last executing test programs:

2m58.954401806s ago: executing program 4 (id=1529):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}, 0x1, 0x39ff}, 0x0)

2m58.817337318s ago: executing program 4 (id=1532):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000400000000000600000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

2m58.619669107s ago: executing program 4 (id=1534):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000080)={0x4, 0x6})
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_vlan\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r2, 0x40047438, &(0x7f0000000040))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r3, 0x40047438, &(0x7f0000000140))
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000080)={0x4, 0x6}) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_vlan\x00'}}, 0x1e) (async)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl(r2, 0x40047438, &(0x7f0000000040)) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl(r3, 0x40047438, &(0x7f0000000140)) (async)

2m58.5211741s ago: executing program 4 (id=1535):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x2082, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
connect(r1, &(0x7f0000000000)=@in={0x2, 0x2082, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_256={{0x303}, "e13ee89ef5285851", "3782c580109ba9eddc6d8eec1d0aeee85dc656b5c6271581807f4be2f1bb4422", "32989550", "0300"}, 0x38)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "2cde2f240dc9bd08", "b750aa7a64c5e67051a52d830c4e2285f3c305f3cf73699f0480c45739846a05", "f3c55e41", "9ac5c045077b96b9"}, 0x38)
sendto(r1, &(0x7f0000000500)="15030300020200", 0x7, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/100, 0x100}], 0x1}, 0x0)

2m57.53909905s ago: executing program 4 (id=1547):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)={0x22b4, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x229c, 0x1, 0x0, 0x1, [@nested={0x2298, 0x75, 0x0, 0x1, [@nested={0x4, 0x80}, @nested={0x2290, 0x88, 0x0, 0x1, [@nested={0x228c, 0xb7, 0x0, 0x1, [@nested={0x2288, 0xf2, 0x0, 0x1, [@generic="8a6d957817b8a17a006d8b6712de1d12d945e693685d6ec6000fc578de1f88a342c8b8b532a571b4beb62c60dc9922084b9f33080c670819", @generic="dea55932c0db57e562c4ef795beeda3606c77ae2927b02bd197707ecc1deafc2e49d4454e17b363f9184a1365ade54ca644605dd2d6dbd66dd679a568b4017cda4442bb8ee7d0c9f4e21d7e061f071c9b84a21f8f56df964ac93fcf767894db9f0f5d81758b483fe43f09258ff1d57b5198cfb36b794ed4708b3bbd03b41829f695b76cb7d800eb04278fd72f7ef209ccd204d1cf1790956826cf06e6a9f48997973aba2ceee335380711d9296f6e40168de8006bb8f657da0ff97cdfc51353d36f2d8d1e109958c45e3daec99a4da68832aa115de450b807f74e84dc84da5844e2a2de0ef38ca09640638b540b7aa1502f8c87c0156f81e5bdcccb33a500874bedc6e33bbd4508e174748b0620d0726ee32ca45bedc28ea62ab4e3d06758bd4da627e3fb421fce8a03d0585e7180013916080884b4ad6010c92ce48757a3a5e31a3397116e96481a5f6ba669a9b8702fd1969cd35445c816d6830f2705983b7e3344325019f727d1ff60f2ccd7c448509296388b773bc5719785fcc694b1f024f3c026160fc1fa388f71e4c42ec8eb8463ea57b2c66f3a8b1ce60c181a6378c8c4917a6874c5c62f97b27e15e0af3697671937d63dd86cfa2c4017662b7970a8ce822504068a2863922e6c41ee89104bc66c512e106ce94809161dd461d0a514763d626659bed7e431bcf9a1f5aef99a258ca870b635e49267efa204ed5d4c54b6030d2dc7f2e4156a781fabf227b1eeec3c286667849754673fb04082a52d2e5fd9802d02c71a1011a4cc93e7300f2e6b9809118fa078f50fdabcc85f6de79f2b1e924ca13038c33b10383072ca69b3acbc542bdb61c6c8e0cffd4659c0665a7564c2aa88d2abf455de18ce04b8f897f5d16d6a0035c8bf526e2d10a7c3f28234d7d4404eeb24edcbbaeb9abbd158348541a30ce1e62fc0a234daa8c59ba33fc71f793f9390642ca88afc2b1f370f0d7ad420d1480b008f5f5738e6aacc4e35e4f88ec32e6dbcac0341d0193ba6db097881fd9e52dafaa3af5f22106a188fa5f32324392f0b7110c7e0358cc66bad871947fc8a06ef16feb34893a3a67f4690c4dfb98763fb6debb4410901633d73ca4cb66eb6141fdcf40ee747d4cf560b111c794a38ffc048f59215f94a9e292d6fc87137648dcadf116ea681417e3f74f1d139a6fc9e3046c9689b3ec84300ce072ba2eeb7ac3325e6800643ed310a06477a9ff81160e4533b3d6bc62e16dc3f497729c0a06d1778c6a949be7016b1f6aecfd9dcbf89debfdc9fbabc9e90b90d189a4d5c88fdaefbee1aa042433e61b472682c63019329f08f3c589e745135cb74c653e2dd856ba74aafa7a201b35ab53241bd244ac87fecffe0422400baf31cd0dc1d73f5fef3ef5421f01864cb3bcbded99e97fd505d038a25941350e9559ce3904ae5eaa869868e06d3f84fe04f34622893b0614fcd0eaeb1215e8452dd06adaa0cb5e75fd0e59a3bcba7348ae3d6324c61ca65303c836f126b39366ddf91c17d6d976aa5e908520bafea5b2b434d93ad3ad7812365af00ce685876f077c9aa7e79ba5d3282c2aeb91a902c158f65840a28c0a6ba9048905eafb23604e2f8f283a2f66f95f838ba6afdbc58c343fa8f22f756c37787279a7b75dd95a025e05236d8fb6c5ff2c3cfa74c731c0c884828273c8a0dc93672370e42d0b51da815613ecc483e7369f2d14f39aef844b79040e9890e7ba021500d18c875b6babbf2ab13af273470912f3f5e1d62dbd4ad7551b8a06db2e123e1bb1f1d9ad436236051107cab89d3801db5bef03cd8fc8c8563f3098a897b0c863f18f2ff1786ff4cbf465965087c505c6df5ea1809409112eb9638cfe4551c8cf8dc0bd4e2db65ed4eb449f02d403ae022be447b935eed8584f4a1a6c6662709d032312cb0c6c8ca56eb99c4de703a546249620bfee637089e7a38012e48906e76efb21c03598949b24a78dee4b687845777a674719c1004056bdddbf63fdefdcac054384a71f0b3c3006a6bd48e46988640fcc75bc52517c19bddd5899c96bc3c5ae604c62cda8f73cb05e43640ff1cf23d422011cf13ff9ff126ddb922c695204d1567b5c48401076aaa396b8328f80946d7389c78b15ac284e05ea103306dceea1aabf384e1b61f9f15396b61dd11fc5b5160d935faa5d88d838e4eb3d40f5a1e5d749e1ec8015bc7e5e70fe5225735e6baf4b2623c218e6c6a942d7859404ca019fac2fc6d71ff090a3ebed84470aef8f470a01ea734b6ed4c47507a43c505b6c1a554f8fbc115dfda8c4f2ffcb500b43a811cfffb3af2eaac0b14ab8ed91583a7e65edbfce4b29b301f60ff3e3aaa4296f6a6e72fcb961414de1f1139f6a6b2a0ece2412dd18163033881ef3830f97ababf539dbf84510dd7fb8f3a3d5766fe9963c7c39ecf963b562b080c6f456546fb022a45925e999c9bbcaec6998f7ba1ef883504b8167332f78663b15b81002df96e3af9cf13340eb17db0e2aac3737f246ce8b26913919b704cbea3d6f0150b6d36b88bdd09ed4c2922f291d414103f3c167e814b5bd494c5b1f1a8a6a55e93bd45c955af08eae4c6518731352f6ffe5c71bf6e54d7353d939f04cea7989e5a02e5cf7071bf3a9f76cd1fe2b9ff8fcc83c8a6c38f08553388d62ae098097405f3aa91d17e6fc42f5a54075bb62bce03b342180c3cba714c5fa48764f7ecdeff9bb126fffee87afb6b14748d7c2706b62789c20cc46e7fe014322e5a016ca4eb3e444bdfd6a2c62319c9aea8e918633a977b762c68167fead2b66bb99e9fa0c8fa8859fecc3d49ce4c7473a87ae6352762fe6bb39f44a9026b7073265ae0f7221661144508bd72411efdb642af2651545643e02bad82139e7a960c077b3104604670321dda2aaf6f70f9d94550035b0b102353830b40d4e3305f63e1bed651626f4dd59270db5cfb627ee4c83dd6f273fb731a5d56b663952e31e4b0293e763736e8ea60b9175c259c34a2352c6682b906067aa126915e4fc8e22efcf4b65ad12d6cfea1695785d8b1c789fefff217d18a81b969e2da27aa066a4929a2fc12890865a4443dcb16ebd08d2cd0a5349ce8fa6ebd8471edf1852a19fcb8fe2b200b26c7a879418b5bcc2774bc721f07237680933d37a0fc82a0af58f9ab5df9dcadbba46b71575b011bf5e751fa92b42348bf596446e37ec889edbd63a1d32528dc1e19d58b7f3558bde08a91ad1cf1a3a81f08b242268a20758990ecfe73a8910c03b9e1afb00e8ffb89f9d0395ee22f9dd40e43d0ed6066059a7906489ac55a460d4a78e5e1a4dd70afdf25fd713a7840faa4529da8f40e5481d63040493df4ebd2367cd9609ac52512df149f739cbdaaa42fab43745ab2cc624ad879354171efefbe8247bb03ed8762cb83f30104f586e7abee39fd4dfc4b9ab37020a44e85d52743d76862cdbefe0b9d9b7e4912ea6efab7d4092b62f8ba8ad54bc479438e9fdec9df3f43bc8d685249fca6b87df7a3c3dd9b377196bed4924255447b930d17212274bba7652bdd04b6b4afd72bfd8fefd3b0982bc89750b07d5c59d761b3cef9d659532f6e6a339e623aefd8e9eb5055e026a9f9ff156cf00ed49319c1dcd1ec5ad888f4ecad3a4f3849d616e6d3387789d649b62fe962b1f5b37ed8ffab2a262e0d000e373ea27a1e21812ecffccd44690e082a8aa748e112f570de785c9ea21ee95b5b1b352d523828df66aa925b3fb2521a6b84293fcb1ed69fc0780d041ae63d756e23ba23c64b90387c804c921343419d988ff71dd6d6bd32c9627754d4cd3e6f155a396eca7f8bbe0796b2814831a12e2ed662dd2fe05dc4bccf5a2147d5289d10779884ef2d1a783afbfc94a6496b05c0a20c465a7146f16d135f2510c27f049f076f70ac2c31453693648798da8c5785cf1f32374dd0679be9a505f59417ee5342b467dddd5e019e645aae3da76adb3110f3944d8b2b290af8f512280e69683545bb3ce1ac70f3aa4d486d6519927985778d5c9338d3a7cfe3849eece2fb2d94b74bdf4a13e046230c485a838a74e08ed6b11c5fedb004a6579c1ad719f47d4d834887c382c0126272106b9754510fe58b90cebe3f369c7807a6a60511521228fb7fb3299b582571f015d1026eb71ae5c42954accc842b0dd6d659dc8c29333265f096ecfcc43e6d31a361f9276ad75323aebb350abfc4fbfc8294b7b51b01b8e3fb75ac347fd1617a6a0e40e328ace7c343fadfc7965fb9acebec4338912609ae297f11de745806529a46c0ff0c7c428b52fa241c4ce593cc789bdb6042ff1534bd1adfd2cc297a8648afbdc99d33415bfd3f4d19a1c7451d0439680cd6be87be8945ee4a31d3a6f2acc8efb335eafee42a5d8f36f0ec86a754698fd9c539dea154820357d8aac3cd6374629d8b16f63c17fc5c966dc7b7d6cb3230dcdda44ef90a5f7e9acd98ee81a7e20afdc3fe7c52f03886a825d9d44f53fcc66fed45fc82c5dff6f8054d835b402e2fdb5b1832025e21b8ed1a21252d2a3c0f0f6ec5522476a362de5da2eb0a941ac2da8453cde9bee1a9e27da2a6c9d04580e282b5f29840f0f35dda266f8e47b25709df7685e213b68472d440596e7e84e48e6896d091f71a46700002e0063eff2f94c629b600bc0045df114dba7da77f03ff6e11c68bea1d69afda547c564db0dd7c9e61c58811dcfb2d9778e8d4b79084e656adbae9e0ec5c6791dcc341b1aa72d312a7508404d3c7254b9ee6f617bd8b6ec7c4e26e64d679c08c378ffb3efd441c214af8fdd38bdfe3bf748478c359087a7bee69aaa3e5d9aaa7fc2c028508e9abb81ec5329d57da99b3c881d393cff06455f934279fd1e5079bc0172cacc90658e962cd89ef5918da9fd52107ea2d112b08ffdf7de19835a9333d3d6d87adc673fffd9c0340d68122d2f3fa77156b34b757c1e7066182746a04e024b73567a9d1f268319356ff2029fa523e16345cc3b91bf86205a54d51dca856306f4f80e3ab995e6af9f693e6ca9b0de9b6501b7b58c8089fb6a7a90d0a0d7e8f5defa0a66ec6b14575372f282974c6410eeb0575e88e5755c0fdce116afef8f342d2f883ad833e710ed4b0a3f2b74b89af3e04e313f92c458a0326b23b7d41e1813cd8bc97eb1a50355898f2c6a62ff3f8871a5d871b468fb608a36e9c0d3a0add18811295bdcd3a56e9f10f8b61ed19303bed05c05a3fdd4e887ba21c7d6acb2eac8383364f54ed6e851f18d5e412777b863ca2db82c814121bf2b0f1856392848c4cba9c420f3be77a3e3ea360eb1408afc88aa4184ef69652bf614ebbc185a2691068f8a5c424e74ef82a9a43e93f78a3fbd79727eefaf7735df735677dad7e4464382ec15e0ab0276e2a6c0dcd735aab4e905260fb72d19d5972347d86187dd112f60fbc95e25e98419b7abca4485fa360832924c94986662a8d024fe44498b1420f556f144969878230e5ab486771c7c776fc3453d078191b20a4059741b89e5d99a94daf2d018a48f5c37927cf990040d81aa9b1963a52c238cd1b227641b96496fbf8d0dea192f3d0f614e60ec26d9d67694378a71b3336589158353ecaeabeb02867bac3e2224fa0edbb6450e2ec27f24afb31b34234feef950d741db668ca58d4268bb5e7adebe6607619dc65ed84c7267aaba9dfcd53e8d69f9cfd9901896432b2dd8183fe3d5925173da529626984bef1e9fbb4b933ffc65a6b05dc31ba44c109e578ea508c38970a8885979b558f312e90dbfc586d076da93b3b0b0861c2804ffcfeb3b82e8c4528780d2dd905da4dd1939c53d", @nested={0x100c, 0x1b, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="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", @nested={0x4, 0xc8}]}, @nested={0x23d, 0xbd, 0x0, 0x1, [@nested={0xeb, 0xc2, 0x0, 0x1, [@nested={0x4, 0x77}, @generic="4d0fe0d61628412bf2c8dda35fcb0bc5f7a38ceb2bf31300e8743e98a54fcfdf7ae42cd060c3230394ddeea34528a11242202200603754dfbe63e836dd1701c507e1270e25c77c512402b8f6a635bb4a03c2ed8c0be2917629afb9245337d58b384a3999201990ff2d3cbfd5a49c0db74de46a32f9c685f9591dcc0ee6a8f0d2d111f1044eaf26f7c7acfd3edd7445c8fc6eae07a1743dacb8d9b787b1dcb99250ebef98236e3f209933775de46d6b07c1d62eb123779d68b01a44f5d1017f686c87dabacd7f390a62602db787bda93aba4b52fa71926210bafe82e71b056c6aec6bea"]}, @nested={0xc, 0x41, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @u32=0x1c}]}, @generic="3ee0bd45bfb99d0d7d0ff77b1f2e08de070718f1c0674497831fab68552f72ca6b3f379ada14a7e150ef5dea84885448b79cd63db1cf48da82b276ab43f5e420ad602a7bb1e88dc0d7eafda397dc63c5c2105da8f5d6d1d74b538ec44376839efad04fd89a3413941233fc7651e6c3ad8870a26a817da06094c53221af51397996d836688efcc4a3b01bfebe742aecec5125cd9c4d0624", @typed={0x8, 0x169, 0x0, 0x0, @u32=0xd4c}, @generic="59faf883b66c2d8712e4bb14ec840fb448290221bd14259dbc4844cc457ad5dbb0aecf1394c62e152890041bce9a6217c9a0c0da95b276f162934bca553117e1fd4962a98d3fadbfed8c6b281d3025a264aea918b87c", @nested={0x4c, 0xa8, 0x0, 0x1, [@generic='\b', @generic="ceeee07af0368984876f0ee77de903f20ef660cdd61409c741655e45b0aa1fb3a3b4e73281e7a61937fac06c46a5fe8aab9242", @typed={0x14, 0x16a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}]}]}]}]}]}]}]}, 0x22b4}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

2m57.30344678s ago: executing program 4 (id=1549):
socketpair(0x10, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000140), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200)=0x80000000, 0x8)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000580)={0x1, [0x0]}, &(0x7f00000005c0)=0x8)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x47}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000041)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0)

2m42.191695207s ago: executing program 32 (id=1549):
socketpair(0x10, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000140), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200)=0x80000000, 0x8)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000580)={0x1, [0x0]}, &(0x7f00000005c0)=0x8)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820)
sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x47}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000041)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0)

2m35.375972198s ago: executing program 3 (id=1828):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa6, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840)
sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)={@_ha_fsid={[0x5, 0x401]}, {0x7, 0x0, 0x81}}, 0x0, 0x0, 0x0}, 0x0, 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0xc)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000140)=0x1, 0x4)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x20e6, 0x0, @empty}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64)

2m34.688027797s ago: executing program 3 (id=1840):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback={0x20000}, 0x1}, 0x1c)

2m34.546384358s ago: executing program 3 (id=1842):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r3=>r2})
getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000100)={'security\x00', 0xf0, "e85f8c166a37fd6b3878a59c9224613492224fd97b016c7213da084b937be9b9532b44caede8e8fee12ddea9da27036242ccda84f958a74db41cb726fb9355fe41325b91f4043fe9bdcfccb92cb1b885e6e5d516ed7483f65444fc1a35a4f69a0259082e0959a3dbe5ab1a6fd4976ba044a546965ab84ceb130c6fb8bf35cf5b4a6bcb420df03cc1e571f0d45e2bdce43d3f98af68dabe5595ea098478883e19d99be56e4a80649df4965883f229872cbf25f53cbd8233688052a30fdf83201db5f78d2af765a1d572f1e1dfd86a9671a8592584fed6fb42510d769752830db50819b9d412edc3c50130a04b8e84c7e9"}, &(0x7f0000000280)=0x114)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x81, 0xffffffff, 0xfffffffd, 0x6, 0xfffff12d}, 0x14)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000))
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)

2m34.3432132s ago: executing program 3 (id=1845):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2ca60}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9260400}, 0x94)

2m34.190369715s ago: executing program 3 (id=1847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'dummy0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000faffffff2f0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24040)
sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@can_delroute={0x2c, 0x19, 0x2, 0x70bd28, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "759f2a098ddef076"}, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10001}, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000100039040000000000000040000003e4", @ANYRES32=r2, @ANYBLOB="00000000000000001804128008000100736974000c0002800800030064010100"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0)

2m33.517491705s ago: executing program 3 (id=1855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000440)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f00000008c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x366, 0x10, &(0x7f0000000a40), 0x1dd}, 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000008c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x366, 0x10, &(0x7f0000000a40), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)=r1}, 0x20)
recvmsg$unix(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/4071, 0xfe7}, {&(0x7f0000001c80)=""/78, 0x4e}, {&(0x7f0000001d00)=""/133}], 0x9}, 0x40020000)
sendmsg$inet(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001e40)='>', 0xfffe}], 0x1}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
socket(0x1, 0x4, 0x44e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffe8000061196c00000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80)

2m18.20839991s ago: executing program 33 (id=1855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000440)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f00000008c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x366, 0x10, &(0x7f0000000a40), 0x1dd}, 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f00000008c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x366, 0x10, &(0x7f0000000a40), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)=r1}, 0x20)
recvmsg$unix(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/4071, 0xfe7}, {&(0x7f0000001c80)=""/78, 0x4e}, {&(0x7f0000001d00)=""/133}], 0x9}, 0x40020000)
sendmsg$inet(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001e40)='>', 0xfffe}], 0x1}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
socket(0x1, 0x4, 0x44e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffe8000061196c00000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80)

29.311733912s ago: executing program 2 (id=2706):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x0, 0x10, &(0x7f0000001900), 0xfffffffffffffd64}, 0x48)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
setsockopt$bt_BT_VOICE(r3, 0x12, 0xb, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x4}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1502, 0x8}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0xfffffffa}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff8, 0x1}}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r4, 0xffffffffffffff9b)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000180)=0x4, 0x4)
sendmsg$NFT_BATCH(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000380)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="2f00000028006cd5c9c45ec073527f6247851dbb9657fe053320643c368cd636a21661a2c7430518f9dde0e39adc", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7, @ANYRES64=0x0], 0x20)
accept$unix(r1, &(0x7f0000000c00), &(0x7f0000000c80)=0x6e)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084)

