last executing test programs:

1m17.305764467s ago: executing program 0 (id=1583):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, r0, 0x2f, 0x2030, 0x4}, 0x20)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e27"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20)
r3 = socket$inet6(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
write$tun(r2, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce)

1m14.227039054s ago: executing program 0 (id=1598):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c)
poll(&(0x7f0000000a00)=[{r0, 0x3000}], 0x1, 0xb)
r1 = socket$netlink(0x10, 0x3, 0xe)
recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @netrom, @remote, @remote, @remote, @null]}, 0x80, &(0x7f00000000c0)}, 0x10001) (async)
recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @netrom, @remote, @remote, @remote, @null]}, 0x80, &(0x7f00000000c0)}, 0x10001)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) (async)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000))

1m13.528176258s ago: executing program 0 (id=1603):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r3, r3, 0x7, 0x3, &(0x7f0000000040)='9fm', 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r4 = socket$netlink(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000180)={0x5, 0x86, 0x100, 0x2}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r6, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvfrom(r6, 0x0, 0x0, 0x12041, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0)
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000100))
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r5, 0x5c2a7000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r7, 0xac9d4000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x10, 0xffffffffffffffff, 0x180000000)

1m12.420486108s ago: executing program 2 (id=1606):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg0\x00'})
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x2}, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x30]}}, &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28)

1m11.620736604s ago: executing program 4 (id=1611):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0xb4, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}, @NL80211_ATTR_IE={0xf, 0x2a, [@mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xb5}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_IE={0x43, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0xb}, @mesh_config={0x71, 0x7, {0x4, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x61}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x29}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0xc, 0x49}}, @ibss={0x6, 0x2, 0x10}]}, @NL80211_ATTR_IE={0x28, 0x2a, [@perr={0x84, 0x2, {0x3}}, @ht={0x2d, 0x1a, {0x400, 0x0, 0x7, 0x0, {0x2, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x8, 0x8d}}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}]}, 0xb4}}, 0x20000000) (async)
close(r6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

1m11.454246338s ago: executing program 1 (id=1612):
r0 = socket$inet6(0xa, 0x4, 0x3)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
r1 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r3, &(0x7f0000000000)="4400000030000504010000000000000000000000300001802c0001800900070067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x1, 0x1, 0xff, 0xa, 0xa, 0xff38}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
clock_gettime(0x1, &(0x7f0000000140))
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="38c202000000000008002400b03c4fe308000500", @ANYRES32=0x0, @ANYBLOB="aac1cd65a7cb9499d03a2610e75ebb"], 0x30}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000180)=[@mss, @window={0x3, 0x5, 0x6}, @window={0x3, 0x6d, 0x1}, @timestamp, @timestamp], 0x5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="010026bd7000010000000f00000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00+\x00\b\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x18)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0), 0x0, 0x100000000003f}}], 0x48}, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003ec0)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000300)="9718d0d3e2", 0x5}], 0x1}}], 0x1, 0x20000010)

1m11.149362365s ago: executing program 2 (id=1613):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x1}, 0x10)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x30)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0x0, 0x96, 0xffffffb9}, 0x28)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

1m11.068826959s ago: executing program 0 (id=1614):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x9c, r1, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xfffffffffffffd9c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3bad0cab09f8aa87d6dcdaabb3b08ddf2039de398e696c7a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$sock(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff00000000000000000000100003007665746830000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c)

1m10.340706642s ago: executing program 2 (id=1615):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
sendmsg$can_bcm(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x45000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000054}, 0x2000c000)
getuid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r3], 0x4c}}, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xd8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000001201000000000000000000000d0200000000002e2e2e"], 0x0, 0x44}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r7, &(0x7f0000000300)}, 0x20)

1m10.162162841s ago: executing program 1 (id=1617):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) (async)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async, rerun: 32)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) (async, rerun: 32)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1001, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c85}, 0x0)

1m9.97461935s ago: executing program 0 (id=1618):
r0 = socket(0x9, 0x3, 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=<r1=>0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x440c0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYRESHEX, @ANYRES8=r0], 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x1)
pwrite64(r2, &(0x7f0000000340)="1723d1266cd082954eabf4cec9351d7bf630d746a1d1eb3cdccc2b1635769c9671663c0cd6adff1d6028737f1fbe13", 0x2f, 0x44c9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socket(0x28, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r7)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r10, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r10, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x48884)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1m9.612948636s ago: executing program 1 (id=1619):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a31000000002c00048005"], 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f00000000c0)=0x48)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'ip_vti0\x00', {0x8}, 0x6})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd7000fbdbdf252d00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x412002, 0x0)

1m5.590187348s ago: executing program 2 (id=1621):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xa}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x94)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x5}}, 0x0, 0x0, 0x46, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000280)=0x8001, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000500), &(0x7f00000002c0)=r1}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "60a4787f7a9f44de", "f1fcfc03bda596f9f68e5aec83c18ef9", "43a33c4e", "26c18bb489c0d783"}, 0x28)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa14001980080001"], 0x44}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

1m5.240715744s ago: executing program 1 (id=1622):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x13}}]}, 0x30}}, 0x4048000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28010000010201020000000000000000000000060900060073797a30000000000800084000000002bc"], 0x128}}, 0x800)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68020000010501010000000000000000050000065402010000000000810000006400010405001f0073797a31000000000000000000000000000000000000000000000000000000003de49a697763c1d26b44090a94b4a1ae83a34cf498713925ae23432d7089339a787f7f7d5a7e01474465a1d8aa14418d6e38fff5c65bb86a04b08afd3de1b339f7ff080000000000010000807f00090002000000080000004001"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}]}, 0x48}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x224c, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2400c08d)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "6521810c60a1a84e", "22a83471bba279ba0ed9a2b2e44d41efae39a56dc004b76df2be22e19dbc328d", "33942752", "eb4ab87a93c2e612"}, 0x38)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0)
shutdown(r0, 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'erspan0\x00', <r8=>0x0, 0x10, 0x7800, 0xfffeffff, 0xfffffff9, {{0x1e, 0x4, 0x2, 0xc, 0x78, 0x66, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@end, @generic={0x7, 0xd, "9665197346c787f49e7de8"}, @rr={0x7, 0x1b, 0xdc, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x67, 0x1, 0xc, [{@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@private=0xa010102, 0x400}, {@multicast1, 0x2a4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xddc}, {@local, 0x5}]}]}}}}})
sendmsg$nl_xfrm(r1, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)=@getae={0x1a4, 0x1f, 0x2, 0x70bd2d, 0x25dfdbfb, {{@in6=@private1, 0x4d6, 0xa, 0xff}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x3503}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0xa, 0x2a, 0x1}}, @policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@remote, 0x0, 0xa}}, @sa={0xe4, 0x6, {{@in=@loopback, @in=@multicast2, 0x4e20, 0x6, 0x4e22, 0x8, 0x2, 0x0, 0x80, 0x4a, r8, 0xffffffffffffffff}, {@in6=@private2, 0x4d2, 0x2b}, @in=@empty, {0x0, 0x2, 0x1, 0x8, 0x45, 0x6, 0x2, 0x7}, {0xcb, 0x1, 0x3, 0x9}, {0x9, 0x9, 0xeb}, 0x70bd25, 0x3502, 0xa, 0x1, 0x5, 0x66}}, @iptfs_init_delay={0x8, 0x27, 0x5}, @extra_flags={0x8, 0x18, 0x9}, @replay_thresh={0x8, 0xb, 0x40}, @iptfs_init_delay={0x8, 0x27, 0x6}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4008011}, 0x48001)
sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_deladdr={0x30, 0x15, 0x800, 0x70bd25, 0x25dfdbfd, {0x2, 0x1f, 0x72, 0xfd, r8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffa}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_BROADCAST={0x8, 0x4, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0xc0)

1m4.732701394s ago: executing program 1 (id=1625):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c00028004001200060003001800000008000d000d000000050008000000000014000700ff0a0000000000000000000000000001060018000b0000009fcca25b39"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfa}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)={0x5c, r7, 0x1, 0x20, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0xf, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c0}, 0x48000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)={0x188, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x16c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x158, 0x1c, 0x0, 0x1, [@typed={0x153, 0x1, 0x0, 0x0, @binary="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"}]}]}, @nested={0x4, 0x2}]}, 0x188}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000200)=0xc)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41})
write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="01053000070028000600000060"], 0x64)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0xd0, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x98, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x7c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, {0xa, 0x4, @random="02d0dc4ab3e1"}, {0xa}, {0xa, 0x4, @local}, {0xa, 0x4, @multicast}, {0xa, 0x4, @local}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x4, @local}, {0xa, 0x4, @remote}, {0xa, 0x4, @random="4646073a8e6b"}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r11 = socket(0x2, 0x80805, 0x0)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000080)=@req3={0xc4, 0x0, 0x0, 0x8, 0x7fffffff, 0x9, 0x6}, 0x1c)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r12=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r12, 0xd}, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000400)={r12, @in6={{0xa, 0x4e24, 0x2, @loopback, 0x7fff}}, 0x7f, 0x2}, 0x90)

1m4.64250728s ago: executing program 2 (id=1626):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_generic(r2, &(0x7f0000001140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000a80)={0x680, 0x3c, 0x300, 0x70bd28, 0x25dfdbfe, {0x14}, [@typed={0x6, 0xd9, 0x0, 0x0, @str='%\x00'}, @generic="33e8bf70a9d8fa4c9e2188ca37a3688056d78390044b706b18bf6c34ea5d21795e03ee00c9a5e7c490ac7408be86b71f3609a9a28be93bb7e992cdc9130220ec78747c6c839f2a11a47ec6ef650aeefc472f631b6f4fa6497e111514082742ade6b3899b6b33cda9d1b732c5249f4659448a231b95518caaf56afafa7e81e03ad73d4eddac", @typed={0x7, 0x160, 0x0, 0x0, @str='+/\x00'}, @typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@private2}, @generic="0154af872675261223eae5b05991e5bc65a6a23e955796e6cf65cd99b976715ca11b2565e77badf857f5c25d6194101a9de305ebf4bdf36737464f2868268890f04f3735cca5c2e980225456c441e370dbdc865cf9bd2de966cec8feb019d08b93b5deb4128506f0e96aab6e895162336c2606b457b65b430c10a6085521cc8a5fe5ca33aee54f2efee9336839de8c6270d59a75", @generic="53f6149f6162aec98e5edc3e43045fa009119b6a297d9e5a6a69e4868aeb9dc56cb46023d6a1ee906ee4ddd07abb00fcf62093ba9691b3af6a30f9ddcfd1d06d9554655a72027f5897811539ca482c2672674cf74b6944071546ca1b585666d6be36d93aea0bbee0e176fcef60e43d00872ddebc5a8e099c5c6fc685c01e3d9acaf705960ab74056b6ad819d", @typed={0x8, 0xe7, 0x0, 0x0, @u32=0xf8f0}, @generic="5b12e764ac5219e9219d084020900ba81ad6258d9665bf267106b8d1eda6964585765bef04775db2f0c264e17528a06ea0a7e47787f9e1654bc34938e5846d669a65851068fb9635ec91541e63c681ebf687e580b115a79a4fc02dc25edd3931d57391fd7a9ff48a513231987bbe5d824fc474e6959788fe07b43990a38129d3493ed3a9d375defa6e2ff6f5035c32a09fbe4450fff27e6ead82b73f4bad71fede1971b5c7bc580cbce31987bb623a5f67677a5e7af3d40404b564dcedaaec61cd57e648b0746b31b61ac2a1d478ecd33f017c98f271697ce230bd09b6f5334c527d02b4d394c0780418116b14a895c4", @nested={0xa2, 0x61, 0x0, 0x1, [@typed={0x48, 0x55, 0x0, 0x0, @binary="e311e5af8e55d221ae9fb7569b020ec7ddf0b59ccf4a086d21193e93f1b09f2b6614d5f82d2df800ca812b36cfecd5c0dd04542e58bb785cf8053c3a615ae9e39bfd8ab1"}, @nested={0x4, 0xb5}, @nested={0x4, 0xd1}, @generic="06f7d1848dd384485d5b852b37d3e1ea7bd011ae2ceec664252c4a4e758eb6212b3eddbcc7be96936b937fb7c8240b07e105012287ad5147694247a814661c8a5164", @nested={0x4, 0xe9}, @typed={0x5, 0xbb, 0x0, 0x0, @str='\x00'}]}, @nested={0x304, 0x93, 0x0, 0x1, [@generic="1add50b740055f67412c4df615a26a286156464c5debbe06ac15c607e80eb5633dc4b955d4eae2d8aafcfa1ee889f79d27ffbbcd2402eeabcc63372795196cb5148bae2d3d06f52b905888d9a26259e2ef3dd9df16810c4b8f9a00d59921fa4dfb9b2d9996176bc8c2f8d01836ee0f438c6d5ea1287458f38e9f663148b7a078541d9cbea474d2bb56cd3676115b726b3a6cba164317a6a11d73189d60ad8671c86978", @typed={0xe4, 0x77, 0x0, 0x0, @binary="1b3b4a3e9d6b937590a21766d3c6d42fc5fc889886770126f4ac4204fa05f804c73020a23dce965640ea73d2335fca2d28c67cc425a02567a38f7ac8ab80cdc444cdef36b57f60d8ca99d67191a91474af60c0b0085a657cd85d45a6ca05c69fa0a8fa81154b80ae3509bb99e1cc0b3b65a25ca7cf03c9049c376b77aaf4df789ed672bc49819d6f5ca54513096462994604ea712b03713200ef98972e308f0dddcae0214541c8efdfda6d18639789563a55cb4b6c20099d1f37017edcec7dd84df48e0d739f45ab012b145d866e57907b7d8de820c61964adcf54ddbde81758"}, @typed={0x17, 0xf7, 0x0, 0x0, @binary="693a482a2257e68d2013c337b2ab8f104cb2d7"}, @generic="7b439db919a1cdf0fc2742f299eb3109fe0f6c0f00368aafe024961128acebda8a1e6823fcbe1de8b3b91b78a51d6753b571996e7eba39310883bbf624b23a28d8d72431ac059725b86a07c62d8c", @nested={0x4, 0xca}, @nested={0x4, 0xa8}, @generic="dc87176e075b875124dc297520a2822dad0c09e5f9a12bb117d2dd3b32c8e0009feaf0b2bb8670b39f63092d2cc26d0d3d226f4c2bf57de6541ffa27639281e5be71fd81ce4f471c9a655aad2bc063b62192b97df55b26e31744e3d58c8eb03253c7c974308ddad61057a556e08719a48ca4eeea1c52599cb715e47d31c5abca6f0b9340514126d74cf1cf28ef6af55978220a38d8f3d9b0aec30d4bcd895d484d0575d5899780117313b5ef07b010", @nested={0x4, 0x148}, @generic="b8d60304fdc054b69d7ea6305855de3558318923207332bcbcc30970298937ce2c41aafa71fbb9807b2eb34366baf511c741e26455d69a3cbe2fdef7d1c2720bbd868cfe0863f10c0ad97d74ebb5324d84bfe44eecaa1e6d"]}]}, 0x680}, 0x1, 0x0, 0x0, 0x4040885}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000004300)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}, {&(0x7f00000022c0)="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", 0xfcd}], 0x2}, 0x4005)

1m3.965927604s ago: executing program 3 (id=1627):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}}]}, 0x64}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f0002"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@int=0x7f, 0x4)

1m3.661506584s ago: executing program 4 (id=1628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2a020400)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x7, 0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async)
r2 = socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r3=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x2400d800, &(0x7f0000000040)={0x11, 0x8100, r3, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14)
r4 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x62}, {0x0, 0x5, 0x1, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x4, 0x0, 0x4}, 0xf4, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x33}, 0xa, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x1}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x24, r6, 0x1, 0x4070bd28, 0x25dfdc00, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004a0a0}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r10, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async)
getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc)

1m3.446883112s ago: executing program 3 (id=1629):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000187fd8097a713ea9800080003"], 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0802edfeff000000000b00"/20], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000540)=0x2, 0x4)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000580)={<r3=>0x0}, &(0x7f00000005c0)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r3, 0x9}, 0x8)

