last executing test programs:

5.597879114s ago: executing program 1 (id=4832):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c011}, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/14], 0x50) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200800, 0x0)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r3}, 0x38) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r3}, 0x38) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00'})
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1, @write_sync_train_params={{0xc78, 0x9}, {0x3, 0x8, 0x2, 0x1}}}, 0xd) (async)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c00018008000100"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x0, 0x8000, 0xffffffff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x2}, 0x50) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000082b01fe8000000000000000000000000000bbfe8000000000000000000000000000aa320004000f1000004fdb4edc5371ba46ca894a677ac121360cbbb3b67e0131708218616a6ea9251380c8de69ce7b22cae587cbf205b827e25fbd09430317d976aaab4201371fa11ca47a42d27152536e99a6a8a28d834bff647880529fb16811203372f8fb60ae845e6c7a18f5de193abec3b1af9675bc95aca78cd83c625d1fbb13330261b20d339e050636b82a3146991fceac96c706962cfe6f683ddaf75d20339af839490154a2ae456376415c619d8b302f7888c8ef8faee27010355d8642b3ae2c81d01000"/267], 0x0) (async)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x2, [{}, {}]}, 0x48) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES64=r3], 0x20) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000060000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x80)

4.199081803s ago: executing program 4 (id=4847):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r1 = socket$kcm(0x29, 0x2, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r6 = socket$kcm(0x29, 0x5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000130015000000850000006100000085000100070000009500000000000000a4d17bfd12dc5c64507749cf50cf374fde2b73a4fee1cb4a689f39c28d9ab54cf361e016516b6d23f6ca2d48"], &(0x7f0000000200)='GPL\x00', 0x80000002, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @sched_cls=0x36, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendfile(r6, r7, 0x0, 0xffffffff000) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r8, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000840)=ANY=[], 0x658}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0xffffffffffffff90}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x29, 0x5, 0x0) (async)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x32a41000) (async)
write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)

4.044846799s ago: executing program 1 (id=4849):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2a, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0xd}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000200040000000030000007a000000", @ANYRES32=0x0, @ANYBLOB="0041000000000000200012800b0001006272696467650000100002800c002100010000000000fb"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async, rerun: 64)
r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.525453571s ago: executing program 1 (id=4852):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0600018008000100", @ANYRES32, @ANYBLOB="0c00053fe92af16a83840f6b"], 0x48}}, 0x400400c)
r2 = epoll_create1(0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
sendto(r4, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xee}, &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40000000})

3.285509409s ago: executing program 4 (id=4853):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) (async, rerun: 32)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 32)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) (async)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) (async)
poll(&(0x7f0000000140)=[{r1, 0xa0}], 0x1, 0x8) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r5 = socket$unix(0x1, 0x5, 0x0) (rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) (rerun: 64)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000280)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0xe}}, {{0xa, 0x4e21, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x4010)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x43084) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0xfffffea9, 0x3, 0xef}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

3.089509217s ago: executing program 3 (id=4855):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0}, &(0x7f0000001540)=0x40)

2.992542428s ago: executing program 0 (id=4857):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hopopts={{0xb8, 0x29, 0x36, {0x4, 0x13, '\x00', [@generic={0x7, 0x9c, "842783ef602dd43d9fed9eb38a4c448a9d864d20f6ef9081c845c3a31444a927175eaf6d6cd79ca238fe571d9cd9ba146c65bd9ce115abe89a9d32b28e76cba29eceb1aed648787a24c3e85254d1231c0526ca867d7389c47fad04539025db65cebcef65531ccd46558896951c3ac444955a71328ba7382fe3d155e4878e91dda78389a24c5d71d6adbed050c45b3da0a724c27ca1b230477c0023af"}]}}}], 0xd0}}], 0x1, 0x4001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', <r1=>0x0, 0x29, 0x80, 0x5, 0x1, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x0, 0x8000, 0x1, 0xffff}})
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8d}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4044045)
write(r0, &(0x7f00000003c0)="1d57", 0x2)
write(0xffffffffffffffff, &(0x7f0000000400)="71fd1f8d95cd2d5ed628069778ab16b77858b8aaf13bc9fb7c75c67d251fe5fe6ab8c9d305f8c9d04e960cef923c103c27a92ab5208ee21328803c479d1f92b01bbef1e84c18f75b63a70aa9ab3bea98a588d1957961cb1c56722f053706f3cdf20a74c9e58d477c2f7cdf29d84c4e7f45d94de46443214a8dddf8759ef4f2ba6d9a1f06aa4b5f41122db24b7614f3319b224f0c512338a55538e7206364d66c018335ead030f9c8a2e706ed3558e8237a81f315fa9afb03bbf7e5ac94de392dd5e9e7", 0xc3)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x72}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000801)
r5 = socket$kcm(0x29, 0x7, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000680)={@empty, @multicast1, r1}, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'gretap0\x00'})
recvmmsg(r0, &(0x7f0000006280)=[{{&(0x7f0000000700)=@qipcrtr, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/147, 0x93}, {&(0x7f0000000840)=""/188, 0xbc}, {&(0x7f0000000900)=""/225, 0xe1}, {&(0x7f0000000a00)=""/20, 0x14}, {&(0x7f0000000a40)=""/225, 0xe1}, {&(0x7f0000000b40)=""/126, 0x7e}], 0x6, &(0x7f0000000c40)=""/196, 0xc4}}, {{&(0x7f0000000d40)=@l2, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00)=""/232, 0xe8}}, {{&(0x7f0000000f00)=@nl, 0x80, &(0x7f0000001280)=[{&(0x7f0000000f80)=""/238, 0xee}, {&(0x7f0000001080)=""/243, 0xf3}, {&(0x7f0000001180)=""/170, 0xaa}, {&(0x7f0000001240)=""/60, 0x3c}], 0x4, &(0x7f00000012c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000022c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002340)=""/159, 0x9f}, {&(0x7f0000002400)=""/248, 0xf8}, {&(0x7f0000002500)=""/185, 0xb9}], 0x3}, 0x1}, {{0xfffffffffffffffd, 0x0, &(0x7f0000002800)=[{&(0x7f0000002600)=""/138, 0x8a}, {&(0x7f00000026c0)=""/210, 0xd2}, {&(0x7f00000027c0)=""/53, 0x35}], 0x3, &(0x7f0000002840)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003840)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000004e40)=[{&(0x7f00000038c0)=""/33, 0x21}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/223, 0xdf}, {&(0x7f0000004a00)=""/70, 0x46}, {&(0x7f0000004a80)=""/106, 0x6a}, {&(0x7f0000004b00)=""/103, 0x67}, {&(0x7f0000004b80)=""/251, 0xfb}, {&(0x7f0000004c80)=""/130, 0x82}, {&(0x7f0000004d40)=""/225, 0xe1}], 0x9, &(0x7f0000004f00)=""/208, 0xd0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000005000), 0x0, &(0x7f0000005040)=""/100, 0x64}, 0x7}, {{&(0x7f00000050c0)=@alg, 0x80, &(0x7f0000005240)=[{&(0x7f0000005140)=""/206, 0xce}], 0x1, &(0x7f0000005280)=""/4096, 0x1000}, 0x5}], 0x8, 0x42, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f00000064c0)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x100, 0x0, 0x0, 0x0, 0x2, &(0x7f0000006480), 0xab0, 0x1, 0x40})
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000006540)={0x0, 0x1, 0xffffffff, 0x79d})
ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000006680)={<r8=>r7, &(0x7f0000006580)='syztnl1\x00', 0x121000, &(0x7f00000065c0)={@_ha_fsid={[0x818]}, {0xc130, 0x4, 0x9, 0x7c1333c8}}, 0x1, &(0x7f0000006600)={@_ha_fsid}, &(0x7f0000006640)=0x4})
setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, &(0x7f00000066c0)=0x8, 0x4)
socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$inet_buf(r8, 0x0, 0x28, &(0x7f0000006700)="81f0a7961abca1a1cb79c8f5583876535bf9168ceedd8f2d58dac1e97cd4d8f0cddd", 0x22)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$cgroup(r5, &(0x7f0000006740)='syz1\x00', 0x200002, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000067c0), r0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f000000a0c0)={&(0x7f0000006780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000a080)={&(0x7f0000006800)={0x386c, r9, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}], @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}], @beacon=[@NL80211_ATTR_PROBE_RESP={0x44d, 0x91, "19b4c91dafdbaa68ce492ab2f71ffca5e3ad3f57a161c048c4bf48be70e35977dfda4d84c9722e1fb26f673de59915f60f06c18e6ad7ee06574f7014ac7725ab9a61382a9f7755c22b8e18699415d29f198284872c8d8d86a881e53c6501b195d863e012a096193cb7ff3114867057df3b19f89ddb3817be9a206f35c300ec046959f0786067a11d2d4820ab93cf1f096c7168d6470c3b676b5e21eea0b9cf8a16e765c790c46640ff5eaab2c24af9da861ba4bc3b7159403f74ef05c7985175129d137e16f8284d124a1bdcac8ce01e492af68eda0cd8104336f113e63f10569a3cfd52f7a299387869591cc10c3c585179ceeb9c5f404352dc90b49dcf7e8bc04b27fe99d7ce9048ef76e893be1dce216f60ac563b5c01155d714eaf64fbd1aed58b1336170534a237f62131c229e680b75c32b9e976cfaaecbdd441f513387800ae57a8267990d1d018666de4ed79079377c5197d07821a055002e669eec26df684aed49e1201c6249a4baabb10f73480f57319b50350328ad154c1f275639e8e005cc000fe8b2bdd605c1bb04776f0771e7638d33aca87ec16a365b05cb2b208ba5b8aff7a6e6629c6e797c4f2bb206e5dd96e709ab0acc8a9bf75d37fd5e3cb08623b3cc564ae00f7f2863b5eb2235b52464200e4707ded1db1a24953cc1a4ab8c71c01680eaa110b75b59b09a236129879a5657448f6519cc59bbe8cfbb7c53e5ae86c351cb548829ff52ec1c676943a78c11a4a37235a95b75d8a65c71618e9c7bda7df4edbb8e7bf5a2dafefb8c0c6d1e4c889d136eb8bf4ee80551a008ecba50453353ff518b63b24c3ef7a2269caf4ac47dbb21956312c4ef7fb072dd0b126a1c4e5d5cc45b84721e20ed270ac4e260f94e6d6c10ee20b2e0332f0d28204bfe647d4b5c09ac7b6eed7e9856a5f1d6b34af0755da9cf20cd3405be2d729a2beee8d956559a055abb8375075353790e6e8188623f04c652be94859cb1f0080fe7088ac52afdddc3030cdb2bbeedc69e39a53fa5f841d36baf27340c80b14d4b3aee31e11b89d99b081c153bf3d8321ffd45768d46ccb00ab2e85251f8a9bd9293e0ca674a6a1045f10949813175c8279cb41ac7490a54d493847a3d46389135170e9685d813f3641443da8aff20ca7c3d496b72285cccccdff6b83492bb612be747d00013a8f084c012ad8a693ce7967044597881b85cc540aa34eafc5496864cc7bd824a18f3fc4ea6cc61c768e7c0762fdc6fa333d9367ac1cb4bca7fcc0843d15c9880eb82f14cd58eab3a72eb4bea85c167fa17e6e09ac020f628518b7c691ad3fd925f3025ff1c0ba63754eefbc3bf510b06ba9a23c14a7fabe6cb9e56485fb194c478a9710e6fa408e4b147499b373d9dfdd81319e23a531514aef382ae499df263de47a516a3ae930402a8a0c86e8aea5fecf41ff61de7406c8f7dfabff4fc5cffd33b397702140458de7744899d8bc523c50617a328f697cde1fbebdb590a65b758797d38596f9c72fb6d056525559e64b9ff0d98b9809c2faaad4c4c53ca46234"}, @NL80211_ATTR_PROBE_RESP={0x752, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x1bd, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @from_mac, {0x1, 0x4b0}, @value=@ver_80211n={0x0, 0x100, 0x3, 0x3, 0x0, 0x1}}, 0xcd4, @default, 0x110, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x3}, {0x60, 0x1}, {0x1b}, {0x48, 0x1}, {0x6c, 0x1}, {0x16}, {0xc, 0x1}, {0xc}]}, @void, @val={0x4, 0x6, {0x4, 0x4, 0xe2, 0x6}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x8, 0x0, 0x10}}, @void, @void, @void, @val={0x76, 0x6, {0x1, 0xc1, 0x1f, 0xd}}, [{0xdd, 0x59, "c4ab11ae9a2004bd2eb9f2bad76aa5b4e94f11a78c68003dff9a8e67ff05d553fffec5315208719458b1c77ab3b67e4219290e11e1818fd0c1e93855d81d24a8f532bff93815d23f99a339087c71cb6588e6a945422e3135cf"}, {0xdd, 0x8d, "786e30199e71c9626724a6214816b68f3909a9527d5407e0e29c5b322b6d8b12992a8c5fd0793142005eef081b484ba3946049af3660d669c6a52463e5e459bc8155f41681322361033e4faede5bfcc563e0896da0e9e596156bb46ae6278f7c03db24e434ecfa3ccee6760afc281f3ee0ea39cd8bae05388a3dfd1a590f7476cc8eb9f787c70927056fb1b5de"}, {0xdd, 0x7a, "1de63bcc1d1bd0051a8f47fdc73400cd59a277ac4bfff23613b6723ae4259f6573b9ebd1f6bac8b514b73728de9e98bd40c992759b055912585d12df0dc9144843109829f240c0fcf568b31245cc3ff5129e35fe4c60009d79d9bd7cd2a0987e6572d7d9b384067db89fef005171452a3e7c4f278587f4bd7ceb"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x21c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x9, 0x2, "4c38b441b2"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2d, 0x3, "afc57891509df23275694baa00f4ef47e37adb0f7693e81296bc5e18f61e070667bda68a1d3c5197fd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x90, 0x2, "512076b51c20458ff0b9f62b2b44f9e992a0e5b0ffe8754971bb8701b89542beea4ac56d6cc4ffc7452742a8e7ff2f38d87991a951b4b635d07d065d7f5f1f3d962bd9cf651d423776c58a831468e282f2be61fff78c5b7d02380f018045af9e0434822555bbbbc99407b0c8cee850fe249870eeb11a5d55e5a7f42ae0ecce367e1e3d2849c5328bf10218c5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x38, 0x2, "6f43865323c9442d4dc28e22847c594c9b85c432a09ebc5d1eb9442c1d94e4303876962f81267c286d8eb67699ecbd594b377a73"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x102, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x49e, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xc0, 0x80, [@challenge={0x10, 0x1, 0x31}, @cf={0x4, 0x6, {0x6, 0x0, 0x9, 0xff}}, @cf={0x4, 0x6, {0xfa, 0x5c, 0xf77, 0x7}}, @fast_bss_trans={0x37, 0xa4, {0xf8, 0x3, "bdb00d4f104869bcbaa09fe9fbad0b06", "2f0b02964a540786ed7f92889402e42c4f3673badc98e327097879366423beef", "f254205e737e806b6c81de7cb5c090f1a8a208530a1fa20d68ae6c25b4f25987", [{0x2, 0xd, "d94a19e04c916abd1e47feff4b"}, {0x4, 0x1d, "16a0adcedfa76cb79a33b57724d3f6931ca99b1bafe4e35d34346760f5"}, {0x3, 0x22, "6dab8e8ea83910fd7ddac3ad29b01472aa00bb1545cc0a33c90e3f6c254ed22fd9b7"}]}}, @challenge={0x10, 0x1, 0x2d}]}, @NL80211_ATTR_FTM_RESPONDER={0x2198, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x6d, 0x2, "a54b915ed681cf2cc438d27f384d3649d892b350f2ed0a704d990f589900687ae7901b28ce4c9027c2295ec857ef6b8e446fa430cab98632685edadd15c14931839f3fca4b7c93ed0f621fec03871526c344ab2c5e142fecefd327475a472299f118471c3a75f29291"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe5, 0x3, "b5c86878a34cf7494b5dc6d7c65364e668164a898371af9b249709d0db942aa79fe473c302743fc2712ce1a07f6897397d099259e80ba7de8d7ebb9ee31c43df81143633d4efc848575796f1fcc8ca4e980f2116156fd40ae539123ebf691de534cff526a0a48bfd4a35fc6898d506e7c91e207108ea7d576f8ae27797145bac1a2ce807cacf0196b2571aaf7160c0610e560d7d41e00ca04812348b209887c5db545c4fbd39841d2df531d898eb093e3fa1cd3c4cc68242c88ee85b775858cf95ed7ba1cd054073fd9c34e4bfeb02beb8665bcb5004f03f76fadaf195be6e9c30"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2b, 0x3, "ccf9a64b55b8d63a85194a2ed68570ba6c3c688fc58385d0f3c4efb1fa706b08c538ddf2c30d40"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "015598481944b17047f65122421152362f3feb36f20a633f25f69f33058fb9dbad919df69dd983a1337b126829bf8dc4688b58775ba925be17ce2e6f27717f3a723f89b7a1625e0d11b866ab97bf30657f06a92459fd75d18ba44dcb7df007d7ed125cb65a6b793637d2424c189fe5d4b792571310e1f52dc1a40398ca632599b13c2ddd3848bbf82a8da51aa61045f10e6c43bed487b11b159087849d070ea213c5e2c220ca1a2956d96d880d1ca9f8fb849cb415742c371b72810b3bf98e2b49dba7c2acaff475c84cae7cb80d0266138dfa1b1144cbca5d422e883dae8ce2c5627a5e15c497004542ec6c4335f26166b131b41318f450ccb1aa2d2d140cae2ba5d32b1f86204c1e780d39ecf69ff187b4f3a5cfee639aed5c198d63c01698228df66ae26c2b13687171f4662a8b9f68236a4265dbd2ca94db3206ea7cf0a7f3917bdd2c6bb469700e66b232dc7ae87cd334c006334542a8b646914777667bd394784f49b474e7037f55206b7d3ce46fe4165924fff70828f85874802e11ea864166945d09630e0883af7c5fb31c4a8ee7206c003486953afac4b91cbfa016c2382eb119c75d1b375add273ef0153323882e6ac904a94045de443945562cd3f671b0fb6d49443de4d62e677e3206122695be99c2c7eb108a1d649914971d2463c252e8325cdd5ade054fb57495285840fc382c31242391c648a1d7699edeb905bda3c7bfa2b48a8d32f4ba967e6c37c3988292545c2c7ed134e0cb5bf5e8bfb2f4c66d2c5ed6a12152726e622183341e4a59f0102dc2e4eaa2f68a3e940110102290a6aaf5a0564f64cef6f59b766113fb56b3ba1e2ec2aab81540e7fc1c7b3d141c4e05b7a38d38fad988a29aae95babfcb6b59adf39adda2b25baf2458ea760ddbb332a7a02b833a6181330ef27a75deb8c23d82c87bdc36f3d6eddfee8e8a179ec2ce5f41974da0a65c794c241f1d6c5c88ae8e98e8c085265a1746c80246803e89d5433be113872b5dd82b2be4664e85c1dd627606e1e86ff8caa3ccb74e5472f7e27ebf159e2f380aa95a882c91a780266fe377f2ea668aedbd83383c1d23be59f64c4d7a6b33d1aff31397da3da272b93bebdad0fd0e3e30b425aab5126a5a2f4249d1f5ca80b099d85d5cfc4cac10d7b1f72934e34fdab01dee04489799a96fb5a72e0726d60f3ac031f667c141d7a4be9e466c07fa92fc0b024aa106e627753adb6a4c3ab7f1023687eda42f30baeb3c685290ea52873c48b932d023b129add785c15c0b4e9718853bc4c00de04f418e05723506b5404bfd23b5e50bf0bce42df2eb388943e925b368c76a61bfd8a5f514a1e94e9331eed3dfc7f8b496bba63c23769c6815a591d8542b37e75cd96288cd4b63d96bfbac8bea15b125cde3e2cb41707f899064cface6ee5a9f6fc0732b6913f91063e954ca4a714b64bf589aeeccffaf4dc88dc8ddd3b65bc44b8d885ea08c9359af6c17061fe78e4bee9edf028028bea72b76bc62ba38d04bd1041cf62d5a5b122f19c530f682c0bf9f9442338e51073932054e4545464545d0c5da93d938f450c8ad78d99eebfb24650996467329d39ffcb5287a77390d3989787bd266593c801b834df81f46a098f69de64a130973e35cc1e95ecced511b7da23ada9a69abfe01d9d5ad874cd4e39d87f9362f5bc29ad5ac35e77485c9e061a476035bb496f19f83d121d0e3047e7e0ddd5d98a1dae4281cd488817582b87f01155430bd533f1a7155b6313ea144c20f0c0a29f8ce9e3bed2fba7d648a90de8f216493bc4db57c6752af9a7578723e328ed26c016199b7bf63a1ef6a8fb8c147062986b5c0347323a40ea5d5fcdc03d463cb99829f1a850c454231034ddcd0b07b4279860aa7162440602e728625bdc8e69bb543f88b4b39c320b922136740c60326aa803c6dc420c2d17d8264680429bc26e153a4272278a18c7078289d971e4482204326e1de2d694e242d4c7794b8bac5a35c23bc31b55cab541c934ca9cd4edd7347edc3bd0dded8621485eac4ec57e108a290820d3c9907a3ee0e16bb4146987c9c63bc2cd1b73831168baf07d7de526da7ef4de3a1b9580f74133538694a45b0298c2d6b65658dbb529833e22dd99b158cc8a2d633f7917af24b8193039e117c5ffe84df86eb5370636f7b4cc3bc1350cc46909fa21bba7605d7384be427a374564ff4cba6934368e71e25736784299f231dd5d905fcf839dcbc59b5665d3016fd5c0b1631982f58e3291ac0b37bbdb3f8109b0be6d1274e8911f6e531f34faeae545b75a0040d920586d3bfdab4d0265ace05fb8cfd9688d947b0f68c875db374ad53943a7fc073fec4173c7621c5abdfea52579b8f2486f5781d7bb1aee81fff6e52d6f7e5522e15db32e0eb01dd2f7b8120c90c52241fa85a55af9f80301afdf3592f861538f29f13731f5288b9c24f3b6072554b2e713e4f142783a945aba9270bd1319ad99faf0d09d31fb45d4f240ce8ee55c3317b0c6d16d51c077305c18bca7cace17edd4fd5e9098d39cd6d3ef9d330156e5fd83944d020c3c617c8e6bde51370c3eb9d7b8355462841c0444f3a7810a02f14b8eaa09e2689bcb5e7f36238472fbc2d37db217f68c2708728e59c97f845ec1693e37307aae1170e7900ae8d025e956c9dc7fc5029740360510f480c1bd841f37721bd471bc6033b86e68e42289f9ba36b85b54a85595720df528f3260da7cb0c4c1db95c7b7b99b4bb586017698fbbe960d1a35e6614c632c188bba8c99179f74427c1bf8e311ab5e6ce945408cded0a683105e7e6cc66184bf2515d2d01385b11b3daa9263d4a8fce8311a8ddca3705bbdb5e4cde2494da1cf6659c02ddceff532fbb6d622fc27a53ce7caf6cc2d264500f632022dfe10169643990616b3856ceb65912a4f26b669d0fb26a5e84d9f7564e84ca7ff1634bfb834a087cdc8d260b1b1bcbf906ef2ead17ca6dd762eea67511e82cb0024d241af96386c3ec0371f835db48206d3ede6276a7b1ee3995c79025ec0ca66f567dac0914d2f1e180c7174ff4734511778b7a10413b2ae1ba9da964631afa0f0a35ea3bc68482498d57f28de6bb0e28a6d1e3c5ea563f809d493eedc9b4842756c935b5092e747c04948a8030066dab1fa128174005a90a6aaa4fb163cf5adb337062c71e4d23d2266a9ed3307ea06c979d63112b94f5191868476337921b3288088e73b89b51d002966d3db30957bcb684c10223c50a67f0b04d165dca2d7ff2ca3265cb1d648f04cce9f55a6d1825e190d09ef731f1b4ea6257f5f84e3b208e806a5306e7cf017bfdec57810cf5145c1dee6c405d121a767816eba84db73eebd16f7ba6afba1a7a9f6d567f39fd3732a93cc7a12e44dbc9d86f56c6642bcd4402be0fb9b908c427196bdd37f84917ebe4e97a5a5bef20ab687f4c9457076115cc7f11915b4e1c3d4947b346dba6b55d796c0dc03970451d0b0a1a8462d206ab353bad356ea4f0e9db707f5867d6051ee6d42e953f07db35d1145f92c756a3a020a5a8d90d89b831ecb61433103f9e8391e946e99846de08eec5f37b8604227a9cc65637394cc0156475f0bfa31da4e74350fe9b122b0dc97368109c192e1dff881d7cbaed56845f44e80ec5dbfb4835d988c6c9c3db51997d0dffed41297e4e2d8321fc14432a100c2632af1e8b85b05d137c0be4a1f61727c93a945f3189ee79144408532ae109c9a7d2591a6d89b94fafdc1b03729c7ecaaed076a219ee389c0d765802898d32889ec8697b568733d112706a083de2cb8d57f097b7f9ac53d7782382d7287c56a6738b189d6de68fc2d4498f68be2cc2b25b2fe006ddf3d96872cf94941583c71530e552a4d010d50dabd35f23984ac88a016c8c0ed73c82baefe901871098925d1108c2d7d8ce3f1a30f6e3f3ef4455eb51293f3d1f39c46dddafdb6be1d4360b7cacbe89bebb045e62a0ac76c9da1954423fb543da647e2d086a2d0f9e2fa243f3a81709c44dcf179f6d8253f7c12eaef64bde20a73ec8a890a703eda5f1bc28404e6e8dbdc10bb13ebec6f13d5b92576f5dc4ba51138e4ec0cc075db4a49c74658c43fc1bf81eaf8b380912cb1ba156eff59c769a6043ebb57ae98f92876968c0093d8ed7fb7f193b04a859c773ff8a7e8716a4abe5179e3419582919a9d0a7e4e90d9ccc45ca3243b870a4f1aef47d922bd8cfcc59c7ef3e8af9398328bc3008da59dd3e10ad163013edd96fdf6c366bf7498e721413931d658c67e7cf6434673964d516b3216c354a34e0b7bbf111a9b56fda48fe9abe3bd24222102c8d9daea7f4d5f26cb3307badd95bb10edf4015f11f809059e0300b980f5177b3a599d3aaa79b48f95b424b9d9924ead3f0c693967f7dbd646e74b0686b1c1c39bde4c3396c0dbf3ad0a1ef8a4f5acbbed0822bcbd472a0286dd20775e803b152c018582f00e26f3866ef3d5bee226b7e18048501a5720a0b703c2c36256fa71a508965a5d197ced039dca27f4ec4d12bf46758bd4a670d2618f24b2728eb83e77015bd2da5922a6c322b0a300dfa2f30d1a9e279484f26babede764c1b9b860b789c5ffb364649859967cb498e6bd5f1f36b007f8c73bb76bcaa8c88267766a257fafed562a015a5f52613777dba4aa35cbc34fef15e817a8a998fb8116d5d1e6274acb242ddb0c8c17ef7cb3af04ed2dee8bd8eaed2d9dbd525f00031eedf781400257895ef9175678c035acba79c403db6f66fb97ec7cba44b2b4d24b9cd7d2111df666e583bec8eaf6ba46c5a5062250f0df2667b478398be41baf6212f01ba4d2eda55832da486c072b3ecb1eddaa702581d62db56dd656f495a6b8c521dc21bbcac0b69bfd9230f99be9a1d30c5c956c533d688d68778da83b66cf4b69d4444b5c73b083808d757a112185647264eef6381d7f6a5b8ab02f7119db2aecba5372626655437455a4a068f6ed6b727525881ec71c0a69d614ee2b4c910e33f6ac3644e0e546f3a9fe7af34e1fdeb562cd682057a1e852d34394f7ba097641b5b31a5329bcd944bacde51f05d130c418c049075721f3778b7fff9e0f4ce290b12e7b3176bdcf376e20549ede9a1be3bae8ff77f071803b51874f19fc2a376f074a4f06b34c021e927e985603ddc75ce9ecac74f30a756d69aca71adc68c76ee0fc3b702d868e7fab4146c1b16b73ffe41d03e4e5ae5ed0de482688205546593648abcffa8abc4b21fa10ce28f565052d465a23c19b8de2e4dd377f4caa656feba8c90214195b3a7295864c30128a3971f70108a39eb20a5eadecd9925d9a9073e970e7464373f0c97d86ed543f930c6d03a48dba87f6fa77186703bff05f107b0b80e63743090e07a13ce21799a3ce7a6c370beb50b7a782cdb1ec82075e56b7bd9f42797947ac7584e694d65dfc835b53dbafd71b278531a131a6d9be31e84eddbffd6bbcb94c0e08349784ccab02c6613574f8b2753a0217e9d7065404416369d556a1f1cbdf8eb2bfc6f4a0d56d3bcb9a3e1b9b63abc82b7a1a6dd9aeae8333b7d1a1cf17018459285bcae056f55c6bd5255e5a234bd20b424adf9e62f43fe7748d42dfc5b5499f7ed2439a1a4a34a6aea666e707778fd4afe21ac4cd38164a3cc108455a55ccda987e44f2b187c0db87ef6ac99195c656b136ae4203a5de43e4a661d679fa7765d82ba4b03a4501986b4715fcb14947be132da61a616f2d29cd64435584882b71b451a592fcbba6e75fbd4fc5ab819cafdca2b163027812c5c8abbb6fd1441dfddfd271e679c244adf5bdc1"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x141, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3, 0xc, 0x1b, 0xc}}, @prep={0x83, 0x1f, {{}, 0x3, 0x88, @device_b, 0x800, @void, 0x7fff, 0xe, @device_b, 0x3f8204c5}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x48}}, @cf={0x4, 0x6, {0xa, 0x7, 0x7, 0x2}}, @peer_mgmt={0x75, 0x16, {0x1, 0x1, @void, @val=0x1, @val="c0a657439deef981eb0a708dac6866d1"}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x6, {0x0, 0xb, @val=0x3, @void, @void}}, @measure_req={0x26, 0xd1, {0x1, 0x2, 0x5, "6c496d792ff20ad7712f0c77edacb5953c0135d59e4fe3934a3f030db8ba7b5b70c9fb15079691d5ca17f355acb28dbd34c923842c309ddf4b1acc617a0ee607916611e628ebea688d3f553bc124ae0e04a73e37b92309b880d8ccee3ddefc05f6df227a11c0aa54243e1d86eca52dcaa5cbabe154abb41c7c0553af3869594c95fe586894aa55feb075e93ce687b2960056caa2a8c9fc5fad1ad3e846ec2ec2c7fd5613cec47043988c6f8fa4e9dd9460ffe47f371d2acfc0553c01bcfd5920aa0e99441b491956f702031682ce"}}, @cf={0x4, 0x6, {0xd, 0x8, 0x8d4, 0x1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x23, 0x7f, [@ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0x7, 0x7, 0x33}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}]}]}, 0x386c}, 0x1, 0x0, 0x0, 0x20002004}, 0x4000040)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f000000a100)={0x0, 0x2, 0x0, 0x1})
ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f000000a500)={{0x2, 0x4e21, @local}, {0x1, @remote}, 0x7ffa6ed79c88ce3e, {0x2, 0x4e22, @rand_addr=0x64010102}, 'bridge_slave_1\x00'})
socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f000000a580)='scalable', 0x8)