28.910784268s ago: executing program 2 (id=2709):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000006c0)=0x20, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000700)=r3, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x28, r6, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0)
listen(r4, 0xfffffffd)
close(r4)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={0x2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0xc3, &(0x7f0000000280)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

27.79940228s ago: executing program 2 (id=2715):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
shutdown(r1, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff})
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r3)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001)

27.796581448s ago: executing program 2 (id=2720):
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x40)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075b, 0xffffffff}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@routing={0x84}]}}}}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000)

27.575917661s ago: executing program 2 (id=2724):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x403, 0x4, 0x25ffdbfe, {0x0, 0x0, 0x0, 0x0, 0x20060}, [@IFLA_CARRIER={0x0, 0x21, 0xa4}, @IFLA_PHYS_PORT_ID={0x0, 0x22, "d599a7bb6a"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)

25.120581808s ago: executing program 2 (id=2738):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x6, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000324c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

3.951582243s ago: executing program 5 (id=2819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000600), 0xc, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000100005060100000000000000000000000000000000000000000000000c00030064756d6d793000"], 0x44}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'dummy0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={0x0, 0x3c}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000380)=0x84, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)

3.127863338s ago: executing program 6 (id=2823):
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000004c0)={0x1, [<r3=>0x0]}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000600)={<r4=>r3, 0x8, 0x10, 0x66c6, 0x4}, &(0x7f0000000640)=0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={r4, @in6={{0xa, 0x4e27, 0x4004, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}}, 0x9, 0xb73}, 0x90)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="50181001901dad78da2f23dabf80272d0000"], 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000680)={r4, <r5=>0xffffffffffffffff}, &(0x7f00000006c0)=0xc)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000700)=""/158, &(0x7f00000007c0)=0x9e)

3.088648851s ago: executing program 0 (id=2824):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x4076cbba9945d516, &(0x7f0000000200)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb881}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008006}, 0x0)
sendto$packet(r1, &(0x7f00000003c0)="e8b77052a9", 0x28, 0x40, &(0x7f0000000400)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000140)=0x5, 0x4)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="00000000000d0000002dcaed8c9a73523efd34c0863db70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="1c0000800d0603007dbd997005000000000000000500000007000000"], 0x1c}}, 0x0)

2.867994433s ago: executing program 5 (id=2825):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

2.751948398s ago: executing program 1 (id=2826):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000480)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x81, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000500)='l', 0x1, 0x24004881, &(0x7f0000000540)={0xa, 0x4e23, 0x807, @loopback, 0x3}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x6, &(0x7f0000000140)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000180)='GPL\x00', 0x5, 0x29e, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x104, 0x30, 0x100, 0xfffffffd, 0x25dfdbfe, {}, [{0xf0, 0x1, [@m_sample={0xec, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0xc0, 0x6, "0acd14fd9c9cdd5c297d147416ae0b5c2eb6c78b3eae9df8242e39fa92603cfb4bae2813820a6320b8d7573366649320746032105c6f7b8efa9df933e22b4aa927d62ad6d37d351188e47459b65f44f434a67ff6a50b1fd08073ef02d30ca997f27eb0cde96e984edf587c0a03067c77e0c654f8b0b7f4a8dabb92772839f7aea3c7e025861c60c0a7715ce204003e4e77f22ab6c62edb429fce12dcce6fb38772862eed04f5c4b8e03556fddcca31759f6d27faafeb2832e374caf5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0xa4b9d18a007dd62f, 0x1}}}}]}]}, 0x104}}, 0x810)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2bc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x30e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x48001)

2.627237603s ago: executing program 6 (id=2827):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_flash={0x33, 0x5}})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000140)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000001"], 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)

2.594212182s ago: executing program 0 (id=2828):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010001fff000001000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20d410a76d203697c616e10f693717000000100003046abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="a428040000000000"], 0x20}}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r9=>0x0)
r10 = socket(0x10, 0x3, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0, <r14=>0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xfe)
r15 = getgid()
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x93, '\x00', r13, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0xffffffffffffffff, <r17=>0xffffffffffffffff}, 0x4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000d80)={<r18=>r8, &(0x7f0000000c80)='$\x00', 0x18000, &(0x7f0000000cc0)={@align=0xfff, {0x5, 0x8, 0x9, 0x9}}, 0x8000, &(0x7f0000000d00)={@_ha_fsid}, &(0x7f0000000d40)=0x80000001})
r19 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000e40)={0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1, <r20=>0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x39, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4fdd}}, @map_fd={0x18, 0x4, 0x1, 0x0, r16}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r17}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2520, 0x0, 0x0, 0x0, 0xbcd}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x1, 0x1a, &(0x7f0000000c40)=""/26, 0x40f00, 0x2, '\x00', r12, @fallback=0x1, r18, 0x8, &(0x7f0000000dc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x6, 0x0, 0x1ff}, 0x10, 0x0, r19, 0x7, &(0x7f0000000f40)=[r20], &(0x7f0000000fc0)=[{0x4, 0x1, 0x4, 0x2}, {0x4, 0x4, 0x8, 0x6}, {0x5, 0x4, 0x3, 0x4}, {0x5, 0x3, 0x4, 0x5}, {0x3, 0x3, 0x2, 0x7}, {0x1, 0x1, 0xb}, {0x0, 0x5, 0x6, 0xb}], 0x10, 0x7f}, 0x94)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={r9, r14, r15}, 0xc)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd2e, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4f7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c4880}, 0x24048840)

2.363983577s ago: executing program 6 (id=2829):
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
r0 = socket(0x2d, 0x2, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000022c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002300)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r3, @ANYBLOB="800002000a0002"], 0x28}}, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002440)={0x0, @broadcast, @initdev}, &(0x7f0000002480)=0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000024c0)={@multicast1, @broadcast}, &(0x7f0000002500)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002540)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002680)={'vcan0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x6, &(0x7f0000001500)=""/205, 0xcd}, 0x63ec}], 0x1, 0x20, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c000000070605000000000000000000070000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800)
write(0xffffffffffffffff, &(0x7f00000001c0)="6725d9be4d54a2268060f3433263beacbc4204ba3a88b85d1ce47405c582206e2c99deffae0ef107fe9a95b745469adcfdef580d0ebc85637ab7967fae", 0x3d)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000001cc0)=@ethtool_rxnfc={0x2e, 0x0, 0x1, {0xb, @esp_ip6_spec={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x81}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x5, 0x8, [0x1, 0x7ff]}, @udp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @empty, 0x4e22, 0x4e20, 0x9}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 0x3, 0xf6, [0x3, 0xffffffff]}, 0x6, 0x31}, 0x9, [0x80000000, 0xa7a, 0x7fffffff, 0x80000000, 0x7, 0x524, 0x400, 0x39, 0x3]}})

2.361185482s ago: executing program 5 (id=2830):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0xfffffffffffffffd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000180)={r1, &(0x7f0000000080)='ethtool\x00', 0x11d800, &(0x7f00000000c0)={@_ha_fsid={[0xfffffffb, 0x6]}, {0xde, 0x3, 0x3, 0xfff}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x81})
recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x6}, 0x400}, {{&(0x7f0000001500)=@in6, 0x80, &(0x7f0000001680)=[{&(0x7f0000001580)=""/114, 0x72}, {&(0x7f0000001600)=""/68, 0x44}], 0x2}, 0xff}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/200, 0xc8}], 0x1, &(0x7f0000001800)=""/89, 0x59}, 0x5a1f}], 0x3, 0x40010003, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001980)={'sit0\x00', <r3=>0x0})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000019c0)={<r4=>0x0, @broadcast, @initdev}, &(0x7f0000001a00)=0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001a40)={'wg2\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001c40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)={0x14c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001ec0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d00)={0x178, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x3}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x7}, {0x6, 0x5}, {0x4, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x8000, 0x6, 0x4eda, 0x81, 0x7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x12, 0x6, 0x74, 0x12, 0x60, 0x5, 0x5, 0x30, 0x48, 0x5, 0x18, 0xb, 0x4, 0x2, 0x24, 0x48, 0x1b, 0x18, 0x48, 0x16, 0x1b, 0x6, 0x9, 0x30, 0x1, 0x60, 0x1, 0xb, 0x6c, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xb9c6, 0xfffc, 0x1ff, 0x8, 0x4, 0x4, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc014, 0x4, 0x5, 0x4, 0xe8, 0x3, 0x37, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x100, 0x7, 0xff, 0x5, 0x7fff, 0xdaa3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x97, 0x401, 0x1, 0x2, 0x822, 0x7fff, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x2, 0x5, 0x1, 0x8000, 0x9, 0x7]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5}, {0x1, 0x5}, {0x3, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x8}, {0x5}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0x8}, {0x6, 0x1}, {0x5}, {0x4, 0x4}, {0x7, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0xa}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x18, 0x1, 0x48, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x6, 0x1, 0x9, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0xb, 0xb, 0x18, 0x30, 0x3, 0x24, 0x1, 0x99a2a661bb6a1e84]}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000001f00))
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f40)='devices.list\x00', 0x0, 0x0)
ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f0000001f80)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STATS_GET(r8, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x28, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_GROUPS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8ab9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x4000814)
syz_genetlink_get_family_id$batadv(&(0x7f00000020c0), r8)
ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000002200)={<r9=>r7, &(0x7f0000002100)='&(^%-@{/-[.\x00', 0x40080, &(0x7f0000002140)={@_ha_fsid={[0x0, 0x2]}, {0x0, 0x0, 0x2, 0x1}}, 0x24, &(0x7f0000002180), &(0x7f00000021c0)=0x81})
sendmsg$nl_route_sched(r9, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {0xe3301539c41f6d4c, 0x10}, {0x8, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000002580)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002540)={&(0x7f0000002380)={0x18c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_NAT_DST={0x84, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x30}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x4]}, @CTA_NAT_SRC={0x98, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x3}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x4]}, @CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$nl_route(r9, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10400020}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)=@bridge_getvlan={0x58, 0x72, 0x100, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x58}}, 0x20000002)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000002740)={0x0, {0x2, 0x4e24, @private=0xa010101}, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e24, @private=0xa010100}, 0x55, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002700)='bridge0\x00', 0x3, 0xfffffffffffffff1, 0x8})
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002800), r8)
sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x3002000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x2c, r11, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x848)
r12 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000002940)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @private=0xa010100}, 0x120, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002900)='bond_slave_0\x00', 0x12d3, 0x80, 0x1})

1.707850299s ago: executing program 1 (id=2831):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80c02184}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5c9}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd6ae}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x240000d1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x454, 0x0, 0x600, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "e10d5a0171c8f30c9a0697a6679805f1debfa44bee76d14decdac95db264b3d9cc11a4cfe04469218e3e6bdf412c89ae35c872e31ff950c14823af28323e619f4bde7b5a7f57eea1afae7c0104c717a8bc18ff51c157d60a4f1d4c36fca0d49a3d495f84855e066b646bf78c53185673465211c48a56b64e00"}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "6e68e1d6477a70d9e8697bca697963aa5f1773bdb96e2f5c912f0b874c467951c1a03b6320984d143a1f0e0ac77b6db9a20997e56bcee50ec86113e16ea969a92ceadbcd41bdc961ab070abd47d3145e2d770e609a61605b5d540f82511dee694911f52f59a1c509c0cd0b5ffd22"}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "dd03db4f6e4f0706bbf502f99095480f76ea67138d1b2015ee8e8b99ee7e638f4c95b1e655c86dd420b8b8378ad13b87ef458ae487ac9cbe96b5156f69da6c28ff2aa3249a21676a6364778ca6b8a590eef269f9"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_OURS={0x2bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "0d64f3b7b843cf3b7ae658cdf4b156dc25ba6f265b30cd6a616a6954510ad3381a9072344f43d243457ce0a7a726b2e1326839336d302f27c2e6bbd8944b2b5476aa1b4176f40980a1a5208aff176bac1c90e90ccbcc82ee830957879433c12d8a72f31a8587d4e94fc9fda99fb6e5e8623371bd36ee1518146e5391c8c4798274a1969a41b8daedd9c03e8e8affa7f5dc89e5b4a3f53aca1447f307ad052a9e7b573a00476fa810a33415a18c877ba9b1443e0ec1c5cbc5af858f6dd789d004a8a6ce2d5316cc5c498842e35c136a38c5547d18a514b9457f09c2af"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@.])*+-@\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^#*#\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x84bd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':!-$:%/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(\a\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44040}, 0x40800)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1e0, r4, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_KEYS={0x15c, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, "0bd9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7be3d4bcb5ed5e3658a76ef727"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e97b720816fe8388d52977a74f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5627d6825d"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "bbc5e54139"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6bad14c377"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "027c167460"}, @NL80211_KEY_SEQ={0xf, 0x4, "01a13f22f01bcbed60f9ec"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "cb708bfb81"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a51dc32c4e"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "eda41ae7f8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4a99c31e5a456bfcd83681399e"}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x2, 0x1, 0x0, {0x7, 0x81, 0x0, 0x90, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x10}}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r3)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xfffff7b1, 0x13}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x44800)
syz_80211_join_ibss(&(0x7f0000000d80)='wlan1\x00', &(0x7f0000000dc0)=@random="f9f9a5764f8d51bfbd32c917", 0xc, 0x1)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x60, r4, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0x7b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
splice(r3, &(0x7f0000000f40)=0x2, r3, &(0x7f0000000f80)=0xd, 0x3, 0x8)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x13}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x440d0}, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000011c0)=0xc1, 0x4)
clock_gettime(0x0, &(0x7f0000001200)={<r6=>0x0, <r7=>0x0})
setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000001240)={r6, r7/1000+60000}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000012c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x40000)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f00000013c0)={0x5, {{0xa, 0x4e20, 0x3a4, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}}}, 0x108)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001500)=0xffffffffffffffff, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000001540)=r10, 0x4)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001600)={'filter\x00', 0x0, 0x0, 0x0, [0xcd, 0xffffffffffffd960, 0x9, 0x5, 0xf, 0x1ff], 0x2, &(0x7f0000001580)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000016c0)=0x1090, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000001700)=r10, 0x4)

1.542804288s ago: executing program 5 (id=2832):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xb6) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x94) (async)
r5 = accept4$x25(0xffffffffffffffff, &(0x7f00000003c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x800)
pwrite64(r5, &(0x7f0000000240)="5fe4e24514e03688a13e85fa95887de3284c783caf1e", 0x16, 0xfffffffffffffff9) (async)
write(r2, &(0x7f0000000100)="a53577aa60d72375965519c76b95403a2a6bbf181c2cd15d3cb30812dc24d85d47191dc74f2ad289a50ce8dd93ee77", 0x2f) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000006c0)={@empty, @loopback, r6}, 0xc)
sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20044881) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80)

1.515809813s ago: executing program 6 (id=2833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0xf3b, 0x8, 0x3, 0x7fffffff}, 0x10)
getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
recvfrom(r1, &(0x7f0000000040)=""/104, 0x68, 0x12020, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={<r2=>0x0, @in6={{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x1ff, 0x200000, 0x2, 0x7, 0x80}, &(0x7f0000000280)=0x98)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={r2, 0x9}, 0x8)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)={0x88, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x70, 0x1, 0x0, 0x1, [@nested={0x6c, 0x75, 0x0, 0x1, [@nested={0x4, 0x80}, @nested={0x64, 0x88, 0x0, 0x1, [@nested={0x60, 0xb7, 0x0, 0x1, [@nested={0x5c, 0xf2, 0x0, 0x1, [@generic, @nested={0x4, 0x1b}, @nested={0x54, 0xbd, 0x0, 0x1, [@nested={0x4, 0xc2}, @generic, @nested={0x4c, 0xa8, 0x0, 0x1, [@generic='\b', @generic="ceeee07af0368984876f0ee77de903f20ef660cdd61409c741655e45b0aa1fb3a3b4e73281e7a61937fac06c46a5fe8aab9242", @typed={0x14, 0x16a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}]}]}]}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)

1.367743237s ago: executing program 0 (id=2834):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000600), 0xc, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000100005060100000000000000000000000000000000000000000000000c00030064756d6d793000"], 0x44}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'dummy0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={0x0, 0x3c}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000380)=0x84, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)

1.246232478s ago: executing program 1 (id=2835):
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={<r0=>0x0, <r1=>0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) (async)
getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000080)={<r2=>0x1, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x4e23}, &(0x7f0000000140)=0x90)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r1, 0x84, 0x25, &(0x7f0000000180)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x4000, 0x1, 0x4}, 0x90) (async, rerun: 64)
recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/14, 0xe}], 0x1}, 0x0) (rerun: 64)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={r0, @in6={{0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}}, 0x2, 0x401}, 0x90)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r1, 0xb415e000) (async)
r3 = accept4(r1, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000004c0)=0x80, 0x80000)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000600)=0xe8) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000640)={<r6=>r2, 0xc350}, &(0x7f0000000680)=0x8) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000006c0)={0x4, [0x0, <r7=>0x0, <r8=>0x0, 0x0]}, &(0x7f0000000700)=0x14)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000740)={r7, 0x2}, 0x8) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000780)={0x1, [<r9=>0x0]}, &(0x7f00000007c0)=0x8) (rerun: 64)
getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r3, 0x84, 0x7d, &(0x7f0000000800)={r9}, &(0x7f0000000840)=0x8) (async)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000880)={<r10=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000900)={r8, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x49}, 0x90)
getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r10, 0x84, 0x85, &(0x7f00000009c0)={r0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x5}, &(0x7f0000000a80)=0x90)
setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000ac0)=0x3, 0x4) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r4, 0x84, 0x7a, &(0x7f0000000b00)={0x2, <r11=>0xffffffffffffffff, 0x800}, &(0x7f0000000b40)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000000b80)={r6, 0x4, 0x4}, &(0x7f0000000bc0)=0x8) (async)
ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, &(0x7f0000000c00)={0x1, 0x1, 0xffffffffffffffc0, 0x9, 0x2, 0x8})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d00)={'ip_vti0\x00', &(0x7f0000000c40)={'tunl0\x00', <r12=>r5, 0x7, 0x7800, 0x6, 0x2, {{0x23, 0x4, 0x3, 0xa, 0x8c, 0x65, 0x0, 0xb8, 0x4, 0x0, @local, @private=0xa010101, {[@ssrr={0x89, 0xf, 0xbf, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x68, 0x1, [{0x6, 0x6, "d37e5bd1"}, {0x7, 0xb, "f95979288fd8564a8c"}, {0x5, 0x7, "5671014fc0"}, {0x5, 0x12, "39cf9b949fcd773cba764cd63eb91520"}, {0x3f9b0b1985e8f05f, 0x10, "68181cec41b028047e99530d5352"}, {0x5, 0x9, "288eeee86f3320"}, {0x2, 0x3, "86"}, {0x3, 0x12, "0962f938bfd0354dd28bbba2a04181e5"}, {0x1, 0x3, "f4"}, {0x7, 0x7, "ea6ea290cc"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000d40)={'ip6gre0\x00', r12, 0x38, 0x7f, 0x1, 0x0, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8, 0x7ff, 0x5}}) (async)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000e80)=<r15=>0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r13, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r14, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_PID={0x8, 0x1c, r15}]}, 0x24}, 0x1, 0x0, 0x0, 0x240400d5}, 0x4044001)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f80)={'tunl0\x00', r5, 0x7800, 0x20, 0x4, 0x99e7, {{0x6, 0x4, 0x3, 0x34, 0x18, 0x64, 0x0, 0x4f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x86, 0x4, "9976"}]}}}}}) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, 0x1404, 0x0, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc041}, 0x4)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001140), r16)

1.023397175s ago: executing program 5 (id=2836):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000380), 0x10}, 0x80) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)

959.398311ms ago: executing program 6 (id=2837):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={0x0, 0x3}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={0x0, 0x3}, 0x8)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40904}, 0x20040814)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000100)={'ip6gretap0\x00', 0x10000, 0x2})
ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000200)={0x3c, "800d335085a3138c76dd295e5c1b0771ab0a6f5b9eb93e59c0f961711c514aecd4ae0e1cd4f73010b39353df9f5dc0b74c97541ca4b767aa62978e363c41df9c20234fc5eb39abd0c04feed18576b041a3a39ae0c18fe2e10272a4721d31deccaac6b4182669e95adb4ea02937fe0db586ba83111d286e4205bf3d220097a5ed"})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$netlink(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000880)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000034001a00060000000200000028000480240008800800010001000000060002"], 0x54}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000024001a0006000000020000001800048014"], 0x44}}, 0x0)
bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) (async)
sendmsg$NFT_BATCH(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0)

959.149485ms ago: executing program 0 (id=2838):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@gettaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="c11699a7a5a75bab2fd77e56e11891e90c58de2daa49b6a3b934444f3d7a20846c42927b7ee8180dc44dcf2f0ea398133566fe1d79938dd419d600da225f6d6b3a926d839d2b513419ea41abf17faaf4002ec78a5c66", @ANYRES32=r1, @ANYRES32=r2, @ANYRES64=r3, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES64=r1, @ANYRES64=r1], 0x0)

619.480891ms ago: executing program 1 (id=2839):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x0)