1m3.305456811s ago: executing program 3 (id=1630):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdb}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x400, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0x1e8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x28, 'system_u:object_r:checkpolicy_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x0, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
r1 = socket(0x2, 0x2, 0x1)
vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb)
setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a01010000000000000000000000000000000000020100030200002000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff0000000000000000000000000c0008"], 0x134}}, 0x4000)
ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000740)={'caif0\x00', 0x7, 0x3})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004008200b8717dc445b3eb78a85d000100000100"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bf2400000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)

1m3.145858336s ago: executing program 3 (id=1631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

1m2.957486411s ago: executing program 3 (id=1632):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180500002020782500000000002020207b1af8def5c0a2ed37f6d8000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000099c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x4, @empty, 0x1ff}, 0x1c, 0x0}}], 0x1, 0x4000084)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r2, &(0x7f0000000080)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c0002801800020000000022e27ff515919cff2867fa54000000000000", 0x45, 0x0, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005880)={&(0x7f0000005780)=ANY=[@ANYBLOB="9feb010018000000000000000c000c00000005000000010000000000000801000000002e3013000000"], 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write(r6, &(0x7f0000001300)='-', 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet6(r7, &(0x7f0000000b40)={&(0x7f0000000140)={0xa, 0x4e20, 0x9, @mcast1, 0x888}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000280)="f64995251f0cc81b5b5749acc698d70dc01fbe6debcca2c58b1fca5e6908965b8d3d2e6ce07181f08885fa5c7cf1f71ce7c127233b162af3a5d1e767e74ee8d40e771331705ea2610a2354565029482ded42863b50ef817ba85e816c", 0x5c}, {&(0x7f0000000300)="5c21af61a13fc54b4f8bfd9f8f9dbeb6aeb5eb3fdfc8b261ccc465bc92fdb97cbdbf33297bdf5b669bf8f6e73deb52f43e611fbe82ec45b34661fb85ef", 0x3d}, {&(0x7f0000000600)="1be4a99920c697d27a9970b9553581f45e67edb302076b41566e34cbf52d194446b5764cfa3e0de8313f796f2ac1c21ec59a38971a864315cb7819d44c7564845cab9f507c5a37dd047d46e3213620ce16e589f1d1c07542415b698cf34a403e41cb4e1cbf7a3bd7c6ebcdf59a53aea7633a215b1072fee00a5303659ba3b4b8d2a7", 0x82}, {&(0x7f00000006c0)="42b41cbe41b24f4d5ceb7aae7e359cdeb26b6c92f0909f61bbfae6146cfcd8ccad2afc88a45fcd190fa584dd093815f1e098275913b4ff9589922fa8f4f217f2ffcf07eb6a86", 0x46}, {&(0x7f0000000740)="b31441c552ef799a13eb6b6a4d6c755ca5f33e623177b1d0a0bf6e22b694631f8fa9def7797884c9e35910c37fa626608b12968bc3e5d16d6f0dae64f9138675f2f1cce55b00d75b3185e16924a0ac872371406934fa781ef25f17e174667eed12014fa4d49f5facb30666c78f14aac87c98", 0x72}, {&(0x7f0000000900)="2e15fac9f41d0bc84dea31c413aab4f14b43b9b14d39e1e8aaff1ab119daca4fd5f8a27a5b3a1e2842288f4601507c0bcfc0926d5891668f9f16c7a42ac8183b37d2f6625da0e05df74a2eded791f444f5024cb78a1568eb1b93dd835a81a3376c2d9e9685f6f9708a1c0a757fa50924623cdad5c5cc93a4e4c02e96017a269f5e34fda8", 0x84}, {&(0x7f00000009c0)="5d61c52e61a0f0c7b26003bea194920b34e503b4090ea17ff4bfd0ea1b0374f064aae86753c2da008a54b2c7fa94653f091d7cb20764b8560baae9e36b44643418d5f74fa9b9ffd812fe36c1efeab60de66684ebb24e137c46fc3f9da78010df09b43d6b3dd2262ca813c22b80bf237d9e0763376ad0c182ce507ebb134fff5cafcd00fdbcbbf9a5cd061a5bae0f551891b8e31ab4e0f7534d1111da8b2ce6aa9a3edf810e0f80c87d51dc63e4d0c96fea", 0xb1}], 0x7, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000002900000043000000f8ffffff00000000150b2ed6bab5aa6cafb23a823045c14f3929bb075c4b0c51b3ac99400b95082da2e0d7e05f8664d55c48b74bf325e3dd77b19bb199893f376ed6f93b9c82afd033ddb2078617f8057ae633475b4ff8a2b7db5fd6455b8141ef2fb78dd71bd3713b57aef40490c665e34d682ed7d85602dcc38239c40d222d2136e56df16bfc8b810bc5571933ad5e897f51adf2f004fe05c9"], 0x18}, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

1m2.767829995s ago: executing program 4 (id=1633):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7ff}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa0}}, 0x0)

1m2.178399591s ago: executing program 4 (id=1634):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000100000000000000000005000000000000000000180100002018d91b1d14591fb3877ee5e0298320702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m2.061381481s ago: executing program 4 (id=1635):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x8)
r6 = socket$kcm(0x29, 0x5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000006100000085000000030000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendfile(r6, r7, 0x0, 0xffffffff000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r9, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r10 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)

57.731233171s ago: executing program 0 (id=1636):
r0 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94)

56.572339398s ago: executing program 1 (id=1637):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltclass={0x60, 0x29, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {0x8, 0x10}, {0xf, 0xfff1}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_RATE={0x6, 0x5, {0xc, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7fffffff}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000008ff000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8620000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf98000000000000560800000000000085000000bf000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltclass={0x60, 0x29, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {0x8, 0x10}, {0xf, 0xfff1}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_RATE={0x6, 0x5, {0xc, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7fffffff}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000008ff000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8620000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf98000000000000560800000000000085000000bf000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)

53.706122205s ago: executing program 2 (id=1638):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x10000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c)
listen(r4, 0xfffffffc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac33225659"], 0x50}}], 0x40000000000021a, 0x10)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

50.644599106s ago: executing program 3 (id=1639):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x9, 0x10}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008000300fb"], 0x28}, 0x1, 0x8}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x9, 0x10}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008000300fb"], 0x28}, 0x1, 0x8}, 0x4) (async)

48.228225417s ago: executing program 4 (id=1640):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000)
r2 = socket(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000700)={'gre0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x0, 0xffffff7f, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x64, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @local}}}})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400fbffb7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94)

37.387427052s ago: executing program 32 (id=1636):
r0 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94)

18.514083967s ago: executing program 33 (id=1637):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltclass={0x60, 0x29, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {0x8, 0x10}, {0xf, 0xfff1}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_RATE={0x6, 0x5, {0xc, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7fffffff}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000008ff000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8620000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf98000000000000560800000000000085000000bf000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltclass={0x60, 0x29, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {0x8, 0x10}, {0xf, 0xfff1}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_RATE={0x6, 0x5, {0xc, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7fffffff}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000008ff000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8620000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf98000000000000560800000000000085000000bf000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)

13.696490174s ago: executing program 34 (id=1638):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x10000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c)
listen(r4, 0xfffffffc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac33225659"], 0x50}}], 0x40000000000021a, 0x10)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

6.747972208s ago: executing program 35 (id=1639):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x9, 0x10}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008000300fb"], 0x28}, 0x1, 0x8}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x9, 0x10}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008000300fb"], 0x28}, 0x1, 0x8}, 0x4) (async)

0s ago: executing program 36 (id=1640):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000)
r2 = socket(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000700)={'gre0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x0, 0xffffff7f, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x64, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @local}}}})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400fbffb7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94)

kernel console output (not intermixed with test programs):