2.734020573s ago: executing program 0 (id=4858):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4)

2.569905234s ago: executing program 1 (id=4859):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r5=>0x0}) (async)
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000)
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000186dd"], 0x1c) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x341}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r10=>0x0}) (async)
r11 = socket(0x2b, 0x80801, 0x1)
sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000)
r12 = socket$netlink(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000000c0)={'team0\x00', <r14=>0x0})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r11, 0x1) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050427b97000fedbdf250100000008000100", @ANYRES32=r14, @ANYBLOB="3c00028038000100240001006d630073745f72656a6f69636f756e740000faffffffffffffff0000000005000300030000000800040002000004"], 0x58}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000480)={'erspan0\x00', r10, 0x1, 0x8, 0x800, 0x7, {{0x3f, 0x4, 0x0, 0x1, 0xfc, 0x65, 0x0, 0xa8, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@lsrr={0x83, 0xb, 0x6b, [@broadcast, @multicast1]}, @cipso={0x86, 0x37, 0x2, [{0x1, 0x12, "e5d05fdf080000000000000001988d42"}, {0x6, 0xc, "aa29c815057941039136"}, {0x5, 0x3, "ed"}, {0x7, 0x7, "2579cadaa4"}, {0x6, 0x9, "958209535e8970"}]}, @lsrr={0x83, 0x1f, 0x41, [@remote, @multicast2, @private=0xa010101, @local, @remote, @multicast2, @multicast1]}, @timestamp={0x44, 0x14, 0xfa, 0x0, 0x7, [0x8, 0x81, 0xe, 0x5]}, @ra={0x94, 0x4}, @noop, @generic={0x89, 0x6, "d2e7a90d"}, @timestamp_prespec={0x44, 0x44, 0x63, 0x3, 0x2, [{@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0xa8}, {@remote, 0x7f}, {@multicast2, 0x100}, {@loopback, 0x4}, {@local, 0x2}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x1f, 0x3, 0x6, [{@remote, 0xffff0001}, {@multicast2, 0x7}, {@private=0xa010101, 0x401}, {@multicast1}]}]}}}}})
socket$nl_route(0x10, 0x3, 0x0)

2.369343043s ago: executing program 4 (id=4861):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
accept$phonet_pipe(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000000)
socket$inet(0x2, 0x4, 0x97fffffd)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)=ANY=[@ANYBLOB="240000002e0029022ac77000fadbdf2542000000080092000000000008803a00", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
socketpair(0x21, 0x5, 0xd, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x1}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, r7}, 0x14)
syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0)
r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r10, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a)
sendfile(r10, r11, 0x0, 0xffffffff000)
connect$llc(r10, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

2.126114038s ago: executing program 3 (id=4863):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @val={0x1, 0x1, 0x4, 0x1ff, 0x9c8b, 0x7}, @eth={@remote, @broadcast, @void, {@arp={0x806, @generic={0x104, 0x9, 0x6, 0x4, 0x3, @broadcast, "24cbd3de", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "d11d44c6fe0a6f1e"}}}}}, 0x38)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r1=>r0, 0xb, 0x4, 0x100000001})
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x1, "bd61577d1e8a8916d798a3132821dbd3fbd834cb4d4bf2d888d699d4091348bb", 0xe1, 0x1000, 0x5, 0x8c}, 0x3c)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x111000, 0x0)
write$ppp(r2, &(0x7f0000000140)="0e28cca54808b983bcdedab0da16abb9d633ecf4f21a96b4b5642dc06d19db03b48aea33c26e31f5884b2c1b33e1e4b13d5222217c67fd438c410f51599ba640133a67c2bc1bf7c81526b7a3094fef7520b5c0ab17d38a0c108802dba6204adb01", 0x61)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001240)={'team0\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000023c0)={r1, 0x20, &(0x7f0000002380)={&(0x7f0000001300)=""/4096, 0x1000, <r5=>0x0, &(0x7f0000002300)=""/88, 0x58}}, 0x10)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002440)=@generic={&(0x7f0000002400)='./file0\x00', 0x0, 0x10}, 0x18)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@o_path={&(0x7f0000002480)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x12, 0x1, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0x10, '\x00', r3, @fallback=0x8, r4, 0x8, &(0x7f00000012c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x1, &(0x7f0000002500)=[r1, r6, r1, 0x1, r7, r1, r1, r1], &(0x7f0000002540)=[{0x2, 0x5, 0xa, 0x1}], 0x10, 0x8001}, 0x94)
r8 = socket$inet(0x2, 0x1, 0x0)
ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000002640)={0x6715, 0x8, 0xc, 0x39, 0x7})
tee(r0, 0xffffffffffffffff, 0x9, 0xd)
getsockopt$sock_int(r8, 0x1, 0x22, &(0x7f0000002680), &(0x7f00000026c0)=0x4)
getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000002700), &(0x7f0000002740)=0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000002780)=[@in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x3}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0xffffffff, @local, 0xa0c1}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x6, @mcast2, 0xfffffffb}, @in6={0xa, 0x4e21, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa25}, @in6={0xa, 0x4e23, 0x3, @local, 0x4}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}], 0xd8)
r9 = accept$inet6(r1, &(0x7f0000002880)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000028c0)=0x1c)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000002900)={<r10=>0x0, 0x86}, &(0x7f0000002940)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000002980)={r10, 0x9, 0x3, 0x2, 0x7, 0x81}, 0x14)
r11 = accept4(r8, 0x0, &(0x7f00000029c0), 0xc0000)
ioctl$sock_netdev_private(r1, 0x89f9, &(0x7f0000002a00)="4555b7058dbbe40d2132d225b64ee221865e12496526b1b36f21b2bde5cad2acc8f5bf0ace03f7050421f9da2d90414acb590d2ebf0f632183e82b8b834e091b079517b2d83fa4cb3ab59f92f766395184696b8abe2e2ae08c7f4fcedcffa1854a0dde95ff511ff28e4359e52b93e61c7df1cb2f9fbf1024918439dcab56184ab98351f302758dc0f9c5e2e1da4f6c589779817307dc00ac340533b55a6786bb605d5ce285f3987bcba5b7d8fbd378be507d6ef5efaff152fdb1fd3746146c24e2f29806935b57c20c612ee4c6629804264c496d7b03273bd6510354f9e7ec66faee8f57b8")
recvfrom$l2tp6(r1, &(0x7f0000002b00)=""/241, 0xf1, 0x60, &(0x7f0000002c00)={0xa, 0x0, 0x0, @local}, 0x20)
setsockopt$sock_int(r9, 0x1, 0xc, &(0x7f0000002c40)=0x3, 0x4)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000002c80), &(0x7f0000002cc0)=0x4)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000002d00), &(0x7f0000002d40)=0x4)
ioctl$OCFS2_IOC_MOVE_EXT(r7, 0x40406f06, &(0x7f0000002d80)={0xffffffffffffffff, 0xfffffffffffffffc, 0xb2, 0x3e9})
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002dc0)={r10, 0x3}, 0x8)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000002f40)=0x1, 0x4)