500.090919ms ago: executing program 5 (id=2840):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x88, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x40, 0x5, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00008848"], 0x59)
r4 = socket$igmp6(0xa, 0x3, 0x3a)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000480)=@tipc=@name, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=""/84, 0x54}, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r6, &(0x7f0000000080), &(0x7f0000000200)=@udp6, 0x2}, 0x20)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000880)={{<r7=>r4, &(0x7f0000000700)='{$-]\x00', 0x0, &(0x7f0000000740)={@_ha_fsid={[0x8, 0x401]}, {0x0, 0x81, 0x9, 0x1}}, 0xbfbc, &(0x7f0000000780), &(0x7f00000007c0)=0x8}, {[0x1, 0xffffffff, 0xcb87, 0x100]}, 0x9, 0x44, &(0x7f0000000800)=""/68})
recvmsg$kcm(r7, &(0x7f0000000b80)={&(0x7f0000000900)=@nfc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/190, 0xbe}, {&(0x7f0000000a40)=""/96, 0x60}], 0x2, &(0x7f0000000b00)=""/77, 0x4d}, 0x10002)

344.153045ms ago: executing program 0 (id=2841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8450)

342.909607ms ago: executing program 6 (id=2842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x40)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x72213, 0x58091}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x61800, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1d8, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "2ab71e6264e40ebd20c3e301aed9e33396e93c6a27fe6abbee12073aa1eb947ecb593e5a9066f56046ef5d64ec2b8891e195ce30e6eb6870"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x4d, 0x3, "dfb5814e07e626a11ab13d68c905d2adde65d649c42ea87c3c131ac488ae81192914b7f8993a0b96dec9824fdf606d8ba5009884d9d0516087f388a251188464fd54d461624db28ab6"}, @ETHTOOL_A_WOL_MODES={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "3a7e351e0a707afc47aee1c99cf56498b4a69cc09cad0b275f626eb9b58271624f031cc7a2ed507826f27e4b3d016f38d2471753970e3756655ae118be178a9e9f9caa5a37db27b7a25197961a6493878247270f47d199130401ed23fb9d8ef737e015bbbf104d18ff5e8d8084ad8bc6ce84dcb7539e257987eb9bfbbb390a5860118dc470ab74f57d3647f631a9419f2f9ffd6d231a52e77699555987cb0b9ed37d30c771c38004107b2a14911f3ad918a39008f81129b1558663c25787a14c6921fe"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x14, 0x5, "a916a0584c281865c43625188ab95f03"}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044)

266.334945ms ago: executing program 1 (id=2843):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2ca60}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x94)

127.288198ms ago: executing program 0 (id=2844):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000240)=""/4107, &(0x7f0000001280)=0x1012)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0x1003, 0x25, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}})

0s ago: executing program 1 (id=2845):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1}, 0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x49, 0x5}, &(0x7f0000000140)=0xc)
syz_emit_ethernet(0x2cd, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x297, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @jumbo]}], "983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"}}}}}}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) (async)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x49, 0x5}, &(0x7f0000000140)=0xc) (async)
syz_emit_ethernet(0x2cd, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x297, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @jumbo]}], "983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"}}}}}}}, 0x0) (async)

kernel console output (not intermixed with test programs):