ulting to 1000
[  142.702117][ T7441] wg2 speed is unknown, defaulting to 1000
[  142.714045][ T7441] wg2 speed is unknown, defaulting to 1000
[  143.050047][ T7481] sctp: [Deprecated]: syz.3.436 (pid 7481) Use of int in max_burst socket option deprecated.
[  143.050047][ T7481] Use struct sctp_assoc_value instead
[  143.217257][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'.
[  143.940939][ T5619] block nbd0: Receive control failed (result -32)
[  143.940939][ T5626] block nbd0: Receive control failed (result -32)
[  145.311368][ T7561] netlink: 'syz.2.452': attribute type 5 has an invalid length.
[  145.590907][ T7579] __nla_validate_parse: 2 callbacks suppressed
[  145.590996][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[  145.800218][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'.
[  145.823592][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.824775][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.237237][ T7577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.260180][ T7577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.372301][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  146.605250][ T7577] geneve2: left promiscuous mode
[  146.690073][ T7593] veth3: entered promiscuous mode
[  146.690128][ T7593] veth3: entered allmulticast mode
[  146.702195][ T7593] team0: Device veth3 is up. Set it down before adding it as a team port
[  147.080692][ T1171] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.080766][ T1171] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.081201][ T1171] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.081435][ T1171] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.317791][ T7600] wg2 speed is unknown, defaulting to 1000
[  147.454133][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'.
[  147.727903][ T7673] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  148.094605][ T7695] lo: entered promiscuous mode
[  148.133335][ T7695] tunl0: entered promiscuous mode
[  148.143000][ T7695] gre0: entered promiscuous mode
[  148.167176][ T7695] gretap0: entered promiscuous mode
[  148.178277][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.469'.
[  148.196369][ T7695] erspan0: entered promiscuous mode
[  148.213796][ T7695] ip_vti0: entered promiscuous mode
[  148.222391][ T7695] ip6_vti0: entered promiscuous mode
[  148.236310][ T7695] sit0: entered promiscuous mode
[  148.273620][ T7695] ip6tnl0: entered promiscuous mode
[  148.284745][ T7695] ip6gre0: entered promiscuous mode
[  148.298063][ T7695] syz_tun: entered promiscuous mode
[  148.322646][ T7695] ip6gretap0: entered promiscuous mode
[  148.349668][ T7695] bridge0: entered promiscuous mode
[  148.362436][ T7695] vcan0: entered promiscuous mode
[  148.383511][ T7695] bond0: entered promiscuous mode
[  148.399125][ T7695] team0: entered promiscuous mode
[  148.412451][ T7695] dummy0: entered promiscuous mode
[  148.441954][ T7695] nlmon0: entered promiscuous mode
[  148.454617][ T7695] batadv0: entered promiscuous mode
[  148.485718][ T7695] vxcan0: entered promiscuous mode
[  148.497346][ T7695] vxcan1: entered promiscuous mode
[  148.512068][ T7695] wg0: entered promiscuous mode
[  148.526347][ T7695] wg1: entered promiscuous mode
[  148.544635][ T7695] wg2: entered promiscuous mode
[  148.551532][ T7695] veth0_to_bridge: entered promiscuous mode
[  148.566240][ T7695] bridge_slave_0: entered promiscuous mode
[  148.579226][ T7695] veth1_to_bridge: entered promiscuous mode
[  148.594261][ T7695] bridge_slave_1: entered promiscuous mode
[  148.605299][ T7695] veth0_to_bond: entered promiscuous mode
[  148.636117][ T7695] bond_slave_0: entered promiscuous mode
[  148.649251][ T7695] veth1_to_bond: entered promiscuous mode
[  148.663712][ T7695] bond_slave_1: entered promiscuous mode
[  148.681480][ T7695] veth0_to_team: entered promiscuous mode
[  148.707539][ T7695] team_slave_0: entered promiscuous mode
[  148.721326][ T7695] veth1_to_team: entered promiscuous mode
[  148.738961][ T7695] team_slave_1: entered promiscuous mode
[  148.757185][ T7695] veth0_to_batadv: entered promiscuous mode
[  148.775867][ T7695] batadv_slave_0: entered promiscuous mode
[  148.785675][ T7695] veth1_to_batadv: entered promiscuous mode
[  148.801644][ T7695] batadv_slave_1: entered promiscuous mode
[  148.827324][ T7695] xfrm0: entered promiscuous mode
[  148.836513][ T7695] veth0_to_hsr: entered promiscuous mode
[  148.846911][ T7695] veth1_to_hsr: entered promiscuous mode
[  148.857649][ T7695] hsr0: entered promiscuous mode
[  148.864839][ T7695] veth1_virt_wifi: entered promiscuous mode
[  148.873197][ T7695] veth0_virt_wifi: entered promiscuous mode
[  148.884017][ T7695] virt_wifi0: entered promiscuous mode
[  148.895051][ T7695] vlan0: entered promiscuous mode
[  148.905929][ T7695] vlan1: entered promiscuous mode
[  148.919184][ T7695] macvlan0: entered promiscuous mode
[  148.931401][ T7695] macvlan1: entered promiscuous mode
[  148.942758][ T7695] ipvlan0: entered promiscuous mode
[  148.960860][ T7695] ipvlan1: entered promiscuous mode
[  148.996314][ T7695] macvtap0: entered promiscuous mode
[  149.014720][ T7695] macsec0: entered promiscuous mode
[  149.022577][ T7695] geneve0: entered promiscuous mode
[  149.032515][ T7695] geneve1: entered promiscuous mode
[  149.044601][ T7695] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  149.046300][ T7695] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  149.057352][ T7695] vxcan2: entered promiscuous mode
[  149.064129][ T7695] vxcan3: entered promiscuous mode
[  149.069470][ T7695] syztnl0: entered promiscuous mode
[  149.081854][ T7695] macsec1: entered promiscuous mode
[  149.096394][ T7695] mac80211_hwsim hwsim6 caif0: entered promiscuous mode
[  149.098518][ T7695] bond1: entered promiscuous mode
[  149.126512][ T7695] bond2: entered promiscuous mode
[  149.144354][ T7695] erspan1: entered promiscuous mode
[  149.159824][ T7695] ipip0: entered promiscuous mode
[  149.165773][ T7695] netdevsim netdevsim0 eth0: entered promiscuous mode
[  149.166265][ T7695] netdevsim netdevsim0 eth1: entered promiscuous mode
[  149.166701][ T7695] netdevsim netdevsim0 eth2: entered promiscuous mode
[  149.173012][ T7695] netdevsim netdevsim0 eth3: entered promiscuous mode
[  149.197289][ T7695] bridge1: entered promiscuous mode
[  149.218365][ T7695] vlan2: entered promiscuous mode
[  149.233698][ T7695] bond4: entered promiscuous mode
[  149.238333][ T7695] veth0: entered promiscuous mode
[  149.238789][ T7695] veth1: entered promiscuous mode
[  149.335188][ T1395] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.335299][ T1395] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.335823][ T1395] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.336851][   T41] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.386053][ T7723] nbd2: detected capacity change from 0 to 63
[  149.394753][ T7723] block nbd2: NBD_DISCONNECT
[  149.400253][ T7723] block nbd2: Disconnected due to user request.
[  149.408411][ T7723] block nbd2: shutting down sockets
[  149.541479][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[  149.541519][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'.
[  149.630167][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[  149.630227][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[  149.630246][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[  149.829655][ T7723] veth3: entered allmulticast mode
[  149.877684][ T7723] team0: Port device veth3 added
[  149.883777][ T7724] IPVS: Error connecting to the multicast addr
[  150.003776][ T7735] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  150.014219][ T7735] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  150.032487][ T7735] 8021q: adding VLAN 0 to HW filter on device hsr1
[  150.178029][ T7747] ip_tables: iptables: counters copy to user failed while replacing table
[  150.455380][ T7757] Bluetooth: MGMT ver 1.23
[  150.455455][ T7757] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  151.328191][ T7796] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  151.624885][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'.
[  152.013689][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'.
[  152.043519][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'.
[  152.067381][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.499'.
[  152.308406][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'.
[  152.308447][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.503'.
[  152.611928][ T7853] netlink: 564 bytes leftover after parsing attributes in process `syz.0.505'.
[  152.703195][ T7853] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  152.736237][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'.
[  154.673506][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.679826][ T7857] 8021q: adding VLAN 0 to HW filter on device team0
[  154.704620][ T7857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.756465][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.765583][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.775769][ T7857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.781858][ T7857] veth1_vlan: left promiscuous mode
[  154.785983][ T7857] veth0_vlan: left promiscuous mode
[  154.788791][ T7857] veth0_vlan: entered promiscuous mode
[  154.808966][ T7857] veth1_vlan: entered promiscuous mode
[  154.821791][ T7857] veth1_macvtap: left promiscuous mode
[  154.828361][ T7857] veth0_macvtap: left promiscuous mode
[  154.835102][ T7857] veth0_macvtap: entered promiscuous mode
[  154.839279][ T7857] veth1_macvtap: entered promiscuous mode
[  154.853992][ T7857] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  154.864117][ T7857] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  154.873197][ T7857] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  154.881959][ T7857] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  154.889897][ T7857] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  154.914739][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.007500][ T7869] bridge0: port 1(vlan3) entered blocking state
[  155.014294][ T7869] bridge0: port 1(vlan3) entered disabled state
[  155.021021][ T7869] vlan3: entered allmulticast mode
[  155.021041][ T7869] geneve0: entered allmulticast mode
[  155.034498][ T7869] vlan3: entered promiscuous mode
[  155.045372][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.046647][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.079389][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.079521][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.175435][ T7855] wg2 speed is unknown, defaulting to 1000
[  155.191186][ T3394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.191265][ T3394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.191326][ T3394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.267647][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.513'.
[  155.267701][ T7887] openvswitch: netlink: Flow key attr not present in new flow.
[  155.727110][ T7899] Cannot find del_set index 0 as target
[  156.342668][ T7918] netlink: 244 bytes leftover after parsing attributes in process `syz.2.519'.
[  156.428255][ T7916] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  156.446228][ T7927] netlink: 'syz.2.519': attribute type 1 has an invalid length.
[  156.457033][ T7916] bond5 (unregistering): Released all slaves
[  156.464522][ T7928] netlink: 'syz.3.520': attribute type 11 has an invalid length.
[  156.488104][ T7926] netlink: 'syz.3.520': attribute type 2 has an invalid length.
[  156.488349][ T7926] netlink: 'syz.3.520': attribute type 2 has an invalid length.
[  156.536825][ T7926] netlink: 'syz.3.520': attribute type 2 has an invalid length.
[  156.537441][ T7926] netlink: 'syz.3.520': attribute type 2 has an invalid length.
[  156.537842][ T7926] netlink: 'syz.3.520': attribute type 2 has an invalid length.
[  156.547084][ T7926] netlink: 'syz.3.520': attribute type 2 has an invalid length.
[  156.547290][ T7926] netlink: 'syz.3.520': attribute type 2 has an invalid length.
[  156.547480][ T7926] netlink: 'syz.3.520': attribute type 2 has an invalid length.
[  156.631886][ T7926] __nla_validate_parse: 205 callbacks suppressed
[  156.631943][ T7926] netlink: 56 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.631966][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.631981][ T7926] netlink: 31 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.632063][ T7926] netlink: 31 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.641013][ T7926] netlink: 56 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.641085][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.641127][ T7926] netlink: 31 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.641169][ T7926] netlink: 31 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.663937][ T7926] netlink: 56 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.663998][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'.
[  156.856432][ T7927] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.179318][ T7953] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  157.400752][ T7960] syzkaller0: entered promiscuous mode
[  157.400800][ T7960] syzkaller0: entered allmulticast mode
[  157.676580][ T7964] dvmrp0: left allmulticast mode
[  158.502518][ T8019] : entered promiscuous mode
[  159.384549][ T8058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.399776][ T8053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.681376][ T8075] syz_tun: entered allmulticast mode
[  159.719343][ T8075] dvmrp6: entered allmulticast mode
[  159.764661][ T8080] syzkaller1: entered promiscuous mode
[  159.770431][ T8080] syzkaller1: entered allmulticast mode
[  159.801794][ T8080] wg2 speed is unknown, defaulting to 1000
[  159.937837][ T8070] syz_tun: left allmulticast mode
[  161.436177][ T5626] block nbd1: Receive control failed (result -32)
[  161.679395][ T8126] syz.0.572: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  161.708019][ T8126] CPU: 1 UID: 0 PID: 8126 Comm: syz.0.572 Not tainted syzkaller #0 PREEMPT(full) 
[  161.708051][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.708074][ T8126] Call Trace:
[  161.708088][ T8126]  <TASK>
[  161.708098][ T8126]  dump_stack_lvl+0xe8/0x150
[  161.708150][ T8126]  warn_alloc+0x24d/0x270
[  161.708188][ T8126]  ? kasan_save_track+0x4f/0x80
[  161.708210][ T8126]  ? kasan_save_track+0x3e/0x80
[  161.708237][ T8126]  ? __pfx_warn_alloc+0x10/0x10
[  161.708270][ T8126]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  161.708294][ T8126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.708339][ T8126]  __vmalloc_node_range_noprof+0x127/0x1540
[  161.708405][ T8126]  ? rcu_is_watching+0x16/0xb0
[  161.708440][ T8126]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  161.708474][ T8126]  ? __kmalloc_cache_noprof+0x321/0x600
[  161.708510][ T8126]  ? __kmalloc_cache_noprof+0x14d/0x600
[  161.708546][ T8126]  ? xskq_create+0x56/0x220
[  161.708582][ T8126]  xskq_create+0x148/0x220
[  161.708613][ T8126]  ? xsk_init_queue+0x8a/0xe0
[  161.708646][ T8126]  xsk_init_queue+0x8a/0xe0
[  161.708679][ T8126]  xsk_setsockopt+0x5e0/0x960
[  161.708711][ T8126]  ? __pfx_xsk_setsockopt+0x10/0x10
[  161.708741][ T8126]  ? __pfx_aa_sk_perm+0x10/0x10
[  161.708768][ T8126]  ? aa_sock_opt_perm+0x142/0x1e0
[  161.708796][ T8126]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  161.708824][ T8126]  ? __pfx_xsk_setsockopt+0x10/0x10
[  161.708853][ T8126]  do_sock_setsockopt+0x17c/0x1b0
[  161.708882][ T8126]  __x64_sys_setsockopt+0x13d/0x1b0
[  161.708909][ T8126]  do_syscall_64+0x166/0x520
[  161.708940][ T8126]  ? trace_irq_disable+0x3b/0x140
[  161.708960][ T8126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.708983][ T8126]  ? clear_bhb_loop+0x70/0xc0
[  161.709010][ T8126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.709044][ T8126] RIP: 0033:0x7fc2fc19e159
[  161.709072][ T8126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.709092][ T8126] RSP: 002b:00007fc2fd025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  161.709115][ T8126] RAX: ffffffffffffffda RBX: 00007fc2fc425fa0 RCX: 00007fc2fc19e159
[  161.709133][ T8126] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[  161.709146][ T8126] RBP: 00007fc2fc23503b R08: 0000000000000004 R09: 0000000000000000
[  161.709160][ T8126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.709174][ T8126] R13: 00007fc2fc426038 R14: 00007fc2fc425fa0 R15: 00007ffee8a61588
[  161.709212][ T8126]  </TASK>
[  161.709238][ T8126] Mem-Info:
[  161.709248][ T8126] active_anon:7087 inactive_anon:0 isolated_anon:0
[  161.709248][ T8126]  active_file:0 inactive_file:43282 isolated_file:0
[  161.709248][ T8126]  unevictable:1360 dirty:229 writeback:0
[  161.709248][ T8126]  slab_reclaimable:10728 slab_unreclaimable:98356
[  161.709248][ T8126]  mapped:30886 shmem:3392 pagetables:1231
[  161.709248][ T8126]  sec_pagetables:0 bounce:0
[  161.709248][ T8126]  kernel_misc_reclaimable:0
[  161.709248][ T8126]  free:1326076 free_pcp:11090 free_cma:0
[  161.709304][ T8126] Node 0 active_anon:28348kB inactive_anon:0kB active_file:0kB inactive_file:172932kB unevictable:5440kB isolated(anon):0kB isolated(file):0kB mapped:123544kB dirty:916kB writeback:0kB shmem:13568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13032kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  161.709371][ T8126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  161.849074][ T8126] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  161.849272][ T8126] lowmem_reserve[]: 0 2487 2487 2487 2487
[  161.849384][ T8126] Node 0 DMA32 free:1340836kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28348kB inactive_anon:0kB active_file:0kB inactive_file:172932kB unevictable:5440kB writepending:916kB zspages:0kB present:3129332kB managed:2546704kB mlocked:5532kB bounce:0kB free_pcp:44284kB local_pcp:19432kB free_cma:0kB
[  161.849548][ T8126] lowmem_reserve[]: 0 0 0 0 0
[  161.849664][ T8126] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  161.849809][ T8126] lowmem_reserve[]: 0 0 0 0 0
[  161.849925][ T8126] Node 1 Normal free:3948108kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[  161.850131][ T8126] lowmem_reserve[]: 0 0 0 0 0
[  161.850258][ T8126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  161.857362][ T8126] Node 0 DMA32: 439*4kB (UME) 351*8kB (UM) 285*16kB (UM) 252*32kB (UM) 33*64kB (UME) 11*128kB (UM) 1*256kB (E) 2*512kB (UE) 0*1024kB 4*2048kB (UM) 320*4096kB (UM) = 1340900kB
[  161.858961][ T8126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  161.859385][ T8126] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 7*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3948108kB
[  161.879081][ T8126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  161.879128][ T8126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.879197][ T8126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  161.879242][ T8126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.879293][ T8126] 46720 total pagecache pages
[  161.879326][ T8126] 0 pages in swap cache
[  161.879334][ T8126] Free swap  = 124996kB
[  161.879362][ T8126] Total swap = 124996kB
[  161.879386][ T8126] 2097051 pages RAM
[  161.879406][ T8126] 0 pages HighMem/MovableOnly
[  161.879427][ T8126] 428759 pages reserved
[  161.879449][ T8126] 0 pages cma reserved
[  162.008772][ T8133] __nla_validate_parse: 51 callbacks suppressed
[  162.008835][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'.
[  162.447075][ T8134] tipc: Started in network mode
[  162.447127][ T8134] tipc: Node identity 26f744acc8cb, cluster identity 4711
[  162.459198][ T8134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.665693][ T8138] tipc: Disabling bearer <eth:syzkaller0>
[  163.013042][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  163.507590][ T8169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.572400][ T8170] bridge_slave_0: left allmulticast mode
[  163.578294][ T8170] bridge_slave_0: left promiscuous mode
[  163.587680][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.620692][ T8170] bridge_slave_1: left allmulticast mode
[  163.626635][ T8170] bridge_slave_1: left promiscuous mode
[  163.634372][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.705486][ T8170] team0: Port device team_slave_0 removed
[  163.747631][ T8170] team0: Port device team_slave_1 removed
[  163.763860][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.763907][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.783437][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.783481][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.815324][ T8170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  163.889917][ T8175] netlink: 132 bytes leftover after parsing attributes in process `syz.3.585'.
[  164.833469][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'.
[  165.054396][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'.
[  167.135991][ T8222] kthread_run failed with err -4
[  167.370996][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.603'.
[  167.501902][ T5724] team_slave_0: entered promiscuous mode
[  167.502413][ T5724] team_slave_1: entered promiscuous mode
[  167.535043][ T8257] x_tables: duplicate underflow at hook 3
[  167.539717][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'.
[  167.554773][ T8257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.850657][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'.
[  168.069815][   T25] team_slave_0: left promiscuous mode
[  168.069868][   T25] team_slave_1: left promiscuous mode
[  168.087308][ T8272] syzkaller1: tun_chr_ioctl cmd 1074025681
[  168.089736][ T8272] syzkaller1: tun_chr_ioctl cmd 1074328842
[  168.126745][ T8275] netlink: 60 bytes leftover after parsing attributes in process `syz.0.614'.
[  168.177300][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'.
[  168.623006][ T8286] batman_adv: batadv0: Adding interface: macvlan2
[  168.623047][ T8286] batman_adv: batadv0: Interface activated: macvlan2
