb260875a9d9ab7a90f6a84c18d42ac75399ef5cb4f5370a54430c482cb9571e1e34e96dc40bd7c0f503df91ada0938b81b33baa5f37c8bd493c8db1fef63242e81866ee75d45c9aea53200b471ed1829266daed56eafa023136fde2bfda54557e46dbbd207efb407e455b9f50a2386158e1b0abf58b429938f810f0b02b383515f4f892022f9f161423399413159e2a7eed76fdc990df37d8588945ef6ad0785c631e6fdccbdf1620db2692231cca258a77f3d9509da6c0db8b4367b0b3b091370ca40e991682b284efe53261338a5718ca12acc2af145ced20b0688fa6300688e28fd59c023241f15898f3748d24b19ae06ef81273bff18f3177d8e5f9f2f56bb34a1143f5a4e8eab6c7d09e18985614d6da125ca4ff4ac67f326b4e494c1061241ee359c2d6915825a83d74e23b5796c23c151c8caf97ba0f92695c471af23236c7d8e45bdb56c87c718eb607e94e6efc8dfcc83360fbe398bbbef37e7d3fbd0f903a03c87503884df7399e154a760d9e91aada66b8ff5aab4d0de17bd0860c875da6a1530d66e6957a65f3ed49215fcc5ce9fd60696ab175707249f68271642d4762e74bd9268fc4925f9ce81a91771e787653e9df8df286bbbf5dd2371ed2541f87b5c370411d6632e92bddec66bc7df5865140366dafca8a4f488b3a070a21bfc57b7382d3eb6a52605390006d6fccb20277e793abe607f54d36f3a1c9f9ed35e9218834f96c990192ef03dff8aef34d6047da8e3ebddbf3d4d5f12fabe882674bf8e761baec6f3728d3cfed573cf02c95fc6bf0135c87abacd4e102fe811c437034e778c28bd0bffcfbdad4a17ecb5ea211c787b13345a78121c6a8d575767137d673adf0f28be4d3931e46d1d8ac6c44303bd3ca46959524f2f63468abf70b56b6b127ad02393cfaae750752394831bdde6a1056a27446785b262f3139c5bad1bd5afb53bed180b7901b7915d73e1b9e4de24d0b5c8ca75139f03d98d852db99f54f295dd34e260c619633900083001512f75da83a2d56e2156412015ab50ff8b5f1564a91e95e9d64e6b6b8f5811e89555baa5b2c74b042ca24085cd08e3c8fce56feb3870d99186a00192b40edc68686c8480f85b000b2469f9416055201e676c98c122da35eb4944f494875fa2f29fb0c444eda9cd8c6ce03d67639ccc5c9982face16bf57b1f39f8929cdff01555e4f4d907f403a9a4f6eecf4055c9dca198b5b07167fb15459ab91dbcac5088cedbd5be746f25f7331de02ea7f5f690c50606cc2bf0efd20a072e4eca2be80c28e26549e2bd94a39941c9683a8801201618b9c0d9d21403fd7f45749d2dc7c283051d56deeb799074360e5a372568791f67c3e5d65853c6466783674b3769fcb5ffad4e8409205b0788311c40175e2aa1691f5d443db4924ad05e8571cdb79e0d581e5c07c0015ba894e7581ae63ce406d42f81391fbed44d2ae5b6807a49048f78ade4f03a42cdf6eaa11fec8060747b4af7096576b7992b8f32055193fbd95326ad363bddb7f2a640cf56546935c0aa9c7ddf30b92dfd2b56ce714542ecce3cb02bdb93e86042b112dbc28c8a14d936dd18ee46a0f69599a7d5e77e33a229237b26f46d9cbb5cda37c964053f139b81b53c90aae4a74dca020a376b98228c8d30f61928b29b9ba7eb092dcfe66e5840105b28d4b37c919f74166ae606e6a332dd9f6bf41e799524c4271bea139ffe98f6b30e496ad04d24927cdf32e391aca95a3a8d2b6bee78b83c9bec134243c0b267275b51be461b0a7d8f835688491b080c797600b8842cee70ff90bf3788885c6754721ad940b9ecc30dfc305901da32e8223addc6c7100e3e677d8ed256e2f9dea20bb73e604e2e8d1e32206f80758673a7a04393cc9aae90a1346006a3f38f447df8c7243c55578df6884cd587be160647d90ba5696fc7505f2b41d47e7b9d93aedf62a18278acb22b060379509a60ff252873f6a1a8db383cebecd135889fed08392110fa70f12a8011da006e3c978efa8b6b47bd6d1bced88171375dec24bcddd8851e2dbad59f7ea60cc0fbc43d34ea621cd85c20878d4356bfafe2883ce88e11d3ef34bf30dde1e4c73a9c6eda6eb5277e6e61036b04c024d5297456b3b027667e1b3df87fe68a6517fb4e6ba218b00919e561df5dd3e5c90c57a95f34c2cd534914bb82ab34e59dbe87f90b8e7abd335e9369b4effa1d442298d22042f5cdf893318c0d7792a5b2b5f7cf0ce2a62d2614d79967d75fa95e4a7f9922dea6d0ebdef725166a0d15130118a5b04caea084b8c980e4e93ee5116f88ba8e93468781f8ca79b69aac06e0a68bd80ef34a779f19a46e79634ed2178763edcbe557088b9e2b8fcd380e3e8d7fe8aa88af4d234416d903a1b1c081d47a0fc119d9156d2a459844e9c4ea3f1ec35d069a9d4f9870c1e560dfcdb0610a30209932a155223003126df6c85c74c28a62d9060462dcfcae8e4b0ff7f942e623dbd61e2317fe5f0c25bb2c06763c2cbcf8b50187aac9501919b6e4e489135a4c86548e7cfe4085bc95760053733dccd0f2fbdb3dd42dc171c3aadf47d34fcfb15d8691014189069d2ee18d466cd95028b3447c7b7c83f96382a9454a127eb9f5f8b8827309027ee45af2a3e466e300e7939aa22e581dd1a4622414866a9dd54b89a10218a020ba5ef8826ca8f73b156b7063ec76b5806448bfda87f4012a94b2fc6dd1ed95562edd79f39c068280f38707d9743f8cf84c1e6ac63e5dda439f9422dc3acc2c45eb68522f5a2ea749cdaa02ced71f21ee79cfae080b39241581f242d8a32d4c2efa12435e0c92f9b7648480bbf931c77d9627a4bb492f05486193bfea78f40c9bfe0ca9fe3d39780b1ce792186dac1da269a7c993d7fadef7ad631ae4d9be64834f6e46d38c84632f201a474a91c366605d5d19b6fd8e97cafd7cb27a37c3cbe600b1a683dabd28b816094dcb6000b7690775ff314d920791af7a9c0af82ca2e20114a17a292cd57895b443635a9a24121b63463a4f77ca30ef5890f3cf65fbac66e65fe5d0486b075c5c44952f7dd5d37e4ec7ad7266c53b5dad3d91a5e143ad1496d5cd51199ab4df8c81084f781abc6b0577e1cbfcb0e0cb72212ab81a0f78d6444481314c73ee44b83ad328e86db1feb4e937189814b9b8566490611da6a2e6444865a2b83f04bb0ccb51cceea4eb479f80bcc25b65113ec8714ca1513a531bc2b772f3586e92c7493e489ac61750b2d7104baffebb4c862ca8abf1821a48e802ebb257c13afdbb0b69b4812956d54434ce26a13ce66e6041b379ece7e597636fcb0f7f5a0259555f55b97e9a9fc7948ffcb57ad4ff0fdcf1e06bef78fe17762c312b38c3ce334ea72f9e91a2f6f2fc1acb865fb2402fc41c09d2e058dba9ceb1da478ec3b49600e2536b31a392bd1d2a903f2ca4973bb8bae3d6977106dc71ad3055f4df40166410f2b90c22653c1096401a17649853a9d744047c597b98a0c6f81bc532e0b0c85f0dc4591038e01c396858079bea4939ce593cebc809270ff73755df10d32a2429b95006169e0beaa61ed05aa4e2d4b7b87a9d3e6145d2c8c1931dc344db589846"], 0x0)
socket$alg(0x26, 0x5, 0x0)

1.608090016s ago: executing program 2 (id=3324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x100, 0x50bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x78b59, 0x13}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_PORT_SELF={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x0)

1.428261054s ago: executing program 2 (id=3326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000af8000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000cc000480280001800d00010073796e70726f7879000000001400028005000200010000000600014000060000500001800c000100636f756e74657200400002800c00024000000000000000090c00024000000000000000041c00024000000000000000060c00024000000000000000080c000140000000004000000050000180080001006f7366"], 0x120}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'xfrm0\x00', <r1=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0xc, r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', <r5=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc8, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', r9, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x8, 0x100, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', <r10=>0x0, 0x29, 0x9, 0x0, 0x4, 0x20, @empty, @mcast2, 0x717, 0x1, 0x8000, 0xd39c}})
r11 = socket$packet(0x11, 0x2, 0x300)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r13, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)=@newspdinfo={0x14, 0x24, 0x400, 0x70bd27, 0x25dfdbfb, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090)
getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r14, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r11, &(0x7f00000001c0)="11eb030086dd", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r14, 0x1, 0x4, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000700)=@deltfilter={0x1510, 0x2d, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6, 0xfff2}, {0x8}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_u32={{0x8}, {0x14a0, 0x2, [@TCA_U32_SEL={0x2d4, 0x5, {0x0, 0x8, 0xf9, 0x5, 0x9d59, 0x2, 0x400, 0x8001, [{0x1, 0x6, 0x6, 0x1}, {0x4, 0x0, 0x1, 0x6}, {0x9, 0xfff, 0x8, 0xf7}, {0x6, 0x400, 0xfffffffb, 0x4}, {0x100, 0x3, 0xd4, 0x2}, {0x1, 0x6, 0x90, 0x2}, {0x80000001, 0x4, 0x8, 0x6}, {0x3, 0x8, 0x7ff, 0x1}, {0xbb19, 0x6, 0x5, 0x149}, {0x5, 0x7, 0x0, 0x2a7}, {0x5, 0x9, 0x7fffffff, 0xa}, {0x1f, 0xffffffff, 0x7122, 0x4}, {0x5, 0x1, 0x1}, {0x7, 0x5, 0x8, 0x81}, {0x40, 0x5, 0x400, 0x8}, {0xe5a, 0x3, 0x8}, {0x8, 0x6, 0x6, 0x800}, {0x2, 0x401, 0x5, 0x6}, {0xffffffff, 0xa, 0x7f, 0x5}, {0xffff, 0x6, 0x5, 0x3}, {0x1, 0x4, 0x7, 0xffff}, {0x3ff, 0x2, 0x8, 0x400}, {0x10, 0x401c, 0x7, 0x5}, {0x4, 0x4, 0x3, 0xff}, {0x0, 0x9, 0x1, 0x8001}, {0x4, 0x0, 0xfffffffe, 0x3}, {0x1, 0xa, 0x4, 0xb0c7bb0}, {0xff, 0x3, 0x4, 0x5}, {0xd1, 0x0, 0x4, 0x8000}, {0x16f, 0x5, 0x9, 0x3}, {0x1, 0x3, 0x3, 0xf}, {0x1, 0x2, 0x2, 0x5}, {0x3, 0x0, 0x0, 0x9}, {0x23, 0x5, 0x3}, {0x1, 0x0, 0x9, 0x3386}, {0xffffffff, 0x8736, 0x8, 0xfffffffb}, {0x6, 0x81, 0x6, 0x80000001}, {0xfd, 0x5, 0x2, 0x6f7fd1a4}, {0x6, 0x7, 0x800, 0x1}, {0x1, 0x3, 0x3, 0x20000}, {0x6, 0x40, 0xa, 0x5}, {0x210, 0xffffffff, 0x2, 0xe8c1}, {0x3, 0x9, 0x0, 0x80000001}, {0x2, 0xe6f, 0x138f, 0x8}]}}, @TCA_U32_LINK={0x8, 0x3, 0x284}, @TCA_U32_CLASSID={0x8, 0x1, {0x26f235e45acb6291, 0xf}}, @TCA_U32_POLICE={0x878, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x20000000, 0x200, 0xe, 0x1, {0xe1, 0x2, 0x3, 0x2, 0xfff6, 0x2}, {0x40, 0x2, 0x7, 0x2, 0x4, 0x28000000}, 0x3a, 0x5, 0x100}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6e1a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8000, 0x3, 0xee4, 0x0, 0xc13, 0x8, 0x2, 0x7, 0x81, 0x6, 0xd, 0x6, 0x3, 0x6, 0x9, 0x8, 0xfffffffd, 0x0, 0x57f139a6, 0x7, 0xfffffff8, 0xffff, 0x101, 0x1, 0xc, 0xe650, 0x8, 0x8, 0x1ff, 0x5, 0xe35, 0xfffffffd, 0x4, 0x784, 0x6, 0x8000, 0xffff, 0xffff, 0x6, 0x9, 0x3, 0x3, 0x7, 0x37e, 0x11, 0x3, 0x7, 0xf58, 0x101, 0x1390, 0x5, 0xef23, 0x0, 0x2, 0xc22, 0x9, 0x7, 0x7, 0x47a, 0x0, 0x5, 0x1, 0xfffffff9, 0xe, 0xfff, 0x1, 0xc58, 0x3ff, 0x2, 0x40, 0x80000000, 0x0, 0x80, 0x1, 0x3, 0x6, 0x6, 0x7, 0x7, 0x1, 0x1, 0x5, 0x5, 0x4, 0x2, 0x8001, 0x4, 0xfffffff0, 0x8, 0x7, 0x1, 0x3, 0xe8, 0x5, 0xffffffff, 0x5, 0x2, 0x7, 0xb81, 0x6, 0x8c15, 0xfffffffc, 0x0, 0xb2, 0x7fff, 0xffff, 0x9, 0xa, 0x4688, 0xfffffff8, 0x10001, 0x6, 0x400, 0xfffffffb, 0xc7fd, 0x3, 0xfffffffd, 0xfffffff8, 0x2, 0xd6, 0xffffffff, 0x6, 0x2, 0x0, 0x8, 0x6, 0x5, 0x7, 0x2, 0xdf2, 0x0, 0x4, 0x7, 0x9, 0x9b, 0xff, 0x3ff, 0x1, 0xb, 0x2, 0x9, 0x6, 0x8, 0x9, 0x10000, 0x39, 0x101, 0x4, 0x2e45, 0xfffffffa, 0x7, 0x200, 0x3ff, 0x2, 0x1, 0x2, 0xffffffec, 0x5, 0x2, 0x4, 0x9, 0x36, 0x8, 0x7, 0x6, 0xa, 0x5, 0xfffffffa, 0x1, 0x3019, 0x4, 0x3, 0x3, 0x5, 0x7, 0x7, 0x169ae9e, 0x2, 0x0, 0x8, 0xcf77, 0x20200, 0x1, 0x78d4, 0x3, 0x101, 0x3, 0x0, 0x3d6, 0xffff, 0x4, 0x5, 0x8000, 0x8, 0x8, 0xffffff74, 0x3ff, 0xe, 0x8, 0xe, 0x2, 0x5, 0x3, 0x4, 0x80, 0x0, 0x6, 0x0, 0x7, 0x9, 0x7, 0xc, 0x53, 0x3a, 0x41, 0x7, 0x7, 0x7, 0x1, 0x0, 0x2, 0x1, 0x9, 0x1, 0x9, 0x6, 0x9, 0x100, 0xa8, 0x5, 0xf77d, 0x10000, 0x2, 0x4432, 0x6, 0x5b01, 0x7, 0xffffff54, 0x9, 0x0, 0x0, 0x8, 0x2, 0x42, 0x9, 0x5, 0x10, 0xba, 0x5, 0x798c, 0x0, 0x5, 0x2, 0x3, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x140000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x1, 0x4ca1, 0x1, 0xf2, 0x0, 0x80000001, 0x8, 0x0, 0x3, 0x5, 0x3, 0x1, 0x5, 0x0, 0xc8, 0x4, 0x8000, 0x5, 0x9, 0x4, 0x8, 0x7, 0x63, 0x1, 0xf10, 0x3, 0x2, 0xfffffff7, 0x0, 0x1800000, 0x3, 0x5, 0xffff, 0x10001, 0x0, 0xf, 0x4, 0xfffffff9, 0x0, 0x9, 0x690, 0xfff, 0x2, 0xffffff81, 0x9, 0x27, 0x6a, 0xb, 0x8, 0x3, 0x8, 0x101, 0x401, 0x7, 0xc0000000, 0x3ff, 0x5, 0x1, 0x80000001, 0x71f, 0x491, 0x3, 0x4, 0xf4b, 0x6, 0x80, 0x80, 0x0, 0x7f, 0x7fffffff, 0x5, 0x7ff, 0x6, 0x6, 0x3, 0x3, 0x4, 0x8000000, 0xfffffff8, 0x0, 0x0, 0x6355, 0x5fd, 0x5, 0x5, 0x80, 0xb2, 0x9, 0xffffffff, 0x9, 0x6, 0x5, 0x6e, 0x2, 0x400, 0xfce, 0x80000001, 0x8001, 0x7, 0xa, 0xb7, 0x8, 0x10001, 0xfffffff9, 0x3b, 0x2a, 0xc, 0xd, 0x100, 0x5, 0x5, 0xab, 0x1, 0x2, 0x5, 0x97, 0xb49b, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x3, 0xaad, 0x6, 0x8, 0x1, 0x1, 0xcdda, 0x5, 0x2, 0x4, 0x6, 0x9, 0x2, 0x7, 0x2e2c, 0x281e, 0x8, 0x9, 0x4, 0x4, 0x3, 0x63, 0x88f, 0x7ff, 0x30baef33, 0x9, 0x0, 0x6, 0xbc, 0xdb, 0x2, 0x9, 0x4, 0x4, 0x4, 0x8, 0xbe, 0xffff, 0x0, 0x1, 0x8, 0x7fff, 0x2, 0x2, 0x4, 0x4, 0x6, 0x9, 0x4, 0xf0f, 0x1000, 0x0, 0x100, 0xc3, 0x4, 0x401, 0x5, 0xc80, 0x7d, 0x805, 0x80000000, 0x3, 0x5, 0xc570, 0x1000, 0x5da, 0x7, 0xffffffff, 0x0, 0x4, 0x4, 0x2, 0x7, 0x101, 0x7, 0x8, 0x3, 0x761f067c, 0xe, 0xe80, 0x3, 0x9, 0x100, 0x1, 0xb, 0xfffffffe, 0x8b, 0x2, 0x2, 0x1, 0x8, 0x4, 0x2, 0xfffffeff, 0x0, 0x45a2, 0x81, 0x18, 0x1, 0x2, 0x9, 0x8, 0x3, 0x2, 0x2, 0x6, 0x1, 0x6, 0x7f, 0x40, 0x80000000, 0x8, 0x6, 0x81, 0x6, 0x3, 0x0, 0x4, 0xb1, 0x9, 0xc, 0x3, 0x0, 0x5, 0x16cd, 0x10001, 0x1, 0x1, 0x5acb, 0x3, 0x800]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x22}]}, @TCA_U32_ACT={0x524, 0x7, [@m_skbmod={0x140, 0x1d, 0x0, 0x0, {{0xb}, {0xd8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x7, 0x7, 0x7fff, 0x3}, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x4, 0x7, 0x3ff, 0x2}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x5, 0x7, 0x9b7b}}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xe0, 0xffffffffffffffff, 0x7fffffff, 0x3}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="8567966726e4"}]}, {0x3e, 0x6, "b90c431fc0def48dc7ca55965be5c6a5f1f389f17c12b1546243b5b9ce418ad6289b35250fbaddaaf698de960a4c3ab4b5020b30b09151215fe2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0xd4, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x401}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80, 0x6, 0x10000000, 0xb7, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0x4e, 0x6, "fb0ee9c82dd6ea13eb3507fc904c625ab6838d6a59e854dc2ba9ee8bb50947c035e0db3ac1bc275ce0e663fd40f22c9e52426e3b8d86b03a6d89c86cebf08b1b3b1d5729282316a63cd5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x1c4, 0x2, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xb6, 0x1, 0x8, 0x3, 0x9}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x78228494, 0xffffffffffffffff, 0x3}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1c7, 0x9, 0x10000000, 0x5, 0x9}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x9ffc237867f61a7b, 0x0, 0x8}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x26f0, 0x0, 0x5, 0x800}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x7}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb5d0, 0x7, 0x6, 0x4, 0x3}, 0x2, r14}}]}, {0xb8, 0x6, "a6a43e9a0c7c8db9e9adfd1fb3e58b8e59494c978abcb00f4d2ce6466da618c1e1e7b7739388375ce9c78acdf915ece7cf248a28dee4d772980ea2c6174c336c2817c2eb4383098f0f667fd85f7b55d7bb1deb17b90f0031811e3eeba81299a4e4683e5fd7b1545c331f23f014c07ea405ffa4b41608e2afc2272013f5c6b8526c470d7f45e629759566ca63527c1be6b9a580ec3f6a57c8e40a5651b4b1da0a6a95547cb29e23e5e639011ee8f05d128efab460"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x148, 0x1c, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x38}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0xe3, 0x6, "55b5f821c15beffef7a7d89808c1503974ef04fc0a16dc89e079ebed7464e4b41bcfee8c85b74b52966e1cc0ea47010a55f82f94eb04cc7c76032270c1f0aa8f80c6d07efa452503f702993bd98803a19292272f682b55169e436ab6cb8ba0d9aadc86455a0b544d4478a7720e708b22f27779b38e142096f2161479c16229a564e1fe1937ca54d962f36784fd79b2bb17d8b8d6fd8f11b95ff839926466bc14de5098fce263ac223f512a53febf3b8e34c1301797039a18b72360590b28615b790f9377cbc6857aac58fb00bac8c1030e5e3f8e49fea711206b98c38833c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_POLICE={0x41c, 0x6, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9970, 0x8, 0x3, 0x7, 0x9, 0x8, 0x2, 0x4, 0x10001, 0x7fff, 0x5, 0x3ff, 0x5, 0x3, 0xc, 0x2, 0x6, 0xfffffff7, 0x2, 0x8, 0xfffff97c, 0x2, 0xfff, 0x9, 0x7, 0x7, 0x1, 0x400, 0x1, 0x0, 0xeb61, 0xe, 0x4, 0x1, 0x5, 0x5, 0x10001, 0x3ff, 0x6, 0x9, 0x7163ba23, 0x6, 0x4, 0x1ff, 0x7, 0x5, 0x101, 0xfffffbff, 0x3, 0x8, 0x200, 0x2, 0x0, 0x6, 0x200, 0x0, 0x8000, 0x7ff, 0x5, 0x80fe, 0xffffff96, 0x1, 0x6, 0x4, 0x7, 0x80000000, 0x8, 0x7, 0xfffffffa, 0x5, 0xcb6, 0x7, 0x2, 0xd, 0x4, 0x1, 0x7, 0x2, 0x1, 0x1, 0x28c, 0xfff, 0x4, 0x8, 0xbb, 0x6, 0x3, 0xffff, 0x5000000, 0x81, 0xd, 0x4, 0xf, 0x5, 0x5, 0x8, 0x0, 0x8, 0x9, 0x9, 0x4, 0x5, 0x6cc, 0xfffffffb, 0x7, 0xfffffffd, 0x5, 0x7, 0x2, 0xa4, 0x8, 0x5, 0x9, 0x4c, 0x3, 0xfffffff2, 0x3, 0x3, 0x0, 0x8, 0x1, 0x3, 0xd, 0x2, 0x6, 0x1, 0x38000, 0xab, 0xfffffb24, 0x3, 0x2, 0x2, 0x3, 0xfffffff7, 0x1, 0x9, 0xe, 0x8001, 0x7, 0x0, 0x87b40000, 0x9ed1, 0x9, 0x0, 0x57c, 0x2057, 0x8, 0x8, 0x6, 0x800, 0xfffffff7, 0x5, 0x8, 0x9, 0x5, 0xfffff800, 0x200, 0xf1, 0x10001, 0x73b2, 0xfffffffa, 0x0, 0x7, 0x4, 0x41fd, 0x3, 0x8, 0x80, 0x1, 0x0, 0x9, 0xfffffffc, 0x5, 0x9, 0x4, 0x1ff, 0x9, 0x6, 0x10, 0x6000, 0x8, 0x1, 0x10, 0x1, 0x3, 0x81, 0x4, 0x0, 0x0, 0x3, 0x1ff, 0x4, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8, 0x5, 0xbfe, 0x10, 0xa0a, 0x7fff, 0xfffffffb, 0x2, 0x7, 0x9, 0xfffff598, 0x3, 0x9, 0x9, 0x8, 0xcaf, 0xfffffff3, 0xfff, 0x2, 0xfff, 0x639d, 0x1, 0xf963, 0xee24, 0x2, 0x5, 0xffffffff, 0x8, 0x10, 0x5, 0x0, 0x5, 0x3, 0x8, 0x1, 0x2, 0xd, 0x2, 0x9, 0x2, 0x7, 0xb, 0x8, 0x6, 0x80000001, 0x6, 0x5, 0x10001, 0x0, 0xfffffffb, 0xf, 0x8, 0x1, 0x333, 0x8001, 0x8, 0x6, 0x5c, 0x4]}, @TCA_POLICE_RESULT={0x8}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x65}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x9}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ee}]}, 0x1510}, 0x1, 0x0, 0x0, 0x4004040}, 0x24044081)