to 1532 would solve the problem.
[  297.190397][T10901] batman_adv: batadv0: Interface activated: syzkaller0
[  297.431963][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'.
[  297.597313][T10900] batman_adv: batadv0: Interface deactivated: syzkaller0
[  297.659675][T10900] batman_adv: batadv0: Removing interface: syzkaller0
[  297.703782][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'.
[  297.711276][T10918] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.713549][T10918] syzkaller0: entered promiscuous mode
[  297.713606][T10918] syzkaller0: entered allmulticast mode
[  297.750361][T10918] tipc: Resetting bearer <eth:syzkaller0>
[  297.769645][T10917] tipc: Resetting bearer <eth:syzkaller0>
[  297.828936][T10917] tipc: Disabling bearer <eth:syzkaller0>
[  297.965363][T10934] syzkaller0: entered promiscuous mode
[  297.965386][T10934] syzkaller0: entered allmulticast mode
[  298.424063][T10952] syzkaller0: entered promiscuous mode
[  298.424087][T10952] syzkaller0: entered allmulticast mode
[  298.632917][T10958] syzkaller0: entered promiscuous mode
[  298.632941][T10958] syzkaller0: entered allmulticast mode
[  298.668303][T10958] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:19999
[  298.834973][T10972] lo: left promiscuous mode
[  298.835144][T10972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  298.836463][T10974] syzkaller0: entered promiscuous mode
[  298.836480][T10974] syzkaller0: entered allmulticast mode
[  298.879503][T10974] FAULT_INJECTION: forcing a failure.
[  298.879503][T10974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  298.879550][T10974] CPU: 1 UID: 0 PID: 10974 Comm: syz.1.1666 Not tainted syzkaller #0 PREEMPT(full) 
[  298.879573][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  298.879587][T10974] Call Trace:
[  298.879595][T10974]  <TASK>
[  298.879605][T10974]  dump_stack_lvl+0xe8/0x150
[  298.879651][T10974]  should_fail_ex+0x410/0x560
[  298.879685][T10974]  _copy_from_iter+0x1d3/0x1660
[  298.879711][T10974]  ? skb_set_owner_w+0x263/0x3d0
[  298.879745][T10974]  ? __pfx__copy_from_iter+0x10/0x10
[  298.879782][T10974]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  298.879809][T10974]  skb_copy_datagram_from_iter+0xe6/0x720
[  298.879835][T10974]  ? dev_get_by_index+0x22/0x2d0
[  298.879865][T10974]  ? skb_put+0x112/0x210
[  298.879894][T10974]  packet_sendmsg+0x37bd/0x51a0
[  298.879935][T10974]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  298.879966][T10974]  ? __lock_acquire+0x747/0x2de0
[  298.880004][T10974]  ? lock_acquire+0x115/0x350
[  298.880028][T10974]  ? __lock_acquire+0x747/0x2de0
[  298.880059][T10974]  ? __pfx_packet_sendmsg+0x10/0x10
[  298.880087][T10974]  ? aa_sk_perm+0x713/0x900
[  298.880114][T10974]  ? __lock_acquire+0x747/0x2de0
[  298.880141][T10974]  ? down_read_nested+0xfe/0x330
[  298.880169][T10974]  ? __pfx_aa_sk_perm+0x10/0x10
[  298.880200][T10974]  ? aa_sock_msg_perm+0x144/0x210
[  298.880235][T10974]  ? apparmor_socket_sendmsg+0x98/0x360
[  298.880283][T10974]  ? __pfx_packet_sendmsg+0x10/0x10
[  298.880314][T10974]  sock_sendmsg_nosec+0x13a/0x180
[  298.880345][T10974]  ____sys_sendmsg+0x54e/0x850
[  298.880373][T10974]  ? __pfx_____sys_sendmsg+0x10/0x10
[  298.880406][T10974]  ? import_iovec+0x73/0xa0
[  298.880442][T10974]  ___sys_sendmsg+0x2a5/0x360
[  298.880464][T10974]  ? __lock_acquire+0x747/0x2de0
[  298.880492][T10974]  ? __pfx____sys_sendmsg+0x10/0x10
[  298.880552][T10974]  ? __fget_files+0x2a/0x420
[  298.880572][T10974]  ? __fget_files+0x3a2/0x420
[  298.880603][T10974]  __x64_sys_sendmsg+0x1b1/0x290
[  298.880630][T10974]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  298.880676][T10974]  do_syscall_64+0x166/0x520
[  298.880700][T10974]  ? trace_irq_disable+0x3b/0x140
[  298.880723][T10974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.880746][T10974]  ? clear_bhb_loop+0x70/0xc0
[  298.880772][T10974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.880793][T10974] RIP: 0033:0x7efc1f99e1d9
[  298.880813][T10974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.880831][T10974] RSP: 002b:00007efc20814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.880854][T10974] RAX: ffffffffffffffda RBX: 00007efc1fc25fa0 RCX: 00007efc1f99e1d9
[  298.880877][T10974] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006
[  298.880891][T10974] RBP: 00007efc20814090 R08: 0000000000000000 R09: 0000000000000000
[  298.880904][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.880916][T10974] R13: 00007efc1fc26038 R14: 00007efc1fc25fa0 R15: 00007ffeadb00f88
[  298.880948][T10974]  </TASK>
[  299.592481][T10995] FAULT_INJECTION: forcing a failure.
[  299.592481][T10995] name failslab, interval 1, probability 0, space 0, times 0
[  299.592515][T10995] CPU: 0 UID: 0 PID: 10995 Comm: syz.2.1670 Not tainted syzkaller #0 PREEMPT(full) 
[  299.592540][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  299.592553][T10995] Call Trace:
[  299.592561][T10995]  <TASK>
[  299.592570][T10995]  dump_stack_lvl+0xe8/0x150
[  299.592604][T10995]  should_fail_ex+0x410/0x560
[  299.592639][T10995]  should_failslab+0xa8/0x100
[  299.592668][T10995]  ? skb_clone+0x212/0x3a0
[  299.592691][T10995]  kmem_cache_alloc_noprof+0xa1/0x600
[  299.592716][T10995]  ? skb_clone+0x212/0x3a0
[  299.592745][T10995]  skb_clone+0x212/0x3a0
[  299.592771][T10995]  __netlink_deliver_tap+0x413/0x860
[  299.592807][T10995]  ? netlink_deliver_tap+0x2e/0x1b0
[  299.592834][T10995]  netlink_deliver_tap+0x19c/0x1b0
[  299.592861][T10995]  netlink_unicast+0x781/0x940
[  299.592894][T10995]  netlink_sendmsg+0x813/0xb40
[  299.592931][T10995]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.592965][T10995]  ? apparmor_socket_sendmsg+0x98/0x360
[  299.592994][T10995]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.593019][T10995]  sock_sendmsg_nosec+0x13a/0x180
[  299.593049][T10995]  ____sys_sendmsg+0x54e/0x850
[  299.593076][T10995]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.593107][T10995]  ? import_iovec+0x73/0xa0
[  299.593142][T10995]  ___sys_sendmsg+0x2a5/0x360
[  299.593162][T10995]  ? __lock_acquire+0x747/0x2de0
[  299.593190][T10995]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.593247][T10995]  ? __fget_files+0x2a/0x420
[  299.593265][T10995]  ? __fget_files+0x3a2/0x420
[  299.593295][T10995]  __x64_sys_sendmsg+0x1b1/0x290
[  299.593320][T10995]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  299.593365][T10995]  do_syscall_64+0x166/0x520
[  299.593387][T10995]  ? trace_irq_disable+0x3b/0x140
[  299.593419][T10995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.593440][T10995]  ? clear_bhb_loop+0x70/0xc0
[  299.593466][T10995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.593486][T10995] RIP: 0033:0x7fc8f379e1d9
[  299.593505][T10995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.593523][T10995] RSP: 002b:00007fc8f4716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.593545][T10995] RAX: ffffffffffffffda RBX: 00007fc8f3a25fa0 RCX: 00007fc8f379e1d9
[  299.593560][T10995] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  299.593572][T10995] RBP: 00007fc8f4716090 R08: 0000000000000000 R09: 0000000000000000
[  299.593585][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.593597][T10995] R13: 00007fc8f3a26038 R14: 00007fc8f3a25fa0 R15: 00007ffe69348348
[  299.593630][T10995]  </TASK>
[  299.891018][T10996] syzkaller0: entered promiscuous mode
[  299.891045][T10996] syzkaller0: entered allmulticast mode
[  299.953533][T10998] netlink: 'syz.1.1672': attribute type 9 has an invalid length.
[  300.040107][T11006] syzkaller0: entered promiscuous mode
[  300.040129][T11006] syzkaller0: entered allmulticast mode
[  300.378473][T11024] syzkaller0: entered promiscuous mode
[  300.378497][T11024] syzkaller0: entered allmulticast mode
[  300.384112][T11024] TC_ACT_REPEAT abuse ?
[  300.384182][T11024] FAULT_INJECTION: forcing a failure.
[  300.384182][T11024] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.384211][T11024] CPU: 1 UID: 0 PID: 11024 Comm: syz.3.1678 Not tainted syzkaller #0 PREEMPT(full) 
[  300.384235][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  300.384249][T11024] Call Trace:
[  300.384258][T11024]  <TASK>
[  300.384268][T11024]  dump_stack_lvl+0xe8/0x150
[  300.384305][T11024]  should_fail_ex+0x410/0x560
[  300.384342][T11024]  _copy_to_user+0x31/0xb0
[  300.384378][T11024]  simple_read_from_buffer+0xe1/0x170
[  300.384419][T11024]  proc_fail_nth_read+0x1bb/0x230
[  300.384444][T11024]  ? common_file_perm+0x20e/0x2b0
[  300.384479][T11024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  300.384507][T11024]  ? rw_verify_area+0x24a/0x4c0
[  300.384533][T11024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  300.384558][T11024]  vfs_read+0x213/0xa80
[  300.384586][T11024]  ? __pfx___mutex_lock+0x10/0x10
[  300.384613][T11024]  ? __pfx_vfs_read+0x10/0x10
[  300.384638][T11024]  ? __fget_files+0x2a/0x420
[  300.384664][T11024]  ? __fget_files+0x3a2/0x420
[  300.384683][T11024]  ? __fget_files+0x2a/0x420
[  300.384713][T11024]  ksys_read+0x150/0x270
[  300.384739][T11024]  ? __pfx_ksys_read+0x10/0x10
[  300.384778][T11024]  do_syscall_64+0x166/0x520
[  300.384809][T11024]  ? trace_irq_disable+0x3b/0x140
[  300.384834][T11024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.384857][T11024]  ? clear_bhb_loop+0x70/0xc0
[  300.384902][T11024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.384925][T11024] RIP: 0033:0x7f404935ea0e
[  300.384946][T11024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  300.384966][T11024] RSP: 002b:00007f404a26cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  300.384990][T11024] RAX: ffffffffffffffda RBX: 00007f404a26d6c0 RCX: 00007f404935ea0e
[  300.385007][T11024] RDX: 000000000000000f RSI: 00007f404a26d0a0 RDI: 0000000000000007
[  300.385021][T11024] RBP: 00007f404a26d090 R08: 0000000000000000 R09: 0000000000000000
[  300.385036][T11024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.385049][T11024] R13: 00007f4049626038 R14: 00007f4049625fa0 R15: 00007ffe4667a008
[  300.385086][T11024]  </TASK>
[  300.810523][T11041] ip_tables: iptables: counters copy to user failed while replacing table
[  301.030129][T11055] syzkaller0: entered promiscuous mode
[  301.030155][T11055] syzkaller0: entered allmulticast mode
[  301.085127][T11057] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1686'.
[  301.085172][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'.
[  301.191705][T11060] FAULT_INJECTION: forcing a failure.
[  301.191705][T11060] name failslab, interval 1, probability 0, space 0, times 0
[  301.191740][T11060] CPU: 1 UID: 0 PID: 11060 Comm: syz.3.1687 Not tainted syzkaller #0 PREEMPT(full) 
[  301.191772][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  301.191785][T11060] Call Trace:
[  301.191794][T11060]  <TASK>
[  301.191804][T11060]  dump_stack_lvl+0xe8/0x150
[  301.191841][T11060]  should_fail_ex+0x410/0x560
[  301.191878][T11060]  should_failslab+0xa8/0x100
[  301.191921][T11060]  ? skb_clone+0x212/0x3a0
[  301.191944][T11060]  kmem_cache_alloc_noprof+0xa1/0x600
[  301.191987][T11060]  ? skb_clone+0x212/0x3a0
[  301.192017][T11060]  skb_clone+0x212/0x3a0
[  301.192045][T11060]  __netlink_deliver_tap+0x413/0x860
[  301.192084][T11060]  ? netlink_deliver_tap+0x2e/0x1b0
[  301.192112][T11060]  netlink_deliver_tap+0x19c/0x1b0
[  301.192141][T11060]  netlink_unicast+0x781/0x940
[  301.192178][T11060]  netlink_sendmsg+0x813/0xb40
[  301.192219][T11060]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.192257][T11060]  ? apparmor_socket_sendmsg+0x98/0x360
[  301.192289][T11060]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.192315][T11060]  sock_sendmsg_nosec+0x13a/0x180
[  301.192346][T11060]  ____sys_sendmsg+0x54e/0x850
[  301.192376][T11060]  ? __pfx_____sys_sendmsg+0x10/0x10
[  301.192409][T11060]  ? import_iovec+0x73/0xa0
[  301.192446][T11060]  ___sys_sendmsg+0x2a5/0x360
[  301.192469][T11060]  ? __lock_acquire+0x747/0x2de0
[  301.192498][T11060]  ? __pfx____sys_sendmsg+0x10/0x10
[  301.192560][T11060]  ? __fget_files+0x2a/0x420
[  301.192580][T11060]  ? __fget_files+0x3a2/0x420
[  301.192611][T11060]  __x64_sys_sendmsg+0x1b1/0x290
[  301.192638][T11060]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  301.192684][T11060]  do_syscall_64+0x166/0x520
[  301.192709][T11060]  ? trace_irq_disable+0x3b/0x140
[  301.192732][T11060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.192764][T11060]  ? clear_bhb_loop+0x70/0xc0
[  301.192792][T11060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.192814][T11060] RIP: 0033:0x7f404939e1d9
[  301.192835][T11060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.192853][T11060] RSP: 002b:00007f404a26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.192877][T11060] RAX: ffffffffffffffda RBX: 00007f4049625fa0 RCX: 00007f404939e1d9
[  301.192894][T11060] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  301.192908][T11060] RBP: 00007f404a26d090 R08: 0000000000000000 R09: 0000000000000000
[  301.192921][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.192934][T11060] R13: 00007f4049626038 R14: 00007f4049625fa0 R15: 00007ffe4667a008
[  301.192970][T11060]  </TASK>
[  301.496102][T11063] syzkaller0: entered promiscuous mode
[  301.496129][T11063] syzkaller0: entered allmulticast mode
[  301.833254][T11076] netlink: 'syz.2.1690': attribute type 1 has an invalid length.
[  301.833294][T11076] netlink: 'syz.2.1690': attribute type 1 has an invalid length.
[  302.091378][T11094] xt_IDLETIMER: label is empty or not nul-terminated
[  302.108136][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'.
[  302.164848][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1697'.
[  302.230714][T11104] syzkaller0: entered promiscuous mode
[  302.230738][T11104] syzkaller0: entered allmulticast mode
[  302.361690][T11107] syzkaller0: entered promiscuous mode
[  302.361713][T11107] syzkaller0: entered allmulticast mode
[  302.473374][T11118] xt_NETMAP: bad rangesize 37.
[  302.828900][T11142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1710'.
[  302.932950][T11144] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1711'.
[  303.014125][T11150] syzkaller0: entered promiscuous mode
[  303.014146][T11150] syzkaller0: entered allmulticast mode
[  303.026733][T11150] TC_ACT_REPEAT abuse ?
[  303.158984][T11152] syzkaller0: entered promiscuous mode
[  303.159002][T11152] syzkaller0: entered allmulticast mode
[  303.417646][T11162] syzkaller0: entered promiscuous mode
[  303.417670][T11162] syzkaller0: entered allmulticast mode
[  303.425904][T11162] TC_ACT_REPEAT abuse ?
[  303.654999][T11174] syzkaller0: entered promiscuous mode
[  303.655024][T11174] syzkaller0: entered allmulticast mode
[  303.669828][T11174] TC_ACT_REPEAT abuse ?
[  303.695259][T11176] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  303.715513][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'.
[  303.796396][T11178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1727'.
[  303.872547][T11180] syzkaller0: entered promiscuous mode
[  303.872570][T11180] syzkaller0: entered allmulticast mode
[  303.989924][T11189] netlink: 'syz.1.1732': attribute type 1 has an invalid length.
[  303.993203][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'.
[  304.040245][T11189] bond9: entered promiscuous mode
[  304.045459][T11189] 8021q: adding VLAN 0 to HW filter on device bond9
[  304.137691][T11189] bond9: (slave bridge4): making interface the new active one
[  304.137712][T11189] bridge4: entered promiscuous mode
[  304.140016][T11189] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  304.471431][T11216] FAULT_INJECTION: forcing a failure.
[  304.471431][T11216] name failslab, interval 1, probability 0, space 0, times 0
[  304.471466][T11216] CPU: 0 UID: 0 PID: 11216 Comm: syz.2.1739 Not tainted syzkaller #0 PREEMPT(full) 
[  304.471492][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  304.471505][T11216] Call Trace:
[  304.471513][T11216]  <TASK>
[  304.471522][T11216]  dump_stack_lvl+0xe8/0x150
[  304.471559][T11216]  should_fail_ex+0x410/0x560
[  304.471596][T11216]  should_failslab+0xa8/0x100
[  304.471630][T11216]  __kmalloc_cache_noprof+0xa3/0x600
[  304.471659][T11216]  ? tc_chain_notify+0x25f/0x2e0
[  304.471686][T11216]  ? tcf_proto_create+0x65/0x330
[  304.471712][T11216]  ? tcf_proto_create+0x65/0x330
[  304.471747][T11216]  tcf_proto_create+0x65/0x330
[  304.471781][T11216]  tc_new_tfilter+0x1495/0x1900
[  304.471822][T11216]  ? __lock_acquire+0x747/0x2de0
[  304.471864][T11216]  ? __pfx_tc_new_tfilter+0x10/0x10
[  304.471905][T11216]  ? lock_acquire+0x115/0x350
[  304.471942][T11216]  ? __pfx_tc_new_tfilter+0x10/0x10
[  304.471968][T11216]  rtnetlink_rcv_msg+0x802/0xc00
[  304.472004][T11216]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  304.472034][T11216]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  304.472071][T11216]  ? ref_tracker_free+0x689/0x830
[  304.472103][T11216]  ? __pfx_ref_tracker_free+0x10/0x10
[  304.472143][T11216]  netlink_rcv_skb+0x226/0x4a0
[  304.472169][T11216]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  304.472202][T11216]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  304.472239][T11216]  ? netlink_deliver_tap+0x2e/0x1b0
[  304.472265][T11216]  ? netlink_deliver_tap+0x2e/0x1b0
[  304.472296][T11216]  netlink_unicast+0x7bd/0x940
[  304.472329][T11216]  netlink_sendmsg+0x813/0xb40
[  304.472364][T11216]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.472398][T11216]  ? apparmor_socket_sendmsg+0x98/0x360
[  304.472428][T11216]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.472452][T11216]  sock_sendmsg_nosec+0x13a/0x180
[  304.472482][T11216]  ____sys_sendmsg+0x54e/0x850
[  304.472508][T11216]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.472538][T11216]  ? import_iovec+0x73/0xa0
[  304.472574][T11216]  ___sys_sendmsg+0x2a5/0x360
[  304.472595][T11216]  ? __lock_acquire+0x747/0x2de0
[  304.472623][T11216]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.472680][T11216]  ? __fget_files+0x2a/0x420
[  304.472698][T11216]  ? __fget_files+0x3a2/0x420
[  304.472728][T11216]  __x64_sys_sendmsg+0x1b1/0x290
[  304.472752][T11216]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.472796][T11216]  do_syscall_64+0x166/0x520
[  304.472818][T11216]  ? trace_irq_disable+0x3b/0x140
[  304.472840][T11216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.472860][T11216]  ? clear_bhb_loop+0x70/0xc0
[  304.472885][T11216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.472905][T11216] RIP: 0033:0x7fc8f379e1d9
[  304.472923][T11216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.472941][T11216] RSP: 002b:00007fc8f4716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.472963][T11216] RAX: ffffffffffffffda RBX: 00007fc8f3a25fa0 RCX: 00007fc8f379e1d9
[  304.472979][T11216] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  304.472992][T11216] RBP: 00007fc8f4716090 R08: 0000000000000000 R09: 0000000000000000
[  304.473005][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.473017][T11216] R13: 00007fc8f3a26038 R14: 00007fc8f3a25fa0 R15: 00007ffe69348348
[  304.473056][T11216]  </TASK>
[  304.928524][T11225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1743'.
[  304.964957][T11227] syzkaller0: entered promiscuous mode
[  304.964974][T11227] syzkaller0: entered allmulticast mode
[  305.024606][T11229] Bluetooth: MGMT ver 1.23
[  305.176131][T11236] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1747'.
[  305.193569][T11236] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1747'.
[  305.370327][T11243] netlink: 3728 bytes leftover after parsing attributes in process `syz.2.1749'.
[  305.370488][T11244] netlink: 3784 bytes leftover after parsing attributes in process `syz.2.1749'.
[  305.723256][T11255] FAULT_INJECTION: forcing a failure.
[  305.723256][T11255] name failslab, interval 1, probability 0, space 0, times 0
[  305.723294][T11255] CPU: 0 UID: 0 PID: 11255 Comm: syz.1.1752 Not tainted syzkaller #0 PREEMPT(full) 
[  305.723312][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  305.723321][T11255] Call Trace:
[  305.723327][T11255]  <TASK>
[  305.723335][T11255]  dump_stack_lvl+0xe8/0x150
[  305.723362][T11255]  should_fail_ex+0x410/0x560
[  305.723388][T11255]  should_failslab+0xa8/0x100
[  305.723453][T11255]  __kmalloc_cache_noprof+0xa3/0x600
[  305.723482][T11255]  ? cls_bpf_change+0x269/0xd80
[  305.723509][T11255]  ? cls_bpf_change+0x269/0xd80
[  305.723544][T11255]  cls_bpf_change+0x269/0xd80
[  305.723574][T11255]  ? __mutex_unlock_slowpath+0x731/0x900
[  305.723610][T11255]  ? __pfx_cls_bpf_change+0x10/0x10
[  305.723662][T11255]  tc_new_tfilter+0x1324/0x1900
[  305.723701][T11255]  ? __pfx_tc_new_tfilter+0x10/0x10
[  305.723734][T11255]  ? lock_acquire+0x115/0x350
[  305.723775][T11255]  ? __pfx_tc_new_tfilter+0x10/0x10
[  305.723796][T11255]  rtnetlink_rcv_msg+0x802/0xc00
[  305.723823][T11255]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  305.723846][T11255]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  305.723868][T11255]  ? ref_tracker_free+0x689/0x830
[  305.723892][T11255]  ? __pfx_ref_tracker_free+0x10/0x10
[  305.723924][T11255]  netlink_rcv_skb+0x226/0x4a0
[  305.723943][T11255]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  305.723969][T11255]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  305.723997][T11255]  ? netlink_deliver_tap+0x2e/0x1b0
[  305.724015][T11255]  ? netlink_deliver_tap+0x2e/0x1b0
[  305.724038][T11255]  netlink_unicast+0x7bd/0x940
[  305.724062][T11255]  netlink_sendmsg+0x813/0xb40
[  305.724088][T11255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.724114][T11255]  ? apparmor_socket_sendmsg+0x98/0x360
[  305.724136][T11255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.724166][T11255]  sock_sendmsg_nosec+0x13a/0x180
[  305.724187][T11255]  ____sys_sendmsg+0x54e/0x850
[  305.724206][T11255]  ? __pfx_____sys_sendmsg+0x10/0x10
[  305.724227][T11255]  ? import_iovec+0x73/0xa0
[  305.724251][T11255]  ___sys_sendmsg+0x2a5/0x360
[  305.724265][T11255]  ? __lock_acquire+0x747/0x2de0
[  305.724284][T11255]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.724323][T11255]  ? __fget_files+0x2a/0x420
[  305.724335][T11255]  ? __fget_files+0x3a2/0x420
[  305.724356][T11255]  __x64_sys_sendmsg+0x1b1/0x290
[  305.724373][T11255]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  305.724403][T11255]  do_syscall_64+0x166/0x520
[  305.724424][T11255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.724438][T11255]  ? clear_bhb_loop+0x70/0xc0
[  305.724474][T11255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.724489][T11255] RIP: 0033:0x7efc1f99e1d9
[  305.724503][T11255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.724517][T11255] RSP: 002b:00007efc20814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.724533][T11255] RAX: ffffffffffffffda RBX: 00007efc1fc25fa0 RCX: 00007efc1f99e1d9
[  305.724545][T11255] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  305.724555][T11255] RBP: 00007efc20814090 R08: 0000000000000000 R09: 0000000000000000
[  305.724565][T11255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.724593][T11255] R13: 00007efc1fc26038 R14: 00007efc1fc25fa0 R15: 00007ffeadb00f88
[  305.724628][T11255]  </TASK>
[  306.323134][T11266] syzkaller0: entered promiscuous mode
[  306.323157][T11266] syzkaller0: entered allmulticast mode
[  306.539467][T11277] netlink: 'syz.1.1761': attribute type 4 has an invalid length.
[  306.623165][T11283] netlink: 'syz.0.1763': attribute type 1 has an invalid length.
[  306.858655][T11287] 8021q: adding VLAN 0 to HW filter on device bond9
[  306.874223][T11287] bond8: (slave bond9): making interface the new active one
[  306.885865][T11287] bond8: (slave bond9): Enslaving as an active interface with an up link
[  307.003480][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.010107][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.023130][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.024874][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.025571][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.097046][ T5631] Bluetooth: hci4: command 0x0405 tx timeout
[  307.133775][T11314] syzkaller0: entered promiscuous mode
[  307.133798][T11314] syzkaller0: entered allmulticast mode
[  307.553394][T11334] syzkaller0: entered promiscuous mode
[  307.553428][T11334] syzkaller0: entered allmulticast mode
[  307.566081][T11334] TC_ACT_REPEAT abuse ?
[  307.663322][T11305] wg1 speed is unknown, defaulting to 1000
[  307.666846][T11336] syzkaller0: entered promiscuous mode
[  307.666879][T11336] syzkaller0: entered allmulticast mode
[  307.854099][T11343] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  307.967342][T11305] wlan1 speed is unknown, defaulting to 1000
[  308.013402][T11345] 8021q: adding VLAN 0 to HW filter on device bond6
[  308.015367][T11345] bond5: (slave bond6): making interface the new active one
[  308.015790][T11345] bond5: (slave bond6): Enslaving as an active interface with an up link
[  308.103750][T11357] syzkaller0: entered promiscuous mode
[  308.103775][T11357] syzkaller0: entered allmulticast mode
[  308.508018][T11380] __nla_validate_parse: 2 callbacks suppressed
[  308.508113][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'.
[  308.674009][T11386] netlink: zone id is out of range
[  308.674027][T11386] netlink: zone id is out of range
[  308.674036][T11386] netlink: zone id is out of range
[  308.674117][T11386] netlink: zone id is out of range
[  308.674127][T11386] netlink: zone id is out of range
[  308.674136][T11386] netlink: zone id is out of range
[  308.674144][T11386] netlink: zone id is out of range
[  308.674153][T11386] netlink: zone id is out of range
[  308.674161][T11386] netlink: zone id is out of range
[  308.674169][T11386] netlink: zone id is out of range
[  308.863339][T11305] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.863498][T11305] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.863635][T11305] bridge_slave_0: entered allmulticast mode
[  308.865552][T11305] bridge_slave_0: entered promiscuous mode
[  308.873460][T11305] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.873628][T11305] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.873757][T11305] bridge_slave_1: entered allmulticast mode
[  308.880156][T11305] bridge_slave_1: entered promiscuous mode
[  308.994661][T11305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.036967][T11305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.094821][T11402] netlink: 'syz.2.1794': attribute type 1 has an invalid length.
[  309.096929][ T4940] Bluetooth: hci5: command tx timeout
[  309.157125][T11305] team0: Port device team_slave_0 added
[  309.160907][T11409] SET target dimension over the limit!
[  309.193536][T11406] 8021q: adding VLAN 0 to HW filter on device bond8
[  309.195515][T11406] bond7: (slave bond8): making interface the new active one
[  309.211590][T11406] bond7: (slave bond8): Enslaving as an active interface with an up link
[  309.223030][T11400] syzkaller0: entered promiscuous mode