[  168.834470][ T8298] macsec1: entered promiscuous mode
[  168.834510][ T8298] bridge0: entered promiscuous mode
[  168.855148][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'.
[  168.864286][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'.
[  169.014157][ T8304] validate_nla: 58 callbacks suppressed
[  169.019950][ T8304] netlink: 'syz.2.620': attribute type 1 has an invalid length.
[  169.114744][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'.
[  169.126467][ T8303] netlink: 'syz.0.621': attribute type 1 has an invalid length.
[  169.138211][ T8311] xt_TCPMSS: Only works on TCP SYN packets
[  169.187660][ T8305] bond2: entered promiscuous mode
[  169.187697][ T8305] bond2: entered allmulticast mode
[  169.188128][ T8305] 8021q: adding VLAN 0 to HW filter on device bond2
[  169.241310][ T8304] bridge2: entered promiscuous mode
[  169.248541][ T8304] bridge2: entered allmulticast mode
[  169.255283][ T8304] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[  169.299434][ T8312] bridge3: entered promiscuous mode
[  169.305162][ T8312] bridge3: entered allmulticast mode
[  169.311613][ T8312] bond2: (slave bridge3): Enslaving as a backup interface with a down link
[  169.322089][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  169.442679][   T41] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  169.473403][ T8304] bridge4: entered promiscuous mode
[  169.483132][ T8304] bridge4: entered allmulticast mode
[  169.497078][ T8304] bond2: (slave bridge4): Enslaving as a backup interface with a down link
[  169.557684][ T8316] bridge5: entered promiscuous mode
[  169.564116][ T8316] bridge5: entered allmulticast mode
[  169.571379][ T8316] bond2: (slave bridge5): Enslaving as a backup interface with a down link
[  169.665435][ T8321] bridge6: entered promiscuous mode
[  169.671317][ T8321] bridge6: entered allmulticast mode
[  169.677482][ T8321] bond2: (slave bridge6): Enslaving as a backup interface with a down link
[  169.737987][ T8321] bridge7: entered promiscuous mode
[  169.738473][ T8321] bridge7: entered allmulticast mode
[  169.774030][ T8321] bond2: (slave bridge7): Enslaving as a backup interface with a down link
[  169.822566][ T8317] bridge8: entered promiscuous mode
[  169.825037][ T8317] bridge8: entered allmulticast mode
[  169.835863][ T8317] bond2: (slave bridge8): Enslaving as a backup interface with a down link
[  169.867037][ T8311] bridge_slave_1: left allmulticast mode
[  169.867093][ T8311] bridge_slave_1: left promiscuous mode
[  169.871243][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.897290][ T8311] bridge_slave_0: left allmulticast mode
[  169.897346][ T8311] bridge_slave_0: left promiscuous mode
[  169.900054][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.026241][ T8339] netlink: 132 bytes leftover after parsing attributes in process `syz.3.628'.
[  170.290009][ T8360] netlink: 44 bytes leftover after parsing attributes in process `syz.2.632'.
[  170.346597][ T8362] netlink: 'syz.1.631': attribute type 8 has an invalid length.
[  171.197726][ T8399] netlink: 'syz.3.643': attribute type 1 has an invalid length.
[  171.197771][ T8399] nbd: error processing sock list
[  171.210979][ T8399] block nbd2: shutting down sockets
[  171.680599][ T8420] openvswitch: netlink: Key type 288 is out of range max 32
[  172.219048][ T8436] syzkaller1: entered promiscuous mode
[  172.219094][ T8436] syzkaller1: entered allmulticast mode
[  172.288059][ T8437] xt_hashlimit: invalid rate
[  173.547128][ T8468] __nla_validate_parse: 4 callbacks suppressed
[  173.547172][ T8468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'.
[  174.338304][ T8409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  174.988304][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.676'.
[  175.168864][ T8504] bond2: option updelay: invalid value (18446744073709518847)
[  175.168915][ T8504] bond2: option updelay: allowed values 0 - 2147483647
[  175.211107][ T8504] bond2 (unregistering): Released all slaves
[  175.253879][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'.
[  175.263127][ T8517] netlink: 'syz.2.679': attribute type 8 has an invalid length.
[  175.270956][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.679'.
[  175.709365][ T8534] netlink: 'syz.3.685': attribute type 2 has an invalid length.
[  175.709426][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'.
[  175.825197][ T8537] netlink: 'syz.0.686': attribute type 1 has an invalid length.
[  175.903864][ T8543] syz.0.686: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  175.920711][ T8543] CPU: 1 UID: 0 PID: 8543 Comm: syz.0.686 Not tainted syzkaller #0 PREEMPT(full) 
[  175.920740][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  175.920765][ T8543] Call Trace:
[  175.920775][ T8543]  <TASK>
[  175.920784][ T8543]  dump_stack_lvl+0xe8/0x150
[  175.920824][ T8543]  warn_alloc+0x24d/0x270
[  175.920858][ T8543]  ? kasan_save_track+0x4f/0x80
[  175.920878][ T8543]  ? kasan_save_track+0x3e/0x80
[  175.920903][ T8543]  ? __pfx_warn_alloc+0x10/0x10
[  175.920933][ T8543]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  175.920956][ T8543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.920998][ T8543]  __vmalloc_node_range_noprof+0x127/0x1540
[  175.921053][ T8543]  ? rcu_is_watching+0x16/0xb0
[  175.921085][ T8543]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  175.921115][ T8543]  ? __kmalloc_cache_noprof+0x321/0x600
[  175.921150][ T8543]  ? __kmalloc_cache_noprof+0x14d/0x600
[  175.921182][ T8543]  ? xskq_create+0x56/0x220
[  175.921217][ T8543]  xskq_create+0x148/0x220
[  175.921247][ T8543]  ? xsk_init_queue+0x8a/0xe0
[  175.921278][ T8543]  xsk_init_queue+0x8a/0xe0
[  175.921309][ T8543]  xsk_setsockopt+0x52a/0x960
[  175.921341][ T8543]  ? __pfx_xsk_setsockopt+0x10/0x10
[  175.921369][ T8543]  ? __pfx_aa_sk_perm+0x10/0x10
[  175.921405][ T8543]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  175.921432][ T8543]  ? __pfx_xsk_setsockopt+0x10/0x10
[  175.921461][ T8543]  do_sock_setsockopt+0x17c/0x1b0
[  175.921487][ T8543]  __x64_sys_setsockopt+0x13d/0x1b0
[  175.921515][ T8543]  do_syscall_64+0x166/0x520
[  175.921546][ T8543]  ? trace_irq_disable+0x3b/0x140
[  175.921568][ T8543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.921591][ T8543]  ? clear_bhb_loop+0x70/0xc0
[  175.921625][ T8543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.921645][ T8543] RIP: 0033:0x7fc2fc19e159
[  175.921666][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.921684][ T8543] RSP: 002b:00007fc2fcfe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  175.921709][ T8543] RAX: ffffffffffffffda RBX: 00007fc2fc426180 RCX: 00007fc2fc19e159
[  175.921725][ T8543] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  175.921738][ T8543] RBP: 00007fc2fc23503b R08: 0000000000000004 R09: 0000000000000000
[  175.921752][ T8543] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.921766][ T8543] R13: 00007fc2fc426218 R14: 00007fc2fc426180 R15: 00007ffee8a61588
[  175.921800][ T8543]  </TASK>
[  176.039125][ T8543] Mem-Info:
[  176.039168][ T8543] active_anon:5630 inactive_anon:0 isolated_anon:0
[  176.039168][ T8543]  active_file:0 inactive_file:43288 isolated_file:0
[  176.039168][ T8543]  unevictable:0 dirty:240 writeback:0
[  176.039168][ T8543]  slab_reclaimable:10551 slab_unreclaimable:99332
[  176.039168][ T8543]  mapped:29597 shmem:521 pagetables:1259
[  176.039168][ T8543]  sec_pagetables:0 bounce:0
[  176.039168][ T8543]  kernel_misc_reclaimable:0
[  176.039168][ T8543]  free:1311854 free_pcp:15978 free_cma:0
[  176.048527][ T8543] Node 0 active_anon:22520kB inactive_anon:0kB active_file:0kB inactive_file:172956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118388kB dirty:960kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13304kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  176.048753][ T8543] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  176.048893][ T8543] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  176.049062][ T8543] lowmem_reserve[]: 0 2487 2487 2487 2487
[  176.049176][ T8543] Node 0 DMA32 free:1283700kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22520kB inactive_anon:0kB active_file:0kB inactive_file:172956kB unevictable:0kB writepending:960kB zspages:0kB present:3129332kB managed:2546704kB mlocked:0kB bounce:0kB free_pcp:63872kB local_pcp:28624kB free_cma:0kB
[  176.049325][ T8543] lowmem_reserve[]: 0 0 0 0 0
[  176.049425][ T8543] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  176.049614][ T8543] lowmem_reserve[]: 0 0 0 0 0
[  176.056828][ T8543] Node 1 Normal free:3948356kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  176.066280][ T8543] lowmem_reserve[]: 0 0 0 0 0
[  176.066404][ T8543] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  176.066719][ T8543] Node 0 DMA32: 1799*4kB (UME) 501*8kB (UME) 596*16kB (UME) 189*32kB (UME) 129*64kB (UME) 48*128kB (UME) 8*256kB (UM) 3*512kB (UME) 0*1024kB 3*2048kB (M) 301*4096kB (UM) = 1283812kB
[  176.067166][ T8543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  176.067539][ T8543] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 12*16kB (UM) 8*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3948356kB
[  176.077937][ T8543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  176.077965][ T8543] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  176.077983][ T8543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  176.078001][ T8543] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  176.078017][ T8543] 43805 total pagecache pages
[  176.078026][ T8543] 0 pages in swap cache
[  176.078033][ T8543] Free swap  = 124996kB
[  176.078042][ T8543] Total swap = 124996kB
[  176.078051][ T8543] 2097051 pages RAM
[  176.078059][ T8543] 0 pages HighMem/MovableOnly
[  176.078067][ T8543] 428759 pages reserved
[  176.078075][ T8543] 0 pages cma reserved
[  176.185907][ T8553] netlink: 'syz.1.688': attribute type 10 has an invalid length.
[  176.599268][ T8553] syz_tun: entered promiscuous mode
[  176.687359][ T8543] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  176.689283][ T8542] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0
[  176.855989][ T8555] Unknown options in mask 6
[  176.869104][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'.
[  176.879865][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'.
[  176.879924][ T8555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.691'.
[  176.889330][ T8557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.691'.
[  176.921222][ T8560] netlink: 'syz.2.691': attribute type 1 has an invalid length.
[  176.929559][ T8560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.691'.
[  177.312036][ T8559] netlink: 'syz.2.691': attribute type 1 has an invalid length.
[  177.417911][ T8587] netlink: 'syz.4.695': attribute type 21 has an invalid length.
[  177.426657][ T8587] netlink: 'syz.4.695': attribute type 1 has an invalid length.
[  177.553277][ T8579] sctp: [Deprecated]: syz.1.694 (pid 8579) Use of int in max_burst socket option deprecated.
[  177.553277][ T8579] Use struct sctp_assoc_value instead
[  178.405070][ T8634] syzkaller0: entered promiscuous mode
[  178.405126][ T8634] syzkaller0: entered allmulticast mode
[  178.752440][ T8648] __nla_validate_parse: 12 callbacks suppressed
[  178.752497][ T8648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.715'.
[  178.752519][ T8648] nbd: must specify at least one socket
[  178.883965][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'.
[  178.884006][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'.
[  178.884736][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'.
[  178.884760][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'.
[  179.031417][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'.
[  179.108404][ T8674] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  179.117246][ T8674] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  179.117478][ T8674] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  179.265850][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'.
[  179.360574][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'.
[  179.479340][ T8677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.720'.
[  180.371828][ T8711] netlink: 'syz.1.731': attribute type 10 has an invalid length.
[  180.383100][ T8711] 8021q: adding VLAN 0 to HW filter on device team0
[  180.394217][ T8711] bond0: (slave team0): Enslaving as an active interface with an up link
[  180.738344][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'.
[  180.756072][ T8730] netlink: 'syz.2.735': attribute type 10 has an invalid length.
[  180.818708][ T8730] team0: Port device dummy0 added
[  180.840943][ T8730] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  181.172545][ T8750] netlink: 'syz.2.741': attribute type 3 has an invalid length.
[  181.293651][ T8752] bridge2: entered promiscuous mode
[  181.299123][ T8752] bridge2: entered allmulticast mode
[  181.311593][ T8752] team0: Port device bridge2 added
[  181.324019][ T8752] bridge0: port 1(team0) entered blocking state
[  181.325229][ T8752] bridge0: port 1(team0) entered disabled state
[  181.328557][ T8752] team0: entered allmulticast mode
[  181.357349][ T8752] team0: entered promiscuous mode
[  182.094905][ T5626] block nbd2: Receive control failed (result -32)
[  182.095354][ T5619] block nbd2: Receive control failed (result -32)
[  182.249783][ T8794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.336225][ T8794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.420445][ T8815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.725170][ T8824] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  182.737204][ T8824] batman_adv: batadv0: Adding interface: gretap1
[  182.745046][ T8824] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  182.771694][ T8824] batman_adv: batadv0: Interface activated: gretap1
[  183.062123][ T8838] netlink: 'syz.3.769': attribute type 1 has an invalid length.
[  183.409030][ T8851] wg2 speed is unknown, defaulting to 1000
[  183.609254][ T8840] sctp: [Deprecated]: syz.2.767 (pid 8840) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.609254][ T8840] Use struct sctp_sack_info instead
[  183.855624][ T8866] bridge0: port 3(wlan1) entered blocking state
[  183.855728][ T8866] bridge0: port 3(wlan1) entered disabled state
[  183.855924][ T8866] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  183.919466][ T8866] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  184.186228][ T8873] __nla_validate_parse: 7 callbacks suppressed
[  184.186274][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.777'.
[  184.244792][ T8873] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  184.267952][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.268005][ T8889] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.305851][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.305908][ T8889] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.333465][ T8889] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  184.339741][ T8889] batman_adv: batadv0: Removing interface: ip6gretap1
[  184.363624][ T8889] batman_adv: batadv0: Removing interface: vlan2
[  184.729357][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'.
[  184.808032][ T8901] vlan2: entered allmulticast mode
[  184.813893][ T8901] bridge9: entered allmulticast mode
[  184.843447][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.856348][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.950773][   T41] bond2: (slave bridge2): link status up again after 0 ms
[  184.950843][   T41] bond2: (slave bridge2): failed to get link speed/duplex
[  185.062019][   T41] bond2: (slave bridge2): failed to get link speed/duplex
[  185.206491][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  185.311620][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  185.430640][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  185.551486][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  185.664184][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  185.771569][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  185.951984][ T8933] netlink: 'syz.1.791': attribute type 8 has an invalid length.
[  186.081683][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'.
[  186.092461][ T8938] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  186.102357][ T8938] netlink: 92 bytes leftover after parsing attributes in process `syz.0.794'.
[  186.225042][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'.
[  186.310685][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'.
[  186.507591][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'.
[  186.615236][ T8942] virtio_blk virtio4: 1/0/0 default/read/poll queues
[  186.658017][ T8942] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  186.750763][ T1395] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  186.760120][   T41] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  186.760208][   T41] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  186.760363][   T41] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  186.923119][ T8955] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  186.930000][ T8955] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  187.785532][ T8981] netlink: 'syz.0.806': attribute type 1 has an invalid length.
[  187.991396][ T8981] bond6: entered promiscuous mode
[  187.999819][ T8981] 8021q: adding VLAN 0 to HW filter on device bond6
[  188.305018][ T9022] netlink: 'syz.1.815': attribute type 1 has an invalid length.
[  188.505507][ T9030] netlink: 'syz.3.817': attribute type 1 has an invalid length.
[  188.555454][ T9030] bond2: entered promiscuous mode
[  188.556551][ T9030] 8021q: adding VLAN 0 to HW filter on device bond2
[  188.786522][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.819'.
[  188.921262][ T9049] netlink: 'syz.0.824': attribute type 8 has an invalid length.
[  189.157648][ T9057] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  189.320451][   T41] net_ratelimit: 25 callbacks suppressed
[  189.320506][   T41] bond2: (slave bridge2): failed to get link speed/duplex
[  189.451480][   T41] bond2: (slave bridge2): failed to get link speed/duplex
[  189.451983][ T9074] macsec0: entered promiscuous mode
[  189.466148][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'.
[  189.476837][ T9074] veth1_macvtap: left promiscuous mode
[  189.506914][ T9074] macsec0 (unregistering): left promiscuous mode
[  189.623798][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  189.735793][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  189.844341][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  189.960724][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  190.073695][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  190.176473][ T9108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.188859][ T1022] bond2: (slave bridge2): failed to get link speed/duplex
[  190.290452][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  190.374287][ T9093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.400450][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  190.621030][ T9132] netlink: 48 bytes leftover after parsing attributes in process `syz.2.843'.
[  190.687233][ T9133] syzkaller0: entered promiscuous mode
[  190.687282][ T9133] syzkaller0: entered allmulticast mode
[  190.698283][ T9133] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  190.715943][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'.
[  191.122371][ T9141] veth0: entered promiscuous mode
[  191.129140][ T9140] veth0: left promiscuous mode
[  191.518319][ T9154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.852'.
[  191.654168][ T9157] xt_CT: No such helper "netbios-ns"
[  192.597339][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'.
[  193.383538][ T9113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  193.683889][ T9186] netlink: 52 bytes leftover after parsing attributes in process `syz.4.861'.
[  193.889239][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'.
[  194.355005][ T9209] veth0: entered promiscuous mode
[  194.375832][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  194.392662][ T9208] veth0: left promiscuous mode
[  194.411929][ T1395] net_ratelimit: 33 callbacks suppressed
[  194.411974][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  194.432488][ T9212] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  194.458990][ T9212] syzkaller0: entered promiscuous mode
[  194.459051][ T9212] syzkaller0: entered allmulticast mode
[  194.502614][ T9212] tipc: Started in network mode
[  194.502671][ T9212] tipc: Node identity a637c91d0ab4, cluster identity 4711
[  194.509262][ T9212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.522087][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  194.569468][ T9212] tipc: Resetting bearer <eth:syzkaller0>
[  194.611786][ T9211] tipc: Resetting bearer <eth:syzkaller0>
[  194.651284][ T9211] tipc: Disabling bearer <eth:syzkaller0>
[  194.676045][ T9230] netlink: 68 bytes leftover after parsing attributes in process `syz.4.876'.
[  194.737635][ T9230] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  194.771591][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  194.851583][ T9230] netlink: 148 bytes leftover after parsing attributes in process `syz.4.876'.
[  194.881016][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  195.055337][ T9249] netlink: 14 bytes leftover after parsing attributes in process `syz.3.883'.
[  195.102508][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  195.122028][ T5723] wg2 speed is unknown, defaulting to 1000
[  195.230416][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  195.307001][ T9259] veth0: entered promiscuous mode
[  195.316859][ T9258] veth0: left promiscuous mode
[  195.340666][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  195.450430][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  195.666168][ T9276] tc_dump_action: action bad kind