1.920022897s ago: executing program 3 (id=4865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
unshare(0xe040400) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x80000006}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xa, 0xfffffffffffffedc, 0x0, 0x41000, 0x4d}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1000, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x2, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x3f55ca97280b0a2a, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x95) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x8, 0xd, 0x18, 0x6, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x20005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) (async)
r8 = socket$kcm(0x11, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r9, &(0x7f0000000140)={&(0x7f00000001c0)={0xa, 0x4e21, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r9], 0x28}, 0x4044804)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0}) (async)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

1.809219386s ago: executing program 4 (id=4866):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000004a00010200000000000000000a08"], 0x28}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000010) (rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000000340)={0x2, 0xfffd, @private=0xa010100}, 0x10) (async)
listen(r2, 0x8) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x9}, 0x8) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100005ff00000000100000000000004a", @ANYRES32=0x0, @ANYBLOB="20a00200000000801c0012800b00010062726964676500000c00028005002d0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x458c4}, 0x840) (rerun: 32)

1.808084036s ago: executing program 1 (id=4867):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7a}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x0, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x4000000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000540)=""/231, 0xe7, 0x0, &(0x7f0000000640)=""/195, 0xc3}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x0, @hyper}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000006180)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x6, @mcast1, 0xf9af}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
syz_emit_ethernet(0x21a, &(0x7f00000002c0)={@random="bd69dcae9c2f", @local, @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "549b22", 0x1e4, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, {[@hopopts={0x62, 0x0, '\x00', [@pad1]}, @hopopts={0x2c, 0xb, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x0, 0x6268, [0xf6a8, 0x3d6, 0x3, 0x6, 0xb5, 0x9, 0x0, 0x8000, 0xfffffffffffffffd]}}, @jumbo, @enc_lim={0x4, 0x1, 0x40}]}, @fragment={0x2b, 0x0, 0x7, 0x1, 0x0, 0x8, 0x65}, @dstopts={0x2f, 0xc, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0x5c, 0x7fff, [0x7ff, 0x8, 0x1, 0x48, 0x1, 0x2, 0x8, 0xffffffff80000000]}}, @generic={0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}]}, @dstopts={0xc, 0x4, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x3, 0x5, [0x800, 0xfffffffffffffff7, 0x9]}}]}, @dstopts={0xff, 0xa, '\x00', [@generic={0x0, 0x3f, "4b1be75db31e29a3d5195c28858d03d2e0bc7fdae5e7cde30bf4eb7d4bd527de156c895269e316d2ede48edf3c4ad0dfc16141d000990111be6cff1f63348b"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @routing={0x32, 0x2, 0x2, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x3c, 0x0, 0x3, 0x1, 0x0, 0x2, 0x66}], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xf, 0x0, 0x1, 0xf, 0x1, 0x2, 0x4e22, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x1}, [{0x1ea000, 0x5bd, 0x5, 0x8, 0x40000000, 0x40, 0x9, 0x9}]}}}}}}, &(0x7f0000000500)={0x1, 0x4, [0x61a, 0x4d, 0x11, 0x601]})
setsockopt$inet6_tcp_int(r3, 0x6, 0x2e, &(0x7f00000000c0)=0x5, 0x4)

1.806893952s ago: executing program 0 (id=4868):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20701, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000cb7900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700fe8000000000000000000000000000aa"], 0x48}}, 0x2000000)
epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x5)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040)

1.750494998s ago: executing program 2 (id=4869):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{<r1=>r0, &(0x7f0000000040)='\x00', 0x20100, &(0x7f0000000080)={@_ha_fsid={[0x89, 0x5]}, {0x85, 0x49d, 0x2, 0x4}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x46c5}, 0x2, &(0x7f0000000300)=[{0x3, 0x8, &(0x7f0000000180)='$#*+#\x00', &(0x7f00000001c0)="b26b7d4ca97e12232eee0707da89b261da57ccdcb1fb86cdaacce27038b7719fc1ed9deccf678631e13194ea359eb0ab1bc1a52cbb4194ae501ba7", 0x3b, 0x8}, {0x0, 0x7ff, &(0x7f0000000200)='\x00', &(0x7f0000000240)="5327d05d7974a9c0532009c0f987bb78e9b95d036eae079fece17af440009b0d30977215cd5181d1a93c6776a65283d5d348442caa0fa4d77b217bc0d64933576382a6721871cb1c105105be0cc4d80ecf7c3d8ef3a11860ae8bcc1b77538ad8f589542328d792055a82485c9d6ee0fd79aeb842ba97ae02ce42df5b8aade614129794912493b6315583bdc999ee989bf8347a6294", 0x95, 0x38}]})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=0x4)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000580)={r2, 0x1, 0x6, @multicast}, 0x10)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x1005}], 0x4, 0x40000102, 0x0)

1.590886447s ago: executing program 3 (id=4870):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1, 0x8}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, 0x0, &(0x7f0000000340)=""/85}, 0x38)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000080100001080000ff7f0000df2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x45, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8)
close(0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r13, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x400400c)
r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00032abd7000fddbdf2504000000060001007b00000008000c00ecff0000080002000300000008050000000000008000"/57], 0x50}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4)

1.587879605s ago: executing program 2 (id=4871):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xfffffff0}, @window={0x3, 0xff, 0x200}, @window={0x3, 0x40, 0x2}, @timestamp, @window={0x3, 0x2, 0x2}, @window={0x3, 0x8, 0x9}, @timestamp, @timestamp, @timestamp], 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x24000840)

1.53387954s ago: executing program 0 (id=4872):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000060000000000000007000000852000008340000095"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1}, 0x20)

1.436009229s ago: executing program 0 (id=4873):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0}, &(0x7f0000001540)=0x40)

1.423215602s ago: executing program 2 (id=4874):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffd}, 0x78)

1.12100828s ago: executing program 2 (id=4875):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000400000001400128009000100626f6e6400000000220002800a0001009b"], 0x40}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000300)={<r2=>r0, &(0x7f00000000c0)='\x00', 0x24003, &(0x7f0000000100)={@align=0x8, {0x8000, 0x9, 0x3, 0x3}}, 0x3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x1ff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x1, 0x4000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', <r6=>0x0, 0x40, 0x0, 0x7f, 0x0, {{0xe, 0x4, 0x0, 0x4, 0x38, 0x68, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x1d, 0x3, [{0x5, 0x2}, {0x7, 0xc, "20ad95aa60074f02dd05"}, {0x0, 0x3, "fe"}, {0x1, 0x6, "68a733a4"}]}, @end, @noop, @ra={0x94, 0x4}]}}}}})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x212}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r8, @ANYRES16=r4, @ANYBLOB="00022abd7000fcdbdf250f000000380001801400020269703665727370616e3000000000000008000100c8d70cde0bc7672e297e7c1e14b453d955d7f794f5824d93d30fd2c31e3ef5062043b94740a3e2bf42c65c65932c9cee73544779d2f06e5a8910c0766f1ae615d65600"/123, @ANYRES32=r6, @ANYBLOB="0800030002000000080003000100000008000300040000000c0001800800030001000000280001801400020076657468305f746f5f626f6e64000000080003000600000008000100", @ANYRES32=r8, @ANYRESOCT, @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="140002007866726d3000"/20], 0xc4}}, 0x810)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2aa, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
r14 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001b140100fcffffff0000000008004a0001000000080003000000000108004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
socket$inet(0x2, 0xa, 0x400)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
close(0x4)
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

1.01341268s ago: executing program 3 (id=4876):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x88b}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044008}, 0x404c000)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) (async)
setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r6, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80000001}, 0x1c)
sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) (async)
sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000540)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000001dc0)=""/208, 0xd0}], 0x2, &(0x7f0000000a40)=""/74, 0x4a}, 0xff}, {{&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000034c0)}, 0x3}], 0x3, 0x40002003, 0x0) (async)
recvmmsg(r6, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000540)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000001dc0)=""/208, 0xd0}], 0x2, &(0x7f0000000a40)=""/74, 0x4a}, 0xff}, {{&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000034c0)}, 0x3}], 0x3, 0x40002003, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "a4c51a4d1bc77a24", "245586e7cae61db3a53c3b701d5a3efe", "0a1ad2f4", "63fd2e1ecc22a424"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "a4c51a4d1bc77a24", "245586e7cae61db3a53c3b701d5a3efe", "0a1ad2f4", "63fd2e1ecc22a424"}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000673872172c0579d75c3f0fbb736da2c7e34fd20c3dea57212cac2ff3895683bb61376f10d76dbd5fc60127472bc6e9ae201737eda57a2d4d7a632041448247f4c280fad8e9b46cb3e6568e6806d8afc69bc777f77d54b10d9643f32dd49f31f74f"], 0x48) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000673872172c0579d75c3f0fbb736da2c7e34fd20c3dea57212cac2ff3895683bb61376f10d76dbd5fc60127472bc6e9ae201737eda57a2d4d7a632041448247f4c280fad8e9b46cb3e6568e6806d8afc69bc777f77d54b10d9643f32dd49f31f74f"], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
unshare(0x8040480)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x14}, 0x20)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, r7, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)
setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "3b4ab2c1144068b2", "963e11e0be5f9fd4fa47d22055202c7b", "9df00001", "b327c6e40e868fa2"}, 0x28)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write$nci(r9, &(0x7f00000007c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x1, 0x2, 0x1, 0x76, {{0x1, 0xdeb7, 0x6e, "b18a32b74762878cf24ad815697c4a291c16b54078ce1762cbc931ed15557e521783ce7dfbcda1c96d8772c8e4e3505b5752877e78f7647c86def883ae89c01bd1676d5d57517e272064c50b5fd1480c67584d363621504a7f1fa7a7f0d6fc2984cd7a60d86b48cd360b6c9524b6"}, {0x7, 0x1a84, 0x82, 0xff, 0x9, 0x77dc}}}, 0x82)

781.881525ms ago: executing program 2 (id=4877):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000000000001400010000000000000004000200040001"], 0x40}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r5, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000ad00fcff00000000bf91000000000000b702000001000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94)
ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000080)={'veth0_to_bond\x00', @ifru_hwaddr=@remote})

721.108311ms ago: executing program 4 (id=4878):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000100039040000000002000000000003e4", @ANYRES32=0x0, @ANYBLOB="a1620000000000005cb2ec0d822172b9791a9d392dbcaf36440173d0bff7d534b4e5429edb0d97bcfc"], 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000080000000000000000001200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000140000000000800024000000000a4000000160a0101000b000000000000010000000900010073797a3000000000040003800900020073797a31000000000900020073797a300000000068000380080001400000000008000140000063"], 0x12c}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, r1}, 0x18)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f00000003c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)

633.191278ms ago: executing program 1 (id=4879):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0x27, 0x28, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc8003200810018ca86ddc279d72b6882b986194d4748c6786766d67a055f1dcc", 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
unshare(0x68040000) (async)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008100300ac1414aa080006001f000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x110, 0x0, 0x148, 0x110, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff, 0x0, 'ip6erspan0\x00', 'lo\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'amanda\x00'}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffb}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x1, {0xd}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2, 0x7}, {0x2, 0x3}, {0x4, 0x4, 0x1}, 0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) (async)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000001140)="56336c62acc15780a4be2a5da305fa55be88e392c44cadded744ff08abab5e32b72199ae7163ee3ab9c1957644d0e420e83fe3c3dc99b2b1636eed50daa7d813d6edc5818cdf05dc661cdf4f3561b8e3d63e2212054ab9def50863324b610b90e6e6e9bd2a8b3f4ae6e8bc1809e163537f2a848e691d5dd8044af642b66e1c732ef13fc35514687616f6ebcfefaa74a1ecb1d43048cfa36b253eca2e2c10134f522e16f70ccfd79801dd22b871453dd1a34e5a93bfd3199c048306b88f3a4896bf98e8d266959fb12e0bfea8690e", 0xce}, {&(0x7f0000001240)="6e006aaa8e74cdda8e836d9206919590387dd13acf0a7c00c1a7eb2b7be510751b7415ec1f9e9ae5bed154e3683a94b76da37c63df26a553fcb287b8326b3f4db01bad25590e37d20fab988f803c5da60eb46f7e97a05e9ec7c641db57a9", 0x5e}, {&(0x7f00000012c0)="a54ca669dafcc3482c56e428a92811e6a1e4dd6495384d6ca3c8747044f98e9f7c6db500818d6bbecb57d54ec5741d1cd011f790c27cbf8540aa246d203be27261ae8fdb02b8ae26034a28748eba91c73a2f6627dfbd8dfc", 0x58}, {&(0x7f0000001340)="908c8d73b2f338c6422f6d10611e15f0e380415fa26408d6ff3c6881b6018ebc7c25f5fed6e73061d7ab5ca8d2d293ad126488c47ad77696b39856a9cb1b21a7787681b8bc4500945768ffa6635ae6141af170997a0b4ef83cda33c1c9523112c3ec2f350c90b2da152bde4e0a3523bd7a4d5f4b9a622da2757c881f7017ae1ada59f0bc89940bebd660e74297910b51ec3321ac86a504c127e723507963f76da3471a4f50a2ccb15059bf5ae18188a85eded9bae6e326eed80947f65313514c0cd27675c7f2928c74c364df308e757fd03e9b2dfb01292f0c80254b951b6f5dcfa483fc01af955da46f9ac0be8eec55839fd75c7b21", 0xf6}, {&(0x7f0000001440)="15bc79439d481a0d9477fa758b16c919d8422b7a4d63d9cea3637b39338018cc1e9689efb15476a9c7568082b469528fde3271e4e94cefc70c0cdce79411bba022914465eadc751065e3b248094193f38c9da19f0ed190c4eca573f7809a15fcce7ef69133499188bbdd216dab541e9ba800728bf77f4125123f5d4b049c81b1ad2cbc71c3a668fa4bf1ada52d2201bb12810b2628a7e862701988a55cfba08a888ff2413ffb1ab7509290acf0509236f5c1b2d4e7f5fefe39d853cd21dd9cbccc598101cdad038e6e53f52efccf468d73ef06c7a8f7ba87a08ae418445572b219176092b747a8ea0f8b4b48a827823d445335f72eaaef992d4b92b1702d2cfe030d6187006943ffc8a42f02c8c73ced7ad804a69a", 0x115}], 0x6, 0x0, 0x0, 0x2c}, 0x44004)

489.115927ms ago: executing program 4 (id=4880):
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000e5ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000280), &(0x7f00000004c0)=@udp=r1}, 0x7c)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x2017be01})
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
socket$inet6(0xa, 0x3, 0x87)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYRES16=r2], 0x0, 0x5879, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f11, '\x00', 0x0, 0x2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000180))
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r5, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x20})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0xd0, 0x2c, 0xc3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xe, 0x9}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xa0, 0x2, [@TCA_BASIC_EMATCHES={0x9c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x8c, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x60, 0x5, "8ab6b717ee90cffe21365c8d25b5b5b33e9e7eaeb6ced90e0a3dcf8443f604d1db63964fc4b0cf78cde229275747da55713f1dae41c6f3cc8273a701844ec86e9a1a307ba1d88f585f7bac7e4318965ecf2fd9c6f5bb4312cc169d4d"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x80)
bind$x25(r5, &(0x7f0000000080), 0x12)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xac, 0x5})
connect$x25(r5, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)

477.810282ms ago: executing program 0 (id=4881):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x5, &(0x7f0000000440)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x33, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x1, 0x3, 0x6}], 0x10, 0x3ff}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0))
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000}, 0x7e)
syz_emit_ethernet(0x99, &(0x7f00000009c0)={@remote, @broadcast, @val={@void, {0x8100, 0x2}}, {@x25={0x805, {0x2, 0x9, 0x1, "350418961cdb6978ea517c9170b780d9b3f76ef5805a13ea9c96061e99edb01a623aac97715b7a34d3c4fe7fd72097bc93fc5df619bf7e4b29eb15d037f2f14d329f945d8b5f4e81db0998235b41d603d1f2e3738c38d7c78b632e33024ab7eca79486d1852c701c4f6067d20c1090cb78341cdddaa61ff56211c786491573584bb9c95c"}}}}, &(0x7f0000000a80)={0x0, 0x4, [0x3e6, 0xeab, 0xda, 0xaca]})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4)
sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x1000000, 0xffffffff, 0x228, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x228, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x2ba810b9, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x7}, {0xffffffffffffffff}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x8, 0xa, [0x0, 0x3b, 0x3f, 0x5, 0x35, 0x35, 0x1b, 0x2, 0x3d, 0x0, 0x18, 0x3b, 0x13, 0x26, 0x17, 0x3b], 0x0, 0x0, 0xbde9}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0x3, 0x4, 0x2c7, 0x80000001, 0x1, 0x2, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50)
r13 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0003"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r12, &(0x7f0000000100)="090ab0ed7146f788ba57ea4be0eac4f53c5f227e3ce2468af2e3e81f347f6a7b60eeb96344ee530fedb914d582bea01aba66e0753ac70d99d2af05998b2e852e1147280363418e233a083749d9c3176dc64d1408e9db37065baa89084cbbdad49b601bb5d144f3b3970f0fe50f19e9b2880ff54e94cc459696f7cd5fe50ee8201e49caf4230aa52945141e7e4a82672798d4aac9437f788525b7c312659fc43442b9bd3ee66fe36da5f4ebed81e11c3a49aeb93d22b8"}, 0x20)
sendmsg$nl_generic(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="441000002f00090025bd7000000000000400000008000c0002000000261016"], 0x1044}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040)