1.271741937s ago: executing program 1 (id=3327):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket(0x40000000015, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe27"], 0x0, 0x4}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000026001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0)

1.271393679s ago: executing program 4 (id=3328):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000440)=0xcd, 0x4)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000080000001809000020206925000000000020e3207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c4000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@getneightbl={0x14, 0x42, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000340)="0a000300010000", 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x14}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0xde, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)

962.862545ms ago: executing program 1 (id=3329):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58)
close(0x3)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002c00)={0x0, 0x5}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c40)={r4, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002c80)=@base={0x18, 0x2, 0xd6b, 0x6, 0x4400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d80)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000002d00), &(0x7f0000002d40)}, 0x20)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0x40, 0x0, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002e40)={0x1, <r12=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000002f40)={0x6, 0x13, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002e80)=[r7, r8, r9, r10, r11, r12], &(0x7f0000002ec0)=[{0x4, 0x2, 0x4, 0x9}, {0x2, 0x5, 0x3, 0x4}, {0x1, 0x2, 0x7, 0xb}, {0x4, 0x1, 0x1, 0xc}, {0x4, 0x5, 0x2, 0x1}, {0x5, 0x3, 0xe, 0xa}, {0x2, 0x3, 0xd, 0x3}, {0x0, 0x5, 0x4, 0x3}], 0x10, 0x8}, 0x94)
r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r5, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={&(0x7f00000002c0), 0xc, &(0x7f0000001340)={&(0x7f0000000e40)={0x278, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x50, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x85}, @broadcast, @broadcast, @initial, {0x9, 0x2}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0xfdf7, @device_a, {0x0, 0x6, @default_ibss_ssid}, @val, @val={0x2d, 0x1a, {0x20, 0x3, 0x1, 0x0, {0x1ff, 0x3, 0x0, 0x3f7}, 0x6, 0x8, 0x80}}}}, @NL80211_ATTR_FRAME={0xa1, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xe7}, @device_b, @device_b, @from_mac=@broadcast, {0x7}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x10, @val={0x10, 0x1, 0x1b}, [{0xdd, 0x76, "f800a4d9e645c68b149dc2c707a42eaaf9798c1d0bf51a8ba05a978e563dda08ff8c2a6b99cb1d49c5b1540419aa5f953da5f55737f706a49e836121c1db664e6808a3b48690ea0a44ed5c14e8700b64a51be7ba90863d9bf5d0b143dab9d10f60d1ecea070ec9b5cbd145bfea8f14a628e7dd9cda94"}]}}, @NL80211_ATTR_FRAME={0x161, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xdd}, @broadcast, @broadcast, @initial, {0x1, 0x7}}, 0x484, 0x51, @default, @val, @void, [{0xdd, 0x84, "a4e1d75f5447c42dca6f99d6d6b11330ea26207db18558c0bd6b70d8e806854edb4fe2aebce9de594bf2cd2390a553a6a13ed3a7ed5163278c080f20197742bccc85d7add6c97df96290fcc0859e4bf251ffc0be9fb13379b705b0c155bdeaa090502a4c9c2dd41250d3b7c229d8f67d83c864313489770e012de6b9241db5db10f2acd7"}, {0xdd, 0xb5, "86736f140f341f9a69d5b6e370ac458729aec03b09db67b6ce175809594f77f966f30f7e0cb55893d1f757d011b05fe80e9fba601a4d5cffc298edb4185e4202841c5d125fddf868076de603f6d63b7adbb2a58730ca8e8b732f4af0ecc9ba42d2ccba5d35e599e68f8577acab31047bc39b653a12d5833573ed88fb7b097fca30c118e3fde9b362ea9149d72e964c4e69cb4ed1ba97b2186299f2c9d404426f6305aac885c15812eaf3f7379d3f42277a4f1ba411"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x278}, 0x1, 0x0, 0x0, 0x24008805}, 0x4000)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r14=>0x0)
r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r15, 0x400452c8, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f00000004c0)=ANY=[], 0xb6)
r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48)
close(0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x2, 0x7, 0x6, 0xfffffffffffffff4, 0xfffffffffffffffc}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x68}, 0x94)

923.656219ms ago: executing program 4 (id=3330):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0)
close(0x4) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) (async)
recvmmsg(r2, &(0x7f0000004480), 0x40000c2, 0x12, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x10001, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (rerun: 64)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) (rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0)

712.455219ms ago: executing program 4 (id=3331):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x1000000}, 0x10)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x3002)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYRES16=r6], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FIBMAP(r8, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x0, 0xc3, 0x61, &(0x7f0000000440)="a4c76b79a391510340a4a032d47d29cd8c93b4a5ba61ea7929659638fa2d7082d87971fd9ec8c01846852dbd6305d7444b257390de75cb5c928cf167f7431c058332a728e06f5ddba1eaea085f35c17639e9409baa2dbc214e5d9f5685ed31bf66c70c289099e182b3a5f9a2b788e43cede69bf0829a4afd45b97aa21d5758a9e0940de4d8b77710418bba94fb298172a649d01f37673ce9f5693dbb0e740a379dba842bbd78b2a0059f1cce8726f468541e7d46a51ab0d94731a3a9e92b277f1a7177", &(0x7f0000000540)=""/97, 0x0, 0x0, 0xc3, 0xe4, &(0x7f00000005c0)="aff89e87d5a07f83be128c7b1c46c382e43953d4eb0e0c6e8ad4c15241031908059fca4dee2ff592ba29efe402f003a16cf3346a5ca607d44202004368febb51c6988dd39b0a5e6ee14d06fa05a15361ef8eb761b92dac6fa7d7a72cc251b777601cddf76ae25365e7583b1fb01681d77b3ee92d0fdbadcc3ef131b0ef2074953a15a6be548b4dba4a4818e30e312bd5a42e2d1480ae4b8d1cd56f1b3c3b07e29a3a2b5f759991714631787f29f230a92ec8f70ff69a178120a157bb2d001b1930cd45", &(0x7f0000000840)="e34fa2478e244cda43557d3609a5de277dd8b1ad5eae727581235debed09493415f8603521a53433ddfd608f644327d493f200384fac8c2a6195f2b9cdf439ce0b9ef5a26bc1cf868f943d4620ff7a17032fdd52f4bc0b0aeba98c2e2ca96f88bc291712294accd77d438b47794ab7f7910a08ee21092e370f2e84f153830e56f8102142d867fc70aa93f4e5878fd2b255af0c41f08aada38bb2ddd4617fc923bc6c3071a461cfe259a56a19455bdd15f4c6293519b380d6a86ec1bfc13c068a1d72cc0229211bf46a8e07fdba6d29cd2ede0b4e89bd834106a8fe71bac1c82568ac7896", 0x0, 0x0, 0x10}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00d3b2f23ff762be7100000a000000000000000000000006001d000000000008001e"], 0x2c}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701feffffffffff21c57c0c43674f76e3d2ffff017c00000800018004003680a2bc6e042e93c12ed86870dbd2b515ab5a1d9fd345f9beec088da6741f5d941c27414ca3cbc7405979962761f34263af5994e22f90eea5e60a4af3569b9cad1ca888548979967a298342da7f6a0861157534f71a49341e2ae284604fa3f951094dffd666b808acd8a31eef01ff164a509e60a383b29dea5f7be5d3c7686a8ec0c1caccb9a22008eef2b8297de5aa1273c34ec077602592"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) (async)
recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x1000000}, 0x10) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x3002) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYRES16=r6], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async)
ioctl$FIBMAP(r8, 0x1, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x0, 0xc3, 0x61, &(0x7f0000000440)="a4c76b79a391510340a4a032d47d29cd8c93b4a5ba61ea7929659638fa2d7082d87971fd9ec8c01846852dbd6305d7444b257390de75cb5c928cf167f7431c058332a728e06f5ddba1eaea085f35c17639e9409baa2dbc214e5d9f5685ed31bf66c70c289099e182b3a5f9a2b788e43cede69bf0829a4afd45b97aa21d5758a9e0940de4d8b77710418bba94fb298172a649d01f37673ce9f5693dbb0e740a379dba842bbd78b2a0059f1cce8726f468541e7d46a51ab0d94731a3a9e92b277f1a7177", &(0x7f0000000540)=""/97, 0x0, 0x0, 0xc3, 0xe4, &(0x7f00000005c0)="aff89e87d5a07f83be128c7b1c46c382e43953d4eb0e0c6e8ad4c15241031908059fca4dee2ff592ba29efe402f003a16cf3346a5ca607d44202004368febb51c6988dd39b0a5e6ee14d06fa05a15361ef8eb761b92dac6fa7d7a72cc251b777601cddf76ae25365e7583b1fb01681d77b3ee92d0fdbadcc3ef131b0ef2074953a15a6be548b4dba4a4818e30e312bd5a42e2d1480ae4b8d1cd56f1b3c3b07e29a3a2b5f759991714631787f29f230a92ec8f70ff69a178120a157bb2d001b1930cd45", &(0x7f0000000840)="e34fa2478e244cda43557d3609a5de277dd8b1ad5eae727581235debed09493415f8603521a53433ddfd608f644327d493f200384fac8c2a6195f2b9cdf439ce0b9ef5a26bc1cf868f943d4620ff7a17032fdd52f4bc0b0aeba98c2e2ca96f88bc291712294accd77d438b47794ab7f7910a08ee21092e370f2e84f153830e56f8102142d867fc70aa93f4e5878fd2b255af0c41f08aada38bb2ddd4617fc923bc6c3071a461cfe259a56a19455bdd15f4c6293519b380d6a86ec1bfc13c068a1d72cc0229211bf46a8e07fdba6d29cd2ede0b4e89bd834106a8fe71bac1c82568ac7896", 0x0, 0x0, 0x10}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00d3b2f23ff762be7100000a000000000000000000000006001d000000000008001e"], 0x2c}}, 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701feffffffffff21c57c0c43674f76e3d2ffff017c00000800018004003680a2bc6e042e93c12ed86870dbd2b515ab5a1d9fd345f9beec088da6741f5d941c27414ca3cbc7405979962761f34263af5994e22f90eea5e60a4af3569b9cad1ca888548979967a298342da7f6a0861157534f71a49341e2ae284604fa3f951094dffd666b808acd8a31eef01ff164a509e60a383b29dea5f7be5d3c7686a8ec0c1caccb9a22008eef2b8297de5aa1273c34ec077602592"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) (async)

406.161173ms ago: executing program 4 (id=3332):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000500)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f00000001c0), 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000060000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r2, 0x26, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="041e97"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000)
recvmmsg(r8, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/103, 0x67}], 0x3}, 0xc}], 0x1, 0x40030002, 0x0)
sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

249.748158ms ago: executing program 4 (id=3333):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='./'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendto$inet(r2, 0x0, 0x0, 0x40010, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x4e22, @multicast2}, 0x25, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0xa, 0x4, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000000)=[0xb9, 0x9f])
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='./']) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
sendto$inet(r2, 0x0, 0x0, 0x40010, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x4e22, @multicast2}, 0x25, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0xa, 0x4, 0x3}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000000)=[0xb9, 0x9f]) (async)

79.706756ms ago: executing program 2 (id=3334):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ebf6ffff000000000a00000091119300c7cb4446342ea98a0e261c02d9f80dadb56492451c76c1572d9cae5c2238d7dcf12206628a48aef3d976ff6a22591d27d6d24a905928b669f3f1ea89afd453e77a7af08bb2abca0da4523ada621316ad870b447f4026d2940eecf9a418e394cb5486629347972cd20fe667e952283580c32cd15e0c2b9c952c21f9599fcc20785563011911619f1cdf64297359de4be096a24460ec9e94ed3dde774d550be53cae1ad5a3ccc5845e4db1b71ec8bba0879b5ee06f985019f46ea6853e30a46a0d61ff9b33324cb86bb550f80e861b0929ff9843a31b9e1f43058b06d13af76e8bdc0e0e602373"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000102ff0c00000000000000000a0000003c0001802c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000bb0c0002"], 0x50}}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000102ff0c00000000000000000a0000003c0001802c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000bb0c0002"], 0x50}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x3}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}}, 0x0)

0s ago: executing program 4 (id=3335):
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x240008c0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r2) (async)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c0000001000ffff2bbd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0ae10000221000005400128009000100766c616e00000000440002800600010003000000280004800c0001007d0200000a0100000c000100fbffffff010000000c0001000400000001000100100003800c003900050000000700000008000500", @ANYRES32=r7], 0x7c}, 0x1, 0x0, 0x0, 0x45}, 0x40080)
sendto$inet6(r0, 0x0, 0x0, 0x880, 0x0, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0xffffffff}, 0x10) (async)
bind$tipc(r8, 0x0, 0x0)
close(r8) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
socket$inet(0x2, 0xa, 0x8) (async)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)

kernel console output (not intermixed with test programs):

364.751012][T14646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  365.199733][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'.