[  195.999408][ T9289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.893'.
[  196.246649][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'.
[  196.376380][ T9295] vlan2: entered allmulticast mode
[  196.376418][ T9295] bridge4: entered allmulticast mode
[  196.383650][ T9303] bridge4: port 1(erspan0) entered blocking state
[  196.384252][ T9303] bridge4: port 1(erspan0) entered disabled state
[  196.384664][ T9303] erspan0: entered allmulticast mode
[  196.389961][ T9303] erspan0: entered promiscuous mode
[  196.394931][ T9303] bridge4: port 1(erspan0) entered blocking state
[  196.395052][ T9303] bridge4: port 1(erspan0) entered forwarding state
[  196.429986][ T9295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'.
[  196.509799][ T9301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.897'.
[  196.915603][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.916286][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.941617][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  197.622819][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.622892][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.623010][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.631942][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.985087][ T5619] block nbd4: Receive control failed (result -32)
[  198.062107][ T5619] Bluetooth: hci4: link tx timeout
[  198.062262][ T5619] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.089392][ T5626] Bluetooth: hci4: link tx timeout
[  198.089431][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.435345][ T9394] block nbd5: server does not support multiple connections per device.
[  198.445636][ T5626] Bluetooth: hci4: link tx timeout
[  198.446730][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.466802][ T9394] block nbd5: shutting down sockets
[  198.485659][ T5626] Bluetooth: hci4: link tx timeout
[  198.485708][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.834336][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.915'.
[  198.834385][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'.
[  199.042397][ T9424] bond1: entered promiscuous mode
[  199.048336][ T9424] 8021q: adding VLAN 0 to HW filter on device bond1
[  199.074476][ T5626] Bluetooth: hci4: link tx timeout
[  199.074507][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  199.074752][ T5626] Bluetooth: hci4: link tx timeout
[  199.083047][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  199.210068][ T9397] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  199.210122][ T9397] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  199.307132][ T9435] veth0: entered promiscuous mode
[  199.352258][ T9397] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  199.352271][ T9434] veth0: left promiscuous mode
[  199.352300][ T9397] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  199.430528][ T9397] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  199.446361][ T9397] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  199.502185][ T3394] net_ratelimit: 21 callbacks suppressed
[  199.502257][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  199.580498][ T9397] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  199.580544][ T9397] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  199.614827][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  199.720538][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  199.829755][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'.
[  199.860591][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  199.915854][ T9452] syzkaller0: entered promiscuous mode
[  199.915908][ T9452] syzkaller0: entered allmulticast mode
[  200.120628][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  200.142640][ T5626] Bluetooth: hci4: command 0x0406 tx timeout
[  200.150251][ T5626] Bluetooth: hci4: link tx timeout
[  200.168089][ T9397] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  200.168130][ T9397] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  200.218068][ T9475] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  200.302379][ T9478] netlink: 'syz.0.927': attribute type 1 has an invalid length.
[  200.554771][ T9478] 8021q: adding VLAN 0 to HW filter on device bond7
[  200.560236][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.931'.
[  200.574979][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  200.678800][ T9491] syz_tun: left promiscuous mode
[  200.712153][ T9491] bond7: (slave syz_tun): Enslaving as a backup interface with an up link
[  200.732700][ T1022] bond2: (slave bridge2): failed to get link speed/duplex
[  200.760837][ T1395] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  200.840918][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  201.031961][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'.
[  201.102966][ T9516] 8021q: adding VLAN 0 to HW filter on device bond3
[  201.116079][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.937'.
[  201.118032][ T9517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.937'.
[  201.120195][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'.
[  201.179420][ T9522] bond3: (slave batadv1): Opening slave failed
[  201.226923][ T9526] netlink: 68 bytes leftover after parsing attributes in process `syz.3.938'.
[  201.445508][ T9533] netlink: 'syz.0.940': attribute type 13 has an invalid length.
[  201.506355][   T31] audit: type=1800 audit(1789033708.956:4): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.941" name="memory.events" dev="tmpfs" ino=922 res=0 errno=0
[  201.886871][ T9557] netlink: 52 bytes leftover after parsing attributes in process `syz.1.944'.
[  201.992760][ T9564] veth0: entered promiscuous mode
[  201.999827][ T9563] veth0: left promiscuous mode
[  202.569405][ T9592] netlink: 'syz.3.952': attribute type 1 has an invalid length.
[  202.651022][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.952'.
[  202.695322][ T9592] bond3: entered promiscuous mode
[  202.704245][ T9592] 8021q: adding VLAN 0 to HW filter on device bond3
[  202.722686][ T9599] netlink: 204 bytes leftover after parsing attributes in process `syz.0.955'.
[  202.779462][ T9595] bond3: (slave bridge1): making interface the new active one
[  202.791103][ T9595] bridge1: entered promiscuous mode
[  202.801822][ T9595] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  203.895303][ T9656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.895346][ T9656] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.934053][ T9656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.941646][ T9656] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.954049][ T9656] batman_adv: batadv0: Interface deactivated: macvlan2
[  203.954088][ T9656] batman_adv: batadv0: Removing interface: macvlan2
[  204.104112][ T9669] netlink: 'syz.2.969': attribute type 7 has an invalid length.
[  204.112056][ T9669] netlink: 'syz.2.969': attribute type 8 has an invalid length.
[  204.121300][ T9669] x_tables: ip_tables: osf match: only valid for protocol 6
[  204.533523][ T9685] syzkaller0: entered promiscuous mode
[  204.533582][ T9685] syzkaller0: entered allmulticast mode
[  204.585022][   T13] net_ratelimit: 25 callbacks suppressed
[  204.585091][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  204.700684][   T41] bond2: (slave bridge2): failed to get link speed/duplex
[  204.817227][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  204.920496][   T41] bond2: (slave bridge2): failed to get link speed/duplex
[  205.123149][ T9713] netlink: 'syz.2.977': attribute type 1 has an invalid length.
[  205.133236][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  205.300644][ T9713] 8021q: adding VLAN 0 to HW filter on device bond4
[  205.373122][ T9720] veth7: entered allmulticast mode
[  205.388360][ T9720] bond4: (slave veth7): Enslaving as an active interface with an up link
[  205.421495][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  205.448165][ T9725] __nla_validate_parse: 4 callbacks suppressed
[  205.448220][ T9725] netlink: 128 bytes leftover after parsing attributes in process `syz.4.980'.
[  205.531644][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  205.641696][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  205.753311][   T41] bond2: (slave bridge2): failed to get link speed/duplex
[  205.862684][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  205.904750][ T9737] sctp: [Deprecated]: syz.1.983 (pid 9737) Use of struct sctp_assoc_value in delayed_ack socket option.
[  205.904750][ T9737] Use struct sctp_sack_info instead
[  206.292233][ T9753] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  206.296383][ T9753] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  206.296757][ T9753] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  206.351671][ T9753] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  206.443322][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.989'.
[  206.462093][ T9756] syz.3.989 (9756) used obsolete PPPIOCDETACH ioctl
[  206.661742][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'.
[  206.671383][ T9765] netlink: 'syz.2.991': attribute type 11 has an invalid length.
[  207.422527][ T9798] netlink: 'syz.3.999': attribute type 1 has an invalid length.
[  207.666596][ T9797] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  208.109330][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'.
[  208.147347][ T9818] lo speed is unknown, defaulting to 1000
[  208.147436][ T9818] lo speed is unknown, defaulting to 1000
[  208.179452][ T9818] lo speed is unknown, defaulting to 1000
[  208.187193][ T9818] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  208.202888][ T9818] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  208.202960][ T9818] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  208.276468][ T9818] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  208.504298][ T9818] lo speed is unknown, defaulting to 1000
[  208.517332][ T9818] lo speed is unknown, defaulting to 1000
[  208.528247][ T9818] lo speed is unknown, defaulting to 1000
[  208.564785][ T9818] lo speed is unknown, defaulting to 1000
[  208.605332][ T9818] lo speed is unknown, defaulting to 1000
[  208.883952][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'.
[  209.202861][ T9867] syzkaller0: entered promiscuous mode
[  209.202904][ T9867] syzkaller0: entered allmulticast mode
[  209.604205][   T80] net_ratelimit: 27 callbacks suppressed
[  209.604261][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  209.710798][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  209.794091][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794164][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794178][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794192][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794250][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794309][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794347][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794395][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794436][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794480][ T9892] tc action pedit unable to extract header offset for header type (0x4)
[  209.794555][ T9892] 0: reclassify loop, rule prio 0, protocol 800
[  209.831427][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  210.054004][ T9903] tipc: Started in network mode
[  210.060410][ T9903] tipc: Node identity 080211, cluster identity 4711
[  210.060619][ T9903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.082039][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  210.190384][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  210.310449][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  210.422027][ T1395] bond2: (slave bridge2): failed to get link speed/duplex
[  210.454515][ T9925] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20003
[  210.481819][ T9918] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  210.570512][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  210.674810][ T9921] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1021'.
[  210.690591][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  210.997954][ T9934] bond0: entered promiscuous mode
[  211.003830][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.116107][ T9953] veth0: entered promiscuous mode
[  211.136984][ T9951] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1028'.
[  211.148420][ T9952] veth0: left promiscuous mode
[  211.214474][  T988] tipc: Node number set to 134353152
[  212.229490][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1038'.
[  212.720971][T10016] Bluetooth: hci0: unsupported parameter 5135
[  212.721013][T10016] Bluetooth: hci0: unsupported parameter 8192
[  212.721059][T10016] Bluetooth: hci0: unsupported parameter 5135
[  212.721078][T10016] Bluetooth: hci0: unsupported parameter 8192
[  212.764837][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'.
[  212.889727][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1046'.
[  213.257915][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'.
[  213.414929][T10044] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1050'.
[  213.975218][   T80] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[  214.690529][   T41] net_ratelimit: 29 callbacks suppressed
[  214.690579][   T41] bond2: (slave bridge2): failed to get link speed/duplex
[  214.823165][   T41] bond2: (slave bridge2): failed to get link speed/duplex
[  214.935315][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  214.945005][T10132] netlink: 'syz.0.1069': attribute type 13 has an invalid length.
[  214.994189][T10132] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1069'.
[  215.051853][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  215.160718][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  215.272024][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  215.420597][T10165] bond2: (slave bridge2): failed to get link speed/duplex
[  215.531168][T10163] bond2: (slave bridge2): failed to get link speed/duplex
[  215.643995][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  215.681674][T10178] tc_dump_action: action bad kind
[  215.750454][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  216.775284][T10215] vlan0: entered promiscuous mode
[  216.996296][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'.
[  217.006209][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1087'.
[  217.154426][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'.
[  217.207271][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'.
[  217.208630][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'.
[  217.514126][T10158] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.514178][T10158] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  217.514282][T10158] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.514323][T10158] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  217.514366][T10158] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.514397][T10158] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  217.514440][T10158] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.514470][T10158] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  217.587571][T10247] tipc: Cannot configure node identity twice
[  217.741329][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1093'.
[  218.241559][T10276] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  218.826158][T10297] can_create: 1 callbacks suppressed
[  218.826213][T10297] can: request_module (can-proto-0) failed.
[  219.165126][T10315] syzkaller0: entered promiscuous mode
[  219.165166][T10315] syzkaller0: entered allmulticast mode
[  219.184817][T10316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.186098][T10315] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.203856][T10315] tipc: Resetting bearer <eth:syzkaller0>
[  219.219562][T10314] tipc: Resetting bearer <eth:syzkaller0>
[  219.256751][T10314] tipc: Disabling bearer <eth:syzkaller0>
[  219.407257][T10321] x_tables: unsorted entry at hook 2
[  219.736503][T10158] net_ratelimit: 33 callbacks suppressed
[  219.736558][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  219.808653][T10340] x_tables: duplicate underflow at hook 1
[  219.847148][T10341] syzkaller0: entered promiscuous mode
[  219.847202][T10341] syzkaller0: entered allmulticast mode
[  219.903184][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  219.945287][T10343] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1117'.
[  219.956807][T10350] ip6gretap0: entered promiscuous mode
[  220.010430][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  220.122001][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  220.231277][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  220.340472][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  220.406233][T10363] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1124'.
[  220.451878][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  220.543526][T10379] netlink: 'syz.2.1129': attribute type 2 has an invalid length.
[  220.563139][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  220.673794][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  220.678470][T10380] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1127'.
[  220.678525][T10380] nbd: must specify at least one socket
[  220.781040][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  220.801478][T10385] wg2 speed is unknown, defaulting to 1000
[  220.828377][T10385] lo speed is unknown, defaulting to 1000
[  220.879925][T10388] batman_adv: batadv0: Adding interface: gretap2
[  220.880142][T10388] batman_adv: batadv0: The MTU of interface gretap2 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  220.881928][T10388] batman_adv: batadv0: Interface activated: gretap2
[  221.151859][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.707035][T10410] C: renamed from veth1_to_team
[  221.737654][T10410] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1137'.
[  222.226833][T10442] syzkaller0: entered promiscuous mode
[  222.233845][T10442] syzkaller0: entered allmulticast mode
[  222.253739][T10442] __nla_validate_parse: 1 callbacks suppressed
[  222.260167][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'.
[  222.542304][T10448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1145'.
[  222.758958][T10464] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1148'.
[  222.785969][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1148'.
[  222.834522][T10456] syzkaller0: entered promiscuous mode
[  222.834575][T10456] syzkaller0: entered allmulticast mode
[  222.848944][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1147'.
[  222.877801][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1149'.
[  222.927305][T10468] netlink: 8946 bytes leftover after parsing attributes in process `syz.3.1148'.
[  223.500018][T10479] netlink: 'syz.0.1152': attribute type 10 has an invalid length.
[  223.511586][T10479] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1152'.
[  223.814559][T10496] netlink: 'syz.4.1155': attribute type 4 has an invalid length.
[  223.916434][T10498] xt_l2tp: invalid flags combination: 8
[  224.207571][T10506] netlink: 'syz.2.1158': attribute type 3 has an invalid length.
[  224.207614][T10506] netlink: 'syz.2.1158': attribute type 1 has an invalid length.
[  224.207640][T10506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1158'.
[  224.268028][T10509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1161'.
[  224.414479][T10514] netlink: 'syz.3.1161': attribute type 4 has an invalid length.
[  224.522698][T10527] netlink: 'syz.4.1164': attribute type 1 has an invalid length.
[  224.531810][T10527] netlink: 'syz.4.1164': attribute type 1 has an invalid length.
[  224.880445][T10149] net_ratelimit: 19 callbacks suppressed
[  224.882889][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  224.930890][T10502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.000993][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  225.118329][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  225.222498][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  225.333704][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  225.451123][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  225.560462][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  225.593090][T10552] wg2 speed is unknown, defaulting to 1000
[  225.605306][T10552] lo speed is unknown, defaulting to 1000
[  225.651405][T10558] xt_hashlimit: size too large, truncated to 1048576
[  225.670388][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  225.840451][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  226.042064][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  226.608346][T10584] syzkaller1: entered promiscuous mode
[  226.625763][T10584] syzkaller1: entered allmulticast mode
[  226.798363][T10598] netlink: 'syz.1.1180': attribute type 1 has an invalid length.
[  227.598509][T10643] __nla_validate_parse: 8 callbacks suppressed
[  227.606312][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'.
[  227.616604][T10643] netlink: 'syz.2.1189': attribute type 5 has an invalid length.
[  227.759575][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'.
[  227.917233][T10662] netlink: 564 bytes leftover after parsing attributes in process `syz.3.1194'.
[  230.520403][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1197'.
[  230.531502][T10149] net_ratelimit: 12 callbacks suppressed
[  230.531538][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  230.640491][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  230.750878][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  230.809986][T10691] syzkaller0: entered allmulticast mode
[  230.873250][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'.
[  230.873303][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'.
[  230.873458][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'.