183.653228ms ago: executing program 2 (id=4882):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000005e00250e00200000000000000c00008008ebfe33234b2b886319a902350800000004300001"], 0x20}], 0x1}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000005"], 0x10}}], 0x1, 0x2000c010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804)

0s ago: executing program 3 (id=4883):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff", @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000070900010073797a30000000002c000013030a01020000000000000000010000000900010073797a300000000009000000060a010400000000000000000100000008000b40000000004c000480340001800b000100657874686472000024000280080001400000000c080003400000007a08000440000000220500020089000000140001800c000100626974776973650004000280140000001100010000000000000000000700000a0000000000000000000000000e1d"], 0xdc}}, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000018000180140002007665746830000000000002000000000014000380040003800700"], 0x40}}, 0x4040004) (async)
close(r2)
sendfile(r2, r1, 0x0, 0xf03a0005) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0}, 0x60) (async)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="7a4f1eca3c253ca35f94dedb6132fc7387", 0x11}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x17, &(0x7f0000001140)=@sack_info={0x0, 0xef, 0x6}, 0xc)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000004c0)={0x0, 0x7cd, 0x3, 0x80000001, 0x0, 0x2000005}, &(0x7f0000000040)=0x14) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRES8], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async)
accept4(r10, 0x0, 0x0, 0x800) (async)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