[  365.208655][T14692] bond0: option arp_validate: invalid value (39)
[  365.242476][T14694] netlink: 'syz.1.2224': attribute type 12 has an invalid length.
[  365.250334][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'.
[  365.331174][T14694] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.755629][T14698] veth1_vlan: left promiscuous mode
[  365.761762][T14698] veth0_vlan: left promiscuous mode
[  365.768946][T14698] veth0_vlan: entered promiscuous mode
[  365.776946][T14698] veth1_vlan: entered promiscuous mode
[  365.779113][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  365.795864][T14698] 8021q: adding VLAN 0 to HW filter on device 
€Â
[  365.803542][T14698] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  365.804754][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'.
[  365.811829][T14698] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  365.835944][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2222'.
[  365.864041][T14698] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  365.874707][T14698] 8021q: adding VLAN 0 to HW filter on device bond1
[  365.882768][T14698] 8021q: adding VLAN 0 to HW filter on device bond2
[  365.893300][T14698] ip6gretap0: entered promiscuous mode
[  365.912934][T14698] 8021q: adding VLAN 0 to HW filter on device bond3
[  365.921828][T14698] 8021q: adding VLAN 0 to HW filter on device bond4
[  365.937044][T14698] bridge3: port 1(erspan0) entered blocking state
[  365.955029][T14698] bridge3: port 1(erspan0) entered forwarding state
[  365.998562][T14698] virt_wifi0: entered promiscuous mode
[  366.004529][T14698] virt_wifi0: entered allmulticast mode
[  366.026634][T14698] 8021q: adding VLAN 0 to HW filter on device bond5
[  366.035051][T14698] 8021q: adding VLAN 0 to HW filter on device bond6
[  366.134110][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'.
[  366.155150][T14706] vlan1: entered promiscuous mode
[  366.160238][T14706] dummy0: entered promiscuous mode
[  366.220172][ T5722] geneve0: entered promiscuous mode
[  366.288396][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  366.316132][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  366.335299][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  366.340523][T14717] IPVS: set_ctl: invalid protocol: 50 172.30.1.5:20004
[  366.353650][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  366.393078][ T9942] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  366.424280][ T9942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.438804][ T9942] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  366.466830][ T9942] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 55776 - 0
[  366.624895][T14725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.628864][   T12] netdevsim netdevsim3 
€Â: set [0, 0] type 1 family 0 port 8472 - 0
[  366.641870][   T12] netdevsim netdevsim3 
€Â: set [1, 0] type 2 family 0 port 6081 - 0
[  366.650805][   T12] netdevsim netdevsim3 
€Â: set [1, 1] type 2 family 0 port 20000 - 0
[  366.659071][   T12] netdevsim netdevsim3 
€Â: set [1, 2] type 2 family 0 port 55776 - 0
[  366.686225][T14724] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  366.948914][ T9946] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  366.957663][ T9946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.979341][ T9946] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  366.999441][ T9946] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 55776 - 0
[  367.065519][ T9948] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  367.074273][ T9948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.082969][ T9948] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  367.131696][ T9948] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 55776 - 0
[  367.249722][T14763] syz_tun: entered allmulticast mode
[  367.325456][T14762] syz_tun: left allmulticast mode
[  367.419013][T14770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.271101][T14822] netlink: 'syz.3.2261': attribute type 12 has an invalid length.
[  368.496531][T14834] netlink: 'syz.2.2264': attribute type 7 has an invalid length.
[  368.529070][T14834] netlink: 'syz.2.2264': attribute type 8 has an invalid length.
[  368.542549][T14837] openvswitch: netlink: Duplicate or invalid key (type 0).
[  368.583121][T14837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.595689][T14834] tunl0: Caught tx_queue_len zero misconfig
[  368.868238][T14860] netlink: 'syz.0.2272': attribute type 12 has an invalid length.
[  368.877196][T14860] __nla_validate_parse: 13 callbacks suppressed
[  368.877215][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'.
[  369.317154][T14878] netlink: 1696 bytes leftover after parsing attributes in process `syz.0.2277'.
[  369.343553][T14878] netlink: 1696 bytes leftover after parsing attributes in process `syz.0.2277'.
[  369.633967][T14889] netlink: 'syz.2.2280': attribute type 6 has an invalid length.
[  369.665765][T14889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2280'.
[  369.687871][T14889] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2280'.
[  369.725239][T14889] tipc: Invalid UDP bearer configuration
[  369.725296][T14889] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  369.800916][T14900] netlink: 'syz.4.2284': attribute type 16 has an invalid length.
[  369.832554][T14900] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2284'.
[  369.865801][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'.
[  370.047662][T14886] netlink: 'syz.0.2281': attribute type 10 has an invalid length.
[  370.091598][T14910] netlink: 'syz.2.2286': attribute type 12 has an invalid length.
[  370.124585][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'.
[  370.282639][T14912] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2287'.
[  370.381019][T14912] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  370.454442][T14912] bond7 (unregistering): Released all slaves
[  370.585606][T14917] bond8: option updelay: invalid value (18446744073709518847)
[  370.601053][T14917] bond8: option updelay: allowed values 0 - 2147483647
[  370.623868][T14917] bond8 (unregistering): Released all slaves
[  370.956358][T14932] syzkaller0: entered promiscuous mode
[  370.973177][T14932] syzkaller0: entered allmulticast mode
[  370.987906][T14949] ip6tnl0: Caught tx_queue_len zero misconfig
[  371.167488][T14953] netlink: 'syz.2.2298': attribute type 12 has an invalid length.
[  371.195510][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2298'.
[  371.340770][T14958] block nbd1: server does not support multiple connections per device.
[  371.368425][T14958] block nbd1: shutting down sockets
[  371.398184][T14955] netlink: 'syz.4.2299': attribute type 10 has an invalid length.
[  372.256620][T14963] syzkaller0: entered promiscuous mode
[  372.267724][T14963] syzkaller0: entered allmulticast mode
[  372.271221][T14989] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886
[  372.757167][T15009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.882881][T14986] bond0: option arp_all_targets: invalid value (39)
[  374.890754][T14994] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  374.909272][T14994] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  374.909688][T15010] veth0: left allmulticast mode
[  374.920277][T14994] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  374.939873][T15010] veth0: left promiscuous mode
[  374.958829][T15010] bridge0: port 4(veth0) entered disabled state
[  374.981098][T15010] bridge_slave_0: left allmulticast mode
[  374.991220][T15010] bridge_slave_0: left promiscuous mode
[  375.001091][T15010] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.034986][T15010] bridge_slave_1: left allmulticast mode
[  375.047352][T15010] bridge_slave_1: left promiscuous mode
[  375.055795][T15010] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.078151][T15010] bond0: (slave bond_slave_0): Releasing backup interface
[  375.105133][T15010] bond0: (slave bond_slave_1): Releasing backup interface
[  375.107085][T15017] netlink: 'syz.1.2315': attribute type 1 has an invalid length.
[  375.156998][T15010] team0: Port device team_slave_0 removed
[  375.209192][T15010] team0: Port device team_slave_1 removed
[  375.219754][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  375.230150][T15010] batman_adv: batadv0: Removing interface: batadv_slave_0
[  375.239831][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  375.258940][T15010] batman_adv: batadv0: Removing interface: batadv_slave_1
[  375.270069][T15010] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  375.342111][T15021] dvmrp1: tun_chr_ioctl cmd 1074025677
[  375.361990][T15021] dvmrp1: linktype set to 776
[  375.385710][T15014] netlink: 'syz.3.2316': attribute type 10 has an invalid length.
[  375.853550][T15040] netlink: 'syz.3.2324': attribute type 30 has an invalid length.
[  375.969622][ T5637] block nbd1: Receive control failed (result -32)
[  376.005994][T15053] __nla_validate_parse: 7 callbacks suppressed
[  376.006012][T15053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2326'.
[  376.073583][T15049] dummy0: entered allmulticast mode
[  376.087641][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'.
[  376.154060][T15049] dummy0: left allmulticast mode
[  376.236527][T15054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2325'.
[  376.263255][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'.
[  376.310496][T15054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2325'.
[  376.342495][T15063] bond0: option arp_all_targets: invalid value (39)
[  376.388952][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'.
[  376.407633][T15068] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2329'.
[  377.066133][T15092] netlink: 'syz.4.2338': attribute type 1 has an invalid length.
[  377.074975][T15080] netlink: 'syz.1.2334': attribute type 10 has an invalid length.
[  377.123391][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2338'.
[  377.147804][T15092] bridge10: entered promiscuous mode
[  377.173641][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'.
[  377.195643][T15092] bond5: (slave bridge10): making interface the new active one
[  377.228524][T15092] bond5: (slave bridge10): Enslaving as an active interface with an up link
[  377.752684][T15122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2343'.
[  377.821329][T15127] SET target dimension over the limit!
[  378.545466][T15149] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  378.569407][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  378.915288][   T29] audit: type=1804 audit(1785609167.754:7): pid=15167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2356" name="/newroot/457/memory.events" dev="tmpfs" ino=2368 res=1 errno=0
[  379.570315][T15174] netlink: 'syz.4.2357': attribute type 10 has an invalid length.
[  379.808991][T15219] netlink: 'syz.2.2368': attribute type 23 has an invalid length.
[  379.818404][T15219] syzkaller0: entered promiscuous mode
[  379.824166][T15219] syzkaller0: entered allmulticast mode
[  379.886789][T15220] x_tables: duplicate underflow at hook 1
[  380.735820][T15260] syzkaller0: entered promiscuous mode
[  380.748739][T15260] syzkaller0: entered allmulticast mode
[  380.782775][T15260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.834936][T15259] tipc: Resetting bearer <eth:syzkaller0>
[  380.936603][T15267] netlink: 'syz.0.2382': attribute type 13 has an invalid length.
[  380.956051][T15267] netlink: 'syz.0.2382': attribute type 17 has an invalid length.
[  380.965080][T15259] tipc: Disabling bearer <eth:syzkaller0>
[  381.022512][T15256] netlink: 'syz.4.2381': attribute type 10 has an invalid length.
[  381.046913][T15264] pim6reg1: entered promiscuous mode
[  381.060057][T15264] pim6reg1: entered allmulticast mode
[  381.188966][T15267] dummy0: left promiscuous mode
[  381.357957][T15267] vlan2: left promiscuous mode
[  381.364202][T15267] netdevsim netdevsim0 netdevsim3: left promiscuous mode
[  381.373170][T15267] vlan2: left allmulticast mode
[  381.378189][T15267] netdevsim netdevsim0 netdevsim3: left allmulticast mode
[  381.406745][T15267] gretap1: left promiscuous mode
[  381.429913][T15267] 8021q: adding VLAN 0 to HW filter on device bond1
[  381.439876][T15267] 8021q: adding VLAN 0 to HW filter on device bond2
[  381.451273][T15267] 8021q: adding VLAN 0 to HW filter on device bond3
[  381.464552][T15267] batman_adv: batadv0: Interface activated: gretap2
[  381.491548][T15267] 8021q: adding VLAN 0 to HW filter on device bond4
[  381.501097][T15267] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  381.600799][T15278] __nla_validate_parse: 9 callbacks suppressed
[  381.600815][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'.
[  381.859172][ T9946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.874224][ T9946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.904039][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'.
[  381.952482][T15306] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  381.953713][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'.
[  381.982099][T15312] bond0: option arp_all_targets: invalid value (39)
[  382.144836][T15317] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2397'.
[  382.275701][T15318] netlink: 'syz.0.2396': attribute type 10 has an invalid length.
[  382.328714][T15324] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  383.089211][T15345] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2406'.
[  383.119292][T15345] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2406'.
[  383.151766][T15345] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2406'.
[  383.183878][T15345] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2406'.
[  383.222716][T15345] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2406'.
[  383.251295][T15345] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2406'.
[  383.287582][T15352] netlink: 'syz.1.2407': attribute type 1 has an invalid length.
[  383.308834][T15352] netlink: 'syz.1.2407': attribute type 2 has an invalid length.
[  383.868130][T15371] netlink: 'syz.4.2415': attribute type 10 has an invalid length.
[  384.238342][T15399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.405868][T15399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.165302][T15438] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  385.310583][T15442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.390277][T15448] TCP: TCP_TX_DELAY enabled
[  385.601205][ T1664] block nbd0: Possible stuck request ffff888027d0e000: control (read@0,1024B). Runtime 30 seconds
[  385.616254][ T1664] block nbd0: Possible stuck request ffff888027d0e1c0: control (read@1024,1024B). Runtime 30 seconds
[  385.627490][ T1664] block nbd0: Possible stuck request ffff888027d0e380: control (read@2048,1024B). Runtime 30 seconds
[  385.638819][ T1664] block nbd0: Possible stuck request ffff888027d0e540: control (read@3072,1024B). Runtime 30 seconds
[  385.820517][T15462] netlink: 'syz.3.2441': attribute type 1 has an invalid length.
[  386.206137][T15476] netlink: 'syz.0.2442': attribute type 23 has an invalid length.
[  386.634319][T15487] __nla_validate_parse: 35 callbacks suppressed
[  386.634337][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'.
[  387.131052][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'.
[  387.157255][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'.
[  387.177963][T15504] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  387.498129][T15510] bond8 (unregistering): Released all slaves
[  387.744114][T15534] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  387.829863][T15527] syzkaller0: entered promiscuous mode
[  387.859526][T15527] syzkaller0: entered allmulticast mode
[  387.891241][T15537] netlink: 'syz.3.2458': attribute type 4 has an invalid length.
[  388.296673][T15556] syzkaller0: entered promiscuous mode
[  388.318123][T15556] syzkaller0: entered allmulticast mode
[  388.668795][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'.
[  388.682848][T15580] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2467'.
[  388.722847][T15580] NCSI netlink: No device for ifindex 0
[  388.980073][T15594] syzkaller0: entered promiscuous mode
[  388.997660][T15594] syzkaller0: entered allmulticast mode
[  389.039336][T15594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2472'.
[  389.222379][T15609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.239904][T15608] netlink: 'syz.3.2475': attribute type 10 has an invalid length.
[  389.278012][T15616] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2478'.
[  389.300998][T15616] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2478'.
[  389.319370][T15616] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2478'.
[  389.695121][T15633] IPVS: Scheduler module ip_vs_sip not found
[  389.740121][T15637] sctp: [Deprecated]: syz.1.2482 (pid 15637) Use of struct sctp_assoc_value in delayed_ack socket option.
[  389.740121][T15637] Use struct sctp_sack_info instead
[  390.091115][T15650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2486'.
[  390.099418][T15653] netlink: 'syz.0.2487': attribute type 1 has an invalid length.
[  390.145754][T15653] 8021q: adding VLAN 0 to HW filter on device bond8
[  390.202559][T15653] veth13: entered allmulticast mode
[  390.221488][T15653] bond8: (slave veth13): Enslaving as an active interface with an up link
[  390.311427][T15657] bond8 (unregistering): (slave veth13): Releasing backup interface
[  390.347370][T15657] bond8 (unregistering): Released all slaves
[  390.426105][T15664] netlink: 'syz.2.2490': attribute type 1 has an invalid length.
[  390.460724][T15664] 8021q: adding VLAN 0 to HW filter on device bond8
[  390.492896][T15664] bond8: (slave veth5): Enslaving as an active interface with a down link
[  390.625710][T15664] bond8: (slave veth7): Enslaving as an active interface with a down link
[  390.665351][T15666] bond8: entered allmulticast mode
[  390.951518][T15694] batadv_slave_0: Caught tx_queue_len zero misconfig
[  391.233328][T15711] syzkaller0: entered promiscuous mode
[  391.255761][T15711] syzkaller0: entered allmulticast mode
[  391.308006][T15722] netlink: zone id is out of range
[  391.474292][T15730] netlink: 'syz.2.2509': attribute type 1 has an invalid length.
[  391.792772][T15749] __nla_validate_parse: 4 callbacks suppressed
[  391.792792][T15749] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2510'.
[  392.016130][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2515'.
[  392.580695][T15778] netlink: 'syz.3.2521': attribute type 13 has an invalid length.
[  392.820712][T15787] gre0: Caught tx_queue_len zero misconfig
[  392.862211][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'.
[  392.882508][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'.
[  393.166931][T15808] netlink: 'syz.3.2527': attribute type 12 has an invalid length.
[  393.224232][T15808] ip6tnl0: Caught tx_queue_len zero misconfig
[  393.337621][T15816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.382329][T15819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2530'.