[  309.223055][T11400] syzkaller0: entered allmulticast mode
[  309.234187][T11305] team0: Port device team_slave_1 added
[  309.394351][T11305] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.394371][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.394399][T11305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.406077][T11305] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.406127][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.406203][T11305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.510340][T11416] tc_dump_action: action bad kind
[  309.611075][T11305] hsr_slave_0: entered promiscuous mode
[  309.612139][T11305] hsr_slave_1: entered promiscuous mode
[  309.613406][T11305] debugfs: 'hsr0' already exists in 'hsr'
[  309.613427][T11305] Cannot create hsr debugfs directory
[  309.642423][T11423] bridge0: port 3(bond0) entered disabled state
[  309.737290][T11423] bond0: (slave bond_slave_1): Releasing backup interface
[  309.739515][T11423] bond_slave_1: left promiscuous mode
[  309.739705][T11423] bond_slave_1: left allmulticast mode
[  309.742928][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'.
[  309.799092][T11427] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.242585][T11456] syzkaller0: entered promiscuous mode
[  310.242609][T11456] syzkaller0: entered allmulticast mode
[  310.379056][T11467] netlink: 'syz.0.1810': attribute type 10 has an invalid length.
[  310.433343][T11459] syzkaller0: entered promiscuous mode
[  310.433370][T11459] syzkaller0: entered allmulticast mode
[  310.495140][T11467] 8021q: adding VLAN 0 to HW filter on device team0
[  310.524122][T11467] bond0: (slave team0): Enslaving as an active interface with an up link
[  311.180154][ T4940] Bluetooth: hci5: command tx timeout
[  312.191762][T11305] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  312.194633][T11305] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  312.195528][T11305] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  312.220490][T11305] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  312.222698][T11478] tipc: Started in network mode
[  312.222726][T11478] tipc: Node identity ac14142f, cluster identity 4711
[  312.223181][T11478] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  312.224227][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'.
[  312.365411][T11305] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  312.380804][T11305] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  312.383819][T11305] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  312.409065][T11305] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  312.474528][   T30] audit: type=1107 audit(1791566705.566:2): pid=11493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  312.665803][T11305] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.821361][T11305] 8021q: adding VLAN 0 to HW filter on device team0
[  312.850384][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.850511][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.888789][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.888898][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.267262][ T4940] Bluetooth: hci5: command tx timeout
[  313.352098][T11547] syzkaller0: entered promiscuous mode
[  313.352123][T11547] syzkaller0: entered allmulticast mode
[  313.553214][T11558] tipc: Started in network mode
[  313.553249][T11558] tipc: Node identity 8aa332e6f082, cluster identity 4711
[  313.553410][T11558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.554127][T11558] syzkaller0: entered promiscuous mode
[  313.554147][T11558] syzkaller0: entered allmulticast mode
[  313.595521][T11558] sch_tbf: peakrate 11 is lower than or equals to rate 2048 !
[  313.619297][T11558] tipc: Resetting bearer <eth:syzkaller0>
[  313.639171][T11556] tipc: Resetting bearer <eth:syzkaller0>
[  313.690799][T11556] tipc: Disabling bearer <eth:syzkaller0>
[  313.888354][T11574] xt_ecn: cannot match TCP bits for non-tcp packets
[  313.893069][T11574] ip6t_srh: unknown srh invflags 4000
[  313.971750][T11578] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1838'.
[  314.019347][T11580] syzkaller0: entered promiscuous mode
[  314.019371][T11580] syzkaller0: entered allmulticast mode
[  314.084591][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1839'.
[  314.084649][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1839'.
[  314.467923][T11305] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.626600][ T1759] block nbd0: Possible stuck request ffff88802a0f0000: control (read@0,1024B). Runtime 30 seconds
[  314.862581][T11622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1847'.
[  315.014009][T11631] FAULT_INJECTION: forcing a failure.
[  315.014009][T11631] name failslab, interval 1, probability 0, space 0, times 0
[  315.014047][T11631] CPU: 0 UID: 0 PID: 11631 Comm: syz.1.1854 Not tainted syzkaller #0 PREEMPT(full) 
[  315.014072][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  315.014087][T11631] Call Trace:
[  315.014096][T11631]  <TASK>
[  315.014106][T11631]  dump_stack_lvl+0xe8/0x150
[  315.014145][T11631]  should_fail_ex+0x410/0x560
[  315.014182][T11631]  should_failslab+0xa8/0x100
[  315.014221][T11631]  __kmalloc_noprof+0xfe/0x720
[  315.014245][T11631]  ? rcu_is_watching+0x16/0xb0
[  315.014275][T11631]  ? tomoyo_realpath_from_path+0xef/0x640
[  315.014296][T11631]  ? tomoyo_realpath_from_path+0xef/0x640
[  315.014325][T11631]  tomoyo_realpath_from_path+0xef/0x640
[  315.014356][T11631]  ? tomoyo_path_number_perm+0x219/0x5f0
[  315.014387][T11631]  tomoyo_path_number_perm+0x246/0x5f0
[  315.014421][T11631]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  315.014451][T11631]  ? __lock_acquire+0x747/0x2de0
[  315.014493][T11631]  ? hook_file_ioctl+0x1f2/0x600
[  315.014547][T11631]  ? __fget_files+0x2a/0x420
[  315.014572][T11631]  ? __fget_files+0x2a/0x420
[  315.014591][T11631]  ? __fget_files+0x3a2/0x420
[  315.014611][T11631]  ? __fget_files+0x2a/0x420
[  315.014637][T11631]  security_file_ioctl+0xc3/0x2a0
[  315.014669][T11631]  __se_sys_ioctl+0x47/0x170
[  315.014700][T11631]  do_syscall_64+0x166/0x520
[  315.014725][T11631]  ? trace_irq_disable+0x3b/0x140
[  315.014751][T11631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.014774][T11631]  ? clear_bhb_loop+0x70/0xc0
[  315.014810][T11631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.014832][T11631] RIP: 0033:0x7efc1f99e1d9
[  315.014854][T11631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.014875][T11631] RSP: 002b:00007efc20814028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  315.014900][T11631] RAX: ffffffffffffffda RBX: 00007efc1fc25fa0 RCX: 00007efc1f99e1d9
[  315.014917][T11631] RDX: 0000200000000280 RSI: 00000000400448c8 RDI: 0000000000000005
[  315.014932][T11631] RBP: 00007efc20814090 R08: 0000000000000000 R09: 0000000000000000
[  315.014946][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.014960][T11631] R13: 00007efc1fc26038 R14: 00007efc1fc25fa0 R15: 00007ffeadb00f88
[  315.014997][T11631]  </TASK>
[  315.016658][T11631] ERROR: Out of memory at tomoyo_realpath_from_path.
[  315.089555][T11628] syzkaller0: entered promiscuous mode
[  315.089581][T11628] syzkaller0: entered allmulticast mode
[  315.292964][ T9825] hid-generic 0005:0458:4155.0017: unknown main item tag 0x0
[  315.317976][ T9825] hid-generic 0005:0458:4155.0017: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[  315.357126][ T4940] Bluetooth: hci5: command tx timeout
[  315.641058][T11305] veth0_vlan: entered promiscuous mode
[  315.670122][T11305] veth1_vlan: entered promiscuous mode
[  315.774668][T11653] netlink: 'syz.0.1859': attribute type 2 has an invalid length.
[  315.851227][T11305] veth0_macvtap: entered promiscuous mode
[  315.864718][T11305] veth1_macvtap: entered promiscuous mode
[  315.887550][ T4940] Bluetooth: hci2: unexpected event for opcode 0x00ea
[  315.927482][T11305] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.952327][T11305] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.064316][T11673] net_ratelimit: 1385 callbacks suppressed
[  316.064346][T11673] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  316.269454][ T6545] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.269507][ T6545] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.269547][ T6545] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.269584][ T6545] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.449884][T11687] syzkaller0: entered promiscuous mode
[  316.451302][T11687] syzkaller0: entered allmulticast mode
[  316.480423][T11671] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.499467][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.499490][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.591498][ T6542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.591522][ T6542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.115950][T11712] netlink: 'syz.5.1873': attribute type 1 has an invalid length.
[  317.185392][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  317.185457][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  317.371146][T11730] syzkaller0: entered promiscuous mode
[  317.371171][T11730] syzkaller0: entered allmulticast mode
[  317.576469][ T9826] hid-generic 0005:0458:4155.0018: unknown main item tag 0x0
[  317.594877][ T9826] hid-generic 0005:0458:4155.0018: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[  317.946179][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'.
[  318.048799][T11762] syzkaller0: entered promiscuous mode
[  318.048825][T11762] syzkaller0: entered allmulticast mode
[  318.256449][T11773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.261203][T11773] syzkaller0: entered promiscuous mode
[  318.261262][T11773] syzkaller0: entered allmulticast mode
[  318.273771][T11773] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  318.317329][T11773] tipc: Resetting bearer <eth:syzkaller0>
[  318.321980][T11771] tipc: Resetting bearer <eth:syzkaller0>
[  318.360527][T11771] tipc: Disabling bearer <eth:syzkaller0>
[  318.393151][T11779] syzkaller0: entered promiscuous mode
[  318.393176][T11779] syzkaller0: entered allmulticast mode
[  318.414320][T11774] TC_ACT_REPEAT abuse ?
[  318.756524][T11800] macvtap2: entered promiscuous mode
[  318.756550][T11800] hsr0: entered promiscuous mode
[  318.766005][T11800] macvtap2: entered allmulticast mode
[  318.766070][T11800] hsr0: entered allmulticast mode
[  318.766111][T11800] hsr_slave_0: entered allmulticast mode
[  318.917657][T11809] syzkaller0: entered promiscuous mode
[  318.917683][T11809] syzkaller0: entered allmulticast mode
[  319.202927][T11826] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  319.202960][T11826] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  319.283371][T11829] syzkaller0: entered promiscuous mode
[  319.283397][T11829] syzkaller0: entered allmulticast mode
[  319.614060][T11842] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6
[  319.744233][T11847] syzkaller0: entered promiscuous mode
[  319.744258][T11847] syzkaller0: entered allmulticast mode
[  319.900731][ T4940] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  319.900812][ T4940] Bluetooth: hci2: Injecting HCI hardware error event
[  319.902048][ T4940] Bluetooth: hci2: hardware error 0x00
[  320.050000][T11864] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1931'.
[  320.147279][T11860] raw_sendmsg: syz.1.1929 forgot to set AF_INET. Fix it!
[  320.371279][T11881] ip_tables: iptables: counters copy to user failed while replacing table
[  320.637677][T11898] ip_tables: iptables: counters copy to user failed while replacing table
[  320.752908][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1942'.
[  320.755004][ T9825] hid-generic 0005:0458:4155.0019: unknown main item tag 0x0
[  320.775690][ T9825] hid-generic 0005:0458:4155.0019: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[  321.086103][T11913] FAULT_INJECTION: forcing a failure.
[  321.086103][T11913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.086138][T11913] CPU: 1 UID: 0 PID: 11913 Comm: syz.2.1946 Not tainted syzkaller #0 PREEMPT(full) 
[  321.086162][T11913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  321.086175][T11913] Call Trace:
[  321.086183][T11913]  <TASK>
[  321.086193][T11913]  dump_stack_lvl+0xe8/0x150
[  321.086233][T11913]  should_fail_ex+0x410/0x560
[  321.086287][T11913]  _copy_to_user+0x31/0xb0
[  321.086324][T11913]  simple_read_from_buffer+0xe1/0x170
[  321.086366][T11913]  proc_fail_nth_read+0x1bb/0x230
[  321.086400][T11913]  ? common_file_perm+0x20e/0x2b0
[  321.086436][T11913]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  321.086465][T11913]  ? rw_verify_area+0x24a/0x4c0
[  321.086491][T11913]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  321.086516][T11913]  vfs_read+0x213/0xa80
[  321.086546][T11913]  ? __pfx___mutex_lock+0x10/0x10
[  321.086572][T11913]  ? __pfx_vfs_read+0x10/0x10
[  321.086598][T11913]  ? __fget_files+0x2a/0x420
[  321.086625][T11913]  ? __fget_files+0x3a2/0x420
[  321.086645][T11913]  ? __fget_files+0x2a/0x420
[  321.086676][T11913]  ksys_read+0x150/0x270
[  321.086703][T11913]  ? __pfx_ksys_read+0x10/0x10
[  321.086740][T11913]  do_syscall_64+0x166/0x520
[  321.086765][T11913]  ? trace_irq_disable+0x3b/0x140
[  321.086789][T11913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.086812][T11913]  ? clear_bhb_loop+0x70/0xc0
[  321.086839][T11913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.086861][T11913] RIP: 0033:0x7fc8f375ea0e
[  321.086881][T11913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  321.086900][T11913] RSP: 002b:00007fc8f4715fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  321.086924][T11913] RAX: ffffffffffffffda RBX: 00007fc8f47166c0 RCX: 00007fc8f375ea0e
[  321.086941][T11913] RDX: 000000000000000f RSI: 00007fc8f47160a0 RDI: 0000000000000003
[  321.086955][T11913] RBP: 00007fc8f4716090 R08: 0000000000000000 R09: 0000000000000000
[  321.086969][T11913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.086982][T11913] R13: 00007fc8f3a26038 R14: 00007fc8f3a25fa0 R15: 00007ffe69348348
[  321.087019][T11913]  </TASK>
[  321.250950][T11917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1947'.
[  321.393139][ T6542] IPVS: starting estimator thread 0...
[  321.613653][T11919] IPVS: Scheduler module ip_vs_mh  not found
[  321.613731][T11920] IPVS: using max 29 ests per chain, 69600 per kthread
[  321.981660][ T4940] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  322.191965][T11954] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1955'.
[  322.318666][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1958'.
[  322.368128][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'.
[  322.433298][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1962'.
[  322.433331][T11970] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1962'.
[  322.582368][T11978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'.
[  322.632215][T11979] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1964'.
[  322.632245][T11979] openvswitch: netlink: Message has 512 unknown bytes.
[  322.836029][T11990] syzkaller0: entered promiscuous mode
[  322.836054][T11990] syzkaller0: entered allmulticast mode
[  322.856194][T11990] TC_ACT_REPEAT abuse ?
[  322.995750][T11998] bond10: option downdelay: invalid value (18446744073709551615)
[  322.995777][T11998] bond10: option downdelay: allowed values 0 - 2147483647
[  323.016246][T11998] bond10 (unregistering): Released all slaves
[  323.474153][ T6542] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  325.452565][T12067] __nla_validate_parse: 5 callbacks suppressed
[  325.452587][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1991'.
[  325.472483][T12066] xt_IDLETIMER: label is empty or not nul-terminated
[  326.375819][T12017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  326.590354][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2000'.
[  326.593122][T12085] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1998'.
[  327.602336][   T50] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  327.845577][ T4940] Bluetooth: hci5: unexpected cc 0x2060 length: 8 > 7
[  330.434118][T12115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  330.561477][T12134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2015'.
[  330.814363][T12141] syzkaller0: entered promiscuous mode
[  330.814389][T12141] syzkaller0: entered allmulticast mode
[  330.916514][T12141] tc action pedit 'at' offset 5 out of bounds
[  331.206361][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  331.218200][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  331.220858][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  331.222434][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  331.225263][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  331.268926][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2023'.
[  331.268950][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2023'.
[  331.789798][ T6545] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  332.044884][T12185] IPVS: Unknown mcast interface: ip6erspan0
[  332.175243][T12189] syzkaller0: entered promiscuous mode
[  332.175269][T12189] syzkaller0: entered allmulticast mode
[  332.303579][T12193] batadv_slave_0: entered promiscuous mode
[  332.337961][T12149] wg1 speed is unknown, defaulting to 1000
[  332.397877][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'.
[  332.865047][T12149] wlan1 speed is unknown, defaulting to 1000
[  333.337029][ T5631] Bluetooth: hci6: command tx timeout
[  333.388309][T12149] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.388502][T12149] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.388973][T12149] bridge_slave_0: entered allmulticast mode
[  333.391180][T12149] bridge_slave_0: entered promiscuous mode
[  333.421033][T12212] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  333.421060][T12212] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  333.448263][T12149] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.448367][T12149] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.448951][T12149] bridge_slave_1: entered allmulticast mode
[  333.454093][T12149] bridge_slave_1: entered promiscuous mode
[  333.531749][T12149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.536666][T12149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.593612][T12149] team0: Port device team_slave_0 added
[  333.596541][T12149] team0: Port device team_slave_1 added
[  333.640260][T12149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.640280][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.640309][T12149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.643027][T12149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.643043][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.643073][T12149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.788351][T12149] hsr_slave_0: entered promiscuous mode
[  333.789608][T12149] hsr_slave_1: entered promiscuous mode
[  333.790387][T12149] debugfs: 'hsr0' already exists in 'hsr'
[  333.790408][T12149] Cannot create hsr debugfs directory
[  334.324515][T12220] x_tables: ip6_tables: mh match: only valid for protocol 135
[  334.664997][T12168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  334.687519][T12149] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  334.733946][T12149] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  334.763303][T12149] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  334.821431][T12149] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  334.858733][T12149] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  334.940467][T12149] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  334.958612][T12149] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  335.014197][T12149] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  335.418171][ T5631] Bluetooth: hci6: command tx timeout
[  335.508666][T12149] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.568315][T12149] 8021q: adding VLAN 0 to HW filter on device team0
[  335.706159][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.706273][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.795297][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.795445][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.823675][T12260] TC_ACT_REPEAT abuse ?
[  335.844046][T12260] syzkaller0: entered promiscuous mode
[  335.844068][T12260] syzkaller0: entered allmulticast mode
[  335.946021][   T31] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  337.221606][T12309] netlink: 'syz.2.2063': attribute type 15 has an invalid length.
[  337.221634][T12309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2063'.
[  337.374679][T12149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.481349][T12315] syzkaller0: entered promiscuous mode
[  337.481374][T12315] syzkaller0: entered allmulticast mode
[  337.484449][T12315] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2065'.
[  337.507471][ T5631] Bluetooth: hci6: command tx timeout
[  337.929855][T12324] netlink: zone id is out of range
[  337.929873][T12324] netlink: zone id is out of range
[  337.929882][T12324] netlink: zone id is out of range
[  337.929891][T12324] netlink: zone id is out of range
[  337.929901][T12324] netlink: zone id is out of range
[  337.929910][T12324] netlink: zone id is out of range
[  337.929919][T12324] netlink: zone id is out of range
[  337.929928][T12324] netlink: zone id is out of range
[  337.929936][T12324] netlink: zone id is out of range
[  338.062025][T12149] veth0_vlan: entered promiscuous mode
[  338.101606][T12149] veth1_vlan: entered promiscuous mode
[  338.208053][T12149] veth0_macvtap: entered promiscuous mode
[  338.225988][T12149] veth1_macvtap: entered promiscuous mode
[  338.336240][T12149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.384007][T12149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.497465][  T320] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.500791][  T320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.506641][  T320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.621794][ T3381] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.757269][T12263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  338.758730][T12328] netlink: 'syz.1.2070': attribute type 20 has an invalid length.
[  338.758753][T12328] netlink: 636 bytes leftover after parsing attributes in process `syz.1.2070'.
[  338.907772][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.907797][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.182328][T12355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2075'.
[  339.241048][T12346] syzkaller0: entered promiscuous mode
[  339.241077][T12346] syzkaller0: entered allmulticast mode
[  339.315381][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.315406][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.587309][ T5631] Bluetooth: hci6: command tx timeout
[  340.691870][ T6543] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  342.610643][T12387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2016'.
[  342.692839][T12385] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  342.811205][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2085'.
[  342.841005][T12396] net_ratelimit: 701 callbacks suppressed
[  342.841030][T12396] netlink: zone id is out of range
[  342.841041][T12396] netlink: zone id is out of range
[  342.841050][T12396] netlink: zone id is out of range
[  342.841066][T12396] netlink: zone id is out of range
[  342.841076][T12396] netlink: zone id is out of range
[  342.841085][T12396] netlink: zone id is out of range
[  342.841093][T12396] netlink: zone id is out of range
[  342.841102][T12396] netlink: zone id is out of range
[  342.841111][T12396] netlink: zone id is out of range
[  342.841120][T12396] netlink: zone id is out of range
[  343.456235][T12417] Cannot find del_set index 0 as target
[  343.553115][T12377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  343.884290][T12429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2098'.
[  344.064172][T12438] xt_LOG: level 8 >= 8
[  344.202119][T12447] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2102'.
[  344.447640][T12455] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  344.478209][T12455] xt_hashlimit: size too large, truncated to 1048576
[  344.698929][ T1759] block nbd0: Possible stuck request ffff88802a0f0000: control (read@0,1024B). Runtime 60 seconds
[  344.741759][   T31] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  344.830995][T12470] erspan0: entered promiscuous mode
[  344.856650][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'.
[  344.993660][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'.
[  345.663072][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2115'.
[  345.683385][T12489] erspan0: entered promiscuous mode
[  345.958999][T12496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2118'.
[  346.055667][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2119'.
[  346.405185][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2121'.
[  347.583781][T12459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  348.062301][T12538] __nla_validate_parse: 2 callbacks suppressed
[  348.062323][T12538] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2132'.
[  348.154778][T12530] syzkaller0: entered promiscuous mode
[  348.154802][T12530] syzkaller0: entered allmulticast mode
[  348.736076][T12557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2135'.
[  349.313011][   T31] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  350.836431][T12602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2149'.
[  351.136626][T12609] vlan5: entered promiscuous mode
[  351.142458][T12609] vlan5: entered allmulticast mode
[  351.736500][T12611] net_ratelimit: 349 callbacks suppressed
[  351.736515][T12611] ip_tables: iptables: counters copy to user failed while replacing table
[  352.164860][T12572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  352.271942][T12616] openvswitch: netlink: Missing key (keys=200040, expected=80)
[  353.114077][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2162'.
[  353.216402][T12648] syzkaller0: entered promiscuous mode
[  353.216424][T12648] syzkaller0: entered allmulticast mode
[  353.234083][T12648] FAULT_INJECTION: forcing a failure.
[  353.234083][T12648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.234120][T12648] CPU: 0 UID: 0 PID: 12648 Comm: syz.2.2164 Not tainted syzkaller #0 PREEMPT(full) 
[  353.234146][T12648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  353.234160][T12648] Call Trace:
[  353.234169][T12648]  <TASK>
[  353.234178][T12648]  dump_stack_lvl+0xe8/0x150
[  353.234217][T12648]  should_fail_ex+0x410/0x560
[  353.234254][T12648]  _copy_from_iter+0x1d3/0x1660
[  353.234293][T12648]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  353.234337][T12648]  ? __pfx__copy_from_iter+0x10/0x10
[  353.234372][T12648]  ? dev_get_by_index+0x22/0x2d0
[  353.234400][T12648]  ? dev_get_by_index+0x22/0x2d0