.866436][T16525] tipc: Node number set to 1
[  540.177218][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177254][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177277][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177300][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177322][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177345][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177367][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177406][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177428][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177451][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177473][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177495][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177517][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177539][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177561][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177582][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177636][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177658][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177680][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177702][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177730][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177752][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177774][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177796][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177818][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177840][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177862][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177883][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177905][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177927][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177949][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177971][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.177993][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178014][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178036][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178057][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178080][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178101][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178124][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178146][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178168][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178190][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178211][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178232][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178254][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178276][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178298][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178319][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178341][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178363][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178386][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178407][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.178428][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.179009][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.179037][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.179059][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.179082][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.179104][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.179126][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.179157][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.181541][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.181571][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.181594][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.181616][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.181639][T21051] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  540.227054][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'.
[  540.716867][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'.
[  540.716891][T21069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3432'.
[  540.777723][T21067] ip_tables: iptables: counters copy to user failed while replacing table
[  541.420676][T21098] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  541.639615][T21112] netlink: 'syz.1.3443': attribute type 16 has an invalid length.
[  541.639637][T21112] netlink: 'syz.1.3443': attribute type 17 has an invalid length.
[  541.744755][T21114] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  541.762683][T21114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3444'.
[  541.880393][T21112] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  541.914231][T21112] ip6gretap1: left allmulticast mode
[  541.930975][T21112] netdevsim netdevsim1 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  541.933630][T21112] 8021q: adding VLAN 0 to HW filter on device eth0
[  541.958337][T21112] netdevsim netdevsim1 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  541.959636][T21112] 8021q: adding VLAN 0 to HW filter on device eth1
[  541.961870][T21112] netdevsim netdevsim1 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  541.963099][T21112] 8021q: adding VLAN 0 to HW filter on device eth2
[  541.964795][T21112] netdevsim netdevsim1 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  542.010513][T21112] 8021q: adding VLAN 0 to HW filter on device eth3
[  542.014781][T21112] hsr1: left allmulticast mode
[  542.014803][T21112] erspan0: left allmulticast mode
[  542.030908][T21112] 8021q: adding VLAN 0 to HW filter on device bond1
[  542.042668][ T5713] wg2 speed is unknown, defaulting to 1000
[  542.059570][T21119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  542.333857][T21125] netlink: 'syz.1.3447': attribute type 4 has an invalid length.
[  542.371719][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'.
[  542.657820][T21138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  542.659557][T21140] syzkaller0: entered promiscuous mode
[  542.659578][T21140] syzkaller0: entered allmulticast mode
[  542.766663][T21148] tipc: Resetting bearer <eth:syzkaller0>
[  542.776786][T21137] tipc: Resetting bearer <eth:syzkaller0>
[  542.846794][T21137] tipc: Disabling bearer <eth:syzkaller0>
[  542.885582][T21154] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3452'.
[  543.414865][T21173] ip_tables: iptables: counters copy to user failed while replacing table
[  543.750164][T21186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3462'.
[  544.001131][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'.
[  544.001156][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'.
[  544.025441][T21192] netlink: 'syz.2.3463': attribute type 2 has an invalid length.
[  544.081653][T21195] Bluetooth: MGMT ver 1.23
[  544.339723][T21209] ip_tables: iptables: counters copy to user failed while replacing table
[  544.784947][T21229] batman_adv: batadv0: Adding interface: veth0
[  544.784965][T21229] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.784991][T21229] batman_adv: batadv0: Interface activated: veth0
[  544.798391][T21229] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.798414][T21229] batman_adv: batadv0: Removing interface: batadv_slave_0
[  544.854682][T21229] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  544.854704][T21229] batman_adv: batadv0: Removing interface: batadv_slave_1
[  544.883153][T21229] batman_adv: batadv0: Interface deactivated: veth0
[  544.883174][T21229] batman_adv: batadv0: Removing interface: veth0
[  545.210543][T21256] __nla_validate_parse: 3 callbacks suppressed
[  545.210566][T21256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3479'.
[  545.415551][T21267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3481'.
[  545.415574][T21267] tipc: Invalid UDP bearer configuration
[  545.415614][T21267] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  545.740356][T21283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3486'.
[  545.915792][T21285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3487'.
[  545.915824][T21285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3487'.
[  546.126616][T21302] netlink: 'syz.0.3490': attribute type 15 has an invalid length.
[  546.255016][T21302] netlink: 'syz.0.3490': attribute type 15 has an invalid length.
[  546.350286][T10318] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  546.350333][T10318] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  546.350365][T10318] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  546.350396][T10318] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  546.560279][T21318] wg2 speed is unknown, defaulting to 1000
[  546.560815][T21314] netlink: 'syz.0.3497': attribute type 2 has an invalid length.
[  546.561073][T21315] netlink: 'syz.0.3497': attribute type 2 has an invalid length.
[  546.568040][T21314] netlink: 'syz.0.3497': attribute type 1 has an invalid length.
[  546.569395][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3497'.
[  546.569424][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3497'.
[  547.070108][T21318] wg2 speed is unknown, defaulting to 1000
[  547.265592][T21343] batadv_slave_1: entered promiscuous mode
[  547.265616][T21343] batadv_slave_1: entered allmulticast mode
[  547.499114][T21353] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  548.187734][T21377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  548.529114][T21388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3511'.
[  548.529848][T21392] netlink: 'syz.0.3511': attribute type 2 has an invalid length.
[  548.531502][T21388] netlink: 'syz.0.3511': attribute type 2 has an invalid length.
[  548.567032][ T4933] Bluetooth: hci0: command 0x0405 tx timeout
[  548.589605][T21392] : entered promiscuous mode
[  549.494126][T21435] netlink: 'syz.4.3522': attribute type 10 has an invalid length.
[  549.494149][T21435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3522'.
[  549.494285][T21435] dummy0: entered promiscuous mode
[  549.494599][T21435] bridge0: port 3(dummy0) entered blocking state
[  549.494711][T21435] bridge0: port 3(dummy0) entered disabled state
[  549.494873][T21435] dummy0: entered allmulticast mode
[  549.554307][T21435] bridge0: port 3(dummy0) entered blocking state
[  549.554427][T21435] bridge0: port 3(dummy0) entered forwarding state
[  549.731826][ T5713] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  549.733221][T21435] macsec1: entered promiscuous mode
[  549.733414][T21435] macsec1: entered allmulticast mode
[  549.733432][T21435] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  549.740517][T21435] 8021q: adding VLAN 0 to HW filter on device macsec1
[  549.824452][T21434] wg2 speed is unknown, defaulting to 1000
[  550.112072][T21456] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  550.113044][T21456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3525'.
[  550.345888][T21461] ip_tables: iptables: counters copy to user failed while replacing table
[  550.386678][T21434] wg2 speed is unknown, defaulting to 1000
[  550.708797][T21474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3531'.
[  550.710882][T21474] ip_tables: iptables: counters copy to user failed while replacing table
[  550.725053][T21475] netlink: 'syz.1.3530': attribute type 1 has an invalid length.
[  550.961168][T21479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3533'.
[  550.985439][T21482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3534'.
[  550.996176][T21482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3534'.
[  550.996366][T21482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3534'.
[  550.996562][T21482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3534'.
[  550.996731][T21482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3534'.
[  550.996903][T21482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3534'.
[  550.997064][T21482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3534'.
[  550.997225][T21482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3534'.
[  551.146178][T21489] netlink: NAT attribute has 2 unknown bytes
[  551.146230][T21489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  551.181797][T21489] ipt_ECN: cannot use operation on non-tcp rule
[  552.550357][T21551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  552.638110][ T5776] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  552.709145][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  553.170293][T21561] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  553.170318][T21561] batman_adv: batadv0: Removing interface: ip6gretap1
[  553.255891][ T1677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  553.767418][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  553.767665][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  553.875060][T21601] block nbd0: reconnected socket
[  553.875080][T21601] nbd: socks must be embedded in a SOCK_ITEM attr
[  553.896687][T21601] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  553.920671][T21577] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  554.021647][ T5713] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  554.108449][ T5616] block nbd0: Receive control failed (result -32)
[  554.353283][T21617] syzkaller0: entered promiscuous mode
[  554.353305][T21617] syzkaller0: entered allmulticast mode
[  554.933679][T21619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.258378][T21661] netlink: 'syz.0.3577': attribute type 1 has an invalid length.
[  555.374697][T21661] bond1: (slave veth0_to_bond): making interface the new active one
[  555.394736][T21661] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  555.459993][T21669] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  555.480998][T21671] netlink: 'syz.4.3580': attribute type 1 has an invalid length.
[  555.979190][T21699] syzkaller0: entered promiscuous mode
[  555.979212][T21699] syzkaller0: entered allmulticast mode
[  556.003362][T21699] tipc: Started in network mode
[  556.003391][T21699] tipc: Node identity 82b4a9afeac, cluster identity 4711
[  556.026870][T21699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.075538][T21699] tipc: Resetting bearer <eth:syzkaller0>
[  556.100181][T21697] tipc: Resetting bearer <eth:syzkaller0>
[  556.151151][T21697] tipc: Disabling bearer <eth:syzkaller0>
[  556.336931][T21715] syzkaller0: entered promiscuous mode
[  556.336955][T21715] syzkaller0: entered allmulticast mode
[  556.339590][T21727] netlink: 'syz.4.3595': attribute type 1 has an invalid length.
[  556.376658][T21727] bond2: entered promiscuous mode
[  556.377036][T21727] 8021q: adding VLAN 0 to HW filter on device bond2
[  556.523725][T21736] __nla_validate_parse: 28 callbacks suppressed
[  556.523745][T21736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3596'.
[  557.614462][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  559.111546][T21732] veth7: entered allmulticast mode
[  559.337364][T21746] wg2 speed is unknown, defaulting to 1000
[  559.468695][T21756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3600'.
[  559.475082][T21758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3602'.
[  559.552172][T21758] 8021q: adding VLAN 0 to HW filter on device bond3
[  559.554804][T21756] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.555149][T21756] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.611944][T21764] macvtap1: entered allmulticast mode
[  559.612536][T21756] netlink: 'syz.2.3600': attribute type 1 has an invalid length.
[  559.659026][T21758] bond3: (slave sit1): refused to change device type
[  559.735440][T21765] gretap1: entered allmulticast mode
[  559.899197][T21773] ip_tables: iptables: counters copy to user failed while replacing table
[  560.050521][T21750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3599'.
[  560.069674][T21786] ip_tables: iptables: counters copy to user failed while replacing table
[  560.143065][T21789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'.
[  560.195981][T21782] macsec0: entered promiscuous mode
[  560.197144][T21792] ip6tnl0: entered promiscuous mode
[  560.220752][T21789] Bluetooth: hci0: unsupported parameter 5135
[  560.220774][T21789] Bluetooth: hci0: unsupported parameter 8192
[  560.220786][T21789] Bluetooth: hci0: unsupported parameter 5135
[  560.220798][T21789] Bluetooth: hci0: unsupported parameter 8192
[  560.272117][T21746] wg2 speed is unknown, defaulting to 1000
[  560.317469][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3599'.
[  560.318636][T21750] veth1_macvtap: left promiscuous mode
[  560.355322][T21750] macsec0 (unregistering): left promiscuous mode
[  560.862437][T21815] netlink: 'syz.0.3614': attribute type 29 has an invalid length.
[  560.862457][T21815] netlink: 'syz.0.3614': attribute type 31 has an invalid length.
[  560.893773][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'.
[  561.380822][T21839] nbd: must specify a device to reconfigure
[  561.588819][T21849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3621'.
[  562.252947][T21881] nbd: must specify a device to reconfigure
[  562.350497][T21881] Bluetooth: hci0: unsupported parameter 5135
[  562.350521][T21881] Bluetooth: hci0: invalid len left 4, exp >= 20
[  562.532092][T21886] x_tables: duplicate underflow at hook 1
[  563.130996][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'.
[  563.138746][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'.
[  563.865128][T21922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3641'.
[  563.951081][T21922] netlink: 'syz.3.3641': attribute type 83 has an invalid length.
[  564.029080][T21927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3643'.
[  564.053056][T21932] ip6erspan0: entered allmulticast mode
[  564.072090][T21927] netlink: 'syz.0.3643': attribute type 1 has an invalid length.
[  564.072111][T21927] netlink: 'syz.0.3643': attribute type 2 has an invalid length.
[  564.093620][T21927] netlink: 'syz.0.3643': attribute type 1 has an invalid length.
[  564.093640][T21927] netlink: 'syz.0.3643': attribute type 2 has an invalid length.
[  564.264492][T21932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3644'.
[  564.570872][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'.
[  564.570895][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'.
[  564.888672][ T5616] Bluetooth: hci5: command 0x0406 tx timeout
[  565.322964][T22000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3662'.
[  565.365663][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  565.632160][T22017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3667'.
[  566.321590][T22052] bond2: option xmit_hash_policy: invalid value (10)
[  566.338595][T22052] bond2 (unregistering): Released all slaves
[  566.749509][T22065] __nla_validate_parse: 34 callbacks suppressed
[  566.749529][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'.
[  566.751336][T22065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3674'.
[  566.895139][T22072] syzkaller0: entered promiscuous mode
[  566.895160][T22072] syzkaller0: entered allmulticast mode
[  567.106634][T16525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  567.121786][T22079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3678'.
[  567.273763][T22088] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3681'.
[  567.285230][T22087] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3681'.
[  567.309059][T22088] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3681'.
[  567.309258][T22088] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3681'.
[  567.309416][T22088] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3681'.
[  567.309565][T22088] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3681'.
[  567.309707][T22088] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3681'.
[  567.701042][T22119] lo: entered allmulticast mode
[  567.740531][T22105] wg2 speed is unknown, defaulting to 1000
[  567.938153][ T5713] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  567.995430][T22121] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5
[  568.033051][T22127] ipvlan4: entered promiscuous mode
[  568.047601][T22127] team0: Device ipvlan4 failed to register rx_handler
[  568.244535][   T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  568.352086][T22105] wg2 speed is unknown, defaulting to 1000
[  568.375150][T22135] xt_hashlimit: size too large, truncated to 1048576
[  568.412895][T22136] 
@0�: renamed from bond_slave_1 (while UP)
[  568.611717][T22141] macvlan0: entered promiscuous mode
[  569.286252][ T7162] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  569.286505][ T7162] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  569.477592][T22171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  569.478169][T22172] syzkaller0: entered promiscuous mode
[  569.478186][T22172] syzkaller0: entered allmulticast mode
[  569.553099][T22174] tipc: Resetting bearer <eth:syzkaller0>
[  569.583071][    C0] vcan0: j1939_tp_rxtimer: 0xffff888077c53c00: rx timeout, send abort
[  569.734721][T22170] tipc: Resetting bearer <eth:syzkaller0>
[  569.775404][T22170] tipc: Disabling bearer <eth:syzkaller0>
[  569.854461][  T695] block nbd1: Possible stuck request ffff888026bbe000: control (read@0,1024B). Runtime 210 seconds
[  569.854503][  T695] block nbd1: Possible stuck request ffff888026bbe1c0: control (read@1024,3072B). Runtime 210 seconds
[  569.902580][T22184] dvmrp8: entered allmulticast mode
[  570.083319][    C0] vcan0: j1939_tp_rxtimer: 0xffff888077c53000: rx timeout, send abort
[  570.084901][    C0] vcan0: j1939_tp_rxtimer: 0xffff888077c53c00: abort rx timeout. Force session deactivation
[  570.166996][ T5876] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  570.319341][T22199] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  570.319374][T22199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  570.537075][T22212] : entered promiscuous mode
[  570.537101][T22212] : entered allmulticast mode
[  570.583470][    C0] vcan0: j1939_tp_rxtimer: 0xffff888077c53000: abort rx timeout. Force session deactivation
[  571.247523][T22238] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  571.302655][T22238] x_tables: duplicate underflow at hook 1
[  571.354737][T22238] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  571.633264][T22258] netlink: 'syz.4.3727': attribute type 1 has an invalid length.
[  572.201546][T22276] syzkaller0: entered promiscuous mode
[  572.201569][T22276] syzkaller0: entered allmulticast mode
[  572.217562][T22276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  573.046772][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  573.110032][T22279] tipc: Resetting bearer <eth:syzkaller0>
[  573.241519][T22275] tipc: Resetting bearer <eth:syzkaller0>
[  573.364545][T22275] tipc: Disabling bearer <eth:syzkaller0>
[  573.406028][T22297] ip_tables: iptables: counters copy to user failed while replacing table
[  573.481891][T16530] tipc: Node number set to 4029384113
[  573.584114][T22312] __nla_validate_parse: 84 callbacks suppressed
[  573.584134][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3740'.
[  573.645848][T22311] syz.0.3739: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  573.645915][T22311] CPU: 0 UID: 0 PID: 22311 Comm: syz.0.3739 Not tainted syzkaller #0 PREEMPT(full) 
[  573.645937][T22311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  573.645950][T22311] Call Trace:
[  573.645958][T22311]  <TASK>
[  573.645968][T22311]  dump_stack_lvl+0xe8/0x150
[  573.646004][T22311]  warn_alloc+0x24d/0x270
[  573.646026][T22311]  ? kasan_save_track+0x4f/0x80
[  573.646047][T22311]  ? kasan_save_track+0x3e/0x80
[  573.646070][T22311]  ? __pfx_warn_alloc+0x10/0x10
[  573.646087][T22311]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  573.646124][T22311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.646168][T22311]  __vmalloc_node_range_noprof+0x127/0x1540
[  573.646220][T22311]  ? rcu_is_watching+0x16/0xb0
[  573.646250][T22311]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  573.646279][T22311]  ? __kmalloc_cache_noprof+0x321/0x600
[  573.646300][T22311]  ? __kmalloc_cache_noprof+0x14d/0x600
[  573.646319][T22311]  ? xskq_create+0x56/0x220
[  573.646350][T22311]  xskq_create+0x148/0x220
[  573.646373][T22311]  ? xsk_init_queue+0x8a/0xe0
[  573.646399][T22311]  xsk_init_queue+0x8a/0xe0
[  573.646425][T22311]  xsk_setsockopt+0x52a/0x960
[  573.646451][T22311]  ? __pfx_xsk_setsockopt+0x10/0x10
[  573.646473][T22311]  ? __pfx_aa_sk_perm+0x10/0x10
[  573.646510][T22311]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  573.646535][T22311]  ? __pfx_xsk_setsockopt+0x10/0x10
[  573.646560][T22311]  do_sock_setsockopt+0x17c/0x1b0
[  573.646590][T22311]  __x64_sys_setsockopt+0x13d/0x1b0
[  573.646620][T22311]  do_syscall_64+0x166/0x520
[  573.646647][T22311]  ? trace_irq_disable+0x3b/0x140
[  573.646666][T22311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.646687][T22311]  ? clear_bhb_loop+0x70/0xc0
[  573.646711][T22311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.646730][T22311] RIP: 0033:0x7f8a9359e159
[  573.646748][T22311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.646764][T22311] RSP: 002b:00007f8a94426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  573.646784][T22311] RAX: ffffffffffffffda RBX: 00007f8a93825fa0 RCX: 00007f8a9359e159
[  573.646799][T22311] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  573.646811][T22311] RBP: 00007f8a9363506b R08: 0000000000000004 R09: 0000000000000000
[  573.646823][T22311] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  573.646836][T22311] R13: 00007f8a93826038 R14: 00007f8a93825fa0 R15: 00007ffd7efaa128
[  573.646869][T22311]  </TASK>
[  573.646912][T22311] Mem-Info:
[  573.646922][T22311] active_anon:10154 inactive_anon:0 isolated_anon:0
[  573.646922][T22311]  active_file:0 inactive_file:43764 isolated_file:0
[  573.646922][T22311]  unevictable:0 dirty:220 writeback:0
[  573.646922][T22311]  slab_reclaimable:11927 slab_unreclaimable:119487
[  573.646922][T22311]  mapped:29791 shmem:556 pagetables:1337
[  573.646922][T22311]  sec_pagetables:0 bounce:0
[  573.646922][T22311]  kernel_misc_reclaimable:0
[  573.646922][T22311]  free:1292272 free_pcp:11881 free_cma:0
[  573.705690][T22311] Node 0 active_anon:40616kB inactive_anon:0kB active_file:0kB inactive_file:174864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119164kB dirty:880kB writeback:0kB shmem:2224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15160kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  573.705749][T22311] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  573.705798][T22311] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  573.705851][T22311] lowmem_reserve[]: 0 2487 2487 2487 2487
[  573.705885][T22311] Node 0 DMA32 free:1217672kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40616kB inactive_anon:0kB active_file:0kB inactive_file:174864kB unevictable:0kB writepending:880kB zspages:0kB present:3129332kB managed:2546840kB mlocked:0kB bounce:0kB free_pcp:46656kB local_pcp:21676kB free_cma:0kB
[  573.705940][T22311] lowmem_reserve[]: 0 0 0 0 0
[  573.705973][T22311] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  573.706022][T22311] lowmem_reserve[]: 0 0 0 0 0
[  573.706055][T22311] Node 1 Normal free:3936056kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  573.706120][T22311] lowmem_reserve[]: 0 0 0 0 0