[  230.893433][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  231.070386][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  231.181684][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  231.291387][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  231.400506][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  231.566787][T10736] ipt_rpfilter: unknown options
[  231.727538][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  231.831523][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  231.890141][T10743] xt_hl: Unknown Hop Limit match mode: 4
[  231.953513][T10748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.176150][T10757] wg2 speed is unknown, defaulting to 1000
[  232.317534][T10757] lo speed is unknown, defaulting to 1000
[  232.428629][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'.
[  232.439588][T10745] tipc: Disabling bearer <eth:syzkaller0>
[  232.696365][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  232.736307][T10773] bridge0: entered promiscuous mode
[  233.184064][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1223'.
[  233.500950][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'.
[  233.523828][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'.
[  233.903548][T10819] vcan0: tx drop: invalid sa for name 0x0000004000000000
[  234.041968][T10826] netlink: 'syz.2.1234': attribute type 2 has an invalid length.
[  234.049929][T10826] netlink: 'syz.2.1234': attribute type 2 has an invalid length.
[  234.158282][T10828] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1235'.
[  234.618755][T10850] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1242'.
[  234.710409][   T31] audit: type=1804 audit(1789033742.156:5): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1244" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1255 res=1 errno=0
[  234.710481][   T31] audit: type=1800 audit(1789033742.156:6): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1244" name="cgroup.controllers" dev="tmpfs" ino=1255 res=0 errno=0
[  234.773571][T10857] netlink: 'syz.3.1245': attribute type 1 has an invalid length.
[  234.868243][T10857] 8021q: adding VLAN 0 to HW filter on device bond5
[  234.954859][T10856] bond5: (slave geneve2): making interface the new active one
[  234.964835][T10856] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  235.033903][T10865] ip6tnl3: entered promiscuous mode
[  235.039418][T10865] ip6tnl3: entered allmulticast mode
[  235.091904][T10149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.203519][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1252'.
[  235.203575][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'.
[  235.339565][T10870] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  235.456667][T10870] bond5 (unregistering): Released all slaves
[  235.541428][T10149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.541502][T10149] net_ratelimit: 19 callbacks suppressed
[  235.541532][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  235.541572][T10149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.541615][T10149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.650494][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  235.756723][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'.
[  235.760930][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  235.870520][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  235.983450][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  236.132475][T10910] team0: Port device vlan3 added
[  236.151033][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  236.175879][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'.
[  236.361414][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  236.471601][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  236.581679][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  236.691922][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  237.117861][T10964] syzkaller1: entered promiscuous mode
[  237.117912][T10964] syzkaller1: entered allmulticast mode
[  237.193002][T10964] wg2 speed is unknown, defaulting to 1000
[  237.198040][T10964] lo speed is unknown, defaulting to 1000
[  237.417704][T10986] netlink: 'syz.3.1280': attribute type 9 has an invalid length.
[  237.483795][T10973] wg2 speed is unknown, defaulting to 1000
[  237.636450][T10973] lo speed is unknown, defaulting to 1000
[  237.789507][T10964] __nla_validate_parse: 4 callbacks suppressed
[  237.795991][T10964] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1276'.
[  238.455760][T11021] netlink: 'syz.2.1289': attribute type 3 has an invalid length.
[  238.582036][T11024] netlink: 'syz.3.1288': attribute type 4 has an invalid length.
[  238.859685][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'.
[  239.078177][T11035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1292'.
[  239.376961][T11047] netlink: 9160 bytes leftover after parsing attributes in process `syz.3.1298'.
[  239.620649][T11059] pimreg: entered allmulticast mode
[  239.723847][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'.
[  240.239992][T11070] veth0: entered promiscuous mode
[  240.246253][T11069] veth0: left promiscuous mode
[  240.630463][T10159] net_ratelimit: 26 callbacks suppressed
[  240.630526][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  240.740482][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  240.850652][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  240.960475][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  241.070451][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  241.180462][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  241.290471][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  241.400505][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  241.510452][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  241.620470][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  242.764477][T11080] netlink: 'syz.1.1306': attribute type 1 has an invalid length.
[  243.173806][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1312'.
[  243.544154][T11104] syzkaller0: entered promiscuous mode
[  243.544202][T11104] syzkaller0: entered allmulticast mode
[  243.913231][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'.
[  243.931096][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'.
[  245.174685][T11161] xt_hashlimit: size too large, truncated to 1048576
[  245.518389][T11161] xt_hashlimit: size too large, truncated to 1048576
[  245.584882][T11174] netlink: 'syz.4.1326': attribute type 21 has an invalid length.
[  245.805141][T11161] xt_hashlimit: size too large, truncated to 1048576
[  247.261356][T11160] bridge_slave_0 (unregistering): left allmulticast mode
[  247.268523][T11160] bridge_slave_0 (unregistering): left promiscuous mode
[  247.270415][T11160] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.321498][T10161] net_ratelimit: 20 callbacks suppressed
[  247.321564][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  247.580387][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  247.730462][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  247.842544][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  247.868690][T11206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.950457][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  248.001305][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'.
[  248.067576][T11216] sctp: [Deprecated]: syz.4.1335 (pid 11216) Use of int in max_burst socket option deprecated.
[  248.067576][T11216] Use struct sctp_assoc_value instead
[  248.093947][T11216] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1335'.
[  248.132428][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  248.178799][T11219] sctp: [Deprecated]: syz.4.1335 (pid 11219) Use of int in max_burst socket option deprecated.
[  248.178799][T11219] Use struct sctp_assoc_value instead
[  248.282309][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  248.393805][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  248.501748][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  248.594553][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'.
[  248.674249][T11236] x_tables: duplicate underflow at hook 1
[  248.697054][T11237] netlink: 'syz.3.1338': attribute type 1 has an invalid length.
[  248.719974][T11236] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1337'.
[  248.746108][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'.
[  248.975010][T11237] 8021q: adding VLAN 0 to HW filter on device bond6
[  249.125118][T11258] bond6: (slave geneve3): making interface the new active one
[  249.139385][T11258] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  249.599101][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'.
[  250.002433][T11315] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1351'.
[  251.634332][T11362] vxcan1: left promiscuous mode
[  252.022708][T11382] netlink: 'syz.1.1365': attribute type 1 has an invalid length.
[  252.030654][T11382] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1365'.
[  252.030677][T11382] netlink: 'syz.1.1365': attribute type 1 has an invalid length.
[  252.052896][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'.
[  252.063014][T11383] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1364'.
[  252.063074][T11383] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1364'.
[  252.421179][  T763] net_ratelimit: 30 callbacks suppressed
[  252.421231][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  252.473593][T11404] gre1: entered allmulticast mode
[  252.544094][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  252.681354][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  252.723373][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'.
[  252.790398][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  252.901807][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  252.932674][T11419] pimreg: left allmulticast mode
[  253.050656][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  253.161211][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  253.276313][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  253.382024][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  253.530420][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  253.544242][T11441] netlink: 'syz.4.1377': attribute type 10 has an invalid length.
[  254.047256][T11465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.117216][T11463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.193090][T11463] __nla_validate_parse: 3 callbacks suppressed
[  254.193149][T11463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1383'.
[  254.337893][T11479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1387'.
[  255.202710][T11513] syzkaller0: entered promiscuous mode
[  255.210578][T11513] syzkaller0: entered allmulticast mode
[  255.648699][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1402'.
[  255.649463][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'.
[  255.812359][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  256.135047][T11538] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534
[  256.167399][T11538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1405'.
[  256.479265][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1409'.
[  257.002445][T11575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1413'.
[  257.306668][T11584] sctp: [Deprecated]: syz.1.1415 (pid 11584) Use of int in maxseg socket option.
[  257.306668][T11584] Use struct sctp_assoc_value instead
[  257.448762][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'.
[  257.500487][T10157] net_ratelimit: 33 callbacks suppressed
[  257.500549][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  257.569172][T11600] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  257.610991][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  257.722227][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  257.830450][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  257.867816][T11606] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  257.867883][T11606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.909306][T11609] netlink: 'syz.3.1425': attribute type 1 has an invalid length.
[  258.048377][T11609] 8021q: adding VLAN 0 to HW filter on device bond7
[  258.080692][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  258.190639][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  258.304995][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  258.633764][T11643] wg2 speed is unknown, defaulting to 1000
[  258.673556][T11643] lo speed is unknown, defaulting to 1000
[  258.775567][T11658] netlink: 'syz.1.1437': attribute type 4 has an invalid length.
[  258.988849][T11658] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1437'.
[  259.009194][T11662] FAULT_INJECTION: forcing a failure.
[  259.009194][T11662] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  259.009265][T11662] CPU: 1 UID: 0 PID: 11662 Comm: syz.0.1438 Not tainted syzkaller #0 PREEMPT(full) 
[  259.009292][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  259.009307][T11662] Call Trace:
[  259.009317][T11662]  <TASK>
[  259.009326][T11662]  dump_stack_lvl+0xe8/0x150
[  259.009364][T11662]  should_fail_ex+0x410/0x560
[  259.009404][T11662]  _copy_from_iter+0x1d3/0x1660
[  259.009453][T11662]  ? __pfx__copy_from_iter+0x10/0x10
[  259.009500][T11662]  ? sk_msg_clone+0xcec/0xd90
[  259.009525][T11662]  sk_msg_memcopy_from_iter+0x35e/0x700
[  259.009564][T11662]  tls_sw_sendmsg+0x1bc1/0x2b50
[  259.009638][T11662]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  259.009675][T11662]  ? sock_rps_record_flow+0x19/0x350
[  259.009708][T11662]  ? inet_send_prepare+0x5b/0x260
[  259.009741][T11662]  ? inet6_sendmsg+0x101/0x120
[  259.009771][T11662]  ? __pfx_inet6_sendmsg+0x10/0x10
[  259.009795][T11662]  sock_sendmsg_nosec+0x90/0x180
[  259.009830][T11662]  sock_write_iter+0x2de/0x3e0
[  259.009862][T11662]  ? __pfx_sock_write_iter+0x10/0x10
[  259.009913][T11662]  do_iter_readv_writev+0x612/0x8c0
[  259.009953][T11662]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  259.009994][T11662]  ? bpf_lsm_file_permission+0x9/0x20
[  259.010023][T11662]  ? security_file_permission+0x75/0x260
[  259.010062][T11662]  ? rw_verify_area+0x203/0x4c0
[  259.010099][T11662]  vfs_writev+0x343/0x990
[  259.010143][T11662]  ? __pfx_vfs_writev+0x10/0x10
[  259.010184][T11662]  ? __fget_files+0x2a/0x420
[  259.010219][T11662]  ? __fget_files+0x3a2/0x420
[  259.010246][T11662]  ? __fget_files+0x2a/0x420
[  259.010285][T11662]  do_writev+0x154/0x2e0
[  259.010314][T11662]  ? __pfx_do_writev+0x10/0x10
[  259.010351][T11662]  do_syscall_64+0x166/0x520
[  259.010382][T11662]  ? trace_irq_disable+0x3b/0x140
[  259.010404][T11662]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.010428][T11662]  ? clear_bhb_loop+0x70/0xc0
[  259.010456][T11662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.010479][T11662] RIP: 0033:0x7fc2fc19e159
[  259.010500][T11662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.010520][T11662] RSP: 002b:00007fc2fd025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  259.010544][T11662] RAX: ffffffffffffffda RBX: 00007fc2fc425fa0 RCX: 00007fc2fc19e159
[  259.010561][T11662] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[  259.010577][T11662] RBP: 00007fc2fd025090 R08: 0000000000000000 R09: 0000000000000000
[  259.010591][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  259.010605][T11662] R13: 00007fc2fc426038 R14: 00007fc2fc425fa0 R15: 00007ffee8a61588
[  259.010642][T11662]  </TASK>
[  259.449596][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1442'.
[  259.527267][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1442'.
[  259.694241][T11671] 8021q: adding VLAN 0 to HW filter on device bond5
[  259.694969][T11673] syzkaller1: entered promiscuous mode
[  259.694996][T11673] syzkaller1: entered allmulticast mode
[  259.785708][T11675] 8021q: adding VLAN 0 to HW filter on device bond5
[  259.793663][T11675] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  259.802675][T11675] bond5: (slave wireguard0): Error -95 calling set_mac_address
[  259.932996][T11672] macsec2: entered promiscuous mode
[  260.017034][T11683] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  260.025214][T11683] bond5: (slave wlan1): Opening slave failed
[  260.036644][T11685] veth0: entered promiscuous mode
[  260.046290][T11694] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1445'.
[  260.110837][T11702] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.1445'.
[  260.184799][T11671] ip6tnl2: entered promiscuous mode
[  260.190687][T11684] veth0: left promiscuous mode
[  260.294422][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'.
[  260.294473][T11700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'.
[  260.543195][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'.
[  260.715260][T11717] bridge_slave_0: left allmulticast mode
[  260.715306][T11717] bridge_slave_0: left promiscuous mode
[  260.715557][T11717] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.772353][T11717] bridge_slave_1: left allmulticast mode
[  260.778168][T11717] bridge_slave_1: left promiscuous mode
[  260.784719][T11717] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.845986][T11717] bond4: (slave veth0_to_bond): Releasing active interface
[  260.887648][T11717] bond0: (slave bond_slave_0): Releasing backup interface
[  260.905441][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'.
[  260.926584][T11717] bond0: (slave bond_slave_1): Releasing backup interface
[  260.961213][T11717] team0: Port device team_slave_0 removed
[  260.973219][T11717] team0: Port device team_slave_1 removed
[  261.183906][T11740] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1458'.
[  261.248609][T11742] ip6_vti0: left promiscuous mode
[  261.258210][T11742] ip6tnl0: left promiscuous mode
[  261.284017][T11744] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1460'.
[  261.888409][T11772] bond2 (unregistering): Released all slaves
[  261.963501][T11781] netlink: 'syz.2.1468': attribute type 11 has an invalid length.
[  262.043294][T11773] bond2 (unregistering): Released all slaves
[  262.155219][T11784] ip6gre1: entered promiscuous mode
[  262.155264][T11784] ip6gre1: entered allmulticast mode
[  262.216319][T11789] tap0: tun_chr_ioctl cmd 1074025677
[  262.222960][T11789] tap0: linktype set to 805
[  262.270544][T11785] xt_TPROXY: Can be used only with -p tcp or -p udp
[  262.538728][T11802] block nbd5: server does not support multiple connections per device.
[  262.539063][T11802] block nbd5: shutting down sockets
[  262.561836][T10160] net_ratelimit: 24 callbacks suppressed
[  262.561903][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  262.628679][T11806] ip6gretap2: entered promiscuous mode
[  262.710507][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  262.711810][T11814] syzkaller0: entered promiscuous mode
[  262.711855][T11814] syzkaller0: entered allmulticast mode
[  262.916158][   T31] audit: type=1804 audit(1789033770.366:7): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1476" name="/newroot/295/cgroup.controllers" dev="tmpfs" ino=1528 res=1 errno=0
[  262.916239][   T31] audit: type=1800 audit(1789033770.366:8): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1476" name="cgroup.controllers" dev="tmpfs" ino=1528 res=0 errno=0
[  262.996391][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  263.023959][   T31] audit: type=1804 audit(1789033770.476:9): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1476" name="/newroot/295/cgroup.controllers" dev="tmpfs" ino=1528 res=1 errno=0
[  263.100836][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  263.276620][T11836] netlink: 'syz.0.1483': attribute type 23 has an invalid length.
[  263.292564][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  263.329149][T11837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.401812][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  263.509127][T11839] netlink: 'syz.1.1486': attribute type 10 has an invalid length.
[  263.574862][T11839] wg2: entered promiscuous mode
[  263.575083][T11839] team0: Device wg2 is of different type
[  263.597661][ T9340] wg2 speed is unknown, defaulting to 1000
[  263.597716][ T9340] ryz2: Port: 1 Link DOWN
[  263.696345][ T7604] wg2 speed is unknown, defaulting to 1000
[  263.699252][ T9343] wg2 speed is unknown, defaulting to 1000
[  263.730969][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  263.968396][T11874] netlink: 'syz.1.1493': attribute type 3 has an invalid length.
[  264.015303][T11866] veth7: entered allmulticast mode
[  264.081788][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  264.191837][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  264.249857][T11864] syzkaller1: entered promiscuous mode
[  264.255786][T11864] syzkaller1: entered allmulticast mode
[  264.361446][ T9343] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  264.422381][T10158] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  264.860670][ T9340] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  265.017212][T11918] __nla_validate_parse: 7 callbacks suppressed
[  265.025204][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'.
[  265.152516][T11916] IPVS: Error connecting to the multicast addr
[  265.179651][T11920] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1507'.
[  265.261930][T11916] wg2 speed is unknown, defaulting to 1000
[  265.308460][T11916] lo speed is unknown, defaulting to 1000
[  265.392970][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1511'.
[  265.439588][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'.
[  265.544585][T10159] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  265.563595][T10159] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  265.587252][T11944] xt_socket: unknown flags 0x4c
[  266.049558][T11956] IPVS: persistence engine module ip_vs_pe_ not found
[  266.257690][T11972] ipt_REJECT: TCP_RESET invalid for non-tcp