[  353.234433][T12648]  packet_sendmsg+0x306c/0x51a0
[  353.234478][T12648]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  353.234513][T12648]  ? __lock_acquire+0x747/0x2de0
[  353.234555][T12648]  ? lock_acquire+0x115/0x350
[  353.234582][T12648]  ? __lock_acquire+0x747/0x2de0
[  353.234617][T12648]  ? __pfx_packet_sendmsg+0x10/0x10
[  353.234647][T12648]  ? aa_sk_perm+0x713/0x900
[  353.234676][T12648]  ? __lock_acquire+0x747/0x2de0
[  353.234705][T12648]  ? down_read_nested+0xf0/0x330
[  353.234737][T12648]  ? __pfx_aa_sk_perm+0x10/0x10
[  353.234771][T12648]  ? aa_sock_msg_perm+0x144/0x210
[  353.234813][T12648]  ? apparmor_socket_sendmsg+0x26d/0x360
[  353.234846][T12648]  ? __pfx_packet_sendmsg+0x10/0x10
[  353.234879][T12648]  sock_sendmsg_nosec+0x13a/0x180
[  353.234911][T12648]  ____sys_sendmsg+0x54e/0x850
[  353.234940][T12648]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.234974][T12648]  ? import_iovec+0x73/0xa0
[  353.235010][T12648]  ___sys_sendmsg+0x2a5/0x360
[  353.235033][T12648]  ? __lock_acquire+0x747/0x2de0
[  353.235062][T12648]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.235124][T12648]  ? __fget_files+0x2a/0x420
[  353.235144][T12648]  ? __fget_files+0x3a2/0x420
[  353.235176][T12648]  __x64_sys_sendmsg+0x1b1/0x290
[  353.235203][T12648]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.235250][T12648]  do_syscall_64+0x166/0x520
[  353.235280][T12648]  ? trace_irq_disable+0x3b/0x140
[  353.235305][T12648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.235328][T12648]  ? clear_bhb_loop+0x70/0xc0
[  353.235356][T12648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.235378][T12648] RIP: 0033:0x7fc8f379e1d9
[  353.235399][T12648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.235419][T12648] RSP: 002b:00007fc8f4716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.235443][T12648] RAX: ffffffffffffffda RBX: 00007fc8f3a25fa0 RCX: 00007fc8f379e1d9
[  353.235460][T12648] RDX: 0000000020004801 RSI: 00002000000006c0 RDI: 0000000000000007
[  353.235474][T12648] RBP: 00007fc8f4716090 R08: 0000000000000000 R09: 0000000000000000
[  353.235489][T12648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.235502][T12648] R13: 00007fc8f3a26038 R14: 00007fc8f3a25fa0 R15: 00007ffe69348348
[  353.235538][T12648]  </TASK>
[  353.800971][  T320] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  354.181521][T12673] syzkaller0: entered promiscuous mode
[  354.181546][T12673] syzkaller0: entered allmulticast mode
[  354.468977][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2175'.
[  354.470027][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2175'.
[  354.743319][T12691] syzkaller0: entered promiscuous mode
[  354.743345][T12691] syzkaller0: entered allmulticast mode
[  354.753622][T12691] FAULT_INJECTION: forcing a failure.
[  354.753622][T12691] name failslab, interval 1, probability 0, space 0, times 0
[  354.753702][T12691] CPU: 0 UID: 0 PID: 12691 Comm: syz.5.2178 Not tainted syzkaller #0 PREEMPT(full) 
[  354.753767][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  354.753805][T12691] Call Trace:
[  354.753828][T12691]  <TASK>
[  354.753849][T12691]  dump_stack_lvl+0xe8/0x150
[  354.753959][T12691]  should_fail_ex+0x410/0x560
[  354.754068][T12691]  ? __alloc_skb+0x1db/0x7a0
[  354.754152][T12691]  should_failslab+0xa8/0x100
[  354.754250][T12691]  ? __alloc_skb+0x1db/0x7a0
[  354.754326][T12691]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  354.754390][T12691]  ? __alloc_skb+0x18d/0x7a0
[  354.754481][T12691]  ? __alloc_skb+0x1db/0x7a0
[  354.754578][T12691]  __alloc_skb+0x1db/0x7a0
[  354.754684][T12691]  alloc_skb_with_frags+0xc6/0x760
[  354.754775][T12691]  sock_alloc_send_pskb+0x878/0x990
[  354.754859][T12691]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  354.754978][T12691]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  354.755081][T12691]  ? dev_get_by_index+0x22/0x2d0
[  354.755163][T12691]  ? dev_get_by_index+0x22/0x2d0
[  354.755248][T12691]  packet_sendmsg+0x338b/0x51a0
[  354.755379][T12691]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  354.755479][T12691]  ? __lock_acquire+0x747/0x2de0
[  354.755632][T12691]  ? lock_acquire+0x115/0x350
[  354.755692][T12691]  ? __lock_acquire+0x747/0x2de0
[  354.755784][T12691]  ? __pfx_packet_sendmsg+0x10/0x10
[  354.755867][T12691]  ? aa_sk_perm+0x713/0x900
[  354.755940][T12691]  ? __lock_acquire+0x747/0x2de0
[  354.756016][T12691]  ? down_read_nested+0xfe/0x330
[  354.756099][T12691]  ? __pfx_aa_sk_perm+0x10/0x10
[  354.756200][T12691]  ? aa_sock_msg_perm+0x144/0x210
[  354.756295][T12691]  ? apparmor_socket_sendmsg+0x26d/0x360
[  354.756398][T12691]  ? __pfx_packet_sendmsg+0x10/0x10
[  354.756472][T12691]  sock_sendmsg_nosec+0x13a/0x180
[  354.756552][T12691]  ____sys_sendmsg+0x54e/0x850
[  354.756624][T12691]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.756707][T12691]  ? import_iovec+0x73/0xa0
[  354.756829][T12691]  ___sys_sendmsg+0x2a5/0x360
[  354.756889][T12691]  ? __lock_acquire+0x747/0x2de0
[  354.756968][T12691]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.757138][T12691]  ? __fget_files+0x2a/0x420
[  354.757206][T12691]  ? __fget_files+0x3a2/0x420
[  354.757288][T12691]  __x64_sys_sendmsg+0x1b1/0x290
[  354.757352][T12691]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.757490][T12691]  do_syscall_64+0x166/0x520
[  354.757532][T12691]  ? trace_irq_disable+0x3b/0x140
[  354.757595][T12691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.757658][T12691]  ? clear_bhb_loop+0x70/0xc0
[  354.757726][T12691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.757787][T12691] RIP: 0033:0x7ff14859e1d9
[  354.757842][T12691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.757892][T12691] RSP: 002b:00007ff1494e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.757957][T12691] RAX: ffffffffffffffda RBX: 00007ff148825fa0 RCX: 00007ff14859e1d9
[  354.758002][T12691] RDX: 0000000020004801 RSI: 00002000000006c0 RDI: 0000000000000007
[  354.758016][T12691] RBP: 00007ff1494e5090 R08: 0000000000000000 R09: 0000000000000000
[  354.758030][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.758043][T12691] R13: 00007ff148826038 R14: 00007ff148825fa0 R15: 00007ffdc3c9c2d8
[  354.758078][T12691]  </TASK>
[  356.220075][T12703] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  356.224860][T12703] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82
[  356.248357][T12703] netlink: 'syz.5.2182': attribute type 12 has an invalid length.
[  356.666090][T12653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  356.909520][T12706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.049880][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2186'.
[  357.181093][T12711] syzkaller0: entered promiscuous mode
[  357.181299][T12711] syzkaller0: entered allmulticast mode
[  357.358148][T12724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2189'.
[  357.693179][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  357.766871][T12743] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2195'.
[  358.129010][T12754] syzkaller0: entered promiscuous mode
[  358.129221][T12754] syzkaller0: entered allmulticast mode
[  358.202465][T12754] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  360.565410][T12733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  361.033468][T12772] bond10: entered promiscuous mode
[  361.033509][T12772] bond10: entered allmulticast mode
[  361.164896][T12773] netlink: 'syz.0.2206': attribute type 11 has an invalid length.
[  361.179628][T12772] bond10: left allmulticast mode
[  361.180062][T12772] 8021q: adding VLAN 0 to HW filter on device bond10
[  361.482249][T12791] netlink: 'syz.0.2211': attribute type 8 has an invalid length.
[  361.858312][   T31] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  362.376336][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'.
[  362.514077][T12836] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  364.725988][T12802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  365.130386][T12860] FAULT_INJECTION: forcing a failure.
[  365.130386][T12860] name failslab, interval 1, probability 0, space 0, times 0
[  365.130437][T12860] CPU: 1 UID: 0 PID: 12860 Comm: syz.6.2236 Not tainted syzkaller #0 PREEMPT(full) 
[  365.130461][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  365.130479][T12860] Call Trace:
[  365.130492][T12860]  <TASK>
[  365.130501][T12860]  dump_stack_lvl+0xe8/0x150
[  365.130540][T12860]  should_fail_ex+0x410/0x560
[  365.130577][T12860]  should_failslab+0xa8/0x100
[  365.130611][T12860]  __kmalloc_noprof+0xfe/0x720
[  365.130635][T12860]  ? rcu_is_watching+0x16/0xb0
[  365.130664][T12860]  ? tomoyo_realpath_from_path+0xef/0x640
[  365.130685][T12860]  ? tomoyo_realpath_from_path+0xef/0x640
[  365.130714][T12860]  tomoyo_realpath_from_path+0xef/0x640
[  365.130746][T12860]  ? tomoyo_path_number_perm+0x219/0x5f0
[  365.130776][T12860]  tomoyo_path_number_perm+0x246/0x5f0
[  365.130808][T12860]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  365.130840][T12860]  ? __lock_acquire+0x747/0x2de0
[  365.130881][T12860]  ? hook_file_ioctl+0x1f2/0x600
[  365.130934][T12860]  ? __fget_files+0x2a/0x420
[  365.130966][T12860]  ? __fget_files+0x2a/0x420
[  365.130985][T12860]  ? __fget_files+0x3a2/0x420
[  365.131003][T12860]  ? __fget_files+0x2a/0x420
[  365.131028][T12860]  security_file_ioctl+0xc3/0x2a0
[  365.131059][T12860]  __se_sys_ioctl+0x47/0x170
[  365.131088][T12860]  do_syscall_64+0x166/0x520
[  365.131113][T12860]  ? trace_irq_disable+0x3b/0x140
[  365.131136][T12860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.131158][T12860]  ? clear_bhb_loop+0x70/0xc0
[  365.131185][T12860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.131207][T12860] RIP: 0033:0x7fde9d59e1d9
[  365.131227][T12860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.131246][T12860] RSP: 002b:00007fde9e550028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  365.131269][T12860] RAX: ffffffffffffffda RBX: 00007fde9d825fa0 RCX: 00007fde9d59e1d9
[  365.131286][T12860] RDX: 0000200000000280 RSI: 00000000400448c8 RDI: 0000000000000005
[  365.131301][T12860] RBP: 00007fde9e550090 R08: 0000000000000000 R09: 0000000000000000
[  365.131314][T12860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.131327][T12860] R13: 00007fde9d826038 R14: 00007fde9d825fa0 R15: 00007ffd964df958
[  365.131363][T12860]  </TASK>
[  365.137191][T12860] ERROR: Out of memory at tomoyo_realpath_from_path.
[  365.601640][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'.
[  365.735970][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2240'.
[  365.973158][T12869] team0 (unregistering): Port device team_slave_0 removed
[  366.046218][T12869] team0 (unregistering): Port device team_slave_1 removed
[  366.151377][   T50] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  366.498920][T12889] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  366.613400][T12894] ip_tables: iptables: counters copy to user failed while replacing table
[  366.640601][T12900] x_tables: duplicate underflow at hook 1
[  369.000653][T12879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  370.022020][T12931] syzkaller0: entered promiscuous mode
[  370.022044][T12931] syzkaller0: entered allmulticast mode
[  370.431255][T12953] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  370.500063][T12956] syzkaller0: entered promiscuous mode
[  370.500088][T12956] syzkaller0: entered allmulticast mode
[  370.665415][T12961] tipc: Started in network mode
[  370.665474][T12961] tipc: Node identity 36d2c644d533, cluster identity 4711
[  370.665646][T12961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.666716][T12961] syzkaller0: entered promiscuous mode
[  370.666735][T12961] syzkaller0: entered allmulticast mode
[  370.722628][T12961] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  370.798133][T12961] tipc: Resetting bearer <eth:syzkaller0>
[  370.818519][T12960] tipc: Resetting bearer <eth:syzkaller0>
[  370.876152][T12960] tipc: Disabling bearer <eth:syzkaller0>
[  371.193747][T12970] netlink: 'syz.2.2265': attribute type 1 has an invalid length.
[  371.193790][T12970] netlink: 'syz.2.2265': attribute type 2 has an invalid length.
[  371.239112][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2266'.
[  371.776047][T12984] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  371.805686][T12982] syzkaller0: entered promiscuous mode
[  371.805712][T12982] syzkaller0: entered allmulticast mode
[  371.806250][T12984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2272'.
[  371.855957][T12982] TC_ACT_REPEAT abuse ?
[  371.900045][T12988] xt_hashlimit: size too large, truncated to 1048576
[  371.900333][T12988] xt_hashlimit: max too large, truncated to 1048576
[  371.900453][T12988] xt_hashlimit: invalid rate
[  371.997314][T12991] FAULT_INJECTION: forcing a failure.
[  371.997314][T12991] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.997351][T12991] CPU: 0 UID: 0 PID: 12991 Comm: syz.6.2274 Not tainted syzkaller #0 PREEMPT(full) 
[  371.997376][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  371.997390][T12991] Call Trace:
[  371.997399][T12991]  <TASK>
[  371.997409][T12991]  dump_stack_lvl+0xe8/0x150
[  371.997446][T12991]  should_fail_ex+0x410/0x560
[  371.997483][T12991]  _copy_to_user+0x31/0xb0
[  371.997530][T12991]  simple_read_from_buffer+0xe1/0x170
[  371.997573][T12991]  proc_fail_nth_read+0x1bb/0x230
[  371.997598][T12991]  ? common_file_perm+0x20e/0x2b0
[  371.997634][T12991]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  371.997664][T12991]  ? rw_verify_area+0x24a/0x4c0
[  371.997690][T12991]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  371.997713][T12991]  vfs_read+0x213/0xa80
[  371.997743][T12991]  ? __pfx___mutex_lock+0x10/0x10
[  371.997770][T12991]  ? __pfx_vfs_read+0x10/0x10
[  371.997795][T12991]  ? __fget_files+0x2a/0x420
[  371.997822][T12991]  ? __fget_files+0x3a2/0x420
[  371.997842][T12991]  ? __fget_files+0x2a/0x420
[  371.997873][T12991]  ksys_read+0x150/0x270
[  371.997899][T12991]  ? __pfx_ksys_read+0x10/0x10
[  371.997922][T12991]  ? __pfx_sock_ioctl+0x10/0x10
[  371.997960][T12991]  do_syscall_64+0x166/0x520
[  371.997988][T12991]  ? trace_irq_disable+0x3b/0x140
[  371.998013][T12991]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.998037][T12991]  ? clear_bhb_loop+0x70/0xc0
[  371.998065][T12991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.998088][T12991] RIP: 0033:0x7fde9d55ea0e
[  371.998108][T12991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  371.998128][T12991] RSP: 002b:00007fde9e54ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  371.998153][T12991] RAX: ffffffffffffffda RBX: 00007fde9e5506c0 RCX: 00007fde9d55ea0e
[  371.998170][T12991] RDX: 000000000000000f RSI: 00007fde9e5500a0 RDI: 0000000000000003
[  371.998184][T12991] RBP: 00007fde9e550090 R08: 0000000000000000 R09: 0000000000000000
[  371.998198][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.998212][T12991] R13: 00007fde9d826038 R14: 00007fde9d825fa0 R15: 00007ffd964df958
[  371.998249][T12991]  </TASK>
[  372.050929][ T4989] udevd[4989]: worker [9989] /devices/virtual/block/nbd0 is taking a long time
[  372.310137][T12999] netlink: 'syz.1.2276': attribute type 1 has an invalid length.
[  372.517708][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'.
[  372.545379][T12999] 8021q: adding VLAN 0 to HW filter on device bond11
[  372.579849][T13002] bond11: (slave veth0_to_bond): making interface the new active one
[  372.582075][T13002] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  372.585458][T13005] tipc: Started in network mode
[  372.585486][T13005] tipc: Node identity 8ac2ff52bfa5, cluster identity 4711
[  372.585817][T13005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.631686][T13012] syzkaller0: entered promiscuous mode
[  372.631711][T13012] syzkaller0: entered allmulticast mode
[  372.636664][T13011] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2279'.
[  372.683796][T13001] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  372.737833][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2278'.
[  372.744602][T13010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2280'.
[  372.770551][T13001] tipc: Resetting bearer <eth:syzkaller0>
[  372.776731][T13007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'.
[  372.813688][T13007] netlink: 'syz.2.2278': attribute type 10 has an invalid length.
[  372.813711][T13007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2278'.
[  372.833334][T12998] tipc: Resetting bearer <eth:syzkaller0>
[  372.926534][T13024] netlink: 'syz.1.2282': attribute type 6 has an invalid length.
[  372.926730][T13024] netlink: 'syz.1.2282': attribute type 6 has an invalid length.
[  372.948298][T13024] netlink: 'syz.1.2282': attribute type 6 has an invalid length.
[  372.948503][T13024] netlink: 'syz.1.2282': attribute type 6 has an invalid length.
[  372.948685][T13024] netlink: 'syz.1.2282': attribute type 6 has an invalid length.
[  372.948937][T13024] netlink: 'syz.1.2282': attribute type 6 has an invalid length.
[  372.956180][T12998] tipc: Disabling bearer <eth:syzkaller0>
[  373.013239][T13007] dummy0: entered promiscuous mode
[  373.686342][T13041] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2285'.
[  373.769176][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2288'.
[  373.777214][T13049] syzkaller1: entered promiscuous mode
[  373.777238][T13049] syzkaller1: entered allmulticast mode
[  374.719387][T13077] syzkaller0: entered promiscuous mode
[  374.719489][T13077] syzkaller0: entered allmulticast mode
[  374.781607][ T1759] block nbd0: Possible stuck request ffff88802a0f0000: control (read@0,1024B). Runtime 90 seconds
[  376.636135][T13130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.646014][T13130] syzkaller0: entered promiscuous mode
[  376.646039][T13130] syzkaller0: entered allmulticast mode
[  376.672713][T13130] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  376.763352][T13132] validate_nla: 27 callbacks suppressed
[  376.763373][T13132] netlink: 'syz.5.2305': attribute type 2 has an invalid length.
[  376.839110][T13138] ip_tables: iptables: counters copy to user failed while replacing table
[  376.841979][T13138] __nla_validate_parse: 3 callbacks suppressed
[  376.841998][T13138] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2308'.
[  376.889940][T13130] tipc: Resetting bearer <eth:syzkaller0>
[  376.942678][T13129] tipc: Resetting bearer <eth:syzkaller0>
[  376.966702][T13138] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2308'.
[  377.242178][T13153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.460807][T13129] tipc: Disabling bearer <eth:syzkaller0>
[  377.510510][T13158] bridge0: port 3(veth1_to_bridge) entered blocking state
[  377.510616][T13158] bridge0: port 3(veth1_to_bridge) entered disabled state
[  377.510799][T13158] veth1_to_bridge: entered allmulticast mode
[  377.562664][T13158] veth1_to_bridge: entered promiscuous mode
[  377.786690][T13163] xt_hashlimit: size too large, truncated to 1048576
[  377.848677][T13166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2315'.
[  377.949317][T13170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2317'.
[  378.122382][T13174] bond9: Removing last arp target with arp_interval on
[  378.509816][T13187] netlink: 'syz.2.2323': attribute type 4 has an invalid length.
[  378.602068][T13187] ip_tables: iptables: counters copy to user failed while replacing table
[  378.627490][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  378.961598][T13204] syzkaller0: entered promiscuous mode
[  378.961622][T13204] syzkaller0: entered allmulticast mode
[  379.044157][T13212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2330'.
[  379.461276][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2331'.
[  379.465870][T13230] Set syz0 is full, maxelem 2 reached
[  379.501388][T13223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2331'.
[  379.574576][T13232] netlink: 'syz.2.2336': attribute type 16 has an invalid length.
[  379.574602][T13232] netlink: 'syz.2.2336': attribute type 17 has an invalid length.
[  379.703216][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2339'.
[  379.909056][T13232] erspan0: left promiscuous mode
[  380.036617][T13232] bridge0: left promiscuous mode
[  380.036642][T13232] bridge0: left allmulticast mode
[  380.092863][T13232] dummy0: left promiscuous mode
[  380.108670][T13243] netlink: 'syz.5.2341': attribute type 2 has an invalid length.
[  380.325817][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2342'.
[  380.374956][T13247] netlink: 'syz.0.2343': attribute type 3 has an invalid length.
[  380.379817][T13247] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.2343'.
[  380.579728][T13232] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  380.613264][T13232] 8021q: adding VLAN 0 to HW filter on device bond1
[  380.661720][T13232] 8021q: adding VLAN 0 to HW filter on device bond2
[  380.690585][T13232] 8021q: adding VLAN 0 to HW filter on device batadv1
[  380.709999][T13232] bridge0: port 3(batadv1) entered blocking state
[  380.710144][T13232] bridge0: port 3(batadv1) entered forwarding state
[  380.798963][T13232] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  380.882040][ T9826] wlan1 speed is unknown, defaulting to 1000
[  381.408302][ T1023] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  381.408395][ T1023] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  381.408434][ T1023] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  381.410633][T13263] syzkaller0: entered promiscuous mode
[  381.410656][T13263] syzkaller0: entered allmulticast mode
[  381.480061][ T3381] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  381.534289][T13270] xt_hashlimit: size too large, truncated to 1048576
[  381.769973][T13277] ip6t_REJECT: ECHOREPLY is not supported
[  381.791222][T13277] netlink: 'syz.2.2351': attribute type 1 has an invalid length.
[  382.018629][T13277] 8021q: adding VLAN 0 to HW filter on device bond10
[  382.364030][T13288] __nla_validate_parse: 4 callbacks suppressed
[  382.364051][T13288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2356'.
[  382.640293][T13294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2355'.
[  382.715817][T13299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2358'.
[  382.732284][T13298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.744959][T13298] syzkaller0: entered promiscuous mode
[  382.744985][T13298] syzkaller0: entered allmulticast mode
[  382.788179][T13298] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  382.916512][T13298] tipc: Resetting bearer <eth:syzkaller0>
[  382.958568][T13296] tipc: Resetting bearer <eth:syzkaller0>
[  383.050680][T13296] tipc: Disabling bearer <eth:syzkaller0>
[  383.080157][T13305] syzkaller0: entered promiscuous mode
[  383.080184][T13305] syzkaller0: entered allmulticast mode
[  383.433499][T13312] ip_tables: iptables: counters copy to user failed while replacing table
[  383.436477][T13312] netlink: 'syz.5.2362': attribute type 10 has an invalid length.
[  383.439443][T13312] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.445273][T13312] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.536797][T13312] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.536946][T13312] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.537297][T13312] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.537454][T13312] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.631965][T13312] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  384.025069][T13314] syzkaller0: entered promiscuous mode
[  384.025304][T13314] syzkaller0: entered allmulticast mode
[  388.925490][T13246] Set syz1 is full, maxelem 65536 reached
[  389.068689][ T6545] batman_adv: batadv1: IGMP Querier appeared
[  389.068709][ T6545] batman_adv: batadv1: MLD Querier appeared
[  389.958865][T13319] syzkaller1: entered promiscuous mode
[  389.958891][T13319] syzkaller1: entered allmulticast mode
[  390.496734][T13359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2374'.
[  390.676718][T13367] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  390.843857][T13370] netlink: 'syz.2.2379': attribute type 1 has an invalid length.
[  390.935505][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2380'.
[  391.190208][T13375] 8021q: adding VLAN 0 to HW filter on device bond12
[  391.217880][T13375] bond11: (slave bond12): making interface the new active one
[  391.221372][T13375] bond11: (slave bond12): Enslaving as an active interface with an up link
[  391.586831][T13388] syzkaller0: entered promiscuous mode
[  391.587249][T13388] syzkaller0: entered allmulticast mode
[  391.994508][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2387'.
[  392.449101][T13408] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2388'.
[  392.453575][T13408] netlink: 'syz.0.2388': attribute type 2 has an invalid length.
[  392.735149][T13420] pimreg: entered allmulticast mode
[  393.381468][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'.
[  393.402242][T13439] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  393.406380][T13439] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2394'.
[  393.524186][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'.
[  393.635593][T13449] ip_tables: iptables: counters copy to user failed while replacing table
[  393.703160][T13443] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  394.143579][T13456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.242802][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'.
[  394.359466][T13458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.424976][T13460] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2400'.
[  394.501588][T13466] xt_MASQUERADE: bad MAP_IPS.
[  394.522536][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2402'.
[  394.921940][T13473] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  395.042595][T13475] ip_tables: iptables: counters copy to user failed while replacing table
[  395.081669][T13475] netlink: 'syz.0.2405': attribute type 4 has an invalid length.
[  395.868531][T13492] __nla_validate_parse: 67 callbacks suppressed
[  395.868553][T13492] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2412'.
[  396.075922][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2413'.
[  396.498266][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2418'.
[  396.499642][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'.
[  397.279575][T13536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2425'.
[  397.444572][T13544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.467383][T13544] syzkaller0: entered promiscuous mode
[  397.467405][T13544] syzkaller0: entered allmulticast mode
[  397.491974][T13544] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  397.669175][T13545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.670629][T13545] syzkaller0: entered promiscuous mode
[  397.670828][T13545] syzkaller0: entered allmulticast mode