[  393.991778][T15849] openvswitch: netlink: Flow actions attr not present in new flow.
[  394.113112][T15853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.312315][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2544'.
[  394.351887][T15866] netlink: 'syz.3.2546': attribute type 2 has an invalid length.
[  394.744936][T15891] netlink: 'syz.0.2552': attribute type 28 has an invalid length.
[  395.225210][T15917] veth0: Caught tx_queue_len zero misconfig
[  395.484638][T15932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.651825][T15941] syzkaller0: entered promiscuous mode
[  395.673031][T15941] syzkaller0: entered allmulticast mode
[  395.681362][T15945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.733198][T15983] netlink: 'syz.2.2568': attribute type 1 has an invalid length.
[  396.941163][T15967] ip6gre2: entered promiscuous mode
[  396.946594][T15967] ip6gre2: entered allmulticast mode
[  397.024487][T15983] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  397.066104][ T9948] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  397.104837][ T5816] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  397.114970][ T9948] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  397.240080][ T5816] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  397.380498][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'.
[  397.439147][ T5756] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  397.676744][T16018] netlink: 'syz.3.2573': attribute type 8 has an invalid length.
[  397.689464][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'.
[  398.038097][T16044] netlink: 'syz.4.2580': attribute type 11 has an invalid length.
[  398.144449][T16049] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  398.204356][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  398.214605][T16049] netlink: 'syz.1.2579': attribute type 2 has an invalid length.
[  398.227256][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  398.235014][T16049] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2579'.
[  398.245897][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  398.259369][T16044] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  398.274786][T16044] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  398.358716][ T1030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.398051][ T1030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.431279][ T1030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.463830][ T1030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.772513][T16069] syzkaller0: entered promiscuous mode
[  398.780756][T16069] syzkaller0: entered allmulticast mode
[  398.801975][T16069] 0: reclassify loop, rule prio 0, protocol 800
[  399.183818][T16073] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  399.213498][T16073] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002
[  399.238244][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'.
[  400.818202][T16056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  401.047611][T16091] syzkaller0: entered promiscuous mode
[  401.055225][T16095] netlink: 'syz.0.2594': attribute type 2 has an invalid length.
[  401.068327][T16091] syzkaller0: entered allmulticast mode
[  401.110960][T16095] : entered promiscuous mode
[  401.344024][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'.
[  401.431577][T16115] netlink: 'syz.0.2596': attribute type 5 has an invalid length.
[  401.438718][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  401.498626][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'.
[  401.556109][T16121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2600'.
[  401.667680][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'.
[  401.721407][T16129] block nbd2: server does not support multiple connections per device.
[  401.773150][T16129] block nbd2: shutting down sockets
[  401.829963][T16118] syzkaller0: entered promiscuous mode
[  401.855455][T16118] syzkaller0: entered allmulticast mode
[  402.005008][T16113] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2593'.
[  402.198909][T16151] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  402.364687][T16159] netlink: 'syz.0.2608': attribute type 1 has an invalid length.
[  402.464618][T16165] xt_TCPMSS: Only works on TCP SYN packets
[  402.506180][T16159] bond8: option mode: invalid value (8)
[  402.527098][T16159] bond8 (unregistering): Released all slaves
[  402.654805][T16177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'.
[  402.681051][T16181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2611'.
[  402.705122][T16182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.825034][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2611'.
[  402.921576][T16170] hsr_slave_0: left promiscuous mode
[  402.944366][T16170] hsr_slave_1: left promiscuous mode
[  402.971520][T16185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2615'.
[  404.043684][T16224] sctp: [Deprecated]: syz.1.2625 (pid 16224) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.043684][T16224] Use struct sctp_sack_info instead
[  404.074700][T16224] sctp: [Deprecated]: syz.1.2625 (pid 16224) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.074700][T16224] Use struct sctp_sack_info instead
[  404.305834][T16229] netlink: 'syz.4.2626': attribute type 12 has an invalid length.
[  406.306254][ T5756] tipc: Node number set to 1509289993
[  406.553953][T16233] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  406.618867][T16235] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  406.971673][T16253] macsec1: entered allmulticast mode
[  406.985287][T16253] veth0_to_bridge: entered allmulticast mode
[  407.005985][T16253] veth0_to_bridge: left allmulticast mode
[  407.196478][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'.
[  407.400028][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'.
[  407.519688][T16267] hsr_slave_1 (unregistering): left promiscuous mode
[  407.826371][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'.
[  407.836817][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'.
[  409.579155][T16238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  409.809889][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'.
[  409.831656][T16309] netlink: 'syz.4.2645': attribute type 3 has an invalid length.
[  409.847054][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'.
[  409.918631][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  409.939161][T16310] bond0: option arp_all_targets: invalid value (39)
[  410.185449][T16325] geneve1: left promiscuous mode
[  410.216821][T16325] vlan3: left promiscuous mode
[  410.232017][T16325] bond3: left promiscuous mode
[  410.250206][T16325] vlan3: left allmulticast mode
[  410.287849][T16325] bond3: left allmulticast mode
[  410.318299][T16325] vxlan1: left promiscuous mode
[  410.334609][T16325] vxlan1: left allmulticast mode
[  410.340273][T16325] bond5: left promiscuous mode
[  410.358962][T16325] bridge8: left promiscuous mode
[  410.990134][T16379] netlink: 'syz.0.2662': attribute type 1 has an invalid length.
[  411.261622][T16389] ip6tnl2: entered allmulticast mode
[  411.421059][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'.
[  411.451001][T16394] bond0: option arp_validate: invalid value (39)
[  411.463678][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2669'.
[  411.487872][T16397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.912192][T16416] x_tables: duplicate underflow at hook 2
[  412.029265][T16416] xt_NFQUEUE: number of total queues is 0
[  412.331704][T16434] netlink: 'syz.3.2677': attribute type 1 has an invalid length.
[  412.511900][T16434] 8021q: adding VLAN 0 to HW filter on device bond8
[  412.669727][T16439] bond0: (slave syz_tun): Releasing backup interface
[  412.862155][T16439] bond8: (slave syz_tun): making interface the new active one
[  412.893888][T16439] bond8: (slave syz_tun): Enslaving as an active interface with an up link
[  412.911911][T16445] bond8: entered promiscuous mode
[  412.917201][T16445] syz_tun: entered promiscuous mode
[  412.923862][T16445] bond8: entered allmulticast mode
[  412.929403][T16445] syz_tun: entered allmulticast mode
[  413.067629][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2682'.
[  413.233898][T16471] syzkaller0: entered promiscuous mode
[  413.247390][T16471] syzkaller0: entered allmulticast mode
[  413.254302][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'.
[  413.272930][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'.
[  413.302982][T16494] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  413.468004][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2688'.
[  413.478283][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2687'.
[  413.504447][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2687'.
[  413.572155][T16498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2686'.
[  413.793341][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2686'.
[  415.684586][ T1664] block nbd0: Possible stuck request ffff888027d0e000: control (read@0,1024B). Runtime 60 seconds
[  415.695663][ T1664] block nbd0: Possible stuck request ffff888027d0e1c0: control (read@1024,1024B). Runtime 60 seconds
[  415.706863][ T1664] block nbd0: Possible stuck request ffff888027d0e380: control (read@2048,1024B). Runtime 60 seconds
[  415.717888][ T1664] block nbd0: Possible stuck request ffff888027d0e540: control (read@3072,1024B). Runtime 60 seconds
[  416.318744][    C0] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96
[  416.318744][    C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82
[  416.351532][T16517] bridge3: port 1(erspan0) entered disabled state
[  416.553074][T16517] tipc: Resetting bearer <eth:batadv0>
[  416.700900][T16517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  416.756645][T16517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  416.833298][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2697'.
[  416.833827][T16544] netlink: 'syz.1.2697': attribute type 3 has an invalid length.
[  416.919304][T16517] geneve3: left promiscuous mode
[  416.940844][T16517] virt_wifi0: left allmulticast mode
[  416.946364][T16517] macsec0: left promiscuous mode
[  416.953702][T16517] macsec0: left allmulticast mode
[  416.996171][T16517] bond8: left promiscuous mode
[  417.003660][T16517] syz_tun: left promiscuous mode
[  417.009217][T16517] bond8: left allmulticast mode
[  417.014129][T16517] syz_tun: left allmulticast mode
[  417.020197][T16525] mac80211_hwsim hwsim6 syzkaller1: entered promiscuous mode
[  417.027828][T16525] mac80211_hwsim hwsim6 syzkaller1: entered allmulticast mode
[  417.104833][   T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.131357][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  417.168103][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  417.207371][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 55776 - 0
[  417.246167][   T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.267633][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  417.298221][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  417.325921][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 55776 - 0
[  417.350129][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2700'.
[  417.390770][T16570] bond0: option arp_validate: invalid value (39)
[  417.410229][T16341] netdevsim netdevsim3 
€Â: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.436296][T16341] netdevsim netdevsim3 
€Â: unset [1, 0] type 2 family 0 port 6081 - 0
[  417.456542][T16341] netdevsim netdevsim3 
€Â: unset [1, 1] type 2 family 0 port 20000 - 0
[  417.505096][T16341] netdevsim netdevsim3 
€Â: unset [1, 2] type 2 family 0 port 55776 - 0
[  417.539941][T16341] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.581591][T16341] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  417.588038][T16588] netlink: 'syz.2.2705': attribute type 1 has an invalid length.
[  417.613978][T16341] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  417.624532][T16341] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 55776 - 0
[  417.826592][T16600] netlink: 'syz.1.2703': attribute type 1 has an invalid length.
[  417.948290][   T29] audit: type=1804 audit(1785609206.784:8): pid=16614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2709" name="/newroot/526/memory.events" dev="tmpfs" ino=2711 res=1 errno=0
[  418.012008][   T29] audit: type=1800 audit(1785609206.784:9): pid=16614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2709" name="memory.events" dev="tmpfs" ino=2711 res=0 errno=0
[  418.097034][   T29] audit: type=1804 audit(1785609206.784:10): pid=16614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2709" name="/newroot/526/memory.events" dev="tmpfs" ino=2711 res=1 errno=0
[  418.200799][T16623] __nla_validate_parse: 3 callbacks suppressed
[  418.200819][T16623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2710'.
[  418.234858][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2710'.
[  419.070212][T16664] netlink: 'syz.1.2720': attribute type 1 has an invalid length.
[  419.162555][T16667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.264584][T16667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.319846][T16678] mac80211_hwsim hwsim6 syzkaller1: left promiscuous mode
[  419.349418][T16678] mac80211_hwsim hwsim6 syzkaller1: left allmulticast mode
[  419.725435][T16694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.123808][T16704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2727'.
[  420.194612][T16704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  420.256081][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2729'.
[  420.873280][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2738'.
[  421.044566][T16758] netlink: 'syz.2.2739': attribute type 21 has an invalid length.
[  421.074902][T16758] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2739'.
[  421.088566][T16758] netlink: 'syz.2.2739': attribute type 5 has an invalid length.
[  421.113166][T16758] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2739'.
[  421.180713][T16761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2737'.
[  421.201864][T16761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2737'.
[  421.212063][T16761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2737'.
[  421.224811][T16761] openvswitch: netlink: Flow key attr not present in new flow.
[  421.382807][T16763] scsi_nl_rcv_msg: discarding partial skb
[  421.743910][T16787] syzkaller0: entered promiscuous mode
[  421.756913][T16787] syzkaller0: entered allmulticast mode
[  422.197651][T16801] netlink: 'syz.0.2749': attribute type 1 has an invalid length.
[  422.202444][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.262706][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.289955][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.310845][T16801] bond8: entered promiscuous mode
[  422.315081][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.326707][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.334420][T16801] bond8: entered allmulticast mode
[  422.339123][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.353178][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.363668][T16801] 8021q: adding VLAN 0 to HW filter on device bond8
[  422.364840][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.382356][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.393901][T16804] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  422.914213][T16829] netlink: 'syz.0.2756': attribute type 13 has an invalid length.
[  423.333567][T16831] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20004
[  423.354048][T16848] __nla_validate_parse: 3 callbacks suppressed
[  423.354066][T16848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2761'.
[  423.453426][ T5756] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  423.463897][T16849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2761'.
[  423.756173][T16859] dummy0: Device is already in use.
[  423.763994][T16862] openvswitch: netlink: IP tunnel dst address not specified
[  423.776611][T16862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.921868][T16873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2769'.
[  424.072248][T16873] block nbd2: server does not support multiple connections per device.
[  424.098094][T16873] block nbd2: shutting down sockets
[  424.165446][T16895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2775'.
[  424.189245][T16872] block nbd3: server does not support multiple connections per device.
[  424.202450][T16872] block nbd3: shutting down sockets
[  424.320109][ T5756] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  424.460953][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2779'.
[  425.043140][T16936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2783'.
[  425.066668][T16936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  425.075464][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2783'.
[  425.176433][T16941] netlink: 'syz.4.2784': attribute type 17 has an invalid length.
[  425.393567][T16949] netlink: 'syz.2.2787': attribute type 2 has an invalid length.
[  425.427445][T16944] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2785'.
[  425.448028][T16944] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2785'.
[  425.476818][T16949] : entered promiscuous mode
[  425.500492][T16945] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2785'.
[  425.529701][T16945] syzkaller0: entered promiscuous mode
[  425.555674][T16945] syzkaller0: entered allmulticast mode
[  425.843415][T16966] netlink: 'syz.1.2792': attribute type 10 has an invalid length.
[  425.888150][T16979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  425.955866][T16980] netlink: 'syz.4.2796': attribute type 3 has an invalid length.
[  426.045553][T16982] netlink: 'syz.1.2797': attribute type 11 has an invalid length.
[  426.289938][T16988] netlink: zone id is out of range
[  426.583322][T16995] tc_dump_action: action bad kind
[  426.820649][T16999] netlink: 'syz.1.2802': attribute type 3 has an invalid length.
[  426.844380][T17000] netlink: 'syz.1.2802': attribute type 3 has an invalid length.
[  426.918899][T17004] mac80211_hwsim hwsim6 syzkaller1: entered promiscuous mode
[  426.932067][T17004] mac80211_hwsim hwsim6 syzkaller1: entered allmulticast mode
[  427.106223][T17017] mac80211_hwsim hwsim6 syzkaller1: left promiscuous mode
[  427.126048][T17017] mac80211_hwsim hwsim6 syzkaller1: left allmulticast mode
[  427.147754][T17018] netlink: 'syz.2.2807': attribute type 12 has an invalid length.
[  427.198661][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  427.602670][T17042] bond0: option arp_validate: invalid value (39)
[  427.946241][T17058] bridge14: entered promiscuous mode
[  428.124069][T17060] openvswitch: netlink: IP tunnel dst address not specified
[  428.414179][T17082] __nla_validate_parse: 12 callbacks suppressed
[  428.414198][T17082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2828'.
[  428.474169][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'.
[  428.490515][T17089] bond0: option arp_validate: invalid value (39)
[  428.524042][T17082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2828'.
[  428.790388][T17101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2830'.
[  428.819624][T17101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2830'.
[  429.108222][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2834'.
[  429.475660][T17138] bond10: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  429.522257][T17138] bond10 (unregistering): Released all slaves
[  429.593811][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'.
[  429.676573][T17154] bond0: option arp_validate: invalid value (39)
[  429.762299][T17157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2842'.
[  430.825668][T17176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  431.094272][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'.
[  431.109875][T17205] bond0: option arp_validate: invalid value (39)
[  431.164201][T17209] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  431.372448][T17221] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2861'.
[  431.477066][T17227] netlink: 'syz.1.2862': attribute type 1 has an invalid length.
[  431.547562][T17221] xt_CT: No such helper "netbios-ns"
[  431.605190][T17234] netlink: 'syz.1.2862': attribute type 10 has an invalid length.
[  431.632665][T17227] 8021q: adding VLAN 0 to HW filter on device bond8
[  431.714490][T17232] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  432.779485][T17285] bond9: entered promiscuous mode
[  432.785555][T17285] 8021q: adding VLAN 0 to HW filter on device bond9
[  432.819836][T17289] lo: Caught tx_queue_len zero misconfig
[  432.852197][T17285] 8021q: adding VLAN 0 to HW filter on device bond9
[  432.859425][T17291] nbd2: detected capacity change from 0 to 127
[  432.866078][T17285] bond9: (slave sit2): The slave device specified does not support setting the MAC address
[  432.877928][T17285] bond9: (slave sit2): Error -95 calling set_mac_address
[  432.895780][ T5637] block nbd2: Receive control failed (result -104)
[  432.919378][T17289] bond9: (slave macvlan2): Error -22 calling dev_set_mtu
[  432.963812][T17301] netlink: 'syz.2.2878': attribute type 21 has an invalid length.
[  433.282409][T17309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  433.415898][T17324] netlink: 'syz.0.2882': attribute type 13 has an invalid length.
[  433.444402][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  433.461976][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  433.470620][T17324] netlink: 'syz.0.2882': attribute type 17 has an invalid length.
[  433.471481][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  433.498214][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  433.510906][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  433.624655][T17314] erspan0: left allmulticast mode
[  433.657761][T17314] erspan0: left promiscuous mode
[  433.682352][T17314] bridge6: port 1(erspan0) entered disabled state
[  433.896853][T17314] bond0: (slave bond_slave_0): Releasing backup interface
[  433.954935][T17314] bond0: (slave bond_slave_1): Releasing backup interface
[  434.012412][T17314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  434.036853][T17314] batman_adv: batadv0: Removing interface: batadv_slave_0
[  434.045397][T17314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.053065][T17314] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.080602][T17314] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  434.090357][T17314] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  434.101937][T17314] bridge8: port 1(netdevsim0) entered disabled state
[  434.116866][T17314] bond0: (slave netdevsim1): Releasing backup interface
[  434.135528][T17314] bond1: (slave geneve2): Releasing active interface
[  434.146220][T17314] bond2: (slave gretap1): Releasing active interface
[  434.166441][T17314] bond4: (slave bridge9): Releasing backup interface
[  434.173604][T17314] bridge9: left promiscuous mode
[  434.178915][T17314] bridge9: left allmulticast mode
[  434.193293][T17314] bond5: (slave bridge10): Releasing backup interface
[  434.216437][T17322] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  434.233791][T17324] gretap0: refused to change device tx_queue_len
[  434.256412][T17322] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  434.256750][T17324] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  434.267913][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  434.303012][T17322] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  434.430019][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  434.569938][T17337] team0: Mode changed to "activebackup"
[  434.617578][T17334] syzkaller0: entered promiscuous mode
[  434.629552][T17335] x_tables: unsorted underflow at hook 2
[  434.636510][T17334] syzkaller0: entered allmulticast mode
[  434.878638][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  434.993909][T17352] __nla_validate_parse: 6 callbacks suppressed
[  434.993927][T17352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2888'.