[  266.305604][T11972] bridge_slave_0: entered promiscuous mode
[  266.450946][ T9343] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  266.638588][T11987] netlink: 'syz.4.1523': attribute type 4 has an invalid length.
[  266.685417][T11994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1524'.
[  266.805440][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'.
[  266.805489][T11991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1523'.
[  266.806221][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'.
[  266.806272][T11991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1523'.
[  266.829566][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'.
[  267.301069][T12011] siw: device registration error -23
[  267.570401][T10160] net_ratelimit: 22 callbacks suppressed
[  267.570452][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  267.680468][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  267.790495][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  267.916848][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  268.040505][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  268.150450][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  268.280569][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  268.390396][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  268.500419][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  268.615855][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  269.897128][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  272.662415][T12051] net_ratelimit: 32 callbacks suppressed
[  272.662486][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.662734][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.662916][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.663080][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.663251][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.663415][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.663580][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.663744][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.663907][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.664096][T12051] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  272.859233][T12060] __nla_validate_parse: 130 callbacks suppressed
[  272.870103][T12060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1543'.
[  273.075122][T12067] netlink: 'syz.3.1544': attribute type 2 has an invalid length.
[  273.083442][T12067] netlink: 'syz.3.1544': attribute type 2 has an invalid length.
[  273.231571][T12072] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1545'.
[  276.649481][T12088] batman_adv: batadv0: Adding interface: macvtap1
[  276.649519][T12088] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.649590][T12088] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  276.876057][T12091] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.983586][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'.
[  277.171417][T12095] bond8 (unregistering): Released all slaves
[  277.642389][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'.
[  277.707603][T12111] netlink: 'syz.1.1553': attribute type 12 has an invalid length.
[  278.091990][T10160] net_ratelimit: 67 callbacks suppressed
[  278.092045][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  278.360913][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  278.556602][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  278.662774][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  278.773063][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  278.850466][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  278.884744][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  278.992640][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  279.104058][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  279.210709][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  279.321801][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  279.511259][T12149] x_tables: duplicate underflow at hook 1
[  279.687060][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'.
[  279.687111][T12151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1562'.
[  280.188412][T12162] netlink: 'syz.0.1566': attribute type 12 has an invalid length.
[  280.188456][T12162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1566'.
[  281.184313][T12185] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '����>���N9�
5�x��hˉ�p����n
[  281.565452][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'.
[  284.190593][T10149] net_ratelimit: 16 callbacks suppressed
[  284.190640][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  284.384097][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  284.501543][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  284.567868][T12222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1579'.
[  284.611214][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  284.732320][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  284.841118][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  284.901044][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'.
[  284.915833][T12231] openvswitch: netlink: Message has 5920 unknown bytes.
[  284.925051][T12231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.950860][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  285.071341][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  285.083212][T12233] xt_hashlimit: size too large, truncated to 1048576
[  285.122338][T12234] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  285.392052][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  285.685308][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'.
[  286.126527][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'.
[  286.141632][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'.
[  287.156481][T12257] netlink: 'syz.4.1589': attribute type 2 has an invalid length.
[  287.610976][T12260] SET target dimension over the limit!
[  287.968254][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'.
[  288.414863][T12283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1597'.
[  288.623428][T12284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1597'.
[  289.320493][T10159] net_ratelimit: 26 callbacks suppressed
[  289.320544][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  289.471100][T12305] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1602'.
[  289.747709][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'.
[  289.798074][T12310] netlink: 'syz.4.1601': attribute type 1 has an invalid length.
[  289.808992][T12312] netlink: 'syz.4.1601': attribute type 1 has an invalid length.
[  290.254729][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  290.265610][T12316] __nla_validate_parse: 1 callbacks suppressed
[  290.272192][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  290.360430][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  290.470384][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  290.580445][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  290.690726][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  290.779385][T12322] xt_hashlimit: overflow, try lower: 18446744073709551614/255
[  290.810504][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  290.823232][T12327] tc_dump_action: action bad kind
[  290.920430][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  291.172760][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  291.282929][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  291.642361][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'.
[  291.896234][T12349] syzkaller0: entered promiscuous mode
[  291.908690][T12356] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1614'.
[  291.952085][T12349] syzkaller0: entered allmulticast mode
[  291.968044][T12356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1614'.
[  297.070731][T10160] net_ratelimit: 3 callbacks suppressed
[  297.070775][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  297.093164][T12380] syzkaller1: tun_chr_ioctl cmd 1074025677
[  297.296073][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'.
[  297.310946][T12380] syzkaller1: linktype set to 1
[  297.426609][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  297.590506][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  297.598136][T12400] netlink: 'syz.1.1622': attribute type 1 has an invalid length.
[  297.606841][T12400] netlink: 64363 bytes leftover after parsing attributes in process `syz.1.1622'.
[  297.693250][T12402] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1623'.
[  297.703649][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  297.813200][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  297.930481][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  298.040428][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  298.082637][T12410] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8
[  298.283069][T12412] syzkaller0: entered promiscuous mode
[  298.288753][T12412] syzkaller0: entered allmulticast mode
[  298.310392][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  298.420354][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  298.531256][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  299.396525][T12419] sctp: [Deprecated]: syz.3.1629 (pid 12419) Use of struct sctp_assoc_value in delayed_ack socket option.
[  299.396525][T12419] Use struct sctp_sack_info instead
[  299.646130][T12421] netlink: 'syz.4.1628': attribute type 17 has an invalid length.
[  299.646169][T12421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1628'.
[  299.646229][T12421] bond0: option all_slaves_active: invalid value (8)
[  300.050384][T12433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.497323][T10161] net_ratelimit: 23 callbacks suppressed
[  302.507405][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  303.142380][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  303.289747][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  303.408531][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  304.943192][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  305.237857][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  307.245651][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  308.089338][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  308.329184][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  308.932152][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  309.174492][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  309.770101][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  309.951894][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  310.119889][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  311.008018][    C0] sched: DL replenish lagged too much
[  311.918316][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  313.146405][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  314.768713][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  315.742708][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  315.879506][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  316.289363][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  316.547115][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  317.159932][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  319.068777][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  319.171813][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  319.403354][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  320.004372][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  320.262755][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  320.619301][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  320.880357][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  321.105143][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  321.360941][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  321.526522][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  321.689194][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  324.707300][T10160] net_ratelimit: 7 callbacks suppressed
[  324.720599][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  325.179622][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  325.327222][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  326.663514][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  326.812256][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  326.949469][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  327.088994][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  327.271203][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  327.487348][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  327.622497][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  330.653525][T10161] net_ratelimit: 6 callbacks suppressed
[  330.901136][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  331.054615][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  331.171790][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  331.406766][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  332.441912][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  332.747265][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  333.072181][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  333.453025][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  334.314939][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  334.469784][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  335.769099][T10159] net_ratelimit: 1 callbacks suppressed
[  335.779096][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  335.824986][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  336.584281][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  336.829733][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  337.731372][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  337.995989][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  338.356016][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  339.004527][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  340.257703][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  340.393331][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  340.738350][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  340.924293][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  341.241355][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  343.921885][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  344.137292][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  344.427024][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  344.552183][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  345.183689][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  345.398439][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  345.696775][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  345.822759][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  348.256106][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  348.885007][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  349.117703][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  349.458053][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  349.763759][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  351.044558][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  351.315285][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  351.545479][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  351.718038][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  352.800535][ T6052] bond2: (slave bridge2): failed to get link speed/duplex
[  353.324698][T10159] net_ratelimit: 2 callbacks suppressed
[  353.433134][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  353.641661][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  354.574564][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  355.535694][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  355.682928][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  355.923574][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  356.211826][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  356.477697][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  356.611642][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  357.360521][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  358.385987][T10146] net_ratelimit: 3 callbacks suppressed
[  358.395795][T10146] bond2: (slave bridge2): failed to get link speed/duplex
[  358.532237][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  358.713696][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  358.862353][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  359.333107][T10160] bond2: (slave bridge2): failed to get link speed/duplex
[  362.393533][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  362.574066][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  363.905633][T10146] bond2: (slave bridge2): failed to get link speed/duplex
[  364.360421][T10146] bond2: (slave bridge2): failed to get link speed/duplex
[  364.925940][T10146] bond2: (slave bridge2): failed to get link speed/duplex
[  365.075084][T10146] bond2: (slave bridge2): failed to get link speed/duplex
[  365.859173][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  369.865831][T10149] bond2: (slave bridge2): failed to get link speed/duplex
[  370.015738][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  370.391251][T10159] bond2: (slave bridge2): failed to get link speed/duplex
[  370.612498][T10161] bond2: (slave bridge2): failed to get link speed/duplex
[  371.182863][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  371.364510][T10157] bond2: (slave bridge2): failed to get link speed/duplex
[  371.581643][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  372.000541][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  372.142625][T10146] bond2: (slave bridge2): failed to get link speed/duplex
[  372.569578][T10158] bond2: (slave bridge2): failed to get link speed/duplex
[  378.888741][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  381.648059][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.329353][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.731056][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.838221][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  387.989497][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  407.016331][ T5617] bond7: (slave syz_tun): Removing an active aggregator
[  407.038933][ T5617] bond7: (slave syz_tun): Releasing backup interface
[  412.881803][T12461] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  413.169911][   T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  413.201638][ T5626] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  413.461930][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  414.258821][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  414.341750][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  414.434182][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  414.532796][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  414.870748][T12478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  414.871943][T12478] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  414.916189][T12478] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  414.917301][T12478] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  415.073526][T12478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  415.657930][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  415.736626][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  416.665167][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  416.754776][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  418.869801][   T52] Bluetooth: hci6: Opcode 0x1009 failed: -110
[  418.930302][ T5619] Bluetooth: hci5: Opcode 0x0c38 failed: -110
[  419.627652][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  420.317906][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  420.845251][T12478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  421.145555][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  421.542911][T12467] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  421.785221][ T5626] Bluetooth: hci1: command 0x1003 tx timeout
[  421.849688][T12478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  422.928913][T12478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  423.164377][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  424.555243][ T5626] Bluetooth: hci4: command tx timeout
[  425.347351][T12478] Bluetooth: hci5: command 0x1009 tx timeout
[  425.424509][T12478] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  425.500940][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  425.853584][T12472] Bluetooth: hci5: Opcode 0x1009 failed: -110
[  426.707869][ T5626] Bluetooth: hci4: command tx timeout
[  428.816543][T12478] Bluetooth: hci4: command tx timeout
[  428.836958][T12478] Bluetooth: hci6: command tx timeout
[  431.069264][ T5626] Bluetooth: hci4: command tx timeout
[  431.154361][  T763] net_ratelimit: 2 callbacks suppressed
[  431.260398][  T763] bond2: (slave bridge2): failed to get link speed/duplex
[  431.362365][ T5626] Bluetooth: hci6: command tx timeout
[  431.429065][   T80] bond2: (slave bridge2): failed to get link speed/duplex
[  431.604710][ T3394] bond2: (slave bridge2): failed to get link speed/duplex
[  431.732040][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  432.483949][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  434.443900][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  434.461936][ T5626] Bluetooth: hci6: command tx timeout
[  436.291565][T12484] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  436.442021][T12484] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  436.547166][T12484] Bluetooth: hci6: command tx timeout
[  444.098157][T12484] Bluetooth: hci0: command tx timeout