[  397.788088][T13544] tipc: Resetting bearer <eth:syzkaller0>
[  397.795092][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'.
[  397.918492][T13543] tipc: Resetting bearer <eth:syzkaller0>
[  397.971946][T13543] tipc: Disabling bearer <eth:syzkaller0>
[  397.996348][T13547] tipc: Resetting bearer <eth:syzkaller0>
[  398.038115][T13542] tipc: Resetting bearer <eth:syzkaller0>
[  398.121482][T13542] tipc: Disabling bearer <eth:syzkaller0>
[  398.264647][ T1023] IPVS: starting estimator thread 0...
[  398.414732][T13561] IPVS: using max 26 ests per chain, 62400 per kthread
[  399.091806][T13575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2438'.
[  399.336514][T13586] syzkaller1: entered promiscuous mode
[  399.336540][T13586] syzkaller1: entered allmulticast mode
[  399.384592][T13586] syzkaller1: tun_chr_ioctl cmd 1074025677
[  399.384619][T13586] syzkaller1: Linktype set failed because interface is up
[  399.617526][ T3372] syzkaller1: tun_net_xmit 70
[  400.044019][T13594] syzkaller0: entered promiscuous mode
[  400.044045][T13594] syzkaller0: entered allmulticast mode
[  400.901069][T13634] xt_hashlimit: size too large, truncated to 1048576
[  400.901091][T13634] xt_hashlimit: max too large, truncated to 1048576
[  400.901105][T13634] xt_hashlimit: invalid rate
[  401.485488][T13376] Set syz1 is full, maxelem 65536 reached
[  401.912186][T13640] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2448'.
[  403.624910][T13614] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  403.669684][T13646] sit0: entered promiscuous mode
[  403.688150][T13646] netlink: 'syz.5.2448': attribute type 1 has an invalid length.
[  403.688175][T13646] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2448'.
[  404.857483][ T1759] block nbd0: Possible stuck request ffff88802a0f0000: control (read@0,1024B). Runtime 120 seconds
[  404.983174][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'.
[  405.039841][T13692] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2452'.
[  405.350232][T13699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.405548][T13703] xt_hashlimit: size too large, truncated to 1048576
[  405.405569][T13703] xt_hashlimit: max too large, truncated to 1048576
[  405.405582][T13703] xt_hashlimit: invalid rate
[  405.572888][T13708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.575460][T13708] syzkaller0: entered promiscuous mode
[  405.575478][T13708] syzkaller0: entered allmulticast mode
[  405.621167][T13710] syz_tun: entered allmulticast mode
[  405.682030][T13708] ip_tables: iptables: counters copy to user failed while replacing table
[  405.689649][T13708] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  405.753426][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2465'.
[  405.917771][T13705] tipc: Resetting bearer <eth:syzkaller0>
[  406.078286][T13705] tipc: Disabling bearer <eth:syzkaller0>
[  406.311298][T13704] syz_tun: left allmulticast mode
[  406.404294][T13736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2470'.
[  406.691493][T13742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2473'.
[  406.691524][T13742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2473'.
[  406.691543][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'.
[  406.735978][T13746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2476'.
[  406.846658][T13743] syzkaller0: entered promiscuous mode
[  406.846821][T13743] syzkaller0: entered allmulticast mode
[  407.254255][T13763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.274652][T13759] syzkaller0: entered promiscuous mode
[  407.274678][T13759] syzkaller0: entered allmulticast mode
[  407.298997][T13762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.300515][T13762] syzkaller0: entered promiscuous mode
[  407.300535][T13762] syzkaller0: entered allmulticast mode
[  407.305458][T13759] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  407.356285][T13762] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  407.409612][T13765] syzkaller0: entered promiscuous mode
[  407.409635][T13765] syzkaller0: entered allmulticast mode
[  407.461279][T13759] syzkaller0: MTU too low for tipc bearer
[  407.461306][T13759] tipc: Disabling bearer <eth:syzkaller0>
[  407.543349][T13762] tipc: Resetting bearer <eth:syzkaller0>
[  407.753630][T13761] tipc: Resetting bearer <eth:syzkaller0>
[  407.850188][T13761] tipc: Disabling bearer <eth:syzkaller0>
[  407.893323][T13783] netlink: 'syz.1.2486': attribute type 2 has an invalid length.
[  407.893347][T13783] netlink: 'syz.1.2486': attribute type 2 has an invalid length.
[  407.893566][T13782] netlink: 'syz.1.2486': attribute type 2 has an invalid length.
[  407.893582][T13782] netlink: 'syz.1.2486': attribute type 2 has an invalid length.
[  407.956315][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2485'.
[  408.029143][T13787] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2489'.
[  408.247895][T13794] netlink: zone id is out of range
[  408.247912][T13794] netlink: zone id is out of range
[  408.247922][T13794] netlink: zone id is out of range
[  408.247930][T13794] netlink: zone id is out of range
[  408.247938][T13794] netlink: zone id is out of range
[  408.247947][T13794] netlink: zone id is out of range
[  408.247955][T13794] netlink: zone id is out of range
[  408.247964][T13794] netlink: zone id is out of range
[  408.247972][T13794] netlink: del zone limit has 8 unknown bytes
[  408.474511][T13801] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2496'.
[  408.487180][T13801] syzkaller0: entered promiscuous mode
[  408.487203][T13801] syzkaller0: entered allmulticast mode
[  408.510921][T13803] smc: net device team0 applied user defined pnetid SYZ2
[  408.806168][T13811] netlink: 'syz.1.2499': attribute type 4 has an invalid length.
[  408.916458][T13811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2499'.
[  409.137641][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2503'.
[  409.205968][T13827] netlink: zone id is out of range
[  409.220766][T13821] bond3: entered promiscuous mode
[  409.220791][T13821] bond3: entered allmulticast mode
[  409.370256][T13828] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma?
[  409.395934][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'.
[  409.435276][T13832] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2506'.
[  409.479943][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2510'.
[  409.604529][T13849] xt_hashlimit: size too large, truncated to 1048576
[  409.604550][T13849] xt_hashlimit: max too large, truncated to 1048576
[  409.604562][T13849] xt_hashlimit: invalid rate
[  410.054659][T13857] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2512'.
[  410.095302][T13856] syzkaller0: entered promiscuous mode
[  410.096626][T13856] syzkaller0: entered allmulticast mode
[  410.389705][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'.
[  410.594219][T13876] xt_time: invalid argument - start or stop time greater than 23:59:59
[  410.974893][T13892] xt_hashlimit: size too large, truncated to 1048576
[  410.974924][T13892] xt_hashlimit: max too large, truncated to 1048576
[  410.974937][T13892] xt_hashlimit: invalid rate
[  411.205925][T13898] netlink: 'syz.6.2526': attribute type 2 has an invalid length.
[  411.426539][T13908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.435140][T13908] syzkaller0: entered promiscuous mode
[  411.435162][T13908] syzkaller0: entered allmulticast mode
[  411.450744][T13908] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  411.524726][T13906] tipc: Resetting bearer <eth:syzkaller0>
[  411.598145][T13906] tipc: Disabling bearer <eth:syzkaller0>
[  412.421979][T13942] xt_hashlimit: size too large, truncated to 1048576
[  412.422002][T13942] xt_hashlimit: max too large, truncated to 1048576
[  412.422015][T13942] xt_hashlimit: invalid rate
[  412.550619][T13950] netlink: 'syz.0.2542': attribute type 49 has an invalid length.
[  412.619191][T13959] netlink: 'syz.5.2543': attribute type 1 has an invalid length.
[  412.625513][T13963] netlink: 'syz.5.2543': attribute type 1 has an invalid length.
[  412.815200][T13950] ip6gretap0: entered promiscuous mode
[  412.815225][T13950] ip6gretap0: entered allmulticast mode
[  412.914321][T13963] 8021q: adding VLAN 0 to HW filter on device bond4
[  412.930772][T13989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.155265][T13971] bond4: (slave geneve2): making interface the new active one
[  413.215318][T13971] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  413.266285][T13984] syzkaller0: entered promiscuous mode
[  413.266309][T13984] syzkaller0: entered allmulticast mode
[  413.286262][T13989] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  413.397922][T14001] net_ratelimit: 9 callbacks suppressed
[  413.397944][T14001] syzkaller0: mtu greater than device maximum
[  413.425221][T13982] tipc: Resetting bearer <eth:syzkaller0>
[  413.545182][T13982] tipc: Disabling bearer <eth:syzkaller0>
[  413.766352][T14020] __nla_validate_parse: 5 callbacks suppressed
[  413.766375][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'.
[  413.996417][T14039] bond13: option downdelay: invalid value (18446744073709551615)
[  413.996443][T14039] bond13: option downdelay: allowed values 0 - 2147483647
[  414.035244][T14039] bond13 (unregistering): Released all slaves
[  414.136414][T14048] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2559'.
[  414.225555][T14049] xt_hashlimit: size too large, truncated to 1048576
[  414.225578][T14049] xt_hashlimit: max too large, truncated to 1048576
[  414.225591][T14049] xt_hashlimit: invalid rate
[  414.686361][T14064] FAULT_INJECTION: forcing a failure.
[  414.686361][T14064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.686398][T14064] CPU: 0 UID: 0 PID: 14064 Comm: syz.1.2563 Not tainted syzkaller #0 PREEMPT(full) 
[  414.686421][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  414.686435][T14064] Call Trace:
[  414.686442][T14064]  <TASK>
[  414.686451][T14064]  dump_stack_lvl+0xe8/0x150
[  414.686487][T14064]  should_fail_ex+0x410/0x560
[  414.686522][T14064]  _copy_from_user+0x2d/0xb0
[  414.686556][T14064]  ___sys_sendmsg+0x1c6/0x360
[  414.686579][T14064]  ? __lock_acquire+0x747/0x2de0
[  414.686609][T14064]  ? __pfx____sys_sendmsg+0x10/0x10
[  414.686670][T14064]  ? __fget_files+0x2a/0x420
[  414.686690][T14064]  ? __fget_files+0x3a2/0x420
[  414.686720][T14064]  __x64_sys_sendmsg+0x1b1/0x290
[  414.686750][T14064]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  414.686794][T14064]  do_syscall_64+0x166/0x520
[  414.686818][T14064]  ? trace_irq_disable+0x3b/0x140
[  414.686841][T14064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.686863][T14064]  ? clear_bhb_loop+0x70/0xc0
[  414.686888][T14064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.686910][T14064] RIP: 0033:0x7efc1f99e1d9
[  414.686930][T14064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.686949][T14064] RSP: 002b:00007efc20814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  414.686972][T14064] RAX: ffffffffffffffda RBX: 00007efc1fc25fa0 RCX: 00007efc1f99e1d9
[  414.686987][T14064] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[  414.687002][T14064] RBP: 00007efc20814090 R08: 0000000000000000 R09: 0000000000000000
[  414.687016][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.687029][T14064] R13: 00007efc1fc26038 R14: 00007efc1fc25fa0 R15: 00007ffeadb00f88
[  414.687064][T14064]  </TASK>
[  415.005287][T14071] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2565'.
[  415.019768][T14066] dvmrp0: entered allmulticast mode
[  415.098909][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2562'.
[  415.098936][T14061] openvswitch: netlink: Flow actions attr not present in new flow.
[  415.230414][   T59] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  415.569066][T14085] netlink: 3728 bytes leftover after parsing attributes in process `syz.5.2569'.
[  415.623174][T14086] netlink: 3784 bytes leftover after parsing attributes in process `syz.5.2569'.
[  415.626422][T14093] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2570'.
[  415.969317][T14106] FAULT_INJECTION: forcing a failure.
[  415.969317][T14106] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  415.969353][T14106] CPU: 0 UID: 0 PID: 14106 Comm: syz.6.2573 Not tainted syzkaller #0 PREEMPT(full) 
[  415.969379][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  415.969393][T14106] Call Trace:
[  415.969403][T14106]  <TASK>
[  415.969413][T14106]  dump_stack_lvl+0xe8/0x150
[  415.969451][T14106]  should_fail_ex+0x410/0x560
[  415.969490][T14106]  _copy_to_user+0x31/0xb0
[  415.969529][T14106]  simple_read_from_buffer+0xe1/0x170
[  415.969572][T14106]  proc_fail_nth_read+0x1bb/0x230
[  415.969610][T14106]  ? common_file_perm+0x20e/0x2b0
[  415.969646][T14106]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  415.969675][T14106]  ? rw_verify_area+0x24a/0x4c0
[  415.969701][T14106]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  415.969729][T14106]  vfs_read+0x213/0xa80
[  415.969758][T14106]  ? __pfx___mutex_lock+0x10/0x10
[  415.969804][T14106]  ? __pfx_vfs_read+0x10/0x10
[  415.969829][T14106]  ? __fget_files+0x2a/0x420
[  415.969856][T14106]  ? __fget_files+0x3a2/0x420
[  415.969876][T14106]  ? __fget_files+0x2a/0x420
[  415.969908][T14106]  ksys_read+0x150/0x270
[  415.969935][T14106]  ? __pfx_ksys_read+0x10/0x10
[  415.969973][T14106]  do_syscall_64+0x166/0x520
[  415.969998][T14106]  ? trace_irq_disable+0x3b/0x140
[  415.970035][T14106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.970058][T14106]  ? clear_bhb_loop+0x70/0xc0
[  415.970093][T14106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.970116][T14106] RIP: 0033:0x7fde9d55ea0e
[  415.970136][T14106] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  415.970155][T14106] RSP: 002b:00007fde9e54ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  415.970178][T14106] RAX: ffffffffffffffda RBX: 00007fde9e5506c0 RCX: 00007fde9d55ea0e
[  415.970195][T14106] RDX: 000000000000000f RSI: 00007fde9e5500a0 RDI: 0000000000000004
[  415.970209][T14106] RBP: 00007fde9e550090 R08: 0000000000000000 R09: 0000000000000000
[  415.970222][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.970235][T14106] R13: 00007fde9d826038 R14: 00007fde9d825fa0 R15: 00007ffd964df958
[  415.970272][T14106]  </TASK>
[  416.489238][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2574'.
[  418.076522][T14074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  418.582609][T14137] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.030355][T14167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2583'.
[  419.079243][T14168] syzkaller0: entered promiscuous mode
[  419.079266][T14168] syzkaller0: entered allmulticast mode
[  419.619948][T13974] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  419.783223][T14205] xt_hashlimit: size too large, truncated to 1048576
[  419.783246][T14205] xt_hashlimit: max too large, truncated to 1048576
[  419.783258][T14205] xt_hashlimit: invalid rate
[  422.529643][T14191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  422.826433][T14254] netlink: 'syz.6.2603': attribute type 1 has an invalid length.
[  422.935847][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2607'.
[  422.935878][T14262] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2607'.
[  423.251918][T14278] xt_REDIRECT: bad MAP_IPS.
[  423.262684][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2611'.
[  423.309411][T14263] 8021q: adding VLAN 0 to HW filter on device bond2
[  423.335537][T14263] bond1: (slave bond2): making interface the new active one
[  423.336185][T14263] bond1: (slave bond2): Enslaving as an active interface with an up link
[  423.401743][T14264] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  423.533531][T14267] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  423.550948][T14267] bond3 (unregistering): Released all slaves
[  424.564914][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  424.751789][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2619'.
[  424.769324][T13985] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  424.809701][T14332] ip_tables: iptables: counters copy to user failed while replacing table
[  424.815698][T14332] ip_tables: iptables: counters copy to user failed while replacing table
[  424.822034][T14333] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1
[  424.833770][T14333] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1
[  424.836344][T14332] ip_tables: iptables: counters copy to user failed while replacing table
[  424.838420][T14332] ip_tables: iptables: counters copy to user failed while replacing table
[  424.851226][T14333] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1
[  424.862089][T14333] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1
[  424.862687][T14333] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1
[  424.866385][T14332] ip_tables: iptables: counters copy to user failed while replacing table
[  425.388896][T14354] netlink: 'syz.2.2623': attribute type 1 has an invalid length.
[  425.563723][T14359] 8021q: adding VLAN 0 to HW filter on device bond14
[  425.577051][T14359] bond13: (slave bond14): making interface the new active one
[  425.580166][T14359] bond13: (slave bond14): Enslaving as an active interface with an up link
[  425.754090][T14369] Cannot find map_set index 135 as target
[  425.772775][T14354] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  425.813262][T14354] bond15 (unregistering): Released all slaves
[  426.781076][ T4940] Bluetooth: hci4: command 0x0405 tx timeout
[  427.527252][T14319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  427.862699][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'.
[  428.185601][T14441] syzkaller0: entered promiscuous mode
[  428.185624][T14441] syzkaller0: entered allmulticast mode
[  428.562849][T14448] syzkaller0: entered promiscuous mode
[  428.563043][T14448] syzkaller0: entered allmulticast mode
[  428.809431][T13987] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  429.142054][T14476] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2655'.
[  429.353712][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2657'.
[  429.519389][T14486] x_tables: duplicate underflow at hook 1
[  429.559250][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2661'.
[  429.957791][T14506] syzkaller0: entered promiscuous mode
[  429.958008][T14506] syzkaller0: entered allmulticast mode
[  429.994856][T14506] net_ratelimit: 137 callbacks suppressed
[  429.994878][T14506] TC_ACT_REPEAT abuse ?
[  431.655490][T14459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  432.000441][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2671'.
[  432.418686][T14561] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2672'.
[  432.418717][T14561] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2672'.
[  432.418735][T14561] netlink: 'syz.1.2672': attribute type 6 has an invalid length.
[  432.418751][T14561] netlink: 'syz.1.2672': attribute type 5 has an invalid length.
[  432.418765][T14561] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2672'.
[  432.697398][T14571] syzkaller0: entered promiscuous mode
[  432.697423][T14571] syzkaller0: entered allmulticast mode
[  432.756607][T14571] TC_ACT_REPEAT abuse ?
[  433.025276][T14581] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2679'.
[  433.043923][T14581] bridge0: port 3(batadv1) entered disabled state
[  433.129807][T14585] netlink: zone id is out of range
[  433.129825][T14585] netlink: zone id is out of range
[  433.129834][T14585] netlink: zone id is out of range
[  433.129843][T14585] netlink: zone id is out of range
[  433.129852][T14585] netlink: zone id is out of range
[  433.129860][T14585] netlink: zone id is out of range
[  433.129868][T14585] netlink: zone id is out of range
[  433.129877][T14585] netlink: zone id is out of range
[  433.653310][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'.
[  434.944986][ T1759] block nbd0: Possible stuck request ffff88802a0f0000: control (read@0,1024B). Runtime 150 seconds
[  434.995940][T14545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.459034][T14625] ipt_REJECT: TCP_RESET invalid for non-tcp
[  435.484452][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'.
[  435.767011][T14639] syzkaller0: entered promiscuous mode
[  435.767215][T14639] syzkaller0: entered allmulticast mode
[  436.001556][T14647] vlan2: entered allmulticast mode
[  436.001581][T14647] bond0: entered allmulticast mode
[  436.133028][T14651] netlink: zone id is out of range
[  436.133048][T14651] netlink: zone id is out of range
[  436.133057][T14651] netlink: zone id is out of range
[  436.133066][T14651] netlink: zone id is out of range
[  436.133075][T14651] netlink: zone id is out of range
[  436.133084][T14651] netlink: zone id is out of range
[  436.133093][T14651] netlink: zone id is out of range
[  436.133102][T14651] netlink: zone id is out of range
[  436.133110][T14651] netlink: zone id is out of range
[  436.407124][T13987] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  436.559726][T14668] bridge5: entered allmulticast mode
[  436.620253][T14673] syzkaller0: entered promiscuous mode
[  436.620282][T14673] syzkaller0: entered allmulticast mode
[  436.640531][T14673] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2699'.
[  439.266283][T14657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  440.062942][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  440.253518][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'.
[  440.651171][T13985] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  440.763144][T14750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'.
[  440.791908][T14750] veth6: entered promiscuous mode
[  440.791951][T14750] veth6: entered allmulticast mode
[  441.139559][T14761] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2721'.
[  441.729881][T14787] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.231937][T14807] netlink: 'syz.0.2734': attribute type 7 has an invalid length.
[  443.231959][T14807] netlink: 'syz.0.2734': attribute type 8 has an invalid length.
[  443.511174][T14742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  443.714138][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2736'.
[  443.955973][T14827] xt_hashlimit: size too large, truncated to 1048576
[  443.980044][T14814] team0: Port device team_slave_0 removed
[  444.180570][T14837] netlink: 'syz.1.2740': attribute type 11 has an invalid length.
[  444.180596][T14837] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.2740'.
[  444.512109][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2743'.
[  444.512147][T14848] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2743'.
[  444.565024][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2743'.
[  444.565063][T14848] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2743'.
[  444.578755][ T6552] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  444.578932][ T6552] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  444.579038][ T6552] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  444.579167][ T6552] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  444.740038][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2744'.
[  445.166084][ T4940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  445.183550][ T4940] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  445.196615][ T4940] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  445.212926][ T4940] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  445.215461][ T4940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  445.625615][T13985] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66
[  446.292231][ T3367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.464872][ T3367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.613055][ T3367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.654411][T14867] wg1 speed is unknown, defaulting to 1000
[  446.804723][ T3367] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode
[  446.840151][ T3367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.055590][T14910] netlink: 'syz.6.2758': attribute type 1 has an invalid length.
[  447.194897][T14913] 8021q: adding VLAN 0 to HW filter on device bond4
[  447.209645][T14913] bond3: (slave bond4): making interface the new active one
[  447.210136][T14913] bond3: (slave bond4): Enslaving as an active interface with an up link
[  447.258061][ T5631] Bluetooth: hci7: command tx timeout
[  447.274847][T14867] wlan1 speed is unknown, defaulting to 1000
[  447.355700][ T3367] batadv1: left allmulticast mode
[  447.356008][ T3367] batadv1: left promiscuous mode
[  447.362406][ T3367] bridge0: port 3(batadv1) entered disabled state
[  447.869141][ T3367] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  448.052030][ T3367] bond0 (unregistering): Released all slaves
[  448.074142][ T3367] bond1 (unregistering): Released all slaves
[  448.105654][ T3367] bond2 (unregistering): Released all slaves
[  448.139183][ T3367] bond3 (unregistering): (slave bond4): Releasing backup interface
[  448.140273][ T3367] bond3 (unregistering): Released all slaves
[  448.180029][ T3367] bond4 (unregistering): Released all slaves
[  448.219332][ T3367] bond5 (unregistering): (slave bond6): Releasing backup interface
[  448.220259][ T3367] bond5 (unregistering): Released all slaves
[  448.278241][ T3367] bond6 (unregistering): Released all slaves
[  448.312556][ T3367] bond7 (unregistering): (slave bond8): Releasing backup interface
[  448.313486][ T3367] bond7 (unregistering): Released all slaves
[  448.352161][ T3367] bond8 (unregistering): Released all slaves
[  448.385071][ T3367] bond9 (unregistering): Released all slaves
[  448.405763][ T3367] bond10 (unregistering): Released all slaves
[  448.437935][ T3367] bond11 (unregistering): (slave bond12): Releasing backup interface
[  448.441606][ T3367] bond11 (unregistering): Released all slaves
[  448.466588][T14872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  448.555841][ T3367] bond12 (unregistering): Released all slaves
[  448.635352][ T3367] bond13 (unregistering): (slave bond14): Releasing backup interface
[  448.724925][ T3367] bond13 (unregistering): Released all slaves
[  448.772184][ T3367] bond14 (unregistering): Released all slaves
[  448.996654][T14931] __nla_validate_parse: 2 callbacks suppressed
[  448.996677][T14931] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2764'.
[  448.996696][T14931] netlink: 'syz.5.2764': attribute type 9 has an invalid length.
[  449.175151][T14936] vlan0: entered promiscuous mode
[  449.337561][ T5631] Bluetooth: hci7: command tx timeout
[  449.614602][ T3367] tipc: Disabling bearer <udp:syz0>
[  449.614885][ T3367] tipc: Left network mode
[  449.925802][ T3367] IPVS: stopping backup sync thread 9565 ...
[  450.019521][T14957] netlink: 'syz.5.2768': attribute type 1 has an invalid length.
[  450.797709][T14963] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  451.045251][T14966] bond5: (slave gretap1): making interface the new active one