[  435.110030][T17358] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  435.365176][T17373] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20002
[  435.601269][ T5637] Bluetooth: hci5: command tx timeout
[  435.624011][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'.
[  435.644219][T16339] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode
[  435.869879][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'.
[  436.159188][ T1682] block nbd2: Connection timed out, retrying (0/1 alive)
[  436.168167][ T1682] block nbd2: Connection timed out, retrying (0/1 alive)
[  436.175802][ T1682] block nbd2: Connection timed out, retrying (0/1 alive)
[  436.182987][ T1682] block nbd2: Connection timed out, retrying (0/1 alive)
[  436.190834][ T1682] block nbd2: Dead connection, failed to find a fallback
[  436.202255][ T1682] block nbd2: shutting down sockets
[  436.209203][ T1682] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.219847][ T1682] Buffer I/O error on dev nbd2, logical block 3, async page read
[  436.227687][ T1682] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.237732][ T1682] Buffer I/O error on dev nbd2, logical block 2, async page read
[  436.248706][ T1682] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.253765][T17416] netlink: 'syz.0.2901': attribute type 1 has an invalid length.
[  436.259807][ T1682] Buffer I/O error on dev nbd2, logical block 1, async page read
[  436.274040][ T1682] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.283641][ T1682] Buffer I/O error on dev nbd2, logical block 0, async page read
[  436.295583][ T1682] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  436.305539][ T1682] Buffer I/O error on dev nbd2, logical block 0, async page read
[  436.316507][ T1682] Buffer I/O error on dev nbd2, logical block 1, async page read
[  436.324431][ T1682] Buffer I/O error on dev nbd2, logical block 2, async page read
[  436.332276][ T1682] Buffer I/O error on dev nbd2, logical block 3, async page read
[  436.341688][ T1682] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  436.351548][ T1682] Buffer I/O error on dev nbd2, logical block 0, async page read
[  436.359445][ T1682] Buffer I/O error on dev nbd2, logical block 1, async page read
[  436.369025][ T1682] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  436.378805][ T1682] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  436.392083][ T1664] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  436.402055][ T1664] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  436.413022][T14634] ldm_validate_partition_table(): Disk read failed.
[  436.442772][T14634] Dev nbd2: unable to read RDB block 0
[  436.481726][T14634]  nbd2: unable to read partition table
[  436.535723][T14634] ldm_validate_partition_table(): Disk read failed.
[  436.550603][T14634] Dev nbd2: unable to read RDB block 0
[  436.564386][T14634]  nbd2: unable to read partition table
[  437.678497][ T5637] Bluetooth: hci5: command tx timeout
[  437.865092][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'.
[  437.874406][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'.
[  438.341853][T17439] netlink: 'syz.0.2905': attribute type 1 has an invalid length.
[  438.355351][T17439] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.2905'.
[  439.761804][ T5637] Bluetooth: hci5: command tx timeout
[  440.001303][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  440.923598][T17436] pim6reg: entered allmulticast mode
[  441.034629][T17445] netlink: 'syz.0.2907': attribute type 1 has an invalid length.
[  441.059139][T17445] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2907'.
[  441.099488][T17445] netlink: 'syz.0.2907': attribute type 1 has an invalid length.
[  441.346009][T17323] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.365855][T17323] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.380550][T17323] bridge_slave_0: entered allmulticast mode
[  441.398182][T17323] bridge_slave_0: entered promiscuous mode
[  441.467703][T17470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'.
[  441.490968][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'.
[  441.502496][T17323] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.544855][T17323] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.576387][T17323] bridge_slave_1: entered allmulticast mode
[  441.590509][T17323] bridge_slave_1: entered promiscuous mode
[  441.612677][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'.
[  441.840580][ T5637] Bluetooth: hci5: command tx timeout
[  442.356930][T16339] bond0 (unregistering): Released all slaves
[  442.379188][T16339] bond1 (unregistering): Released all slaves
[  442.401415][T16339] bond2 (unregistering): Released all slaves
[  442.436455][T16339] bond3 (unregistering): Released all slaves
[  442.461414][T16339] bond4 (unregistering): Released all slaves
[  442.500239][T16339] bond5 (unregistering): Released all slaves
[  442.525342][T16339] bond6 (unregistering): Released all slaves
[  442.542105][T16339] bond7 (unregistering): Released all slaves
[  442.556913][T16339] bond8 (unregistering): (slave dummy0): Releasing backup interface
[  442.574545][T16339] bond8 (unregistering): Released all slaves
[  442.596256][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.619719][T17499] veth1_to_batadv: left promiscuous mode
[  442.634482][T17499] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  442.653975][T17499] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  442.693782][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.775676][T17323] team0: Port device team_slave_0 added
[  442.785740][T16339] : left promiscuous mode
[  442.922527][T17323] team0: Port device team_slave_1 added
[  442.989456][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  442.996613][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.027820][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.043074][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.050933][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.077524][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  443.092321][T16339] D†'|o: left promiscuous mode
[  443.193584][T17323] hsr_slave_0: entered promiscuous mode
[  443.201220][T16339] tipc: Left network mode
[  443.220450][T17323] hsr_slave_1: entered promiscuous mode
[  444.421713][T17474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  444.442396][T17506] netlink: 'syz.3.2920': attribute type 10 has an invalid length.
[  444.507716][T17323] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  444.578336][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  444.608157][T17323] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  444.637010][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  444.675785][T17323] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  444.687200][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  444.713187][T17323] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  444.756092][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  444.768524][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2922'.
[  444.787765][T17521] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  444.917411][T16339] IPVS: stop unused estimator thread 0...
[  445.215877][T17323] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.294016][T17323] 8021q: adding VLAN 0 to HW filter on device team0
[  445.322950][ T9949] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.330191][ T9949] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.350719][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2930'.
[  445.386305][T16339] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.393564][T16339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.541543][T17559] tipc: Resetting bearer <eth:ip6gre0>
[  445.706996][T17559] batadv_slave_0: left allmulticast mode
[  445.715606][T17559] veth1_to_batadv: left allmulticast mode
[  445.760633][ T1664] block nbd0: Possible stuck request ffff888027d0e000: control (read@0,1024B). Runtime 90 seconds
[  445.772198][ T1664] block nbd0: Possible stuck request ffff888027d0e1c0: control (read@1024,1024B). Runtime 90 seconds
[  445.784139][ T1664] block nbd0: Possible stuck request ffff888027d0e380: control (read@2048,1024B). Runtime 90 seconds
[  445.795989][ T1664] block nbd0: Possible stuck request ffff888027d0e540: control (read@3072,1024B). Runtime 90 seconds
[  446.006936][T17559] veth3: left allmulticast mode
[  446.028030][T17559] vlan3: left allmulticast mode
[  446.053208][T17559] bridge1: left allmulticast mode
[  446.070856][T17559] veth5: left allmulticast mode
[  446.084381][T17559] ipip1: left promiscuous mode
[  446.139663][T17559] gretap1: left allmulticast mode
[  446.146829][T17577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2934'.
[  446.163627][T17559] geneve5: left promiscuous mode
[  446.181214][T17559] vlan0: left allmulticast mode
[  446.187845][T17577] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  446.207704][T17559] bridge6: left allmulticast mode
[  446.222630][T17559] bond3: left promiscuous mode
[  446.227551][T17559] bond3: left allmulticast mode
[  446.237515][T17559] bond4: left promiscuous mode
[  446.252325][T17559] ipvlan0: left allmulticast mode
[  446.267558][T17559] ipvlan1: left allmulticast mode
[  446.288611][T17559] bond4: left allmulticast mode
[  446.299488][T17559] bridge10: left promiscuous mode
[  446.323143][T17559] ip6gre2: left promiscuous mode
[  446.332638][T17559] ip6gre2: left allmulticast mode
[  446.364195][T17559] ip6tnl2: left allmulticast mode
[  446.401502][T17580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.409244][T16341] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.428669][T17578] syzkaller0: entered promiscuous mode
[  446.438604][T17578] syzkaller0: entered allmulticast mode
[  446.479954][ T9946] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.539134][ T9946] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.593699][T17587] tipc: Resetting bearer <eth:syzkaller0>
[  446.663252][T17587] tipc: Disabling bearer <eth:syzkaller0>
[  446.700918][ T9946] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.023934][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2943'.
[  447.044113][T17634] bond0: option arp_validate: invalid value (39)
[  447.194667][T17623] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2942'.
[  447.221267][T17623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2942'.
[  447.232211][T17642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2945'.
[  447.246117][T17642] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.612637][T17649] bond10: entered promiscuous mode
[  447.621419][T17649] bond10: entered allmulticast mode
[  447.627761][T17649] 8021q: adding VLAN 0 to HW filter on device bond10
[  447.805127][T17661] ip6tnl0: Caught tx_queue_len zero misconfig
[  448.097513][T17679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2951'.
[  448.136939][T17323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.218059][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'.
[  448.481789][T17695] netlink: 'syz.3.2956': attribute type 21 has an invalid length.
[  448.543337][T17697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2956'.
[  448.563791][T17683] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.739865][T17695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2956'.
[  448.768793][T17695] netlink: 'syz.3.2956': attribute type 1 has an invalid length.
[  448.943319][T17323] veth0_vlan: entered promiscuous mode
[  448.955803][T17711] netlink: 'syz.4.2958': attribute type 6 has an invalid length.
[  449.455554][T17323] veth1_vlan: entered promiscuous mode
[  449.500213][T17720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2959'.
[  449.521709][T17720] sctp: [Deprecated]: syz.3.2959 (pid 17720) Use of struct sctp_assoc_value in delayed_ack socket option.
[  449.521709][T17720] Use struct sctp_sack_info instead
[  449.705824][T17323] veth0_macvtap: entered promiscuous mode
[  449.717125][T17323] veth1_macvtap: entered promiscuous mode
[  449.740743][T17323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.765459][T17323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.902305][T17737] netlink: 'syz.3.2964': attribute type 1 has an invalid length.
[  450.133306][T17737] bond11: entered promiscuous mode
[  450.141016][T17737] 8021q: adding VLAN 0 to HW filter on device bond11
[  450.196752][T17756] netlink: 'syz.0.2968': attribute type 7 has an invalid length.
[  450.217695][T17748] 8021q: adding VLAN 0 to HW filter on device bond11
[  450.242612][T17748] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  450.255122][T17748] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  450.272186][T17748] bond11: (slave ip6gre1): making interface the new active one
[  450.294867][T17748] ip6gre1: entered promiscuous mode
[  450.305399][T17748] bond11: (slave ip6gre1): Enslaving as an active interface with an up link
[  450.489240][ T1023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.589254][ T9946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.615585][ T9946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.676380][ T9946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.694318][ T9949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.717181][ T9946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.878899][ T9949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.905856][ T9949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.970985][T17775] bond3: (slave lo): Releasing backup interface
[  450.988350][T17775] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  451.023793][T17775] erspan0: left allmulticast mode
[  451.048075][T17775] erspan0: left promiscuous mode
[  451.071024][T17775] bridge3: port 1(erspan0) entered disabled state
[  451.089997][T17760] netlink: 'syz.2.2969': attribute type 10 has an invalid length.
[  451.245506][T17775] bond8: (slave syz_tun): Releasing active interface
[  451.281497][T17775] bond0: (slave bond_slave_0): Releasing backup interface
[  451.306522][T17775] bond0: (slave bond_slave_1): Releasing backup interface
[  451.334709][T17775] team0: Port device team_slave_0 removed
[  451.344421][T17775] team0: Port device team_slave_1 removed
[  451.351536][T17775] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.376566][T17775] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.421039][T17775] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  451.475688][T17783] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  451.746440][T17806] syzkaller1: entered promiscuous mode
[  451.752330][T17806] syzkaller1: entered allmulticast mode
[  451.763634][T17806] syzkaller1: left promiscuous mode
[  451.775051][T17806] syzkaller1: left allmulticast mode
[  451.997398][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  452.017024][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  452.026773][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  452.042059][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  452.053781][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  452.128811][T17812] __nla_validate_parse: 3 callbacks suppressed
[  452.128829][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2982'.
[  452.147555][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'.
[  452.185216][T17818] tipc: Started in network mode
[  452.191695][T17818] tipc: Node identity fe880000000000000000000000000102, cluster identity 4711
[  452.204797][T17818] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  452.679123][T17840] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2991'.
[  452.684969][T17841] netlink: 'syz.2.2992': attribute type 21 has an invalid length.
[  452.717258][T17841] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2992'.
[  452.760728][T17838] pimreg: entered allmulticast mode
[  452.782034][T17841] netlink: 'syz.2.2992': attribute type 4 has an invalid length.
[  452.825041][T17841] netlink: 'syz.2.2992': attribute type 3 has an invalid length.
[  452.867711][T17841] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2992'.
[  452.917938][T17833] pimreg: left allmulticast mode
[  453.305316][T17865] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2995'.
[  454.159511][ T5637] Bluetooth: hci4: command tx timeout
[  454.186724][T16339] tipc: Disabling bearer <eth:ip6gre0>
[  454.735801][T16339] bond0 (unregistering): Released all slaves
[  454.746332][T16339] bond1 (unregistering): Released all slaves
[  454.760944][T16339] bond2 (unregistering): Released all slaves
[  454.774750][T16339] bond3 (unregistering): Released all slaves
[  454.851317][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3003'.
[  454.865867][T16339] bond4 (unregistering): Released all slaves
[  454.884770][T16339] bond5 (unregistering): Released all slaves
[  454.905984][T16339] bond6 (unregistering): Released all slaves
[  454.919622][T16339] bond7 (unregistering): Released all slaves
[  454.958247][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1
[  455.141477][T17811] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.178847][T17811] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.203276][T17811] bridge_slave_0: entered allmulticast mode
[  455.214240][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'.
[  455.221514][T17811] bridge_slave_0: entered promiscuous mode
[  455.295060][T17922] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  455.343174][T16339] 
: left promiscuous mode
[  455.562536][T17811] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.589830][T17811] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.623106][T17811] bridge_slave_1: entered allmulticast mode
[  455.654518][T17811] bridge_slave_1: entered promiscuous mode
[  455.739094][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'.
[  455.781038][T16339] tipc: Left network mode
[  455.941169][T17949] syzkaller0: entered promiscuous mode
[  455.958556][T17949] syzkaller0: entered allmulticast mode
[  456.069362][T17811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.186353][T17961] netlink: zone id is out of range
[  456.192188][T17961] netlink: zone id is out of range
[  456.249065][ T5637] Bluetooth: hci4: command tx timeout
[  456.745465][T17980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3016'.
[  458.328993][ T5637] Bluetooth: hci4: command tx timeout
[  458.999418][T17811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.195932][T17811] team0: Port device team_slave_0 added
[  459.243263][T17988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'.
[  459.316863][T17811] team0: Port device team_slave_1 added
[  459.329996][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3020'.
[  459.487298][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'.
[  459.596064][T17811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.624758][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.717725][T17811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.745010][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'.
[  459.796168][T17811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.803879][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.879817][T17811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.284028][T17811] hsr_slave_0: entered promiscuous mode
[  460.312318][T17811] hsr_slave_1: entered promiscuous mode
[  460.336213][T17811] debugfs: 'hsr0' already exists in 'hsr'
[  460.347041][T17811] Cannot create hsr debugfs directory
[  460.357707][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[  460.399850][ T5637] Bluetooth: hci4: command tx timeout
[  460.596230][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3032'.
[  461.191969][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'.
[  461.581109][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'.
[  461.747384][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3
[  461.935337][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3038'.
[  462.374930][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'.
[  462.414822][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'.
[  462.517620][T16339] IPVS: stop unused estimator thread 0...
[  462.631214][T18117] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  463.075590][T18138] FAULT_INJECTION: forcing a failure.