[  444.543744][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  446.504571][T12484] Bluetooth: hci0: command tx timeout
[  448.984607][T12484] Bluetooth: hci0: command tx timeout
[  451.296086][T12484] Bluetooth: hci0: command tx timeout
[  458.412827][T12484] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  475.652884][T12478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  475.886368][T12478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  476.499080][T12478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  481.355110][T12493] Bluetooth: hci2: Opcode 0x0c23 failed: -110
[  481.420975][T12478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  506.482169][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  525.583580][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  525.648381][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  525.696878][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  527.817525][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  528.491698][T12478] Bluetooth: hci2: Opcode 0x1005 failed: -110
[  528.590881][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  529.685119][ T5619] Bluetooth: hci2: unexpected event for opcode 0x1005
[  529.826936][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  530.701927][T12500] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  531.925454][T12484] Bluetooth: hci1: Opcode 0x1009 failed: -110
[  536.081491][T12501] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  536.337017][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  550.875972][T12484] Bluetooth: hci6: command 0x0406 tx timeout
[  563.293959][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  568.132770][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  570.726612][   T32] INFO: task syz-executor:5615 blocked for more than 143 seconds.
[  570.736642][   T32]       Not tainted syzkaller #0
[  570.746868][   T32]       Blocked by coredump.
[  570.756881][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  570.766720][   T32] task:syz-executor    state:D stack:21928 pid:5615  tgid:5615  ppid:1      task_flags:0x40054c flags:0x00080003
[  570.787017][   T32] Call Trace:
[  570.797230][   T32]  <TASK>
[  570.807735][   T32]  __schedule+0x17db/0x58f0
[  570.818212][   T32]  ? stack_trace_save+0xa9/0x100
[  570.828723][   T32]  ? __pfx_stack_trace_save+0x10/0x10
[  570.839193][   T32]  ? stack_depot_save_flags+0x33/0x7f0
[  570.849609][   T32]  ? __pfx___schedule+0x10/0x10
[  570.859980][   T32]  ? schedule+0x90/0x2b0
[  570.870202][   T32]  schedule+0x164/0x2b0
[  570.880663][   T32]  schedule_preempt_disabled+0x13/0x30
[  570.891254][   T32]  __mutex_lock+0x7c1/0x1550
[  570.901665][   T32]  ? __mutex_lock+0x5d4/0x1550
[  570.912221][   T32]  ? tun_chr_close+0x3e/0x1c0
[  570.922750][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  570.933250][   T32]  ? __pfx_tun_chr_close+0x10/0x10
[  570.943763][   T32]  tun_chr_close+0x3e/0x1c0
[  570.954216][   T32]  ? __pfx_tun_chr_close+0x10/0x10
[  570.964941][   T32]  __fput+0x418/0xa50
[  570.975286][   T32]  task_work_run+0x1d9/0x270
[  570.985695][   T32]  ? __pfx_task_work_run+0x10/0x10
[  570.996042][   T32]  ? do_exit+0x735/0x2360
[  571.006506][   T32]  ? kmem_cache_free+0x182/0x650
[  571.016953][   T32]  ? put_net+0x191/0x260
[  571.027540][   T32]  do_exit+0x73a/0x2360
[  571.037874][   T32]  ? lock_acquire+0x115/0x350
[  571.048311][   T32]  ? __pfx_do_exit+0x10/0x10
[  571.058670][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  571.069360][   T32]  do_group_exit+0x22d/0x2f0
[  571.079718][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  571.109488][   T32]  get_signal+0x121b/0x12c0
[  571.120086][   T32]  arch_do_signal_or_restart+0xbb/0x860
[  571.141309][   T32]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  571.151699][   T32]  exit_to_user_mode_loop+0x10e/0x770
[  571.161733][   T32]  ? rcu_is_watching+0x16/0xb0
[  571.172121][   T32]  do_syscall_64+0x328/0x520
[  571.182472][   T32]  ? trace_irq_disable+0x3b/0x140
[  571.192643][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.202596][   T32]  ? clear_bhb_loop+0x70/0xc0
[  571.212691][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.222750][   T32] RIP: 0033:0x7f904839f92a
[  571.233584][   T32] RSP: 002b:00007fff91557b08 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[  571.254984][   T32] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f904839f92a
[  571.266063][   T32] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003
[  571.276813][   T32] RBP: 00007fff91557b70 R08: 00007fff91557b1c R09: 0000000000000000
[  571.287358][   T32] R10: 00007fff91557b70 R11: 0000000000000212 R12: 00007fff91557b1c
[  571.298974][   T32] R13: 00007f9048435a89 R14: 0000000000054377 R15: 00007fff91558260
[  571.309891][   T32]  </TASK>
[  571.320500][   T32] 
[  571.320500][   T32] Showing all locks held in the system:
[  571.330690][   T32] locks held by init/1: 1, last CPU#0:
[  571.341334][   T32]  #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  571.405588][   T32] locks held by pool_workqueue_/3: 1, on CPU#0:
[  571.415558][   T32]  #0: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  571.479334][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  571.490026][   T32]  #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  573.049504][   T32] locks held by kworker/u8:3/41: 2, last CPU#1:
[  573.049522][   T32]  #0: ffff88801b0ab940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.049587][   T32]  #1: ffffc90000b17c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.049655][   T32] locks held by kworker/u8:6/763: 3, on CPU#1:
[  573.049671][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.049733][   T32]  #1: ffffc9000449fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.049794][   T32]  #2: ffffffff902508e0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  573.049868][   T32] locks held by kworker/u8:10/3394: 6, last CPU#1:
[  573.049884][   T32]  #0: ffff88807e6a3140 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.049945][   T32]  #1: ffffc9000f18fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.050014][   T32]  #2: ffff8880333a5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  573.050089][   T32]  #3: ffff88807b5bf028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  573.060526][   T32]  #4: ffffffff8ed5c800 (rcu_callback){....}-{0:0}, at: rcu_core+0x8a8/0x1260
[  573.060583][   T32]  #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  573.060645][   T32] locks held by klogd/4971: 2, last CPU#1:
[  573.060661][   T32]  #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  573.060727][   T32]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0
[  573.060781][   T32] locks held by udevd/4982: 1, last CPU#1:
[  573.060797][   T32]  #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  573.060865][   T32] locks held by getty/5372: 2, on CPU#1:
[  573.060881][   T32]  #0: ffff888034b930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  573.060942][   T32]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  573.060997][   T32] locks held by syz-executor/5604: 2, last CPU#1:
[  573.061013][   T32]  #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  573.061085][   T32]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0
[  573.061143][   T32] locks held by syz-executor/5615: 1, on CPU#0:
[  573.061159][   T32]  #0: ffffffff902508e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  573.061223][   T32] locks held by syz-executor/5618: 2, last CPU#1:
[  573.061238][   T32]  #0: ffffffff902508e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  573.061301][   T32]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0xac/0x580
[  573.061371][   T32] locks held by kworker/u8:11/6052: 2, last CPU#0:
[  573.061387][   T32]  #0: ffff888032db2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.061449][   T32]  #1: ffffc900055e7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.061514][   T32] locks held by kworker/u8:14/6056: 4, last CPU#1:
[  573.061531][   T32]  #0: ffff888034b5b140 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.061598][   T32]  #1: ffffc900057c7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.061661][   T32]  #2: ffff888034175440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  573.061724][   T32]  #3: ffff88807b5bb4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  573.061788][   T32] locks held by kworker/0:10/7603: 2, last CPU#0:
[  573.061803][   T32]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.072555][   T32]  #1: ffffc90006d1fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.072621][   T32] locks held by kworker/0:15/7609: 3, on CPU#0:
[  573.072638][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.072699][   T32]  #1: ffffc90006d97c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.072760][   T32]  #2: ffffffff902508e0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  573.072829][   T32] locks held by kworker/0:17/7611: 5, last CPU#0:
[  573.072845][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.072906][   T32]  #1: ffffc90006db7c40 ((work_completion)(&(&data->open_timeout)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.072969][   T32]  #2: ffff8880321e0910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x33/0x6f0
[  573.073033][   T32]  #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  573.073099][   T32]  #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  573.073160][   T32] locks held by kworker/u8:17/10149: 3, last CPU#1:
[  573.073176][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.073237][   T32]  #1: ffffc900056b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.073301][   T32]  #2: ffff888034808258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  573.073368][   T32] locks held by kworker/u8:19/10157: 3, on CPU#0:
[  573.073385][   T32]  #0: ffff888032b67940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.073446][   T32]  #1: ffffc90004e97c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.073508][   T32]  #2: ffffffff902508e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  573.073575][   T32] locks held by kworker/u8:20/10158: 6, on CPU#1:
[  573.073591][   T32]  #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.073652][   T32]  #1: ffffc90004e47c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.083817][   T32]  #2: ffffffff90242088 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  573.083897][   T32]  #3: ffff88807b762128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  573.083963][   T32]  #4: ffff888035f77258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  573.084043][   T32]  #5: ffffffff902508e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[  573.084109][   T32] locks held by kworker/u8:22/10160: 4, last CPU#1:
[  573.084125][   T32]  #0: ffff888034b5e140 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.084194][   T32]  #1: ffffc90004cafc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  573.084258][   T32]  #2: ffff88807d2f5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  573.084323][   T32]  #3: ffff88807eff6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  573.084389][   T32] locks held by syz-executor/12474: 1, on CPU#0:
[  573.084405][   T32]  #0: ffffffff902508e0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  573.084463][   T32] locks held by syz-executor/12485: 2, last CPU#0:
[  573.084480][   T32]  #0: ffff88807eed03b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  573.084542][   T32]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  573.084602][   T32] locks held by syz-executor/12489: 1, on CPU#0:
[  573.084618][   T32]  #0: ffff888037bc4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  573.084680][   T32] locks held by syz-executor/12502: 2, last CPU#1:
[  573.084696][   T32]  #0: ffffffff8f4ef978 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470
[  573.084762][   T32]  #1: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  573.084831][   T32] 
[  573.084837][   T32] =============================================
[  573.084837][   T32] 
[  573.084864][   T32] NMI backtrace for cpu 0
[  573.084951][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  573.084977][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  573.084990][   T32] Call Trace:
[  573.084999][   T32]  <TASK>
[  573.085009][   T32]  dump_stack_lvl+0xe8/0x150
[  573.085052][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  573.085080][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  573.085116][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  573.085147][   T32]  sys_info+0x135/0x170
[  573.085170][   T32]  watchdog+0xfd7/0x1030
[  573.085200][   T32]  ? watchdog+0x1c7/0x1030
[  573.085230][   T32]  kthread+0x38b/0x480
[  573.085253][   T32]  ? __pfx_watchdog+0x10/0x10
[  573.085272][   T32]  ? __pfx_kthread+0x10/0x10
[  573.085296][   T32]  ret_from_fork+0x514/0xb70
[  573.085321][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  573.085355][   T32]  ? __switch_to+0xc89/0x1420
[  573.085389][   T32]  ? __pfx_kthread+0x10/0x10
[  573.085413][   T32]  ret_from_fork_asm+0x1a/0x30
[  573.085463][   T32]  </TASK>
[  573.085472][   T32] Sending NMI from CPU 0 to CPUs 1:
[  573.085549][    C1] NMI backtrace for cpu 1
[  573.085562][    C1] CPU: 1 UID: 0 PID: 3394 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
[  573.085583][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  573.085596][    C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker
[  573.085629][    C1] RIP: 0010:arch_stack_walk+0x106/0x150
[  573.085652][    C1] Code: 89 fa e8 5d a9 09 00 83 bd 78 ff ff ff 00 74 38 4c 8d bd 78 ff ff ff 4c 89 ff e8 d5 7d 09 00 48 85 c0 74 24 48 89 df 48 89 c6 <4d> 89 f3 2e e8 29 c5 91 1e 84 c0 74 11 4c 89 ff e8 05 7f 09 00 83
[  573.085669][    C1] RSP: 0018:ffffc90000a17f88 EFLAGS: 00000282
[  573.085685][    C1] RAX: ffffffff8188ef37 RBX: ffffc90000a18040 RCX: 8000000000000100
[  573.085699][    C1] RDX: ffffc90000a17f01 RSI: ffffffff8188ef37 RDI: ffffc90000a18040
[  573.085714][    C1] RBP: ffffc90000a18010 R08: ffffc90000a18fe8 R09: 0000000000000000
[  573.085727][    C1] R10: ffffc90000a17fd8 R11: fffff52000142ffd R12: ffff888033810000
[  573.085741][    C1] R13: 0000000000000000 R14: ffffffff81b27650 R15: ffffc90000a17f88
[  573.085755][    C1] FS:  0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000
[  573.085771][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  573.085784][    C1] CR2: 00007ffe51167830 CR3: 000000000eb48000 CR4: 00000000003526f0
[  573.085801][    C1] Call Trace:
[  573.085807][    C1]  <IRQ>
[  573.085818][    C1]  ? do_softirq+0x77/0xd0
[  573.085845][    C1]  stack_trace_save+0xa9/0x100
[  573.085874][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  573.085905][    C1]  ? __lock_acquire+0x6df/0x2e50
[  573.085926][    C1]  kasan_save_track+0x3e/0x80
[  573.085943][    C1]  ? kasan_save_track+0x3e/0x80
[  573.085960][    C1]  ? kasan_save_free_info+0x40/0x50
[  573.085984][    C1]  ? __kasan_slab_free+0x5c/0x80
[  573.086002][    C1]  ? kfree+0x1c5/0x650
[  573.086027][    C1]  ? skb_release_data+0x85e/0xab0
[  573.086046][    C1]  ? __kfree_skb+0x5d/0x210
[  573.086062][    C1]  ? nft_synproxy_eval_v4+0x36a/0x4e0
[  573.086079][    C1]  ? nft_synproxy_do_eval+0x335/0x550
[  573.086096][    C1]  ? nft_do_chain+0x48d/0x1b10
[  573.086113][    C1]  ? nft_do_chain_inet+0x360/0x4b0
[  573.086130][    C1]  ? nf_hook_slow+0xc5/0x220
[  573.086154][    C1]  ? NF_HOOK+0x21f/0x3c0
[  573.086170][    C1]  ? NF_HOOK+0x336/0x3c0
[  573.086185][    C1]  ? process_backlog+0xa6b/0x18b0
[  573.086212][    C1]  ? __napi_poll+0xaa/0x330
[  573.086235][    C1]  ? net_rx_action+0x61d/0xf50
[  573.086261][    C1]  ? handle_softirqs+0x226/0x860
[  573.086309][    C1]  kasan_save_free_info+0x40/0x50
[  573.086334][    C1]  __kasan_slab_free+0x5c/0x80
[  573.086354][    C1]  kfree+0x1c5/0x650
[  573.086378][    C1]  ? skb_release_data+0x85e/0xab0
[  573.086399][    C1]  skb_release_data+0x85e/0xab0
[  573.086424][    C1]  __kfree_skb+0x5d/0x210
[  573.086442][    C1]  nft_synproxy_eval_v4+0x36a/0x4e0
[  573.086464][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  573.086483][    C1]  ? nf_ip_checksum+0x13c/0x510
[  573.086504][    C1]  nft_synproxy_do_eval+0x335/0x550
[  573.086528][    C1]  ? lock_acquire+0x115/0x350
[  573.086546][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  573.086574][    C1]  nft_do_chain+0x48d/0x1b10
[  573.086602][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  573.086624][    C1]  ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10
[  573.086672][    C1]  nft_do_chain_inet+0x360/0x4b0
[  573.086692][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  573.086716][    C1]  ? nf_nat_ipv4_local_in+0x21f/0x720
[  573.086742][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  573.086760][    C1]  nf_hook_slow+0xc5/0x220
[  573.086789][    C1]  NF_HOOK+0x21f/0x3c0
[  573.086807][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  573.086825][    C1]  ? NF_HOOK+0x9e/0x3c0
[  573.086841][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  573.086870][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  573.086891][    C1]  ? ip_local_deliver+0x113/0x190
[  573.086910][    C1]  NF_HOOK+0x336/0x3c0
[  573.086927][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  573.086943][    C1]  ? NF_HOOK+0x9e/0x3c0
[  573.086959][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  573.086976][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  573.086993][    C1]  ? ip_rcv_core+0x88d/0xd50
[  573.087012][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  573.087030][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  573.087047][    C1]  process_backlog+0xa6b/0x18b0
[  573.087076][    C1]  ? process_backlog+0x3de/0x18b0
[  573.087109][    C1]  __napi_poll+0xaa/0x330
[  573.087135][    C1]  net_rx_action+0x61d/0xf50
[  573.087168][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  573.087229][    C1]  handle_softirqs+0x226/0x860
[  573.087254][    C1]  ? do_softirq+0x77/0xd0
[  573.087292][    C1]  ? kernel_fpu_end+0x62/0x80
[  573.087314][    C1]  do_softirq+0x77/0xd0
[  573.087336][    C1]  </IRQ>
[  573.087341][    C1]  <TASK>
[  573.087348][    C1]  __local_bh_enable_ip+0x100/0x140
[  573.087371][    C1]  blake2s_compress+0xfa/0x1c00
[  573.087395][    C1]  ? __asan_memset+0x22/0x50
[  573.087421][    C1]  ? encode_point+0x8346/0x84b0
[  573.087444][    C1]  ? arch_stack_walk+0x11b/0x150
[  573.087487][    C1]  ? __pfx_encode_point+0x10/0x10
[  573.087511][    C1]  ? kernel_fpu_begin_mask+0x2bb/0x380
[  573.087546][    C1]  ? __pfx_blake2s_compress+0x10/0x10
[  573.087570][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  573.087596][    C1]  ? kernel_fpu_end+0x62/0x80
[  573.087631][    C1]  blake2s_update+0x140/0x450
[  573.087657][    C1]  hmac+0x2d1/0x3b0
[  573.087681][    C1]  ? __pfx_hmac+0x10/0x10
[  573.087726][    C1]  kdf+0x12d/0x290
[  573.087751][    C1]  ? __pfx_kdf+0x10/0x10
[  573.087788][    C1]  wg_noise_handshake_create_initiation+0x29e/0x810
[  573.087816][    C1]  ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10
[  573.087843][    C1]  ? __lock_acquire+0x6df/0x2e50
[  573.087863][    C1]  ? __lock_acquire+0x6df/0x2e50
[  573.087886][    C1]  ? __lock_acquire+0x6df/0x2e50
[  573.087907][    C1]  ? lock_acquire+0x115/0x350
[  573.087928][    C1]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  573.087951][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  573.087978][    C1]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  573.087998][    C1]  ? ktime_get_coarse_with_offset+0x102/0x150
[  573.088020][    C1]  wg_packet_handshake_send_worker+0x18c/0x370
[  573.088051][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  573.088075][    C1]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[  573.088118][    C1]  ? rcu_is_watching+0x16/0xb0
[  573.088141][    C1]  ? process_scheduled_works+0x97a/0x1630
[  573.088167][    C1]  process_scheduled_works+0xc3d/0x1630
[  573.088209][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  573.088237][    C1]  ? assign_work+0x3cf/0x5d0
[  573.088264][    C1]  worker_thread+0xa47/0xfb0
[  573.088297][    C1]  ? __kthread_parkme+0x71/0x1f0
[  573.088329][    C1]  kthread+0x38b/0x480
[  573.088346][    C1]  ? __pfx_worker_thread+0x10/0x10
[  573.088370][    C1]  ? __pfx_kthread+0x10/0x10
[  573.088388][    C1]  ret_from_fork+0x514/0xb70
[  573.088407][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  573.088436][    C1]  ? __switch_to+0xc89/0x1420
[  573.088462][    C1]  ? __pfx_kthread+0x10/0x10
[  573.088480][    C1]  ret_from_fork_asm+0x1a/0x30
[  573.088525][    C1]  </TASK>
[  573.089522][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  574.963457][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  574.972604][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  574.982693][   T32] Call Trace:
[  574.986092][   T32]  <TASK>
[  574.989052][   T32]  vpanic+0x56d/0xa60
[  574.993104][   T32]  ? __pfx_vpanic+0x10/0x10
[  574.997649][   T32]  ? console_srcu_read_unlock+0x3a/0x60
[  575.003227][   T32]  panic+0xc5/0xd0
[  575.006984][   T32]  ? __pfx_panic+0x10/0x10
[  575.011436][   T32]  ? wq_watchdog_touch+0xf9/0x160
[  575.016494][   T32]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  575.022689][   T32]  watchdog+0x1030/0x1030
[  575.027055][   T32]  ? watchdog+0x1c7/0x1030
[  575.031504][   T32]  kthread+0x38b/0x480
[  575.035603][   T32]  ? __pfx_watchdog+0x10/0x10
[  575.040337][   T32]  ? __pfx_kthread+0x10/0x10
[  575.044963][   T32]  ret_from_fork+0x514/0xb70
[  575.049586][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  575.054788][   T32]  ? __switch_to+0xc89/0x1420
[  575.059508][   T32]  ? __pfx_kthread+0x10/0x10
[  575.064133][   T32]  ret_from_fork_asm+0x1a/0x30
[  575.068958][   T32]  </TASK>
[  575.072695][   T32] Kernel Offset: disabled
[  575.077039][   T32] Rebooting in 86400 seconds..