[  573.706153][T22311] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  573.706262][T22311] Node 0 DMA32: 626*4kB (UME) 1266*8kB (UE) 1067*16kB (UE) 1916*32kB (UM) 836*64kB (UME) 154*128kB (UM) 87*256kB (UME) 44*512kB (UME) 19*1024kB (UME) 9*2048kB (UME) 237*4096kB (UM) = 1217672kB
[  573.706411][T22311] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  573.706501][T22311] Node 1 Normal: 2*4kB (M) 4*8kB (UM) 9*16kB (UM) 6*32kB (UM) 5*64kB (UM) 3*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936056kB
[  573.706644][T22311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  573.706661][T22311] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  573.706677][T22311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  573.706693][T22311] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  573.706707][T22311] 44316 total pagecache pages
[  573.706716][T22311] 0 pages in swap cache
[  573.706723][T22311] Free swap  = 124996kB
[  573.706730][T22311] Total swap = 124996kB
[  573.706738][T22311] 2097051 pages RAM
[  573.706745][T22311] 0 pages HighMem/MovableOnly
[  573.706752][T22311] 428725 pages reserved
[  573.706759][T22311] 0 pages cma reserved
[  573.726275][T22318] netlink: 'syz.3.3742': attribute type 30 has an invalid length.
[  573.726297][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3742'.
[  577.121897][T22333] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3745'.
[  577.122317][T22333] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3745'.
[  577.223284][T22344] bond2: ARP target 9.0.0.0 is already present
[  577.223308][T22344] bond2: option arp_ip_target: invalid value (9)
[  577.243569][T22344] bond2 (unregistering): Released all slaves
[  577.301514][T22363] syzkaller0: entered promiscuous mode
[  577.301536][T22363] syzkaller0: entered allmulticast mode
[  577.324495][T22363] tipc: Started in network mode
[  577.324523][T22363] tipc: Node identity fa5a2ca8c3cf, cluster identity 4711
[  577.324763][T22363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  577.396734][T22363] tipc: Resetting bearer <eth:syzkaller0>
[  577.427808][T22361] tipc: Resetting bearer <eth:syzkaller0>
[  577.510685][T22361] tipc: Disabling bearer <eth:syzkaller0>
[  577.559031][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'.
[  577.568936][T22377] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  577.569119][T22378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3757'.
[  577.587860][T22381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3756'.
[  577.628984][T22376] dvmrp8: left allmulticast mode
[  578.093795][T22405] syzkaller0: entered promiscuous mode
[  578.094776][T22405] syzkaller0: entered allmulticast mode
[  578.138591][T22407] tipc: Started in network mode
[  578.138618][T22407] tipc: Node identity 52481576c1da, cluster identity 4711
[  578.138765][T22407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  578.253355][T22406] tipc: Disabling bearer <eth:syzkaller0>
[  578.267004][T22415] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  578.519898][T22428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3769'.
[  578.694997][T22437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3772'.
[  578.709829][T22437] netlink: 'syz.2.3772': attribute type 4 has an invalid length.
[  578.709848][T22437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3772'.
[  578.957391][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3774'.
[  579.201380][T22451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3777'.
[  579.202580][T22451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3777'.
[  579.480343][T22470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'.
[  580.245762][ T4933] Bluetooth: hci1: command 0x0406 tx timeout
[  580.725726][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  580.725759][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  581.023276][T22487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3783'.
[  582.322412][T22459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  582.491958][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3785'.
[  582.618726][T22499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3787'.
[  582.670015][T22501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3788'.
[  582.762924][T22506] netlink: 'syz.0.3790': attribute type 1 has an invalid length.
[  582.865297][T22506] bond2: entered promiscuous mode
[  582.866915][T22506] 8021q: adding VLAN 0 to HW filter on device bond2
[  582.928279][T22506] bond2: (slave bridge2): making interface the new active one
[  582.928302][T22506] bridge2: entered promiscuous mode
[  582.930229][T22506] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  583.048244][T22521] 8021q: adding VLAN 0 to HW filter on device bond3
[  583.072016][T22521] macvtap1: entered allmulticast mode
[  583.099769][T22521] bond3: (slave sit1): refused to change device type
[  583.817894][T22562] pim6reg1: entered promiscuous mode
[  583.817916][T22562] pim6reg1: entered allmulticast mode
[  583.839538][T22562] netlink: 'syz.3.3802': attribute type 30 has an invalid length.
[  584.130818][T22560] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[  584.130851][T22560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.153568][T22574] __nla_validate_parse: 52 callbacks suppressed
[  584.153590][T22574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3805'.
[  584.411110][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3806'.
[  584.524236][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3810'.
[  584.667068][T22597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3813'.
[  584.671215][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'.
[  584.757174][T22601] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3815'.
[  584.913745][T22607] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3818'.
[  584.932934][T22607] netlink: 'syz.1.3818': attribute type 1 has an invalid length.
[  584.985947][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'.
[  585.308966][T22628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3823'.
[  585.333743][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3824'.
[  585.334554][T22628] syzkaller1: entered promiscuous mode
[  585.334573][T22628] syzkaller1: entered allmulticast mode
[  585.372875][T22631] tipc: Failed to remove unknown binding: 66,0,0/0:3914809550/3914809552
[  585.372907][T22631] tipc: Failed to remove unknown binding: 66,0,0/0:3914809550/3914809551
[  585.373208][T22631] tipc: Failed to remove unknown binding: 66,0,0/0:3914809550/3914809552
[  585.373231][T22631] tipc: Failed to remove unknown binding: 66,0,0/0:3914809550/3914809551
[  585.793976][T22646] netlink: 'syz.0.3829': attribute type 39 has an invalid length.
[  586.035070][T22652] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  586.289834][T22664] syzkaller0: entered promiscuous mode
[  586.289857][T22664] syzkaller0: entered allmulticast mode
[  586.331170][T22664] syzkaller0: left promiscuous mode
[  586.331193][T22664] syzkaller0: left allmulticast mode
[  586.539641][T22674] erspan1: entered promiscuous mode
[  586.863844][T22693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  588.833008][T22750] Bluetooth: hci0: invalid length 0, exp 2 for type 19
[  589.088302][T22769] SET target dimension over the limit!
[  589.094225][T22771] sctp: [Deprecated]: syz.3.3869 (pid 22771) Use of int in maxseg socket option.
[  589.094225][T22771] Use struct sctp_assoc_value instead
[  589.719361][T22799] __nla_validate_parse: 17 callbacks suppressed
[  589.719380][T22799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3875'.
[  589.722216][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3875'.
[  590.286986][T22819] bond4: entered promiscuous mode
[  590.287049][T22819] bond4: entered allmulticast mode
[  590.287412][T22819] 8021q: adding VLAN 0 to HW filter on device bond4
[  590.328742][T22820] bond5: entered promiscuous mode
[  590.328768][T22820] bond5: entered allmulticast mode
[  590.329169][T22820] 8021q: adding VLAN 0 to HW filter on device bond5
[  590.485241][T22800] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  590.496339][ T4933] Bluetooth: hci4: command 0x0405 tx timeout
[  590.554205][T22839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3887'.
[  590.593729][T22838] netlink: 1200 bytes leftover after parsing attributes in process `syz.0.3886'.
[  590.593805][T22838] netlink: 1200 bytes leftover after parsing attributes in process `syz.0.3886'.
[  590.647954][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3887'.
[  590.933667][T22863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3893'.
[  591.015298][T22857] bridge1: entered promiscuous mode
[  591.015321][T22857] bridge1: entered allmulticast mode
[  591.047630][T22857] team0: Port device bridge1 added
[  591.120273][T22870] xt_hashlimit: max too large, truncated to 1048576
[  591.120412][T22870] xt_hashlimit: overflow, try lower: 0/0
[  591.190104][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'.
[  591.262496][T22879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  591.276008][T22876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'.
[  591.348489][T22871] hsr_slave_1 (unregistering): left promiscuous mode
[  591.577503][T22892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3902'.
[  591.692451][T22896] netlink: 'syz.0.3903': attribute type 11 has an invalid length.
[  591.693500][T22896] netlink: 'syz.0.3903': attribute type 11 has an invalid length.
[  591.834207][T22899] 8021q: adding VLAN 0 to HW filter on device bond7
[  591.844911][T22899] team0: Port device bond7 added
[  592.291826][T22929] netlink: 'syz.3.3911': attribute type 2 has an invalid length.
[  592.402311][T22929] netlink: 'syz.3.3911': attribute type 10 has an invalid length.
[  592.468506][T22929] team0: Port device dummy0 added
[  592.777286][T22945] macsec2: entered promiscuous mode
[  592.919711][T22946] macsec2: entered promiscuous mode
[  593.287549][T22977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.989511][T23003] netlink: 'syz.1.3934': attribute type 11 has an invalid length.
[  594.072137][T22999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.227850][T23013] debugfs: '.�P��'�G!DE�S�' already exists in 'ieee80211'
[  594.252112][T22979] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  594.300618][T23021] ip6tnl0: left promiscuous mode
[  594.393899][T23021] macsec1: left promiscuous mode
[  594.403850][T23021] 8021q: adding VLAN 0 to HW filter on device bond1
[  594.404410][T23021] bond2: left promiscuous mode
[  594.421756][T23021] bond3: entered allmulticast mode
[  594.428823][T23021] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  594.432231][T23021] 8021q: adding VLAN 0 to HW filter on device bond4
[  594.727247][T23039] __nla_validate_parse: 16 callbacks suppressed
[  594.727270][T23039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3945'.
[  594.760076][T23038] ip_tables: iptables: counters copy to user failed while replacing table
[  594.972833][T23041] netlink: 'syz.1.3945': attribute type 1 has an invalid length.
[  594.972854][T23041] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3945'.
[  594.972868][T23041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3945'.
[  595.095252][T23048] syzkaller0: entered promiscuous mode
[  595.095276][T23048] syzkaller0: entered allmulticast mode
[  595.120855][T23048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.139312][T23048] tipc: Resetting bearer <eth:syzkaller0>
[  595.157823][T23047] tipc: Resetting bearer <eth:syzkaller0>
[  595.200798][T23047] tipc: Disabling bearer <eth:syzkaller0>
[  595.349314][T23059] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  595.673418][T23066] wg2 speed is unknown, defaulting to 1000
[  595.866352][T23074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3953'.
[  596.062531][T23080] syzkaller0: entered promiscuous mode
[  596.062576][T23080] syzkaller0: entered allmulticast mode
[  596.085758][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  596.100274][T23080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  596.124316][T23080] tipc: Resetting bearer <eth:syzkaller0>
[  596.174295][T23078] tipc: Resetting bearer <eth:syzkaller0>
[  596.279769][T23078] tipc: Disabling bearer <eth:syzkaller0>
[  596.390537][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3959'.
[  596.920214][T23066] wg2 speed is unknown, defaulting to 1000
[  597.366050][T23122] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  597.693687][T23138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  598.551099][T23168] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0
[  598.905438][T23143] infiniband syz0: set active
[  598.906149][T23143] infiniband syz0: added bond_slave_1
[  598.942164][T23143] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  598.942193][T23143] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  598.942220][T23143] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  599.074116][T23143] RDS/IB: syz0: added
[  599.074170][T23143] smc: adding ib device syz0 with port count 1
[  599.074189][T23143] smc:    ib device syz0 port 1 has no pnetid
[  599.107419][T23179] netlink: 'syz.3.3981': attribute type 2 has an invalid length.
[  599.156388][T23179] : entered promiscuous mode
[  599.614354][T23200] syzkaller0: entered promiscuous mode
[  599.614376][T23200] syzkaller0: entered allmulticast mode
[  599.659575][T23200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  599.711159][T23200] tipc: Resetting bearer <eth:syzkaller0>
[  599.736838][T23199] tipc: Resetting bearer <eth:syzkaller0>
[  599.832454][T23199] tipc: Disabling bearer <eth:syzkaller0>
[  599.926433][  T695] block nbd1: Possible stuck request ffff888026bbe000: control (read@0,1024B). Runtime 240 seconds
[  599.926498][  T695] block nbd1: Possible stuck request ffff888026bbe1c0: control (read@1024,3072B). Runtime 240 seconds
[  599.943121][T23217] netlink: 'syz.1.3992': attribute type 1 has an invalid length.
[  599.943146][T23217] netlink: 'syz.1.3992': attribute type 1 has an invalid length.
[  599.948645][T23213] tc_dump_action: action bad kind
[  600.195160][T23220] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3993'.
[  600.338771][T23223] wg2 speed is unknown, defaulting to 1000
[  600.522963][T23228] syzkaller1: entered promiscuous mode
[  600.522985][T23228] syzkaller1: entered allmulticast mode
[  600.535697][T23228] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  600.566112][ T4933] Bluetooth: hci3: command 0x0405 tx timeout
[  601.086579][T23241] bridge0: port 4(wlan1) entered blocking state
[  601.086871][T23241] bridge0: port 4(wlan1) entered disabled state
[  601.087046][T23241] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode
[  601.129094][T23241] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode
[  601.196070][T23223] wg2 speed is unknown, defaulting to 1000
[  601.473127][T23260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4005'.
[  601.501735][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4004'.
[  602.393634][T23300] syzkaller0: entered promiscuous mode
[  602.393657][T23300] syzkaller0: entered allmulticast mode
[  602.403664][T23300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  602.419273][T23300] tipc: Resetting bearer <eth:syzkaller0>
[  602.425142][T23297] tipc: Resetting bearer <eth:syzkaller0>
[  602.484675][T23297] tipc: Disabling bearer <eth:syzkaller0>
[  602.607330][T23306] openvswitch: netlink: Message has 8 unknown bytes.
[  602.647111][T23308] netlink: 'syz.4.4015': attribute type 1 has an invalid length.
[  602.757868][T23308] 8021q: adding VLAN 0 to HW filter on device bond5
[  602.853394][T23308] bond5: (slave geneve2): making interface the new active one
[  602.866670][T23308] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  603.104156][T23323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4021'.
[  603.244106][T23325] netlink: 'syz.2.4022': attribute type 11 has an invalid length.
[  603.244120][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'.
[  603.362182][T23326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4020'.
[  603.404802][T23325] netlink: 3990 bytes leftover after parsing attributes in process `syz.2.4022'.
[  603.415842][T23325] openvswitch: netlink: IP tunnel dst address not specified
[  603.738442][T23342] syzkaller0: entered promiscuous mode
[  603.738464][T23342] syzkaller0: entered allmulticast mode
[  603.903362][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  603.921699][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  604.039482][T23355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4027'.
[  604.043533][T23353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4028'.
[  604.043555][T23353] openvswitch: netlink: Flow key attr not present in new flow.
[  604.043886][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4027'.
[  604.043968][T23355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  604.043978][T23355] IPv6: NLM_F_CREATE should be set when creating new route
[  604.044010][T23355] IPv6: NLM_F_CREATE should be set when creating new route
[  604.115126][T23355] netlink: 'syz.3.4027': attribute type 83 has an invalid length.
[  604.144079][T23349] syzkaller0: entered promiscuous mode
[  604.144102][T23349] syzkaller0: entered allmulticast mode
[  604.548372][T23355] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.548742][T23355] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.403036][T23347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  605.406567][  T143] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  605.406599][  T143] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  605.424948][  T142] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  605.424982][  T142] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  605.426270][T17961] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  605.426297][T17961] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  605.426333][T17961] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  605.426356][T17961] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  605.459148][T23366] tipc: Resetting bearer <eth:syzkaller0>
[  605.501123][T23346] tipc: Resetting bearer <eth:syzkaller0>
[  605.574254][T23346] tipc: Disabling bearer <eth:syzkaller0>
[  605.648653][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648676][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648687][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648699][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648711][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648722][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648734][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648746][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648757][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648768][T23379] tc action pedit unable to extract header offset for header type (0x5)
[  605.648789][T23379] 0: reclassify loop, rule prio 0, protocol 800
[  605.869350][T23380] __nla_validate_parse: 2 callbacks suppressed
[  605.869369][T23380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4034'.
[  605.869415][T23380] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  605.893051][T23380] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  606.014686][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4039'.
[  606.166689][T23398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'.
[  606.271117][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'.
[  606.533061][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'.
[  606.605433][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'.
[  606.718885][T23420] syzkaller0: entered promiscuous mode
[  606.718908][T23420] syzkaller0: entered allmulticast mode
[  606.809979][T16530] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96
[  606.874683][T23420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  606.890321][T23420] tipc: Resetting bearer <eth:syzkaller0>
[  606.929593][T23415] tipc: Resetting bearer <eth:syzkaller0>
[  607.053267][T23415] tipc: Disabling bearer <eth:syzkaller0>
[  607.311522][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4051'.
[  607.361066][T23450] syzkaller0: entered promiscuous mode
[  607.361090][T23450] syzkaller0: entered allmulticast mode
[  607.378925][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4054'.
[  607.799318][T23471] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  608.045046][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4060'.
[  608.110150][T23489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4060'.
[  608.234653][T23494] syzkaller0: entered promiscuous mode
[  608.234675][T23494] syzkaller0: entered allmulticast mode
[  608.267211][T23494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  608.314668][T23494] tipc: Resetting bearer <eth:syzkaller0>
[  608.341479][T23493] tipc: Resetting bearer <eth:syzkaller0>
[  608.404640][T23493] tipc: Disabling bearer <eth:syzkaller0>
[  609.098377][T23535] bond0: invalid NS target ff00:0:0:f9:: specified for addition
[  609.098406][T23535] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  609.144862][T23538] netlink: 'syz.2.4078': attribute type 2 has an invalid length.
[  609.250247][T23544] ip6tnl0: Caught tx_queue_len zero misconfig
[  609.522088][T23564] IPVS: nq: FWM 3 0x00000003 - no destination available
[  609.547336][T23562] netlink: 'syz.0.4086': attribute type 1 has an invalid length.
[  609.617811][T23564] bond6: (slave geneve2): making interface the new active one
[  609.618672][T23564] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  609.766203][  T142] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  609.789482][  T142] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  609.790252][  T142] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  609.790294][  T142] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  609.915803][T23584] xt_connbytes: Forcing CT accounting to be enabled
[  610.078736][T23591] netlink: 'syz.0.4092': attribute type 2 has an invalid length.
[  610.385102][T23609] batman_adv: batadv0: Adding interface: syzkaller0
[  610.385120][T23609] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  610.385145][T23609] batman_adv: batadv0: Interface activated: syzkaller0
[  610.390088][T23603] nbd3: detected capacity change from 0 to 63
[  610.446873][T23607] bond7: option updelay: invalid value (18446744073709518847)
[  610.446896][T23607] bond7: option updelay: allowed values 0 - 2147483647
[  610.451267][T23607] bond7 (unregistering): Released all slaves
[  610.632694][T23604] batman_adv: batadv0: Interface deactivated: syzkaller0
[  610.680944][T23604] batman_adv: batadv0: Removing interface: syzkaller0
[  610.681139][T23619] siw: device registration error -23
[  610.736530][T23625] FAULT_INJECTION: forcing a failure.
[  610.736530][T23625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  610.736562][T23625] CPU: 0 UID: 0 PID: 23625 Comm: syz.2.4102 Not tainted syzkaller #0 PREEMPT(full) 
[  610.736583][T23625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  610.736594][T23625] Call Trace:
[  610.736603][T23625]  <TASK>
[  610.736612][T23625]  dump_stack_lvl+0xe8/0x150
[  610.736643][T23625]  should_fail_ex+0x410/0x560
[  610.736673][T23625]  _copy_from_user+0x2d/0xb0
[  610.736700][T23625]  ___sys_sendmsg+0x1c6/0x360
[  610.736727][T23625]  ? __lock_acquire+0x747/0x2de0
[  610.736751][T23625]  ? __pfx____sys_sendmsg+0x10/0x10
[  610.736809][T23625]  ? __fget_files+0x2a/0x420
[  610.736835][T23625]  ? __fget_files+0x3a2/0x420
[  610.736871][T23625]  __x64_sys_sendmsg+0x1b1/0x290
[  610.736900][T23625]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  610.736950][T23625]  do_syscall_64+0x166/0x520
[  610.736976][T23625]  ? trace_irq_disable+0x3b/0x140
[  610.736994][T23625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.737015][T23625]  ? clear_bhb_loop+0x70/0xc0
[  610.737038][T23625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.737057][T23625] RIP: 0033:0x7fb96979e159
[  610.737075][T23625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.737090][T23625] RSP: 002b:00007fb96a706028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  610.737111][T23625] RAX: ffffffffffffffda RBX: 00007fb969a25fa0 RCX: 00007fb96979e159
[  610.737126][T23625] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003
[  610.737139][T23625] RBP: 00007fb96a706090 R08: 0000000000000000 R09: 0000000000000000
[  610.737151][T23625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  610.737163][T23625] R13: 00007fb969a26038 R14: 00007fb969a25fa0 R15: 00007ffc81b454b8
[  610.737195][T23625]  </TASK>
[  611.051247][T23632] __nla_validate_parse: 6 callbacks suppressed
[  611.051267][T23632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4105'.
[  611.052771][T23632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4105'.
[  611.091527][ T4933] block nbd3: Receive control failed (result -104)
[  611.327010][T23639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  611.411349][T23641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4108'.
[  611.479215][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'.
[  611.636590][T23641] bond9: option lacp_active: invalid value (5)
[  611.647029][T23641] bond9 (unregistering): Released all slaves
[  611.750925][T23651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4111'.
[  611.943929][T23667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  612.154265][   T30] audit: type=1804 audit(1790667738.631:12): pid=23675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4115" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1265 res=1 errno=0
[  612.180864][   T30] audit: type=1800 audit(1790667738.661:13): pid=23675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4115" name="cgroup.controllers" dev="tmpfs" ino=1265 res=0 errno=0
[  612.539195][T23693] macvlan0: entered promiscuous mode
[  612.778485][T23697] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.778961][T23697] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.779098][T23697] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.927352][T23697] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.103826][T23725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4131'.
[  613.727989][T23749] FAULT_INJECTION: forcing a failure.
[  613.727989][T23749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  613.728020][T23749] CPU: 1 UID: 0 PID: 23749 Comm: syz.3.4138 Not tainted syzkaller #0 PREEMPT(full) 
[  613.728041][T23749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  613.728050][T23749] Call Trace:
[  613.728058][T23749]  <TASK>
[  613.728067][T23749]  dump_stack_lvl+0xe8/0x150
[  613.728098][T23749]  should_fail_ex+0x410/0x560
[  613.728125][T23749]  _copy_from_iter+0x1d3/0x1660
[  613.728147][T23749]  ? __alloc_skb+0x27a/0x7a0
[  613.728181][T23749]  ? __pfx__copy_from_iter+0x10/0x10
[  613.728204][T23749]  ? alloc_pages_noprof+0x140/0x2b0
[  613.728231][T23749]  ? skb_page_frag_refill+0x119/0x460
[  613.728269][T23749]  kcm_sendmsg+0xe32/0x2ad0
[  613.728439][T23749]  ? __pfx_kcm_sendmsg+0x10/0x10
[  613.728482][T23749]  ? apparmor_socket_sendmsg+0x98/0x360
[  613.728503][T23749]  ? lock_acquire+0x115/0x350
[  613.728525][T23749]  ? __pfx_kcm_sendmsg+0x10/0x10
[  613.728550][T23749]  sock_sendmsg_nosec+0x13a/0x180