[  463.075590][T18138] name failslab, interval 1, probability 0, space 0, times 0
[  463.125846][T18138] CPU: 1 UID: 0 PID: 18138 Comm: syz.1.3050 Not tainted syzkaller #0 PREEMPT(full) 
[  463.125874][T18138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  463.125897][T18138] Call Trace:
[  463.125904][T18138]  <TASK>
[  463.125912][T18138]  dump_stack_lvl+0xe8/0x150
[  463.125980][T18138]  should_fail_ex+0x40c/0x560
[  463.126031][T18138]  should_failslab+0xa8/0x100
[  463.126073][T18138]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  463.126101][T18138]  ? skb_clone+0x212/0x3a0
[  463.126155][T18138]  ? skb_clone+0x212/0x3a0
[  463.126181][T18138]  skb_clone+0x212/0x3a0
[  463.126208][T18138]  __netlink_deliver_tap+0x413/0x860
[  463.126350][T18138]  ? netlink_deliver_tap+0x2e/0x1b0
[  463.126377][T18138]  netlink_deliver_tap+0x19c/0x1b0
[  463.126402][T18138]  netlink_unicast+0x77f/0x940
[  463.126432][T18138]  netlink_sendmsg+0x813/0xb40
[  463.126463][T18138]  ? __pfx_netlink_sendmsg+0x10/0x10
[  463.126489][T18138]  ? aa_sock_msg_perm+0xf1/0x1b0
[  463.126533][T18138]  ? __pfx_netlink_sendmsg+0x10/0x10
[  463.126553][T18138]  sock_sendmsg_nosec+0x13a/0x180
[  463.126622][T18138]  ____sys_sendmsg+0x54e/0x850
[  463.126651][T18138]  ? __pfx_____sys_sendmsg+0x10/0x10
[  463.126682][T18138]  ? import_iovec+0x73/0xa0
[  463.126737][T18138]  ___sys_sendmsg+0x2a5/0x360
[  463.126760][T18138]  ? __lock_acquire+0x683/0x2cf0
[  463.126810][T18138]  ? __pfx____sys_sendmsg+0x10/0x10
[  463.126868][T18138]  ? __fget_files+0x2a/0x420
[  463.126900][T18138]  ? __fget_files+0x3a2/0x420
[  463.126935][T18138]  __x64_sys_sendmsg+0x1b1/0x290
[  463.126962][T18138]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  463.127004][T18138]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.127038][T18138]  do_syscall_64+0x174/0x580
[  463.127086][T18138]  ? trace_irq_disable+0x3b/0x140
[  463.127130][T18138]  ? clear_bhb_loop+0x40/0x90
[  463.127153][T18138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.127172][T18138] RIP: 0033:0x7f46f239e019
[  463.127191][T18138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.127208][T18138] RSP: 002b:00007f46f32d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  463.127229][T18138] RAX: ffffffffffffffda RBX: 00007f46f2625fa0 RCX: 00007f46f239e019
[  463.127243][T18138] RDX: 000000002000c8c0 RSI: 0000200000000000 RDI: 0000000000000003
[  463.127256][T18138] RBP: 00007f46f32d1090 R08: 0000000000000000 R09: 0000000000000000
[  463.127268][T18138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  463.127279][T18138] R13: 00007f46f2626038 R14: 00007f46f2625fa0 R15: 00007fffe66d22a8
[  463.127317][T18138]  </TASK>
[  463.593199][ T5632] block nbd3: Receive control failed (result -32)
[  463.601148][ T5637] block nbd3: Receive control failed (result -32)
[  463.819597][T17811] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  463.830731][T17811] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  463.842920][T17811] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  463.855614][T17811] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  463.865285][T17811] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  463.875753][T17811] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  463.884415][T17811] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  463.897305][T17811] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  464.002092][T17811] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.025357][T17811] 8021q: adding VLAN 0 to HW filter on device team0
[  464.045067][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.052325][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.086843][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.094060][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.131473][T17811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  464.587205][T17811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.884820][T17811] veth0_vlan: entered promiscuous mode
[  464.900966][T17811] veth1_vlan: entered promiscuous mode
[  464.940850][T17811] veth0_macvtap: entered promiscuous mode
[  464.953124][T17811] veth1_macvtap: entered promiscuous mode
[  464.983770][T17811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.002282][T17811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.028716][ T1023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.060056][ T9943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.080384][ T9943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.107451][ T9943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.177702][ T9946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.186775][ T9946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.227828][ T9946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.238782][ T9946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.213330][ T4988] udevd[4988]: worker [5622] /devices/virtual/block/nbd0 is taking a long time
[  475.843299][ T1664] block nbd0: Possible stuck request ffff888027d0e000: control (read@0,1024B). Runtime 120 seconds
[  475.854267][ T1664] block nbd0: Possible stuck request ffff888027d0e1c0: control (read@1024,1024B). Runtime 120 seconds
[  475.865479][ T1664] block nbd0: Possible stuck request ffff888027d0e380: control (read@2048,1024B). Runtime 120 seconds
[  475.877723][ T1664] block nbd0: Possible stuck request ffff888027d0e540: control (read@3072,1024B). Runtime 120 seconds
[  498.196456][T18275] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  498.219148][T18275] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  498.537862][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  498.558743][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  498.573401][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  498.585007][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  498.590697][T18298] __nla_validate_parse: 8 callbacks suppressed
[  498.590732][T18298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3060'.
[  498.623118][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  498.649016][T18298] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode
[  498.767847][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'.
[  498.776888][T18307] FAULT_INJECTION: forcing a failure.
[  498.776888][T18307] name failslab, interval 1, probability 0, space 0, times 0
[  498.796429][T18307] CPU: 1 UID: 0 PID: 18307 Comm: syz.3.3063 Not tainted syzkaller #0 PREEMPT(full) 
[  498.796456][T18307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  498.796466][T18307] Call Trace:
[  498.796474][T18307]  <TASK>
[  498.796482][T18307]  dump_stack_lvl+0xe8/0x150
[  498.796517][T18307]  should_fail_ex+0x40c/0x560
[  498.796545][T18307]  ? alloc_netdev_mqs+0xa9/0x12b0
[  498.796700][T18307]  should_failslab+0xa8/0x100
[  498.796730][T18307]  __kvmalloc_node_noprof+0x176/0x860
[  498.796763][T18307]  ? alloc_netdev_mqs+0xa9/0x12b0
[  498.796795][T18307]  alloc_netdev_mqs+0xa9/0x12b0
[  498.796820][T18307]  ? __pfx_snprintf+0x10/0x10
[  498.796876][T18307]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  498.796980][T18307]  rtnl_create_link+0x321/0xd70
[  498.797072][T18307]  rtnl_newlink_create+0x258/0x7b0
[  498.797102][T18307]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  498.797130][T18307]  ? __pfx___mutex_lock+0x10/0x10
[  498.797222][T18307]  ? ns_capable+0x89/0xe0
[  498.797266][T18307]  rtnl_newlink+0x166d/0x1c30
[  498.797301][T18307]  ? __pfx_rtnl_newlink+0x10/0x10
[  498.797321][T18307]  ? __lock_acquire+0x683/0x2cf0
[  498.797354][T18307]  ? __lock_acquire+0x683/0x2cf0
[  498.797379][T18307]  ? __lock_acquire+0x683/0x2cf0
[  498.797411][T18307]  ? unwind_next_frame+0x8f/0x2550
[  498.797445][T18307]  ? is_bpf_text_address+0x26/0x2b0
[  498.797480][T18307]  ? is_bpf_text_address+0x26/0x2b0
[  498.797509][T18307]  ? __lock_acquire+0x683/0x2cf0
[  498.797536][T18307]  ? kernel_text_address+0xa5/0xe0
[  498.797562][T18307]  ? __kernel_text_address+0xd/0x30
[  498.797579][T18307]  ? unwind_get_return_address+0x4d/0x90
[  498.797598][T18307]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  498.797631][T18307]  ? arch_stack_walk+0xfb/0x150
[  498.797669][T18307]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  498.797715][T18307]  ? __pfx_rtnl_newlink+0x10/0x10
[  498.797734][T18307]  rtnetlink_rcv_msg+0x802/0xc00
[  498.797753][T18307]  ? netlink_sendmsg+0x5d4/0xb40
[  498.797783][T18307]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  498.797807][T18307]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  498.797829][T18307]  ? __lock_acquire+0x683/0x2cf0
[  498.797868][T18307]  netlink_rcv_skb+0x226/0x4a0
[  498.797893][T18307]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  498.797915][T18307]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  498.797952][T18307]  ? netlink_deliver_tap+0x2e/0x1b0
[  498.797976][T18307]  ? netlink_deliver_tap+0x2e/0x1b0
[  498.798005][T18307]  netlink_unicast+0x7bb/0x940
[  498.798037][T18307]  netlink_sendmsg+0x813/0xb40
[  498.798071][T18307]  ? __pfx_netlink_sendmsg+0x10/0x10
[  498.798099][T18307]  ? aa_sock_msg_perm+0xf1/0x1b0
[  498.798128][T18307]  ? __pfx_netlink_sendmsg+0x10/0x10
[  498.798151][T18307]  sock_sendmsg_nosec+0x13a/0x180
[  498.798182][T18307]  ____sys_sendmsg+0x54e/0x850
[  498.798209][T18307]  ? __pfx_____sys_sendmsg+0x10/0x10
[  498.798242][T18307]  ? import_iovec+0x73/0xa0
[  498.798263][T18307]  ___sys_sendmsg+0x2a5/0x360
[  498.798285][T18307]  ? __lock_acquire+0x683/0x2cf0
[  498.798315][T18307]  ? __pfx____sys_sendmsg+0x10/0x10
[  498.798373][T18307]  ? __fget_files+0x2a/0x420
[  498.798396][T18307]  ? __fget_files+0x3a2/0x420
[  498.798427][T18307]  __x64_sys_sendmsg+0x1b1/0x290
[  498.798452][T18307]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  498.798512][T18307]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.798531][T18307]  do_syscall_64+0x174/0x580
[  498.798553][T18307]  ? trace_irq_disable+0x3b/0x140
[  498.798575][T18307]  ? clear_bhb_loop+0x40/0x90
[  498.798596][T18307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.798614][T18307] RIP: 0033:0x7fece2f9e019
[  498.798633][T18307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.798649][T18307] RSP: 002b:00007fece3d93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  498.798669][T18307] RAX: ffffffffffffffda RBX: 00007fece3225fa0 RCX: 00007fece2f9e019
[  498.798690][T18307] RDX: 000000002000c8c0 RSI: 0000200000000000 RDI: 0000000000000003
[  498.798703][T18307] RBP: 00007fece3d93090 R08: 0000000000000000 R09: 0000000000000000
[  498.798714][T18307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  498.798725][T18307] R13: 00007fece3226038 R14: 00007fece3225fa0 R15: 00007ffccfa9d948
[  498.798756][T18307]  </TASK>
[  499.295137][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'.
[  499.440952][T18319] netlink: 'syz.3.3066': attribute type 1 has an invalid length.
[  499.554203][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'.
[  499.565597][T18329] netlink: 'syz.3.3066': attribute type 30 has an invalid length.
[  499.673957][T18330] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  499.689833][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'.
[  499.899089][T18345] netlink: 'syz.1.3073': attribute type 1 has an invalid length.
[  500.029909][T18353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3073'.
[  500.214729][T18347] bond1: (slave geneve2): making interface the new active one
[  500.223293][T18347] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  500.259097][ T9943] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  500.280196][T18353] 8021q: adding VLAN 0 to HW filter on device bond1
[  500.474667][T18364] netlink: 'syz.3.3076': attribute type 1 has an invalid length.
[  500.567650][T18364] 8021q: adding VLAN 0 to HW filter on device bond12
[  500.646530][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3077'.
[  500.718550][ T5632] Bluetooth: hci2: command tx timeout
[  500.766477][T18370] bond12: (slave gretap1): Enslaving as a backup interface with an up link
[  500.779780][ T9949] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  500.780110][ T9943] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  500.840339][T18364] bond12 (unregistering): (slave gretap1): Removing an active aggregator
[  500.867437][T18364] bond12 (unregistering): (slave gretap1): Releasing backup interface
[  500.890382][T18364] bond12 (unregistering): Released all slaves
[  501.019240][T16341] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  501.034201][T16341] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  501.196871][T18394] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  501.204590][T18394] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  501.268344][T18294] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.275825][T18294] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.285896][T18294] bridge_slave_0: entered allmulticast mode
[  501.295094][T18294] bridge_slave_0: entered promiscuous mode
[  501.306104][T18294] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.313478][T18294] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.321860][T18294] bridge_slave_1: entered allmulticast mode
[  501.331810][T18294] bridge_slave_1: entered promiscuous mode
[  501.383955][T18294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.394745][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3086'.
[  501.406513][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3086'.
[  501.417189][T18294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.442134][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  501.518047][T18294] team0: Port device team_slave_0 added
[  501.524556][T18408] team0: entered promiscuous mode
[  501.530275][T18408] team0: entered allmulticast mode
[  501.536003][T18408] 8021q: adding VLAN 0 to HW filter on device team0
[  501.543694][T18408] team0: Cannot enslave team device to itself
[  501.560407][T18294] team0: Port device team_slave_1 added
[  501.637977][T18294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.653857][T18294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.705010][T18294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.726876][T18294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.734492][T18294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.809114][T18294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.875087][T18421] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3093'.
[  501.963190][T18294] hsr_slave_0: entered promiscuous mode
[  501.969904][T18294] hsr_slave_1: entered promiscuous mode
[  501.976355][T18294] debugfs: 'hsr0' already exists in 'hsr'
[  501.982264][T18294] Cannot create hsr debugfs directory
[  502.289272][T18439] geneve1: Caught tx_queue_len zero misconfig
[  502.300456][T18431] syzkaller1: entered promiscuous mode
[  502.306016][T18431] syzkaller1: entered allmulticast mode
[  502.810922][ T5632] Bluetooth: hci2: command tx timeout
[  502.826284][T18294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.839215][T18294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.850369][T18294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58569 - 0
[  502.918241][T18468] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  502.927322][T18468] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  502.937096][T18468] bond1: entered allmulticast mode
[  503.050009][T18294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.088744][T18294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.107220][T18294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58569 - 0
[  503.180719][T18477] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.250871][T18477] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.322892][T18294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.339615][T18294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.350461][T18294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58569 - 0
[  503.529006][T18294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.547380][T18294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.564464][T18294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58569 - 0
[  503.596885][T18480] syzkaller0: entered promiscuous mode
[  503.602544][T18480] syzkaller0: entered allmulticast mode
[  503.941393][T18294] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  503.969800][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  503.977815][T18294] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  503.992731][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  504.002416][T18294] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  504.017003][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  504.031374][T18294] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  504.041710][T18294] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  504.130531][T18509] syzkaller0: entered promiscuous mode
[  504.136233][T18509] syzkaller0: entered allmulticast mode
[  504.253225][T18512] __nla_validate_parse: 3 callbacks suppressed
[  504.253243][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'.
[  504.283290][T18294] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.390303][T18294] 8021q: adding VLAN 0 to HW filter on device team0
[  504.421897][ T9949] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.429133][ T9949] bridge0: port 1(bridge_slave_0) entered forwarding state
[  504.494180][ T9949] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.501419][ T9949] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.746813][T18529] syzkaller0: entered promiscuous mode
[  504.766308][T18529] syzkaller0: entered allmulticast mode
[  504.841129][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3124'.
[  504.879128][ T5632] Bluetooth: hci2: command tx timeout
[  504.990510][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3121'.
[  505.085937][T18536] openvswitch: netlink: Multiple metadata blocks provided
[  505.192104][T18548] vlan0: entered promiscuous mode
[  505.533751][T18559] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  505.635155][T18294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.734810][T18570] block nbd2: NBD_DISCONNECT
[  505.755232][T18570] block nbd2: Send disconnect failed -32
[  505.833635][T18294] veth0_vlan: entered promiscuous mode
[  505.871376][T18572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3134'.
[  505.884573][T18294] veth1_vlan: entered promiscuous mode
[  505.922304][ T1664] block nbd0: Possible stuck request ffff888027d0e000: control (read@0,1024B). Runtime 150 seconds
[  505.935495][ T1664] block nbd0: Possible stuck request ffff888027d0e1c0: control (read@1024,1024B). Runtime 150 seconds
[  505.948707][ T1664] block nbd0: Possible stuck request ffff888027d0e380: control (read@2048,1024B). Runtime 150 seconds
[  505.960389][ T1664] block nbd0: Possible stuck request ffff888027d0e540: control (read@3072,1024B). Runtime 150 seconds
[  506.071400][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'.
[  506.113639][T18294] veth0_macvtap: entered promiscuous mode
[  506.136997][T18589] FAULT_INJECTION: forcing a failure.
[  506.136997][T18589] name failslab, interval 1, probability 0, space 0, times 0
[  506.172460][T18589] CPU: 0 UID: 0 PID: 18589 Comm: syz.2.3138 Not tainted syzkaller #0 PREEMPT(full) 
[  506.172489][T18589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  506.172500][T18589] Call Trace:
[  506.172508][T18589]  <TASK>
[  506.172516][T18589]  dump_stack_lvl+0xe8/0x150
[  506.172550][T18589]  should_fail_ex+0x40c/0x560
[  506.172581][T18589]  should_failslab+0xa8/0x100
[  506.172611][T18589]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  506.172637][T18589]  ? security_inode_alloc+0x39/0x310
[  506.172760][T18589]  ? security_inode_alloc+0x39/0x310
[  506.172795][T18589]  security_inode_alloc+0x39/0x310
[  506.172818][T18589]  inode_init_always_gfp+0x97e/0xd30
[  506.172843][T18589]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  506.172916][T18589]  alloc_inode+0x82/0x1b0
[  506.172942][T18589]  new_inode+0x1f/0x170
[  506.172972][T18589]  __debugfs_create_file+0xb8/0x400
[  506.172998][T18589]  debugfs_create_file_full+0x3f/0x60
[  506.173021][T18589]  ref_tracker_dir_debugfs+0x197/0x360
[  506.173055][T18589]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  506.173102][T18589]  ? __kvmalloc_node_noprof+0x55a/0x860
[  506.173130][T18589]  ? __kvmalloc_node_noprof+0x35c/0x860
[  506.173158][T18589]  ? __raw_spin_lock_init+0x45/0x100
[  506.173182][T18589]  alloc_netdev_mqs+0x275/0x12b0
[  506.173209][T18589]  ? __pfx_snprintf+0x10/0x10
[  506.173232][T18589]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  506.173264][T18589]  rtnl_create_link+0x321/0xd70
[  506.173297][T18589]  rtnl_newlink_create+0x258/0x7b0
[  506.173327][T18589]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  506.173351][T18589]  ? __pfx___mutex_lock+0x10/0x10
[  506.173388][T18589]  ? ns_capable+0x89/0xe0
[  506.173415][T18589]  rtnl_newlink+0x166d/0x1c30
[  506.173453][T18589]  ? __pfx_rtnl_newlink+0x10/0x10
[  506.173474][T18589]  ? __lock_acquire+0x683/0x2cf0
[  506.173506][T18589]  ? __lock_acquire+0x683/0x2cf0
[  506.173547][T18589]  ? unwind_next_frame+0x8f/0x2550
[  506.173577][T18589]  ? is_bpf_text_address+0x26/0x2b0
[  506.173616][T18589]  ? is_bpf_text_address+0x26/0x2b0
[  506.173649][T18589]  ? __lock_acquire+0x683/0x2cf0
[  506.173678][T18589]  ? kernel_text_address+0xa5/0xe0
[  506.173699][T18589]  ? __kernel_text_address+0xd/0x30
[  506.173717][T18589]  ? unwind_get_return_address+0x4d/0x90
[  506.173736][T18589]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  506.173761][T18589]  ? arch_stack_walk+0xfb/0x150
[  506.173798][T18589]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  506.173836][T18589]  ? __pfx_rtnl_newlink+0x10/0x10
[  506.173857][T18589]  rtnetlink_rcv_msg+0x802/0xc00
[  506.173877][T18589]  ? netlink_sendmsg+0x5d4/0xb40
[  506.173905][T18589]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  506.173926][T18589]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  506.173949][T18589]  ? __lock_acquire+0x683/0x2cf0
[  506.173988][T18589]  netlink_rcv_skb+0x226/0x4a0
[  506.174013][T18589]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  506.174037][T18589]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  506.174074][T18589]  ? netlink_deliver_tap+0x2e/0x1b0
[  506.174098][T18589]  ? netlink_deliver_tap+0x2e/0x1b0
[  506.174127][T18589]  netlink_unicast+0x7bb/0x940
[  506.174162][T18589]  netlink_sendmsg+0x813/0xb40
[  506.174195][T18589]  ? __pfx_netlink_sendmsg+0x10/0x10
[  506.174223][T18589]  ? aa_sock_msg_perm+0xf1/0x1b0
[  506.174249][T18589]  ? __pfx_netlink_sendmsg+0x10/0x10
[  506.174269][T18589]  sock_sendmsg_nosec+0x13a/0x180
[  506.174298][T18589]  ____sys_sendmsg+0x54e/0x850
[  506.174324][T18589]  ? __pfx_____sys_sendmsg+0x10/0x10
[  506.174354][T18589]  ? import_iovec+0x73/0xa0
[  506.174374][T18589]  ___sys_sendmsg+0x2a5/0x360
[  506.174396][T18589]  ? __lock_acquire+0x683/0x2cf0
[  506.174425][T18589]  ? __pfx____sys_sendmsg+0x10/0x10
[  506.174485][T18589]  ? __fget_files+0x2a/0x420
[  506.174506][T18589]  ? __fget_files+0x3a2/0x420
[  506.174540][T18589]  __x64_sys_sendmsg+0x1b1/0x290
[  506.174567][T18589]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  506.174610][T18589]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.174631][T18589]  do_syscall_64+0x174/0x580
[  506.174659][T18589]  ? clear_bhb_loop+0x40/0x90
[  506.174681][T18589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.174698][T18589] RIP: 0033:0x7f1993d9e019
[  506.174717][T18589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.174731][T18589] RSP: 002b:00007f1994c65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  506.174751][T18589] RAX: ffffffffffffffda RBX: 00007f1994025fa0 RCX: 00007f1993d9e019
[  506.174765][T18589] RDX: 000000002000c8c0 RSI: 0000200000000000 RDI: 0000000000000003
[  506.174776][T18589] RBP: 00007f1994c65090 R08: 0000000000000000 R09: 0000000000000000
[  506.174802][T18589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.174811][T18589] R13: 00007f1994026038 R14: 00007f1994025fa0 R15: 00007ffddb8e16d8
[  506.174841][T18589]  </TASK>
[  506.177209][T18589] debugfs: out of free dentries, can not create file 'netdev@ffff888052246700'
[  506.805613][T18294] veth1_macvtap: entered promiscuous mode
[  506.881907][T18294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.904827][T18616] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3142'.