[  451.069661][T14966] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  451.417086][ T5631] Bluetooth: hci7: command tx timeout
[  451.479211][T14997] ip6gre1: entered promiscuous mode
[  451.479239][T14997] ip6gre1: entered allmulticast mode
[  451.709026][T15009] netlink: 'syz.0.2773': attribute type 2 has an invalid length.
[  451.772547][T15009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2773'.
[  451.911958][ T3367] batman_adv: batadv0: Removing interface: macvtap1
[  452.013983][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1
[  452.151455][T13986] smbdirect: ib_dev[syz2] removed
[  452.214980][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'.
[  452.400298][T15026] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2777'.
[  452.407148][T15020] syzkaller0: entered promiscuous mode
[  452.407172][T15020] syzkaller0: entered allmulticast mode
[  452.444801][T14867] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.445265][T14867] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.445659][T14867] bridge_slave_0: entered allmulticast mode
[  452.502889][T14867] bridge_slave_0: entered promiscuous mode
[  452.630597][T15032] netlink: 'syz.5.2779': attribute type 1 has an invalid length.
[  452.658255][T14867] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.662394][T14867] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.662738][T14867] bridge_slave_1: entered allmulticast mode
[  452.715872][T14867] bridge_slave_1: entered promiscuous mode
[  452.758704][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'.
[  453.062650][T15036] 8021q: adding VLAN 0 to HW filter on device bond7
[  453.082833][T15036] bond6: (slave bond7): making interface the new active one
[  453.084155][T15036] bond6: (slave bond7): Enslaving as an active interface with an up link
[  453.497051][ T5631] Bluetooth: hci7: command tx timeout
[  453.527549][T14867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.547278][T14867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.784923][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2784'.
[  454.121992][T14867] team0: Port device team_slave_0 added
[  454.122256][T15082] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2787'.
[  454.268796][T14867] team0: Port device team_slave_1 added
[  454.754876][T14867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.754902][T14867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.754929][T14867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.856441][T14867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.856460][T14867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.856489][T14867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.965324][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2792'.
[  455.097369][T15106] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2791'.
[  455.130184][T15107] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2791'.
[  455.378369][T15115] netlink: 'syz.6.2795': attribute type 1 has an invalid length.
[  455.402142][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2793'.
[  455.402170][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2793'.
[  455.516490][ T3367] hsr0: left allmulticast mode
[  455.538688][ T3367] veth1_macvtap: left promiscuous mode
[  455.539485][ T3367] veth0_macvtap: left promiscuous mode
[  455.539747][ T3367] veth1_vlan: left promiscuous mode
[  455.539838][ T3367] veth0_vlan: left promiscuous mode
[  455.571313][T15124] FAULT_INJECTION: forcing a failure.
[  455.571313][T15124] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.571348][T15124] CPU: 1 UID: 0 PID: 15124 Comm: syz.6.2795 Not tainted syzkaller #0 PREEMPT(full) 
[  455.571372][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  455.571386][T15124] Call Trace:
[  455.571395][T15124]  <TASK>
[  455.571404][T15124]  dump_stack_lvl+0xe8/0x150
[  455.571442][T15124]  should_fail_ex+0x410/0x560
[  455.571486][T15124]  _copy_from_user+0x2d/0xb0
[  455.571522][T15124]  ___sys_sendmsg+0x1c6/0x360
[  455.571545][T15124]  ? __lock_acquire+0x747/0x2de0
[  455.571574][T15124]  ? __pfx____sys_sendmsg+0x10/0x10
[  455.571636][T15124]  ? __fget_files+0x2a/0x420
[  455.571656][T15124]  ? __fget_files+0x3a2/0x420
[  455.571688][T15124]  __x64_sys_sendmsg+0x1b1/0x290
[  455.571715][T15124]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  455.571762][T15124]  do_syscall_64+0x166/0x520
[  455.571786][T15124]  ? trace_irq_disable+0x3b/0x140
[  455.571810][T15124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.571833][T15124]  ? clear_bhb_loop+0x70/0xc0
[  455.571860][T15124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.571882][T15124] RIP: 0033:0x7fde9d59e1d9
[  455.571901][T15124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.571919][T15124] RSP: 002b:00007fde9e4ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.571941][T15124] RAX: ffffffffffffffda RBX: 00007fde9d826270 RCX: 00007fde9d59e1d9
[  455.571957][T15124] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  455.571970][T15124] RBP: 00007fde9e4ed090 R08: 0000000000000000 R09: 0000000000000000
[  455.571984][T15124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.571997][T15124] R13: 00007fde9d826308 R14: 00007fde9d826270 R15: 00007ffd964df958
[  455.572031][T15124]  </TASK>
[  456.452524][T15144] netlink: 'syz.5.2803': attribute type 1 has an invalid length.
[  457.520455][T15115] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  457.569059][T15118] bond5 (unregistering): Released all slaves
[  457.643939][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2
[  457.740600][T15125] syzkaller0: entered promiscuous mode
[  457.740630][T15125] syzkaller0: entered allmulticast mode
[  457.762475][T15144] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  457.922431][T15149] syzkaller0: entered promiscuous mode
[  457.922461][T15149] syzkaller0: entered allmulticast mode
[  460.740852][T15170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2806'.
[  462.942048][T14867] hsr_slave_0: entered promiscuous mode
[  462.946260][T14867] hsr_slave_1: entered promiscuous mode
[  462.951165][T14867] debugfs: 'hsr0' already exists in 'hsr'
[  462.951227][T14867] Cannot create hsr debugfs directory
[  463.478251][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2808'.
[  463.479288][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2808'.
[  463.974490][ T3367] IPVS: stop unused estimator thread 0...
[  465.018355][ T1759] block nbd0: Possible stuck request ffff88802a0f0000: control (read@0,1024B). Runtime 180 seconds
[  465.047824][T15233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2819'.
[  465.458405][T15243] netlink: zone id is out of range
[  465.458421][T15243] netlink: zone id is out of range
[  465.458430][T15243] netlink: zone id is out of range
[  465.458438][T15243] netlink: zone id is out of range
[  465.458658][T15243] netlink: zone id is out of range
[  465.458667][T15243] netlink: zone id is out of range
[  465.458676][T15243] netlink: zone id is out of range
[  465.458685][T15243] netlink: zone id is out of range
[  465.937373][T15252] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  465.984009][T13987] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  466.379775][T15266] netlink: 'syz.0.2828': attribute type 1 has an invalid length.
[  466.544133][T15266] bond10: option mode: invalid value (7)
[  466.641347][T15266] bond10 (unregistering): Released all slaves
[  467.081568][T14867] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  467.109125][T14867] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  467.134261][T14867] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  467.167544][T14867] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  467.168446][T14867] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  467.265677][T14867] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  467.272995][T14867] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  467.321958][T14867] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  467.597127][T15308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2834'.
[  467.603138][T15307] netlink: zone id is out of range
[  467.875604][T14867] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.991406][T14867] 8021q: adding VLAN 0 to HW filter on device team0
[  468.043724][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.043837][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.060490][T15323] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2836'.
[  468.095619][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'.
[  468.148773][T15327] xt_cluster: node mask cannot exceed total number of nodes
[  468.156249][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.156361][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.191750][T15317] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2837'.
[  468.857206][   T32] INFO: task syz.3.1855:11637 blocked for more than 143 seconds.
[  468.857231][   T32]       Not tainted syzkaller #0
[  468.857242][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  468.857252][   T32] task:syz.3.1855      state:D stack:26000 pid:11637 tgid:11636 ppid:5639   task_flags:0x400140 flags:0x00080002
[  468.857318][   T32] Call Trace:
[  468.857326][   T32]  <TASK>
[  468.857341][   T32]  __schedule+0x17db/0x58f0
[  468.857414][   T32]  ? __pfx___schedule+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  468.857446][   T32]  ? schedule+0x90/0x2b0
[  468.857472][   T32]  schedule+0x164/0x2b0
[  468.857495][   T32]  schedule_preempt_disabled+0x13/0x30
[  468.857516][   T32]  __mutex_lock+0x7c1/0x1550
[  468.857545][   T32]  ? __mutex_lock+0x5d4/0x1550
[  468.857572][   T32]  ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480
[  468.857607][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  468.857640][   T32]  ? net_generic+0x1e/0x240
[  468.857667][   T32]  ? net_generic+0x1e/0x240
[  468.857700][   T32]  nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480
[  468.857730][   T32]  ? __kmalloc_noprof+0x36b/0x720
[  468.857761][   T32]  ? __nla_validate_parse+0x2429/0x2d50
[  468.857792][   T32]  ? do_syscall_64+0x166/0x
** replaying previous printk message **
[  468.857792][   T32]  ? do_syscall_64+0x166/0x520
[  468.857814][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.857838][   T32]  ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10
[  468.857882][   T32]  ? __pfx___nla_validate_parse+0x10/0x10
[  468.857942][   T32]  ? rcu_is_watching+0x16/0xb0
[  468.857968][   T32]  ? trace_kmalloc+0x2a/0xf0
[  468.858010][   T32]  ? __kmalloc_noprof+0x38c/0x720
[  468.858049][   T32]  ? __nla_parse+0x40/0x60
[  468.858088][   T32]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  468.858118][   T32]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  468.858169][   T32]  genl_family_rcv_msg_doit+0x233/0x340
[  468.858207][   T32]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  468.858249][   T32]  ? bpf_lsm_capable+0x9/0x20
[  468.858269][   T32]  ? security_capable+0x7e/0x2c0
[  468.858304][   T32]  genl_rcv_msg+0x614/0x7a0
[  468.858339][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.858368][   T32]  ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10
[  468.858411][   T32]  netlink_rcv_skb+0x226/0x4a0
[  468.858438][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.858487][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  468.858557][   T32]  ? down_read+0x2be/0x330
[  468.858589][   T32]  genl_rcv+0x28/0x40
[  468.858728][   T32]  netlink_unicast+0x7bd/0x940
[  468.858766][   T32]  netlink_sendmsg+0x813/0xb40
[  468.858827][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.858864][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  468.858898][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.858926][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  468.858959][   T32]  ____sys_sendmsg+0x54e/0x850
[  468.858990][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.859025][   T32]  ? import_iovec+0x73/0xa0
[  468.859062][   T32]  ___sys_sendmsg+0x2a5/0x360
[  468.859091][   T32]  ? __lock_acquire+0x747/0x2de0
[  468.859122][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.859150][   T32]  ? futex_wait+0x2a2/0x390
[  468.859223][   T32]  ? __fget_files+0x2a/0x420
[  468.859244][   T32]  ? __fget_files+0x3a2/0x420
[  468.859279][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  468.859307][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  468.859368][   T32]  do_syscall_64+0x166/0x520
[  468.859392][   T32]  ? trace_irq_disable+0x3b/0x140
[  468.859416][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.859439][   T32]  ? clear_bhb_loop+0x70/0xc0
[  468.859467][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.859490][   T32] RIP: 0033:0x7f404939e1d9
[  468.859510][   T32] RSP: 002b:00007f404a26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.859533][   T32] RAX: ffffffffffffffda RBX: 00007f4049625fa0 RCX: 00007f404939e1d9
[  468.859550][   T32] RDX: 0000000004008090 RSI: 0000200000000040 RDI: 0000000000000003
[  468.859566][   T32] RBP: 00007f4049435888 R08: 0000000000000000 R09: 0000000000000000
[  468.859580][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  468.859594][   T32] R13: 00007f4049626038 R14: 00007f4049625fa0 R15: 00007ffe4667a008
[  468.859630][   T32]  </TASK>
[  468.859639][   T32] INFO: task syz.3.1855:11638 blocked for more than 143 seconds.
[  468.859655][   T32]       Not tainted syzkaller #0
[  468.859683][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  468.859694][   T32] task:syz.3.1855      state:D stack:26776 pid:11638 tgid:11636 ppid:5639   task_flags:0x400140 flags:0x00080002
[  468.859760][   T32] Call Trace:
[  468.859768][   T32]  <TASK>
[  468.859782][   T32]  __schedule+0x17db/0x58f0
[  468.859837][   T32]  ? __pfx___schedule+0x10/0x10
[  468.859870][   T32]  ? schedule+0x90/0x2b0
[  468.859896][   T32]  schedule+0x164/0x2b0
[  468.859920][   T32]  schedule_preempt_disabled+0x13/0x30
[  468.859954][   T32]  __mutex_lock+0x7c1/0x1550
[  468.859984][   T32]  ? __mutex_lock+0x5d4/0x1550
[  468.860011][   T32]  ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480
[  468.860046][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  468.860088][   T32]  ? net_generic+0x1e/0x240
[  468.860117][   T32]  ? net_generic+0x1e/0x240
[  468.860153][   T32]  nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480
[  468.860186][   T32]  ? __kmalloc_noprof+0x36b/0x720
[  468.860218][   T32]  ? __nla_validate_parse+0x2429/0x2d50
[  468.860266][   T32]  ? do_syscall_64+0x166/0x520
[  468.860290][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.865197][   T32]  ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10
[  468.865256][   T32]  ? __pfx___nla_validate_parse+0x10/0x10
[  468.865313][   T32]  ? rcu_is_watching+0x16/0xb0
[  468.865345][   T32]  ? trace_kmalloc+0x2a/0xf0
[  468.865375][   T32]  ? __kmalloc_noprof+0x38c/0x720
[  468.865405][   T32]  ? __nla_parse+0x40/0x60
[  468.865444][   T32]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  468.865481][   T32]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  468.865527][   T32]  genl_family_rcv_msg_doit+0x233/0x340
[  468.865570][   T32]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  468.865620][   T32]  ? bpf_lsm_capable+0x9/0x20
[  468.865645][   T32]  ? security_capable+0x7e/0x2c0
[  468.865685][   T32]  genl_rcv_msg+0x614/0x7a0
[  468.865736][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.865768][   T32]  ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10
[  468.865816][   T32]  netlink_rcv_skb+0x226/0x4a0
[  468.865843][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.865876][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  468.865919][   T32]  ? down_read+0x2be/0x330
[  468.865950][   T32]  genl_rcv+0x28/0x40
[  468.865998][   T32]  netlink_unicast+0x7bd/0x940
[  468.866036][   T32]  netlink_sendmsg+0x813/0xb40
[  468.866093][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.866130][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  468.866161][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.866187][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  468.866219][   T32]  ____sys_sendmsg+0x54e/0x850
[  468.866248][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.866281][   T32]  ? import_iovec+0x73/0xa0
[  468.866318][   T32]  ___sys_sendmsg+0x2a5/0x360
[  468.866339][   T32]  ? __lock_acquire+0x747/0x2de0
[  468.866368][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.866396][   T32]  ? futex_wait+0x2a2/0x390
[  468.866449][   T32]  ? __fget_files+0x2a/0x420
[  468.866469][   T32]  ? __fget_files+0x3a2/0x420
[  468.866501][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  468.866527][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  468.866573][   T32]  do_syscall_64+0x166/0x520
[  468.866596][   T32]  ? trace_irq_disable+0x3b/0x140
[  468.866627][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.866650][   T32]  ? clear_bhb_loop+0x70/0xc0
[  468.866677][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.866698][   T32] RIP: 0033:0x7f404939e1d9
[  468.878483][   T32] RSP: 002b:00007f404a24c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.878569][   T32] RAX: ffffffffffffffda RBX: 00007f4049626090 RCX: 00007f404939e1d9
[  468.878625][   T32] RDX: 0000000004008090 RSI: 0000200000000040 RDI: 0000000000000003
[  468.878653][   T32] RBP: 00007f4049435888 R08: 0000000000000000 R09: 0000000000000000
[  468.878694][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  468.878727][   T32] R13: 00007f4049626128 R14: 00007f4049626090 R15: 00007ffe4667a008
[  468.878841][   T32]  </TASK>
[  468.879015][   T32] 
[  468.879015][   T32] Showing all locks held in the system:
[  468.879045][   T32] locks held by pr/ttyS0/16: 2, last CPU#1:
[  468.879105][   T32]  #0: ffffffff8fc364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  468.879285][   T32]  #1: ffffffff9bd4be38 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  468.879458][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  468.879502][   T32]  #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  468.879716][   T32] locks held by klogd/4978: 1, last CPU#0:
[  468.879732][   T32]  #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  468.879790][   T32] locks held by getty/5379: 2, on CPU#1:
[  468.879805][   T32]  #0: ffff888036fab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  468.879904][   T32]  #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  468.891773][   T32] locks held by kworker/u8:22/6552: 2, on CPU#0:
[  468.891814][   T32]  #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  468.891979][   T32]  #1: ffffc9000354fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  468.892151][   T32] locks held by kworker/0:13/9826: 2, last CPU#0:
[  468.892193][   T32]  #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  468.892352][   T32]  #1: ffffc9000345fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  468.892505][   T32] locks held by kworker/0:14/9828: 4, on CPU#0:
[  468.892545][   T32]  #0: ffff88801c696d40 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  468.892699][   T32]  #1: ffffc9000342fc40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  468.892854][   T32]  #2: ffffffff8fd5d768 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6c/0x16f0
[  468.893020][   T32]  #3: ffffffff8fd62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  468.912558][   T32] locks held by udevd/9989: 1, on CPU#0:
[  468.912597][   T32]  #0: ffff888051b03350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  468.912776][   T32] locks held by syz.4.1549/10644: 2, on CPU#0:
[  468.912817][   T32]  #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  468.912974][   T32]  #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0
[  468.913155][   T32] locks held by syz.3.1855/11637: 2, on CPU#1:
[  468.913190][   T32]  #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  468.913397][   T32]  #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480
[  468.913569][   T32] locks held by syz.3.1855/11638: 2, on CPU#1:
[  468.913610][   T32]  #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  468.913756][   T32]  #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480
[  468.913930][   T32] locks held by kworker/u8:43/13987: 3, last CPU#0:
[  468.913972][   T32]  #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  468.935481][   T32]  #1: ffffc900033bfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  468.935548][   T32]  #2: ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20
[  468.935605][   T32] locks held by syz.5.2840/15330: 1, on CPU#0:
[  468.935620][   T32]  #0: ffffffff8fd62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  468.935679][   T32] locks held by syz.6.2842/15346: 2, last CPU#0:
[  468.935694][   T32]  #0: ffff88807fc5b440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  468.935742][   T32]  #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  468.935801][   T32] locks held by syz.0.2844/15345: 1, last CPU#0:
[  468.935816][   T32]  #0: ffff888053185900 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390
[  468.935872][   T32] locks held by cmp/15348: 2, last CPU#0:
[  468.935886][   T32]  #0: ffff88806863d6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  468.935935][   T32]  #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  468.935989][   T32] locks held by syz-executor/15350: 4, last CPU#0:
[  468.936021][   T32]  #0: ffff888056d866c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  468.936076][   T32]  #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0
[  468.936128][   T32]  #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170
[  468.936208][   T32]  #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  468.936298][   T32] 
[  468.936304][   T32] =============================================
[  468.936304][   T32] 
[  468.936335][   T32] NMI backtrace for cpu 0
[  468.936386][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  468.936453][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  468.936485][   T32] Call Trace:
[  468.936520][   T32]  <TASK>
[  468.936543][   T32]  dump_stack_lvl+0xe8/0x150
[  468.936639][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  468.936725][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  468.936818][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  468.936910][   T32]  sys_info+0x135/0x170
[  468.936997][   T32]  watchdog+0xfd7/0x1030
[  468.937087][   T32]  ? watchdog+0x1c7/0x1030
[  468.937168][   T32]  kthread+0x38b/0x480
[  468.937230][   T32]  ? __pfx_watchdog+0x10/0x10
[  468.937292][   T32]  ? __pfx_kthread+0x10/0x10
[  468.937354][   T32]  ret_from_fork+0x514/0xb70
[  468.937418][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  468.937477][   T32]  ? __switch_to+0xc89/0x1420
[  468.937561][   T32]  ? __pfx_kthread+0x10/0x10
[  468.937617][   T32]  ret_from_fork_asm+0x1a/0x30
[  468.937716][   T32]  </TASK>
[  468.938330][   T32] Sending NMI from CPU 0 to CPUs 1:
[  468.938396][    C1] NMI backtrace for cpu 1
[  468.938409][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  468.938429][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  468.938439][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  468.938469][    C1] Code: e8 de 83 53 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 63 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 0e 77 06 cc 44 89 f9 80 e1 07
[  468.938484][    C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[  468.938517][    C1] RAX: 1ffffffff37a9700 RBX: 00000000000003fd RCX: 0000000000000000
[  468.938530][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  468.938541][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  468.938553][    C1] R10: dffffc0000000000 R11: ffffffff85748b10 R12: dffffc0000000000
[  468.938574][    C1] R13: 0000000000000000 R14: ffffffff9bd4be60 R15: 0000000000000000
[  468.938587][    C1] FS:  0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000
[  468.938602][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  468.938615][    C1] CR2: 00007efc1f9783c0 CR3: 000000005d380000 CR4: 00000000003526f0
[  468.938631][    C1] Call Trace:
[  468.938638][    C1]  <TASK>
[  468.938647][    C1]  wait_for_lsr+0x184/0x2f0
[  468.938675][    C1]  __serial8250_console_fifo_write+0xcd/0x3e0
[  468.938700][    C1]  serial8250_console_write+0xa7e/0x1200
[  468.938725][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  468.938750][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  468.938797][    C1]  ? __schedule+0x17f1/0x58f0
[  468.938824][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  468.938856][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  468.938882][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  468.938913][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  468.938944][    C1]  nbcon_kthread_func+0x679/0x880
[  468.938969][    C1]  ? nbcon_kthread_func+0x163/0x880
[  468.938989][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  468.939014][    C1]  ? __kthread_parkme+0x71/0x1f0
[  468.939042][    C1]  ? __kthread_parkme+0x199/0x1f0
[  468.939073][    C1]  kthread+0x38b/0x480
[  468.939092][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  468.939111][    C1]  ? __pfx_kthread+0x10/0x10
[  468.939130][    C1]  ret_from_fork+0x514/0xb70
[  468.939149][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  468.939167][    C1]  ? __switch_to+0xc89/0x1420
[  468.939194][    C1]  ? __pfx_kthread+0x10/0x10
[  468.939213][    C1]  ret_from_fork_asm+0x1a/0x30
[  468.939239][    C1]  </TASK>
[  468.985381][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  470.492448][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  470.501579][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  470.511652][   T32] Call Trace:
[  470.514976][   T32]  <TASK>
[  470.517928][   T32]  vpanic+0x56d/0xa60
[  470.521943][   T32]  ? __pfx___schedule+0x10/0x10
[  470.526819][   T32]  ? __pfx_vpanic+0x10/0x10
[  470.531363][   T32]  panic+0xc5/0xd0
[  470.535112][   T32]  ? __pfx_panic+0x10/0x10
[  470.539576][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  470.545061][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  470.550462][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  470.556646][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  470.562831][   T32]  watchdog+0x1030/0x1030
[  470.567197][   T32]  ? watchdog+0x1c7/0x1030
[  470.571651][   T32]  kthread+0x38b/0x480
[  470.575739][   T32]  ? __pfx_watchdog+0x10/0x10
[  470.580428][   T32]  ? __pfx_kthread+0x10/0x10
[  470.585039][   T32]  ret_from_fork+0x514/0xb70
[  470.589656][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  470.594807][   T32]  ? __switch_to+0xc89/0x1420
[  470.599526][   T32]  ? __pfx_kthread+0x10/0x10
[  470.604153][   T32]  ret_from_fork_asm+0x1a/0x30
[  470.608964][   T32]  </TASK>
[  470.612645][   T32] Kernel Offset: disabled
[  470.617033][   T32] Rebooting in 86400 seconds..