[  613.728574][T23749]  sock_write_iter+0x2de/0x3e0
[  613.728597][T23749]  ? __pfx_sock_write_iter+0x10/0x10
[  613.728625][T23749]  ? bpf_lsm_file_permission+0x9/0x20
[  613.728650][T23749]  ? security_file_permission+0x75/0x260
[  613.728726][T23749]  vfs_write+0x612/0xba0
[  613.728763][T23749]  ? __pfx_vfs_write+0x10/0x10
[  613.728802][T23749]  ? __fget_files+0x2a/0x420
[  613.728836][T23749]  ksys_write+0x150/0x270
[  613.728868][T23749]  ? __pfx_ksys_write+0x10/0x10
[  613.728909][T23749]  do_syscall_64+0x166/0x520
[  613.728935][T23749]  ? trace_irq_disable+0x3b/0x140
[  613.728953][T23749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.728973][T23749]  ? clear_bhb_loop+0x70/0xc0
[  613.728996][T23749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.729013][T23749] RIP: 0033:0x7f9de539e159
[  613.729032][T23749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.729047][T23749] RSP: 002b:00007f9de61f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  613.729067][T23749] RAX: ffffffffffffffda RBX: 00007f9de5625fa0 RCX: 00007f9de539e159
[  613.729080][T23749] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003
[  613.729092][T23749] RBP: 00007f9de61f1090 R08: 0000000000000000 R09: 0000000000000000
[  613.729103][T23749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.729114][T23749] R13: 00007f9de5626038 R14: 00007f9de5625fa0 R15: 00007ffdd294b3c8
[  613.729143][T23749]  </TASK>
[  614.088639][T23764] geneve3: entered promiscuous mode
[  614.208384][T23768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4147'.
[  614.723794][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  614.794652][T23791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  614.999632][T23808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4156'.
[  615.049642][T23805] lo: entered allmulticast mode
[  615.331645][T23804] lo: left allmulticast mode
[  615.468274][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'.
[  615.497752][T23826] bridge0: left promiscuous mode
[  615.527347][T23826] bridge1: left promiscuous mode
[  615.528874][T23826] geneve3: left promiscuous mode
[  615.582735][T23833] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode
[  615.582752][T23833] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode
[  615.633862][T23835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4162'.
[  615.670540][T23835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  615.808245][T23840] 8021q: adding VLAN 0 to HW filter on device bond9
[  617.206248][ T4945] block nbd3: Connection timed out, retrying (0/1 alive)
[  617.206308][ T4945] block nbd3: Connection timed out, retrying (0/1 alive)
[  617.206349][ T4945] block nbd3: Connection timed out, retrying (0/1 alive)
[  617.206389][ T4945] block nbd3: Connection timed out, retrying (0/1 alive)
[  617.206460][ T4945] block nbd3: Dead connection, failed to find a fallback
[  617.206475][ T4945] block nbd3: shutting down sockets
[  617.206486][ T4945] blk_print_req_error: 38 callbacks suppressed
[  617.206498][ T4945] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  617.206524][ T4945] buffer_io_error: 138 callbacks suppressed
[  617.206534][ T4945] Buffer I/O error on dev nbd3, logical block 3, async page read
[  617.206560][ T4945] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  617.206581][ T4945] Buffer I/O error on dev nbd3, logical block 2, async page read
[  617.206601][ T4945] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  617.206622][ T4945] Buffer I/O error on dev nbd3, logical block 1, async page read
[  617.206641][ T4945] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  617.206661][ T4945] Buffer I/O error on dev nbd3, logical block 0, async page read
[  617.211285][  T695] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  617.211319][  T695] Buffer I/O error on dev nbd3, logical block 0, async page read
[  617.211453][ T4945] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  617.211467][ T4945] Buffer I/O error on dev nbd3, logical block 1, async page read
[  617.211476][ T4945] Buffer I/O error on dev nbd3, logical block 2, async page read
[  617.211483][ T4945] Buffer I/O error on dev nbd3, logical block 3, async page read
[  617.211558][ T4945] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  617.211571][ T4945] Buffer I/O error on dev nbd3, logical block 0, async page read
[  617.211624][ T4945] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  617.211638][ T4945] Buffer I/O error on dev nbd3, logical block 1, async page read
[  617.211691][ T4945] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  617.211751][ T4945] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  617.214093][ T5640] ldm_validate_partition_table(): Disk read failed.
[  617.214900][ T5640] Dev nbd3: unable to read RDB block 0
[  617.225248][ T5640]  nbd3: unable to read partition table
[  617.235779][ T5640] ldm_validate_partition_table(): Disk read failed.
[  617.237024][ T5640] Dev nbd3: unable to read RDB block 0
[  617.238195][ T5640]  nbd3: unable to read partition table
[  617.582755][T23796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  617.837386][T23854] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  617.841276][T23855] netlink: 'syz.1.4170': attribute type 10 has an invalid length.
[  617.841297][T23855] __nla_validate_parse: 1 callbacks suppressed
[  617.841307][T23855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4170'.
[  618.130010][T23870] ip_tables: iptables: counters copy to user failed while replacing table
[  619.314301][T23917] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  619.324113][T23917] team0: Mode changed to "activebackup"
[  619.623722][T23934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'.
[  619.653794][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4188'.
[  619.679275][T23928] xt_hashlimit: size too large, truncated to 1048576
[  619.720805][T23952] xt_hashlimit: size too large, truncated to 1048576
[  619.809492][T23945] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.131091][T23962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4190'.
[  620.295408][T23968] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  620.362076][T23968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4193'.
[  620.411492][T23968] x_tables: duplicate underflow at hook 1
[  620.412820][T23968] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  620.731196][T23991] bond4: option resend_igmp: invalid value (2878)
[  620.731226][T23991] bond4: option resend_igmp: allowed values 0 - 255
[  620.734672][T23991] bond4 (unregistering): Released all slaves
[  621.733278][T24030] FAULT_INJECTION: forcing a failure.
[  621.733278][T24030] name failslab, interval 1, probability 0, space 0, times 0
[  621.733307][T24030] CPU: 1 UID: 0 PID: 24030 Comm: syz.0.4206 Not tainted syzkaller #0 PREEMPT(full) 
[  621.733326][T24030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  621.733338][T24030] Call Trace:
[  621.733346][T24030]  <TASK>
[  621.733355][T24030]  dump_stack_lvl+0xe8/0x150
[  621.733387][T24030]  should_fail_ex+0x410/0x560
[  621.733415][T24030]  should_failslab+0xa8/0x100
[  621.733438][T24030]  ? skb_clone+0x212/0x3a0
[  621.733466][T24030]  kmem_cache_alloc_noprof+0xa1/0x600
[  621.733498][T24030]  ? skb_clone+0x212/0x3a0
[  621.733531][T24030]  skb_clone+0x212/0x3a0
[  621.733556][T24030]  ? nfnetlink_rcv+0x4b0/0x28c0
[  621.733673][T24030]  nfnetlink_rcv+0x4de/0x28c0
[  621.733702][T24030]  ? __dev_queue_xmit+0x29b/0x3820
[  621.733736][T24030]  ? __local_bh_enable_ip+0xd6/0x140
[  621.733761][T24030]  ? lockdep_hardirqs_on+0x7b/0x110
[  621.733794][T24030]  ? __dev_queue_xmit+0x29b/0x3820
[  621.733819][T24030]  ? __local_bh_enable_ip+0xd6/0x140
[  621.733841][T24030]  ? __dev_queue_xmit+0x29b/0x3820
[  621.733868][T24030]  ? __dev_queue_xmit+0x1edc/0x3820
[  621.733911][T24030]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  621.733957][T24030]  ? __copy_skb_header+0xa3/0x4a0
[  621.734002][T24030]  ? skb_clone+0x246/0x3a0
[  621.734030][T24030]  ? __netlink_deliver_tap+0x681/0x6e0
[  621.734046][T24030]  ? netlink_deliver_tap+0x2e/0x1b0
[  621.734071][T24030]  ? netlink_deliver_tap+0x2e/0x1b0
[  621.734088][T24030]  ? netlink_deliver_tap+0x2e/0x1b0
[  621.734113][T24030]  netlink_unicast+0x7bd/0x940
[  621.734151][T24030]  netlink_sendmsg+0x813/0xb40
[  621.734179][T24030]  ? __pfx_netlink_sendmsg+0x10/0x10
[  621.734207][T24030]  ? apparmor_socket_sendmsg+0x18b/0x360
[  621.734230][T24030]  ? __pfx_netlink_sendmsg+0x10/0x10
[  621.734246][T24030]  sock_sendmsg_nosec+0x13a/0x180
[  621.734268][T24030]  ____sys_sendmsg+0x54e/0x850
[  621.734297][T24030]  ? __pfx_____sys_sendmsg+0x10/0x10
[  621.734328][T24030]  ? import_iovec+0x73/0xa0
[  621.734355][T24030]  ___sys_sendmsg+0x2a5/0x360
[  621.734378][T24030]  ? __lock_acquire+0x747/0x2de0
[  621.734401][T24030]  ? __pfx____sys_sendmsg+0x10/0x10
[  621.734459][T24030]  ? __fget_files+0x2a/0x420
[  621.734484][T24030]  ? __fget_files+0x3a2/0x420
[  621.734518][T24030]  __x64_sys_sendmsg+0x1b1/0x290
[  621.734545][T24030]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  621.734588][T24030]  do_syscall_64+0x166/0x520
[  621.734610][T24030]  ? trace_irq_disable+0x3b/0x140
[  621.734629][T24030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.734649][T24030]  ? clear_bhb_loop+0x70/0xc0
[  621.734671][T24030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.734689][T24030] RIP: 0033:0x7f8a9359e159
[  621.734708][T24030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.734724][T24030] RSP: 002b:00007f8a94426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  621.734746][T24030] RAX: ffffffffffffffda RBX: 00007f8a93825fa0 RCX: 00007f8a9359e159
[  621.734759][T24030] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003
[  621.734772][T24030] RBP: 00007f8a94426090 R08: 0000000000000000 R09: 0000000000000000
[  621.734784][T24030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.734813][T24030] R13: 00007f8a93826038 R14: 00007f8a93825fa0 R15: 00007ffd7efaa128
[  621.734843][T24030]  </TASK>
[  622.141180][T24038] netlink: 'syz.0.4207': attribute type 4 has an invalid length.
[  623.996540][T24056] tc_dump_action: action bad kind
[  624.051192][T24061] netlink: 'syz.1.4215': attribute type 11 has an invalid length.
[  624.070648][T24060] bond6: entered promiscuous mode
[  624.070670][T24060] bond6: entered allmulticast mode
[  624.070964][T24062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4213'.
[  624.333820][T24062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4213'.
[  624.678012][T24093] syzkaller0: entered promiscuous mode
[  624.678035][T24093] syzkaller0: entered allmulticast mode
[  624.711618][T24095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  624.715700][T24093] tipc: Resetting bearer <eth:syzkaller0>
[  624.737325][T24091] tipc: Resetting bearer <eth:syzkaller0>
[  624.832036][T24091] tipc: Disabling bearer <eth:syzkaller0>
[  624.931723][T24099] syzkaller0: entered promiscuous mode
[  624.931746][T24099] syzkaller0: entered allmulticast mode
[  625.174426][T24107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4225'.
[  625.396017][T24122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  625.399875][T24122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  625.468359][T24117] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  625.517956][T24119] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4228'.
[  625.529640][T24117] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4228'.
[  625.530669][T24119] openvswitch: netlink: Multiple metadata blocks provided
[  625.531807][T24119] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4228'.
[  625.878716][T24150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4233'.
[  626.288797][T24161] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4236'.
[  626.316042][T24168] netlink: 'syz.1.4239': attribute type 1 has an invalid length.
[  626.316063][T24168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4239'.
[  626.316312][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4238'.
[  626.411611][T24161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  626.548252][T24161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  627.168820][T24197] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  628.412353][T24247] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  628.412380][T24247] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  628.429139][T24247] 8021q: VLANs not supported on syzkaller1
[  628.502452][T24250] netlink: 'syz.1.4260': attribute type 1 has an invalid length.
[  628.929022][T24265] tipc: New replicast peer: 255.255.255.255
[  628.929783][T24265] tipc: Enabled bearer <udp:syz2>, priority 10
[  629.111978][T24276] netlink: 'syz.3.4267': attribute type 5 has an invalid length.
[  629.253658][T24284] __nla_validate_parse: 9 callbacks suppressed
[  629.253677][T24284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4269'.
[  629.447059][T24294] openvswitch: netlink: Message has 8 unknown bytes.
[  629.847278][T24304] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  629.920089][T17961] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  630.009071][  T695] block nbd1: Possible stuck request ffff888026bbe000: control (read@0,1024B). Runtime 270 seconds
[  630.009112][  T695] block nbd1: Possible stuck request ffff888026bbe1c0: control (read@1024,3072B). Runtime 270 seconds
[  630.296914][T24287] bond6: left promiscuous mode
[  630.297204][T24287] 8021q: adding VLAN 0 to HW filter on device bond6
[  630.499205][T24316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4278'.
[  630.500796][T24316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4278'.
[  630.538408][T24317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4276'.
[  630.623449][T24318] netlink: 'syz.3.4277': attribute type 61 has an invalid length.
[  630.775041][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775093][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775122][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775144][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775158][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775171][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775185][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775198][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775211][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775224][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775237][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775251][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775264][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775277][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775290][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775303][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775316][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775329][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775342][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775355][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775368][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775381][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775402][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775424][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775447][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775718][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775748][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775770][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775791][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775813][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775835][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775857][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775878][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775899][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775922][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775943][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775965][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.775987][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776009][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776031][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776053][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776075][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776096][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776118][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776140][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776162][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776184][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776205][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776227][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776249][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776270][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776292][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776314][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776336][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776358][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776379][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776401][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776423][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776445][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776466][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776488][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.776510][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.778149][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  630.778175][T24327] IPVS: set_ctl: invalid protocol: 20 0.0.1.0:11197
[  632.831361][T24304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  632.833020][T24314] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4277'.
[  633.034049][T24340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4287'.
[  633.034072][T24340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4287'.
[  633.303229][T24357] netlink: 'syz.3.4284': attribute type 11 has an invalid length.
[  633.708275][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4290'.
[  633.892733][T24377] team0: entered allmulticast mode
[  633.892756][T24377] team_slave_0: entered allmulticast mode
[  633.892772][T24377] team_slave_1: entered allmulticast mode
[  633.892809][T24377] bond7: entered allmulticast mode
[  633.906929][T24377] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  633.958223][T24383] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  634.074570][T24385] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4294'.
[  634.248823][T24393] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  634.249666][T24393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4297'.
[  634.314296][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4297'.
[  634.314319][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4297'.
[  634.375030][T24402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4299'.
[  634.378090][T24403] wg2: Caught tx_queue_len zero misconfig
[  634.595895][T24407] netlink: 'syz.3.4300': attribute type 39 has an invalid length.
[  634.660173][T24407] tipc: Disabling bearer <eth:syz_tun>
[  634.773250][T24414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4302'.
[  635.760574][T24446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4310'.
[  636.017165][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4315'.
[  636.205970][T24467] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4318'.
[  636.393606][T24470] ip_tables: iptables: counters copy to user failed while replacing table
[  636.584839][T24477] bridge0: port 3(dummy0) entered disabled state
[  636.698473][T24483] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode
[  636.698500][T24483] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode
[  636.869264][T24486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4325'.
[  636.931961][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4326'.
[  636.931984][T24488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4326'.
[  637.573778][T24514] ip6t_ah: unknown flags 4
[  637.606096][ T5616] Bluetooth: hci3: command 0x0405 tx timeout
[  637.609498][T24514] netlink: Invalid conntrack timeout
[  637.609522][T24514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  637.614138][T24520] ip6t_ah: unknown flags 4
[  637.620064][T24523] netlink: Invalid conntrack timeout
[  637.620093][T24523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.070475][T24539] netlink: 'syz.4.4334': attribute type 1 has an invalid length.
[  638.099041][T24545] xt_TCPMSS: Only works on TCP SYN packets
[  638.382251][T24539] 8021q: adding VLAN 0 to HW filter on device bond7
[  639.610758][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  640.395313][T24624] syzkaller0: entered promiscuous mode
[  640.395336][T24624] syzkaller0: entered allmulticast mode
[  640.415009][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  640.462286][T24639] __nla_validate_parse: 7 callbacks suppressed
[  640.462305][T24639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'.
[  640.637654][T24650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4359'.
[  640.644109][T24650] geneve3: entered promiscuous mode
[  640.668170][T24648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4358'.
[  641.000778][T24665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4364'.
[  641.000801][T24665] IPv6: NLM_F_CREATE should be specified when creating new route
[  641.023294][T24665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4364'.
[  641.031458][T24667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4367'.
[  641.032790][T24667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'.
[  641.284895][T24679] netlink: 'syz.3.4369': attribute type 1 has an invalid length.
[  641.421263][T24682] nbd4: detected capacity change from 0 to 63
[  641.427158][ T5616] block nbd4: Receive control failed (result -104)
[  641.443071][  T695] block nbd4: Dead connection, failed to find a fallback
[  641.443095][  T695] block nbd4: shutting down sockets
[  641.443107][  T695] blk_print_req_error: 130 callbacks suppressed
[  641.443119][  T695] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  641.443143][  T695] buffer_io_error: 138 callbacks suppressed
[  641.443152][  T695] Buffer I/O error on dev nbd4, logical block 1, async page read
[  641.443268][  T695] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  641.443292][  T695] Buffer I/O error on dev nbd4, logical block 2, async page read
[  641.443389][  T695] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  641.443411][  T695] Buffer I/O error on dev nbd4, logical block 3, async page read
[  641.837636][T24700] sctp: [Deprecated]: syz.0.4372 (pid 24700) Use of struct sctp_assoc_value in delayed_ack socket option.
[  641.837636][T24700] Use struct sctp_sack_info instead
[  642.367449][T24705] bridge_slave_1: left allmulticast mode
[  642.367704][T24705] bridge_slave_1: left promiscuous mode
[  642.369426][T24705] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.394811][T24705] bridge_slave_0: left allmulticast mode
[  642.394869][T24705] bridge_slave_0: left promiscuous mode
[  642.395085][T24705] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.559935][T24707] ip6gre0: Caught tx_queue_len zero misconfig
[  642.560014][T24707] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  642.644914][T24720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4378'.
[  642.672606][T24720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4378'.
[  642.826107][T24730] netlink: 'syz.4.4381': attribute type 1 has an invalid length.
[  642.841226][T24718] netlink: 'syz.2.4377': attribute type 39 has an invalid length.
[  642.980066][T24735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4382'.
[  644.114703][T24778] netlink: 'syz.0.4396': attribute type 16 has an invalid length.
[  644.114738][T24778] netlink: 'syz.0.4396': attribute type 17 has an invalid length.
[  644.200452][T24780] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.267844][T24774] wg2 speed is unknown, defaulting to 1000
[  644.344000][T24778] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.344249][T24778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.396393][T24778] macvlan0: left promiscuous mode
[  644.426478][T24778] batadv1: left promiscuous mode
[  644.426499][T24778] batadv1: left allmulticast mode
[  644.456031][T24778] 8021q: adding VLAN 0 to HW filter on device bond1
[  644.462825][T24778] : left promiscuous mode
[  644.462919][T24778] : left allmulticast mode
[  644.494258][T24778] bond2: left promiscuous mode
[  644.494280][T24778] bridge2: left promiscuous mode
[  644.496456][T24778] bond3: entered allmulticast mode
[  644.519766][T24778] macvtap1: left allmulticast mode
[  644.519791][T24778] bond3: left allmulticast mode
[  644.520277][T24778] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  644.521060][T24778] erspan1: left promiscuous mode
[  644.521903][T24778] bond4: left promiscuous mode
[  644.521921][T24778] bond4: left allmulticast mode
[  644.523492][T24778] bond5: left promiscuous mode
[  644.523510][T24778] bond5: left allmulticast mode
[  644.559031][T24778] 8021q: adding VLAN 0 to HW filter on device bond6
[  644.703929][T24778] geneve3: left promiscuous mode
[  644.751473][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.751623][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.875095][  T142] ip6_tunnel: L xmit: Local address not yet configured!
[  644.877823][  T142] ip6_tunnel: L xmit: Local address not yet configured!
[  644.886677][ T5720] ip6_tunnel: L xmit: Local address not yet configured!
[  644.891481][T24793] netlink: 'syz.3.4399': attribute type 1 has an invalid length.
[  645.095988][T16508] ip6_tunnel: L xmit: Local address not yet configured!
[  645.121630][T24793] bond4: entered promiscuous mode
[  645.124333][T24793] 8021q: adding VLAN 0 to HW filter on device bond4
[  645.175427][T24799] ipvlan2: entered allmulticast mode
[  645.175450][T24799] bond4: entered allmulticast mode
[  645.339497][ T5720] ip6_tunnel: L xmit: Local address not yet configured!
[  645.466592][T24802] ipvlan3: entered allmulticast mode
[  645.514253][T24811] bond4: (slave bridge1): making interface the new active one
[  645.514278][T24811] bridge1: entered promiscuous mode
[  645.514448][T24811] bridge1: entered allmulticast mode
[  645.516209][T24811] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  645.640067][T24774] wg2 speed is unknown, defaulting to 1000
[  646.176686][T24844] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  646.221382][T24843] __nla_validate_parse: 7 callbacks suppressed
[  646.221401][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4408'.
[  646.616974][ T5616] Bluetooth: hci3: link tx timeout
[  646.617120][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  646.634244][ T5616] Bluetooth: hci3: link tx timeout
[  646.634262][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  646.728605][T24860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4411'.
[  646.790308][T24863] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4412'.
[  646.790442][T24863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4412'.
[  646.837514][T24867] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4410'.
[  646.849299][ T5616] Bluetooth: hci3: link tx timeout