[  506.920806][T18294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.958536][ T5632] Bluetooth: hci2: command tx timeout
[  506.980146][T16339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.022791][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.111927][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.193868][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  507.237552][T18629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3146'.
[  507.250476][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.260538][ T9946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.274820][ T9946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.595260][T18649] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  507.609870][T18649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.783405][T18656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3154'.
[  507.824499][   T29] audit: type=1800 audit(1785609296.664:11): pid=18658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3155" name=680B20 dev="tmpfs" ino=261 res=0 errno=0
[  507.930918][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'.
[  508.039658][T18630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  508.180373][  T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.201628][  T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.311228][T18678] netlink: 'syz.4.3162': attribute type 13 has an invalid length.
[  508.320635][T18678] netlink: 'syz.4.3162': attribute type 17 has an invalid length.
[  508.545272][T18693] Bluetooth: MGMT ver 1.23
[  508.606679][T18678] bond1: left allmulticast mode
[  508.613124][T18678] 8021q: adding VLAN 0 to HW filter on device bond1
[  509.023838][T18693] pim6reg1: entered promiscuous mode
[  509.041914][T18693] pim6reg1: entered allmulticast mode
[  509.089223][T18713] netlink: 'syz.4.3169': attribute type 15 has an invalid length.
[  509.126627][T18713] Cannot find set identified by id 65534 to match
[  509.196483][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  509.213366][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  509.226421][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  509.241331][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  509.254802][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  510.174451][T18759] __nla_validate_parse: 3 callbacks suppressed
[  510.174468][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'.
[  510.254151][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'.
[  510.273118][T18759] FAULT_INJECTION: forcing a failure.
[  510.273118][T18759] name failslab, interval 1, probability 0, space 0, times 0
[  510.295133][T18759] CPU: 1 UID: 0 PID: 18759 Comm: syz.3.3178 Not tainted syzkaller #0 PREEMPT(full) 
[  510.295160][T18759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  510.295171][T18759] Call Trace:
[  510.295179][T18759]  <TASK>
[  510.295187][T18759]  dump_stack_lvl+0xe8/0x150
[  510.295219][T18759]  should_fail_ex+0x40c/0x560
[  510.295244][T18759]  ? alloc_netdev_mqs+0x8f3/0x12b0
[  510.295270][T18759]  should_failslab+0xa8/0x100
[  510.295301][T18759]  __kvmalloc_node_noprof+0x176/0x860
[  510.295326][T18759]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  510.295447][T18759]  ? alloc_netdev_mqs+0x8f3/0x12b0
[  510.295480][T18759]  alloc_netdev_mqs+0x8f3/0x12b0
[  510.295507][T18759]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  510.295537][T18759]  rtnl_create_link+0x321/0xd70
[  510.295570][T18759]  rtnl_newlink_create+0x258/0x7b0
[  510.295599][T18759]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  510.295625][T18759]  ? __pfx___mutex_lock+0x10/0x10
[  510.295660][T18759]  ? ns_capable+0x89/0xe0
[  510.295685][T18759]  rtnl_newlink+0x166d/0x1c30
[  510.295721][T18759]  ? __pfx_rtnl_newlink+0x10/0x10
[  510.295743][T18759]  ? __lock_acquire+0x683/0x2cf0
[  510.295775][T18759]  ? __lock_acquire+0x683/0x2cf0
[  510.295802][T18759]  ? __lock_acquire+0x683/0x2cf0
[  510.295843][T18759]  ? unwind_next_frame+0x8f/0x2550
[  510.295873][T18759]  ? is_bpf_text_address+0x26/0x2b0
[  510.295911][T18759]  ? is_bpf_text_address+0x26/0x2b0
[  510.295942][T18759]  ? __lock_acquire+0x683/0x2cf0
[  510.295973][T18759]  ? kernel_text_address+0xa5/0xe0
[  510.295993][T18759]  ? __kernel_text_address+0xd/0x30
[  510.296010][T18759]  ? unwind_get_return_address+0x4d/0x90
[  510.296033][T18759]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  510.296057][T18759]  ? arch_stack_walk+0xfb/0x150
[  510.296089][T18759]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  510.296125][T18759]  ? __pfx_rtnl_newlink+0x10/0x10
[  510.296144][T18759]  rtnetlink_rcv_msg+0x802/0xc00
[  510.296164][T18759]  ? netlink_sendmsg+0x5d4/0xb40
[  510.296193][T18759]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  510.296212][T18759]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  510.296234][T18759]  ? __lock_acquire+0x683/0x2cf0
[  510.296271][T18759]  netlink_rcv_skb+0x226/0x4a0
[  510.296296][T18759]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  510.296318][T18759]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  510.296353][T18759]  ? netlink_deliver_tap+0x2e/0x1b0
[  510.296376][T18759]  ? netlink_deliver_tap+0x2e/0x1b0
[  510.296405][T18759]  netlink_unicast+0x7bb/0x940
[  510.296440][T18759]  netlink_sendmsg+0x813/0xb40
[  510.296475][T18759]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.296503][T18759]  ? aa_sock_msg_perm+0xf1/0x1b0
[  510.296528][T18759]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.296550][T18759]  sock_sendmsg_nosec+0x13a/0x180
[  510.296582][T18759]  ____sys_sendmsg+0x54e/0x850
[  510.296611][T18759]  ? __pfx_____sys_sendmsg+0x10/0x10
[  510.296643][T18759]  ? import_iovec+0x73/0xa0
[  510.296664][T18759]  ___sys_sendmsg+0x2a5/0x360
[  510.296686][T18759]  ? __lock_acquire+0x683/0x2cf0
[  510.296715][T18759]  ? __pfx____sys_sendmsg+0x10/0x10
[  510.296777][T18759]  ? __fget_files+0x2a/0x420
[  510.296802][T18759]  ? __fget_files+0x3a2/0x420
[  510.296847][T18759]  __x64_sys_sendmsg+0x1b1/0x290
[  510.296872][T18759]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  510.296910][T18759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.296929][T18759]  do_syscall_64+0x174/0x580
[  510.296952][T18759]  ? trace_irq_disable+0x3b/0x140
[  510.296975][T18759]  ? clear_bhb_loop+0x40/0x90
[  510.296998][T18759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.297017][T18759] RIP: 0033:0x7fece2f9e019
[  510.297037][T18759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.297054][T18759] RSP: 002b:00007fece3d93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.297075][T18759] RAX: ffffffffffffffda RBX: 00007fece3225fa0 RCX: 00007fece2f9e019
[  510.297089][T18759] RDX: 000000002000c8c0 RSI: 0000200000000000 RDI: 0000000000000003
[  510.297101][T18759] RBP: 00007fece3d93090 R08: 0000000000000000 R09: 0000000000000000
[  510.297112][T18759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  510.297123][T18759] R13: 00007fece3226038 R14: 00007fece3225fa0 R15: 00007ffccfa9d948
[  510.297155][T18759]  </TASK>
[  511.069878][T18782] netlink: 'syz.3.3182': attribute type 10 has an invalid length.
[  511.124832][T18785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3183'.
[  511.265649][T18782] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3182'.
[  511.356337][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'.
[  511.366478][ T5637] Bluetooth: hci1: command tx timeout
[  511.390369][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3184'.
[  511.979489][T18822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3189'.
[  511.996867][T18822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3189'.
[  512.489143][T18843] geneve2: entered promiscuous mode
[  512.494826][T18855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3194'.
[  512.644326][T18715] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.682965][T18715] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.714035][T18715] bridge_slave_0: entered allmulticast mode
[  512.751301][T18715] bridge_slave_0: entered promiscuous mode
[  512.804264][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'.
[  512.883751][T18863] macvtap0: entered promiscuous mode
[  512.906114][T18863] bridge0: entered promiscuous mode
[  512.926811][T18863] vlan2: entered promiscuous mode
[  512.953591][T18715] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.970649][T18715] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.990575][T18715] bridge_slave_1: entered allmulticast mode
[  513.019821][T18715] bridge_slave_1: entered promiscuous mode
[  513.345691][T18876] netlink: 'syz.0.3197': attribute type 142 has an invalid length.
[  513.368158][T18863] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  513.444888][ T5637] Bluetooth: hci1: command tx timeout
[  513.622799][T18863] bond12 (unregistering): Released all slaves
[  513.744640][T18715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.755802][T18880] syzkaller0: entered promiscuous mode
[  513.763734][T18880] syzkaller0: entered allmulticast mode
[  513.858941][   T35] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36546 - 0
[  513.970324][T18908] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  513.997414][T18715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.068853][  T114] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36546 - 0
[  514.146268][T18715] team0: Port device team_slave_0 added
[  514.174259][T18715] team0: Port device team_slave_1 added
[  514.281875][T18715] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.304224][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.362565][T18715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.409345][T18929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  514.433461][T18929] batman_adv: batadv0: Removing interface: batadv_slave_0
[  514.475771][T18715] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.501740][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.561596][T18715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.722581][T18715] hsr_slave_0: entered promiscuous mode
[  514.729685][T18715] hsr_slave_1: entered promiscuous mode
[  514.745641][T18715] debugfs: 'hsr0' already exists in 'hsr'
[  514.761012][T18715] Cannot create hsr debugfs directory
[  514.877225][  T114] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36546 - 0
[  514.929987][   T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36546 - 0
[  514.975930][T18966] sctp: [Deprecated]: syz.0.3214 (pid 18966) Use of int in max_burst socket option.
[  514.975930][T18966] Use struct sctp_assoc_value instead
[  515.273467][T18986] __nla_validate_parse: 10 callbacks suppressed
[  515.273485][T18986] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3217'.
[  515.299452][T18986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3217'.
[  515.311524][T18988] dvmrp1: tun_chr_ioctl cmd 1074025677
[  515.323594][T18988] dvmrp1: linktype set to 24
[  515.519858][ T5637] Bluetooth: hci1: command tx timeout
[  515.571092][T18993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3220'.
[  516.427491][T19018] tipc: Started in network mode
[  516.437540][T19018] tipc: Node identity , cluster identity 4711
[  516.458189][T19018] tipc: Failed to obtain node identity
[  516.469562][T19018] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  516.801666][T19031] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3229'.
[  516.835966][T19031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3229'.
[  517.372249][T18715] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  517.425089][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  517.462204][T18715] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  517.493769][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  517.497700][T19056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3234'.
[  517.541064][T18715] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  517.561379][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  517.581934][T19059] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  517.598936][ T5637] Bluetooth: hci1: command tx timeout
[  517.609522][T19059] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  517.629847][T18715] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  517.653520][T18715] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  517.807450][T16341] IPVS: starting estimator thread 0...
[  517.851567][T18715] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.919046][T19073] IPVS: using max 29 ests per chain, 69600 per kthread
[  517.950129][T18715] 8021q: adding VLAN 0 to HW filter on device team0
[  518.027692][T16339] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.035031][T16339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.100924][T19085] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3242'.
[  518.119000][T16339] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.126098][T16339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.135441][T19087] netlink: 'syz.3.3243': attribute type 21 has an invalid length.
[  518.333588][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3246'.
[  518.346008][T19099] netlink: zone id is out of range
[  518.368949][T19099] netlink: zone id is out of range
[  518.779975][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'.
[  519.213202][T19142] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3256'.
[  519.230603][T18715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.375015][T19150] bond12: entered promiscuous mode
[  519.396269][T19150] bond12: entered allmulticast mode
[  519.405516][T19150] 8021q: adding VLAN 0 to HW filter on device bond12
[  519.433236][T19147] netlink: 'syz.4.3255': attribute type 3 has an invalid length.
[  519.502302][T18715] veth0_vlan: entered promiscuous mode
[  519.537077][T18715] veth1_vlan: entered promiscuous mode
[  519.562975][T19154] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.687272][T18715] veth0_macvtap: entered promiscuous mode
[  519.729632][T18715] veth1_macvtap: entered promiscuous mode
[  519.744038][T19171] netlink: 'syz.1.3264': attribute type 29 has an invalid length.
[  519.769127][T19171] netlink: 'syz.1.3264': attribute type 1 has an invalid length.
[  519.787363][T18715] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.831282][T18715] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.888749][  T114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.981238][  T114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.035741][  T114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.122257][ T1023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.228580][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.253377][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.358010][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.393845][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.433623][T19192] netlink: zone id is out of range
[  520.457750][T19192] netlink: zone id is out of range
[  520.624035][T19201] __nla_validate_parse: 2 callbacks suppressed
[  520.624055][T19201] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3273'.
[  520.990931][T19221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3276'.
[  521.652894][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  521.670341][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  521.682773][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  521.701949][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  521.727807][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  522.031220][T19259] syzkaller0: entered promiscuous mode
[  522.054452][T19259] syzkaller0: entered allmulticast mode
[  522.066509][T19256] netlink: 'syz.2.3281': attribute type 2 has an invalid length.
[  522.103355][T19256] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3281'.
[  522.643774][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'.
[  522.856535][T19303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3294'.
[  522.883382][T19304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.337784][T19251] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.346303][T19251] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.353767][T19251] bridge_slave_0: entered allmulticast mode
[  523.362189][T19251] bridge_slave_0: entered promiscuous mode
[  523.371010][T19251] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.378244][T19251] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.385791][T19251] bridge_slave_1: entered allmulticast mode
[  523.393580][T19251] bridge_slave_1: entered promiscuous mode
[  523.456605][T19251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.496781][T19251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.539667][T19251] team0: Port device team_slave_0 added
[  523.549478][T19251] team0: Port device team_slave_1 added
[  523.639546][T19251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.658976][T19251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.718498][T19251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.840532][ T5632] Bluetooth: hci0: command tx timeout
[  523.853711][T19251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.871699][T19251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.898970][T19251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.962919][T19251] hsr_slave_0: entered promiscuous mode
[  523.965484][T19339] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3301'.
[  523.970120][T19251] hsr_slave_1: entered promiscuous mode
[  523.984606][T19251] debugfs: 'hsr0' already exists in 'hsr'
[  523.994539][T19251] Cannot create hsr debugfs directory
[  524.151810][T19342] syzkaller0: entered promiscuous mode
[  524.168287][T19342] syzkaller0: entered allmulticast mode
[  524.254567][T19346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3304'.
[  524.524314][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.580963][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.611848][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.696861][T19360] bond1: ARP target 9.0.0.0 is already present
[  524.704861][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.729726][T19360] bond1: option arp_ip_target: invalid value (9)
[  524.739587][T19369] xt_hashlimit: max too large, truncated to 1048576
[  524.750960][T19360] bond1 (unregistering): Released all slaves
[  524.790181][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.832901][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.923643][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.937766][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  524.971212][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.008909][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.017205][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.025567][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.048266][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.062426][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.071485][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.074218][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.114402][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.123004][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.131585][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.138979][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.155987][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.169408][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.189543][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.197085][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.248843][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.269991][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.307011][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.333390][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.353179][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.391458][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.406478][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.408935][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.423766][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.430324][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.485601][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.518257][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.531721][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.556392][T19387] netlink: 'syz.0.3318': attribute type 10 has an invalid length.
[  525.556896][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.588185][T19387] x_tables: unsorted entry at hook 1
[  525.613307][T19390] x_tables: unsorted entry at hook 1
[  525.620461][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.650268][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.664724][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.702179][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.715552][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.734075][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.919446][ T5632] Bluetooth: hci0: command tx timeout
[  526.548244][T19251] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  526.566585][T19432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3326'.
[  526.619459][T19432] netlink: 'syz.2.3326': attribute type 2 has an invalid length.
[  526.626038][T19251] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  526.647976][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'.
[  526.662199][T19251] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  526.688163][T19432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3326'.
[  526.698009][T19251] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  526.756027][T19438] bond2: option resend_igmp: invalid value (2878)
[  526.764928][T19438] bond2: option resend_igmp: allowed values 0 - 255
[  526.775061][T19438] bond2 (unregistering): Released all slaves
[  526.817537][T19251] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  526.833405][T19251] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  527.012622][T19251] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  527.054550][T19423] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  527.062803][T19251] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  527.087166][T19423] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  527.204935][T19463] nbd: socks must be embedded in a SOCK_ITEM attr
[  527.215084][T19463] block nbd4: shutting down sockets
[  527.238162][T19423] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  527.277229][T19423] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  527.299672][T19470] block nbd5: server does not support multiple connections per device.
[  527.353453][T19470] block nbd5: shutting down sockets
[  527.494512][T19423] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  527.525059][T19423] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  527.598133][T19251] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.714899][T19423] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  527.733025][T19423] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  527.776008][T19251] 8021q: adding VLAN 0 to HW filter on device team0
[  527.931305][T19423] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  527.943040][  T114] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.950255][  T114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.951700][T19423] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  527.999750][    C0] ------------[ cut here ]------------
[  528.005602][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci0
[  528.012435][    C0] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd4a/0x10a0, CPU#0: syz.0.3322/19423
[  528.022257][    C0] Modules linked in:
[  528.026619][    C0] CPU: 0 UID: 0 PID: 19423 Comm: syz.0.3322 Not tainted syzkaller #0 PREEMPT(full) 
[  528.035982][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  528.046029][    C0] RIP: 0010:__queue_work+0xd66/0x10a0
[  528.051404][    C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 16 8e cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 f4 c0 a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8
[  528.071004][    C0] RSP: 0018:ffffc90000007bc8 EFLAGS: 00010046
[  528.077070][    C0] RAX: 1ffff1100f4a794e RBX: dffffc0000000000 RCX: ffff88807fecdd00
[  528.085031][    C0] RDX: ffff88804c1ab170 RSI: ffffffff8ac3a4f0 RDI: ffffffff905a7870
[  528.092991][    C0] RBP: 0000000000000100 R08: ffffffff9057a637 R09: 1ffffffff20af4c6
[  528.100948][    C0] R10: dffffc0000000000 R11: ffffffff818df180 R12: 0000000000000008
[  528.108907][    C0] R13: ffff88807a53ca58 R14: ffffffff905a7870 R15: ffff88804c1ab170
[  528.116870][    C0] FS:  00007fdbe1e5b6c0(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000
[  528.125788][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  528.132362][    C0] CR2: 00007faa75d92ff8 CR3: 0000000022be6000 CR4: 00000000003526f0
[  528.140331][    C0] Call Trace:
[  528.143604][    C0]  <IRQ>
[  528.146442][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  528.151817][    C0]  call_timer_fn+0x192/0x5e0
[  528.156396][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  528.162211][    C0]  ? call_timer_fn+0xd4/0x5e0
[  528.166879][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  528.171986][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  528.177097][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  528.182903][    C0]  __run_timer_base+0x67e/0x8b0
[  528.187753][    C0]  ? ktime_get+0x45/0x220
[  528.192084][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  528.197471][    C0]  ? ktime_get+0x1f5/0x220
[  528.201911][    C0]  ? lapic_next_event+0x11/0x20
[  528.206812][    C0]  run_timer_softirq+0xb7/0x170
[  528.211665][    C0]  handle_softirqs+0x225/0x840
[  528.216435][    C0]  ? __irq_exit_rcu+0xca/0x220
[  528.221197][    C0]  __irq_exit_rcu+0xca/0x220
[  528.225780][    C0]  irq_exit_rcu+0x9/0x30
[  528.230010][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  528.235638][    C0]  </IRQ>
[  528.238554][    C0]  <TASK>
[  528.241470][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  528.247438][    C0] RIP: 0010:finish_task_switch+0x417/0xc60
[  528.253235][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f3 3b 3f 0a e8 0e ac 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  528.272835][    C0] RSP: 0018:ffffc90004ac7440 EFLAGS: 00000206
[  528.278895][    C0] RAX: 00000000000074bb RBX: ffff8880b863bf20 RCX: 0000000080000001
[  528.286853][    C0] RDX: 0000000000000006 RSI: ffffffff8e23117e RDI: ffffffff8c4bdd80
[  528.294812][    C0] RBP: ffffc90004ac7490 R08: ffffffff9057a637 R09: 1ffffffff20af4c6
[  528.302772][    C0] R10: dffffc0000000000 R11: fffffbfff20af4c7 R12: ffff88807fecdd00
[  528.310729][    C0] R13: ffff8880b863bef8 R14: dffffc0000000000 R15: 1ffff110170c77e4
[  528.318712][    C0]  __schedule+0x17e1/0x56c0
[  528.323225][    C0]  ? ktime_get+0x45/0x220
[  528.327573][    C0]  ? lapic_next_event+0x11/0x20
[  528.332440][    C0]  ? clockevents_program_event+0x4bb/0x630
[  528.338253][    C0]  ? __pfx___schedule+0x10/0x10
[  528.343112][    C0]  preempt_schedule_irq+0x4d/0xa0
[  528.348131][    C0]  irqentry_exit+0x14f/0x8f0
[  528.352719][    C0]  ? trace_irq_disable+0x3b/0x140
[  528.357743][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  528.363722][    C0] RIP: 0010:lock_acquire+0x221/0x350
[  528.369017][    C0] Code: ff ff ff e8 61 5f 2f 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 4a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 15 b8
[  528.388616][    C0] RSP: 0018:ffffc90004ac77c8 EFLAGS: 00000282
[  528.394679][    C0] RAX: 361d4e17d80f3300 RBX: 0000000000000000 RCX: 0000000000000046
[  528.402642][    C0] RDX: ffffffff94201640 RSI: ffffffff8e4b625f RDI: ffffffff8c4bdd80
[  528.410607][    C0] RBP: ffffffff818e2b55 R08: 0000000000000008 R09: ffffffff96a0c5b0
[  528.418579][    C0] R10: 00000000c4805f79 R11: 0000000042159ab0 R12: 0000000000000000
[  528.426544][    C0] R13: ffff88804c1ab140 R14: 0000000000000001 R15: 0000000000000246
[  528.434515][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  528.439829][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  528.445106][    C0]  touch_wq_lockdep_map+0xcb/0x180
[  528.450211][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  528.455494][    C0]  __flush_workqueue+0x148/0x1470
[  528.460520][    C0]  ? drain_workqueue+0xb1/0x380
[  528.465367][    C0]  ? __pfx___flush_workqueue+0x10/0x10
[  528.470818][    C0]  ? __mutex_unlock_slowpath+0x731/0x900
[  528.476462][    C0]  drain_workqueue+0xce/0x380
[  528.481139][    C0]  hci_dev_close_sync+0x60e/0x10a0
[  528.486338][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  528.491392][    C0]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  528.496927][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  528.501951][    C0]  hci_dev_do_close+0x30/0xc0
[  528.506628][    C0]  hci_rfkill_set_block+0x1f4/0x290
[  528.511813][    C0]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  528.517525][    C0]  rfkill_set_block+0x19f/0x4d0
[  528.522470][    C0]  rfkill_fop_write+0x43b/0x560
[  528.527352][    C0]  ? apparmor_file_permission+0x1f4/0x300
[  528.533093][    C0]  ? __pfx_rfkill_fop_write+0x10/0x10
[  528.538460][    C0]  ? security_kernfs_init_security+0x250/0x270
[  528.544675][    C0]  ? rw_verify_area+0x203/0x4c0
[  528.549547][    C0]  ? __pfx_rfkill_fop_write+0x10/0x10
[  528.554915][    C0]  vfs_write+0x296/0xba0
[  528.559154][    C0]  ? __pfx_vfs_write+0x10/0x10
[  528.563910][    C0]  ? __fget_files+0x2a/0x420
[  528.568499][    C0]  ? __fget_files+0x2a/0x420
[  528.573082][    C0]  ? __fget_files+0x3a2/0x420
[  528.577752][    C0]  ? __fget_files+0x2a/0x420
[  528.582341][    C0]  ksys_write+0x150/0x270
[  528.586661][    C0]  ? __pfx_ksys_write+0x10/0x10
[  528.591505][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.597559][    C0]  do_syscall_64+0x174/0x580
[  528.602145][    C0]  ? trace_irq_disable+0x3b/0x140
[  528.607162][    C0]  ? clear_bhb_loop+0x40/0x90
[  528.611833][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.617718][    C0] RIP: 0033:0x7fdbe0f9e019
[  528.622123][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.641715][    C0] RSP: 002b:00007fdbe1e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  528.650131][    C0] RAX: ffffffffffffffda RBX: 00007fdbe1226180 RCX: 00007fdbe0f9e019
[  528.658111][    C0] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009
[  528.666106][    C0] RBP: 00007fdbe103500c R08: 0000000000000000 R09: 0000000000000000
[  528.674070][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  528.682027][    C0] R13: 00007fdbe1226218 R14: 00007fdbe1226180 R15: 00007ffe650772f8
[  528.690014][    C0]  </TASK>
[  528.693051][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  528.700325][    C0] CPU: 0 UID: 0 PID: 19423 Comm: syz.0.3322 Not tainted syzkaller #0 PREEMPT(full) 
[  528.709684][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  528.719734][    C0] Call Trace:
[  528.723006][    C0]  <IRQ>
[  528.725839][    C0]  vpanic+0x56c/0xa60
[  528.729860][    C0]  ? __pfx__printk+0x10/0x10
[  528.734439][    C0]  ? __pfx_vpanic+0x10/0x10
[  528.738941][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  528.744240][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  528.749440][    C0]  panic+0xc5/0xd0
[  528.753163][    C0]  ? __pfx_panic+0x10/0x10
[  528.757584][    C0]  __warn+0x315/0x4c0
[  528.761574][    C0]  ? __queue_work+0xd4a/0x10a0
[  528.766335][    C0]  ? __queue_work+0xd4a/0x10a0
[  528.771088][    C0]  __report_bug+0x276/0x570
[  528.775735][    C0]  ? __queue_work+0xd4a/0x10a0
[  528.780519][    C0]  ? __pfx___report_bug+0x10/0x10
[  528.785549][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  528.790851][    C0]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  528.796248][    C0]  ? look_up_lock_class+0x57/0x110
[  528.801364][    C0]  ? register_lock_class+0x31/0x2e0
[  528.806570][    C0]  report_bug_entry+0x19a/0x290
[  528.811424][    C0]  ? __queue_work+0xd66/0x10a0
[  528.816183][    C0]  ? __queue_work+0xd6b/0x10a0
[  528.820935][    C0]  handle_bug+0xce/0x200
[  528.825169][    C0]  exc_invalid_op+0x1a/0x50
[  528.829655][    C0]  asm_exc_invalid_op+0x1a/0x20
[  528.834494][    C0] RIP: 0010:__queue_work+0xd66/0x10a0
[  528.839870][    C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 16 8e cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 f4 c0 a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8
[  528.859488][    C0] RSP: 0018:ffffc90000007bc8 EFLAGS: 00010046
[  528.865554][    C0] RAX: 1ffff1100f4a794e RBX: dffffc0000000000 RCX: ffff88807fecdd00
[  528.873526][    C0] RDX: ffff88804c1ab170 RSI: ffffffff8ac3a4f0 RDI: ffffffff905a7870
[  528.881494][    C0] RBP: 0000000000000100 R08: ffffffff9057a637 R09: 1ffffffff20af4c6
[  528.889457][    C0] R10: dffffc0000000000 R11: ffffffff818df180 R12: 0000000000000008
[  528.897421][    C0] R13: ffff88807a53ca58 R14: ffffffff905a7870 R15: ffff88804c1ab170
[  528.905392][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  528.911202][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  528.916492][    C0]  ? __queue_work+0xd25/0x10a0
[  528.921254][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  528.926623][    C0]  call_timer_fn+0x192/0x5e0
[  528.931203][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  528.937001][    C0]  ? call_timer_fn+0xd4/0x5e0
[  528.941667][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  528.946815][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  528.951917][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  528.957735][    C0]  __run_timer_base+0x67e/0x8b0
[  528.962590][    C0]  ? ktime_get+0x45/0x220
[  528.966935][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  528.972306][    C0]  ? ktime_get+0x1f5/0x220
[  528.976717][    C0]  ? lapic_next_event+0x11/0x20
[  528.981562][    C0]  run_timer_softirq+0xb7/0x170
[  528.986407][    C0]  handle_softirqs+0x225/0x840
[  528.991165][    C0]  ? __irq_exit_rcu+0xca/0x220
[  528.995926][    C0]  __irq_exit_rcu+0xca/0x220
[  529.000509][    C0]  irq_exit_rcu+0x9/0x30
[  529.004742][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  529.010370][    C0]  </IRQ>
[  529.013288][    C0]  <TASK>
[  529.016205][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  529.022176][    C0] RIP: 0010:finish_task_switch+0x417/0xc60
[  529.027978][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f3 3b 3f 0a e8 0e ac 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  529.047575][    C0] RSP: 0018:ffffc90004ac7440 EFLAGS: 00000206
[  529.053635][    C0] RAX: 00000000000074bb RBX: ffff8880b863bf20 RCX: 0000000080000001
[  529.061600][    C0] RDX: 0000000000000006 RSI: ffffffff8e23117e RDI: ffffffff8c4bdd80
[  529.069565][    C0] RBP: ffffc90004ac7490 R08: ffffffff9057a637 R09: 1ffffffff20af4c6
[  529.077527][    C0] R10: dffffc0000000000 R11: fffffbfff20af4c7 R12: ffff88807fecdd00
[  529.085486][    C0] R13: ffff8880b863bef8 R14: dffffc0000000000 R15: 1ffff110170c77e4
[  529.093473][    C0]  __schedule+0x17e1/0x56c0
[  529.097984][    C0]  ? ktime_get+0x45/0x220
[  529.102315][    C0]  ? lapic_next_event+0x11/0x20
[  529.107150][    C0]  ? clockevents_program_event+0x4bb/0x630
[  529.112949][    C0]  ? __pfx___schedule+0x10/0x10
[  529.117810][    C0]  preempt_schedule_irq+0x4d/0xa0
[  529.122828][    C0]  irqentry_exit+0x14f/0x8f0
[  529.127411][    C0]  ? trace_irq_disable+0x3b/0x140
[  529.132435][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  529.138408][    C0] RIP: 0010:lock_acquire+0x221/0x350
[  529.143697][    C0] Code: ff ff ff e8 61 5f 2f 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 4a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 15 b8
[  529.163293][    C0] RSP: 0018:ffffc90004ac77c8 EFLAGS: 00000282
[  529.169350][    C0] RAX: 361d4e17d80f3300 RBX: 0000000000000000 RCX: 0000000000000046
[  529.177308][    C0] RDX: ffffffff94201640 RSI: ffffffff8e4b625f RDI: ffffffff8c4bdd80
[  529.185269][    C0] RBP: ffffffff818e2b55 R08: 0000000000000008 R09: ffffffff96a0c5b0
[  529.193229][    C0] R10: 00000000c4805f79 R11: 0000000042159ab0 R12: 0000000000000000
[  529.201188][    C0] R13: ffff88804c1ab140 R14: 0000000000000001 R15: 0000000000000246
[  529.209151][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  529.214453][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  529.219729][    C0]  touch_wq_lockdep_map+0xcb/0x180
[  529.224831][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  529.230108][    C0]  __flush_workqueue+0x148/0x1470
[  529.235131][    C0]  ? drain_workqueue+0xb1/0x380
[  529.239975][    C0]  ? __pfx___flush_workqueue+0x10/0x10
[  529.245423][    C0]  ? __mutex_unlock_slowpath+0x731/0x900
[  529.251073][    C0]  drain_workqueue+0xce/0x380
[  529.255752][    C0]  hci_dev_close_sync+0x60e/0x10a0
[  529.260855][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  529.265880][    C0]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  529.271446][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  529.276469][    C0]  hci_dev_do_close+0x30/0xc0
[  529.281138][    C0]  hci_rfkill_set_block+0x1f4/0x290
[  529.286325][    C0]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  529.292033][    C0]  rfkill_set_block+0x19f/0x4d0
[  529.296879][    C0]  rfkill_fop_write+0x43b/0x560
[  529.301723][    C0]  ? apparmor_file_permission+0x1f4/0x300
[  529.307447][    C0]  ? __pfx_rfkill_fop_write+0x10/0x10
[  529.312815][    C0]  ? security_kernfs_init_security+0x250/0x270
[  529.318969][    C0]  ? rw_verify_area+0x203/0x4c0
[  529.323808][    C0]  ? __pfx_rfkill_fop_write+0x10/0x10
[  529.329172][    C0]  vfs_write+0x296/0xba0
[  529.333412][    C0]  ? __pfx_vfs_write+0x10/0x10
[  529.338168][    C0]  ? __fget_files+0x2a/0x420
[  529.342753][    C0]  ? __fget_files+0x2a/0x420
[  529.347351][    C0]  ? __fget_files+0x3a2/0x420
[  529.352030][    C0]  ? __fget_files+0x2a/0x420
[  529.356619][    C0]  ksys_write+0x150/0x270
[  529.360941][    C0]  ? __pfx_ksys_write+0x10/0x10
[  529.365794][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.371853][    C0]  do_syscall_64+0x174/0x580
[  529.376440][    C0]  ? trace_irq_disable+0x3b/0x140
[  529.381459][    C0]  ? clear_bhb_loop+0x40/0x90
[  529.386128][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.392010][    C0] RIP: 0033:0x7fdbe0f9e019
[  529.396420][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  529.416032][    C0] RSP: 002b:00007fdbe1e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  529.424439][    C0] RAX: ffffffffffffffda RBX: 00007fdbe1226180 RCX: 00007fdbe0f9e019
[  529.432400][    C0] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009
[  529.440362][    C0] RBP: 00007fdbe103500c R08: 0000000000000000 R09: 0000000000000000
[  529.448322][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  529.456280][    C0] R13: 00007fdbe1226218 R14: 00007fdbe1226180 R15: 00007ffe650772f8
[  529.464259][    C0]  </TASK>
[  529.467631][    C0] Kernel Offset: disabled
[  529.471983][    C0] Rebooting in 86400 seconds..