[  646.849317][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  646.889601][ T5616] Bluetooth: hci3: link tx timeout
[  646.889622][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  646.972884][T24869] openvswitch: netlink: IP tunnel dst address not specified
[  647.010561][T24864] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode
[  647.010585][T24864] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode
[  647.354250][T24877] syzkaller0: entered promiscuous mode
[  647.354273][T24877] syzkaller0: entered allmulticast mode
[  647.438606][T24888] ip_tables: iptables: counters copy to user failed while replacing table
[  647.608261][ T5616] Bluetooth: hci3: link tx timeout
[  647.608280][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  647.690586][ T5616] Bluetooth: hci3: link tx timeout
[  647.690610][ T5616] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  648.178508][T24912] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  648.486786][T24931] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  648.648769][ T5616] Bluetooth: hci3: command 0x0405 tx timeout
[  649.045747][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  649.147162][T24957] netlink: 'syz.0.4429': attribute type 22 has an invalid length.
[  649.147183][T24957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4429'.
[  649.203102][T24957] netlink: 'syz.0.4429': attribute type 22 has an invalid length.
[  649.203125][T24957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4429'.
[  649.414483][T24966] SET target dimension over the limit!
[  649.439076][T24966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4433'.
[  649.464760][T24965] netlink: 'syz.2.4432': attribute type 1 has an invalid length.
[  649.464780][T24965] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4432'.
[  649.464795][T24965] netlink: 'syz.2.4432': attribute type 1 has an invalid length.
[  649.464806][T24965] netlink: 29 bytes leftover after parsing attributes in process `syz.2.4432'.
[  649.497892][T24965] ip_tables: iptables: counters copy to user failed while replacing table
[  650.595380][T25009] bond4 (unregistering): Released all slaves
[  653.111340][T25000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  653.443368][T25044] netlink: 'syz.2.4450': attribute type 4 has an invalid length.
[  653.484928][T25044] netlink: 'syz.2.4450': attribute type 4 has an invalid length.
[  653.540843][T25044] __nla_validate_parse: 6 callbacks suppressed
[  653.540896][T25044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4450'.
[  653.556024][T25044] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  654.043479][T25062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4454'.
[  654.126528][T25070] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4455'.
[  654.155347][T25070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4455'.
[  654.263177][T25074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4457'.
[  654.456412][T25074] syzkaller0: entered promiscuous mode
[  654.456438][T25074] syzkaller0: entered allmulticast mode
[  654.460618][T25084] macsec0: entered promiscuous mode
[  654.464999][T25078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'.
[  654.504337][T25086] netlink: 'syz.4.4461': attribute type 1 has an invalid length.
[  654.505306][T25078] veth1_macvtap: left promiscuous mode
[  654.530236][T25085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4460'.
[  654.549576][T25078] macsec0 (unregistering): left promiscuous mode
[  654.609968][T25085] IPVS: set_ctl: invalid protocol: 1792 0.32.0.0:64512
[  654.636477][T25093] netlink: 'syz.4.4461': attribute type 10 has an invalid length.
[  654.636498][T25093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4461'.
[  654.672058][T25086] 8021q: adding VLAN 0 to HW filter on device bond8
[  654.854731][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4461'.
[  657.527601][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  658.031823][ T4984] udevd[4984]: worker [5631] /devices/virtual/block/nbd1 timeout; kill it
[  658.031913][ T4984] udevd[4984]: seq 20500 '/devices/virtual/block/nbd1' killed
[  658.181160][T25107] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4464'.
[  658.584063][T25090] dummy0: left allmulticast mode
[  658.584090][T25090] dummy0: left promiscuous mode
[  658.584287][T25090] bridge0: port 3(dummy0) entered disabled state
[  658.614305][T25090] bond8: (slave dummy0): making interface the new active one
[  658.624544][T25090] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  658.624931][T25093] dummy0: entered promiscuous mode
[  658.644090][T25093] bond8: (slave dummy0): Releasing active interface
[  658.668109][T25107] syzkaller0: entered promiscuous mode
[  658.668134][T25107] syzkaller0: entered allmulticast mode
[  658.946359][T25114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4465'.
[  659.028801][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4466'.
[  659.088527][T25118] o�s-system: entered promiscuous mode
[  659.143025][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4470'.
[  659.307546][T25125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  659.365798][T25125] tipc: Resetting bearer <eth:syzkaller0>
[  659.389926][T25130] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4472'.
[  659.438025][T25134] syzkaller1: entered allmulticast mode
[  659.440186][T25134] syzkaller1: left allmulticast mode
[  659.534638][T25146] ip_tables: iptables: counters copy to user failed while replacing table
[  660.089294][  T695] block nbd1: Possible stuck request ffff888026bbe000: control (read@0,1024B). Runtime 300 seconds
[  660.089330][  T695] block nbd1: Possible stuck request ffff888026bbe1c0: control (read@1024,3072B). Runtime 300 seconds
[  660.301226][T25174] Bluetooth: hci0: unsupported parameter 5135
[  660.301247][T25174] Bluetooth: hci0: unsupported parameter 8192
[  660.301260][T25174] Bluetooth: hci0: unsupported parameter 5135
[  660.301272][T25174] Bluetooth: hci0: unsupported parameter 8192
[  660.674735][T25193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4485'.
[  660.674766][T25193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4485'.
[  661.105186][T25211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4488'.
[  661.120732][T25211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4488'.
[  661.535903][T25229] netlink: 'syz.2.4492': attribute type 5 has an invalid length.
[  662.136324][T25255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4496'.
[  662.211367][T25244] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4496'.
[  662.273411][T25255] macvtap2: entered allmulticast mode
[  662.273432][T25255] dummy0: entered allmulticast mode
[  662.273554][T25255] dummy0: entered promiscuous mode
[  662.344670][T25255] dummy0: left allmulticast mode
[  662.568979][T25244] macvtap2: entered allmulticast mode
[  662.569001][T25244] dummy0: entered allmulticast mode
[  662.594656][T25244] dummy0: left allmulticast mode
[  662.721704][T25252] tipc: Enabling of bearer <u$p:s> rejected, media not registered
[  662.722059][   T25] dummy0: left promiscuous mode
[  662.726258][T25269] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  663.244992][T25290] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  664.330091][T25339] netlink: 'syz.2.4517': attribute type 2 has an invalid length.
[  664.330113][T25339] netlink: 'syz.2.4517': attribute type 11 has an invalid length.
[  664.330125][T25339] __nla_validate_parse: 5 callbacks suppressed
[  664.330135][T25339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4517'.
[  664.362323][T25339] siw: device registration error -23
[  664.887651][T25352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4520'.
[  664.916644][T25352] dummy0: entered allmulticast mode
[  664.916828][T25352] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  664.941719][T25355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4522'.
[  665.250699][T25364] syzkaller0: entered promiscuous mode
[  665.250722][T25364] syzkaller0: entered allmulticast mode
[  665.791963][T25391] netlink: 'syz.3.4529': attribute type 44 has an invalid length.
[  665.863151][T25392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4529'.
[  668.671445][T25378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4528'.
[  668.731330][T25398] openvswitch: netlink: Port 2228225 exceeds max allowable 65535
[  668.765731][T25396] pim6reg: entered allmulticast mode
[  669.084997][T25414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4534'.
[  669.561926][T25424] netlink: 'syz.4.4537': attribute type 27 has an invalid length.
[  669.561996][T25424] netlink: 'syz.4.4537': attribute type 6 has an invalid length.
[  670.419985][T25463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4548'.
[  671.234236][T25486] xt_IDLETIMER: label is empty or not nul-terminated
[  671.357652][T25490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4552'.
[  671.436705][T25497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4556'.
[  671.442254][T25498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4556'.
[  671.480310][T25492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.624716][ T4945] block nbd4: Possible stuck request ffff888026cf0000: control (read@0,1024B). Runtime 30 seconds
[  671.920812][T25518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4557'.
[  671.969163][T25516] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  672.142140][T25526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4563'.
[  672.331078][T25534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4565'.
[  672.369624][T25536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4567'.
[  672.369694][T25536] netlink: 'syz.4.4567': attribute type 2 has an invalid length.
[  672.369706][T25536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4567'.
[  672.398282][T25536] netlink: 'syz.4.4567': attribute type 1 has an invalid length.
[  672.434172][T25538] can: request_module (can-proto-4) failed.
[  672.731258][T25549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4570'.
[  672.885706][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  673.054907][T25559] netlink: 'syz.1.4573': attribute type 30 has an invalid length.
[  673.177341][T25569] netlink: 'syz.4.4576': attribute type 1 has an invalid length.
[  673.263780][T25575] FAULT_INJECTION: forcing a failure.
[  673.263780][T25575] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  673.263816][T25575] CPU: 1 UID: 0 PID: 25575 Comm: syz.4.4578 Not tainted syzkaller #0 PREEMPT(full) 
[  673.263863][T25575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  673.263888][T25575] Call Trace:
[  673.263897][T25575]  <TASK>
[  673.263906][T25575]  dump_stack_lvl+0xe8/0x150
[  673.263938][T25575]  should_fail_ex+0x410/0x560
[  673.263966][T25575]  _copy_from_iter+0x1d3/0x1660
[  673.263989][T25575]  ? __alloc_skb+0x27a/0x7a0
[  673.264022][T25575]  ? __pfx__copy_from_iter+0x10/0x10
[  673.264044][T25575]  ? alloc_pages_noprof+0x140/0x2b0
[  673.264069][T25575]  ? skb_page_frag_refill+0x119/0x460
[  673.264104][T25575]  kcm_sendmsg+0xe32/0x2ad0
[  673.264177][T25575]  ? __pfx_kcm_sendmsg+0x10/0x10
[  673.264211][T25575]  ? apparmor_socket_sendmsg+0x98/0x360
[  673.264231][T25575]  ? lock_acquire+0x115/0x350
[  673.264252][T25575]  ? __pfx_kcm_sendmsg+0x10/0x10
[  673.264277][T25575]  sock_sendmsg_nosec+0x13a/0x180
[  673.264302][T25575]  sock_write_iter+0x2de/0x3e0
[  673.264324][T25575]  ? __pfx_sock_write_iter+0x10/0x10
[  673.264351][T25575]  ? bpf_lsm_file_permission+0x9/0x20
[  673.264376][T25575]  ? security_file_permission+0x75/0x260
[  673.264405][T25575]  vfs_write+0x612/0xba0
[  673.264438][T25575]  ? __pfx_vfs_write+0x10/0x10
[  673.264473][T25575]  ? __fget_files+0x2a/0x420
[  673.264507][T25575]  ksys_write+0x150/0x270
[  673.264536][T25575]  ? __pfx_ksys_write+0x10/0x10
[  673.264574][T25575]  do_syscall_64+0x166/0x520
[  673.264598][T25575]  ? trace_irq_disable+0x3b/0x140
[  673.264616][T25575]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.264636][T25575]  ? clear_bhb_loop+0x70/0xc0
[  673.264658][T25575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.264677][T25575] RIP: 0033:0x7f92d559e159
[  673.264695][T25575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.264708][T25575] RSP: 002b:00007f92d37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  673.264728][T25575] RAX: ffffffffffffffda RBX: 00007f92d5825fa0 RCX: 00007f92d559e159
[  673.264741][T25575] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003
[  673.264753][T25575] RBP: 00007f92d37f6090 R08: 0000000000000000 R09: 0000000000000000
[  673.264765][T25575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  673.264776][T25575] R13: 00007f92d5826038 R14: 00007f92d5825fa0 R15: 00007ffcd4e6c038
[  673.264805][T25575]  </TASK>
[  674.743960][T25626] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  674.820694][T25626] hsr_slave_1 (unregistering): left promiscuous mode
[  675.512763][T25658] __nla_validate_parse: 14 callbacks suppressed
[  675.512917][T25658] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4603'.
[  675.512936][T25658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  675.641890][T25663] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4604'.
[  675.642432][T25664] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4604'.
[  675.683352][T25669] netlink: 'syz.2.4605': attribute type 23 has an invalid length.
[  676.023325][T25681] netlink: zone id is out of range
[  676.023340][T25681] netlink: zone id is out of range
[  676.023346][T25681] netlink: zone id is out of range
[  676.023353][T25681] netlink: zone id is out of range
[  676.023360][T25681] netlink: zone id is out of range
[  676.023367][T25681] netlink: zone id is out of range
[  676.023378][T25681] netlink: zone id is out of range
[  676.023385][T25681] netlink: zone id is out of range
[  676.543394][T25683] bridge0: left allmulticast mode
[  676.615375][T25683] team0: left allmulticast mode
[  676.615396][T25683] team_slave_0: left allmulticast mode
[  676.615411][T25683] team_slave_1: left allmulticast mode
[  676.615427][T25683] bond7: left allmulticast mode
[  676.744352][T25704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  676.783283][T25705] netlink: 'syz.4.4611': attribute type 1 has an invalid length.
[  676.923528][T25710] netlink: 'syz.4.4611': attribute type 1 has an invalid length.
[  676.935764][T25714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  677.009219][T25707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  677.660632][T25683] bridge1: left allmulticast mode
[  677.683235][T25683] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode
[  677.683251][T25683] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode
[  677.726889][T17961] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  677.726922][T17961] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.726944][T17961] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  677.726982][T17961] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  677.727005][T17961] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.727027][T17961] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  677.727059][T17961] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  677.727074][T17961] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.727086][T17961] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  677.727104][T17961] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  677.727117][T17961] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.727128][T17961] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  677.752032][T25705] 8021q: adding VLAN 0 to HW filter on device bond9
[  677.861841][T25706] macvlan2: entered promiscuous mode
[  677.861863][T25706] macvlan2: entered allmulticast mode
[  677.862554][T25706] bond9: entered promiscuous mode
[  677.862970][T25706] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  677.893471][T25706] bond9: left promiscuous mode
[  677.917844][T25715] macvlan2: entered promiscuous mode
[  677.917866][T25715] macvlan2: entered allmulticast mode
[  677.918344][T25715] bond9: entered promiscuous mode
[  677.918834][T25715] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  677.919487][T25715] bond9: left promiscuous mode
[  677.966691][T25721] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode
[  677.966720][T25721] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode
[  677.967621][T25721] tipc: Resetting bearer <eth:syzkaller0>
[  678.092497][T25725] netlink: 'syz.0.4615': attribute type 10 has an invalid length.
[  678.092522][T25725] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4615'.
[  678.126504][T25725] team0: Device wg2 is of different type
[  678.158843][T25729] sch_fq: defrate 0 ignored.
[  678.292327][T25734] syzkaller0: entered promiscuous mode
[  678.292351][T25734] syzkaller0: entered allmulticast mode
[  678.613110][T25753] netlink: 'syz.1.4624': attribute type 1 has an invalid length.
[  678.614390][T25752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4622'.
[  678.884772][T25768] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4623'.
[  681.455266][T25740] tipc: Enabling of bearer <eth:ip6erspan0> rejected, failed to enable media
[  681.464510][T25753] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  681.531963][T25758] 8021q: adding VLAN 0 to HW filter on device team0
[  681.584986][T25779] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4626'.
[  681.595865][T25779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4626'.
[  681.624900][T25780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4625'.
[  681.636570][T25774] veth5: entered allmulticast mode
[  681.759025][T25791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4629'.
[  681.759053][T25791] block nbd5: Unsupported socket: should be TCP or UNIX.
[  681.802410][T25791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4629'.
[  681.831568][T25791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4629'.
[  681.863289][T25793] net_ratelimit: 495 callbacks suppressed
[  681.863311][T25793] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  681.864737][T25793] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[  681.954614][T25795] netlink: 'syz.0.4630': attribute type 3 has an invalid length.
[  681.972106][T25806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4633'.
[  682.047444][T25809] IPVS: length: 55 != 8
[  682.123200][T25813] xt_REDIRECT: bad MAP_IPS.
[  682.401080][T25824] FAULT_INJECTION: forcing a failure.
[  682.401080][T25824] name failslab, interval 1, probability 0, space 0, times 0
[  682.401112][T25824] CPU: 1 UID: 0 PID: 25824 Comm: syz.1.4636 Not tainted syzkaller #0 PREEMPT(full) 
[  682.401134][T25824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  682.401145][T25824] Call Trace:
[  682.401153][T25824]  <TASK>
[  682.401163][T25824]  dump_stack_lvl+0xe8/0x150
[  682.401195][T25824]  should_fail_ex+0x410/0x560
[  682.401224][T25824]  should_failslab+0xa8/0x100
[  682.401246][T25824]  ? skb_clone+0x212/0x3a0
[  682.401274][T25824]  kmem_cache_alloc_noprof+0xa1/0x600
[  682.401306][T25824]  ? skb_clone+0x212/0x3a0
[  682.401338][T25824]  skb_clone+0x212/0x3a0
[  682.401367][T25824]  __netlink_deliver_tap+0x355/0x6e0
[  682.401398][T25824]  ? netlink_deliver_tap+0x2e/0x1b0
[  682.401420][T25824]  netlink_deliver_tap+0x19c/0x1b0
[  682.401441][T25824]  netlink_unicast+0x781/0x940
[  682.401479][T25824]  netlink_sendmsg+0x813/0xb40
[  682.401508][T25824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  682.401535][T25824]  ? apparmor_socket_sendmsg+0x18b/0x360
[  682.401559][T25824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  682.401577][T25824]  sock_sendmsg_nosec+0x13a/0x180
[  682.401599][T25824]  ____sys_sendmsg+0x54e/0x850
[  682.401631][T25824]  ? __pfx_____sys_sendmsg+0x10/0x10
[  682.401667][T25824]  ? import_iovec+0x73/0xa0
[  682.401700][T25824]  ___sys_sendmsg+0x2a5/0x360
[  682.401725][T25824]  ? __lock_acquire+0x747/0x2de0
[  682.401759][T25824]  ? __pfx____sys_sendmsg+0x10/0x10
[  682.401824][T25824]  ? __fget_files+0x2a/0x420
[  682.401849][T25824]  ? __fget_files+0x3a2/0x420
[  682.401885][T25824]  __x64_sys_sendmsg+0x1b1/0x290
[  682.401915][T25824]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  682.401964][T25824]  do_syscall_64+0x166/0x520
[  682.401988][T25824]  ? trace_irq_disable+0x3b/0x140
[  682.402007][T25824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.402025][T25824]  ? clear_bhb_loop+0x70/0xc0
[  682.402048][T25824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.402067][T25824] RIP: 0033:0x7f4436f9e159
[  682.402086][T25824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.402101][T25824] RSP: 002b:00007f4437f1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  682.402121][T25824] RAX: ffffffffffffffda RBX: 00007f4437225fa0 RCX: 00007f4436f9e159
[  682.402136][T25824] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003
[  682.402149][T25824] RBP: 00007f4437f1b090 R08: 0000000000000000 R09: 0000000000000000
[  682.402162][T25824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.402174][T25824] R13: 00007f4437226038 R14: 00007f4437225fa0 R15: 00007ffdcd719e58
[  682.402204][T25824]  </TASK>
[  682.705823][T25831] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  682.851861][T25838] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  683.029464][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4642'.
[  683.096307][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4638'.
[  683.277525][T25854] netlink: 'syz.3.4644': attribute type 1 has an invalid length.
[  683.372820][T25854] 8021q: adding VLAN 0 to HW filter on device bond6
[  683.380414][T25862] macvlan0: left promiscuous mode
[  683.450645][T25862] bond6: (slave macvlan0): Enslaving as an active interface with a down link
[  683.763825][T25879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4652'.
[  683.852343][T25881] ip6gretap3: entered allmulticast mode
[  684.352371][T25902] wg2 speed is unknown, defaulting to 1000
[  685.002187][T25902] wg2 speed is unknown, defaulting to 1000
[  685.210537][T25907] netlink: 'syz.2.4656': attribute type 15 has an invalid length.
[  685.259481][T25944] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  686.171902][T25973] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  686.218432][T25972] netlink: Unknown nat attribute (0)
[  686.218469][T25972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  686.587790][T25987] tipc: Enabled bearer <eth:macvtap0>, priority 7
[  687.280383][T26016] block nbd0: reconnected socket
[  687.285965][T26016] netlink: 'syz.2.4692': attribute type 9 has an invalid length.
[  687.419802][T26025] xt_CT: You must specify a L4 protocol and not use inversions on it
[  687.431365][ T4933] block nbd0: Receive control failed (result -32)
[  687.580776][   T30] audit: type=1107 audit(1790667814.061:14): pid=26033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�f ��7'
[  687.715236][T14010] tipc: Node number set to 966077608
[  687.806621][T26046] __nla_validate_parse: 5 callbacks suppressed
[  687.806642][T26046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4697'.
[  688.567376][T26066] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  689.241138][T26069] netlink: 'syz.0.4706': attribute type 7 has an invalid length.
[  690.165999][  T695] block nbd1: Possible stuck request ffff888026bbe000: control (read@0,1024B). Runtime 330 seconds
[  690.166042][  T695] block nbd1: Possible stuck request ffff888026bbe1c0: control (read@1024,3072B). Runtime 330 seconds
[  690.603115][T26046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  690.793020][T26073] netlink: zone id is out of range
[  690.793066][T26073] netlink: zone id is out of range
[  690.793196][T26073] netlink: zone id is out of range
[  690.793233][T26073] netlink: zone id is out of range
[  690.793241][T26073] netlink: zone id is out of range
[  690.793249][T26073] netlink: zone id is out of range
[  690.793256][T26073] netlink: zone id is out of range
[  690.793264][T26073] netlink: zone id is out of range
[  690.793272][T26073] netlink: zone id is out of range
[  690.793279][T26073] netlink: zone id is out of range
[  690.940389][T26083] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4708'.
[  691.260505][T26115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4716'.
[  691.343775][T26115] syzkaller1: entered promiscuous mode
[  691.343798][T26115] syzkaller1: entered allmulticast mode
[  691.435447][T26130] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  693.917223][T26090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  694.087870][T26151] netlink: 'syz.4.4724': attribute type 3 has an invalid length.
[  694.087892][T26151] netlink: 'syz.4.4724': attribute type 1 has an invalid length.
[  694.087905][T26151] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4724'.
[  694.087936][T26151] NCSI netlink: No device for ifindex 0
[  694.212420][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4725'.
[  694.245181][T26164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'.
[  694.344814][T26170] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4729'.
[  694.370126][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4725'.
[  694.534506][T26173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4730'.
[  694.534539][T26173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4730'.
[  694.584642][T26176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4730'.
[  694.584675][T26176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4730'.
[  694.644805][T26182] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  694.682142][T26182] bond5 (unregistering): Released all slaves
[  694.718934][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4733'.
[  694.828703][ T7162] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  694.828750][ T7162] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  694.828788][ T7162] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  694.828819][ T7162] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  695.004333][T26200] IPv6: NLM_F_REPLACE set, but no existing node found!
[  695.054980][T26200] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode
[  695.055025][T26200] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode
[  695.434536][T26219] syzkaller0: entered promiscuous mode
[  695.434559][T26219] syzkaller0: entered allmulticast mode
[  696.041919][T26245] tipc: Resetting bearer <eth:syzkaller0>
[  698.332524][T26216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  698.651191][T26279] netlink: 'syz.0.4758': attribute type 1 has an invalid length.
[  698.722461][T26281] pim6reg: entered allmulticast mode
[  698.722810][T26274] pim6reg: left allmulticast mode
[  699.493065][T26323] tipc: Resetting bearer <eth:syzkaller0>
[  699.705854][T26338] __nla_validate_parse: 7 callbacks suppressed
[  699.705873][T26338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4772'.
[  699.708402][T26338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  699.809815][T26337] tipc: Disabling bearer <eth:syzkaller0>
[  700.030587][T26348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4773'.
[  700.030622][T26348] netlink: 'syz.2.4773': attribute type 5 has an invalid length.
[  700.032866][T26348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4773'.
[  700.032894][T26348] netlink: 'syz.2.4773': attribute type 5 has an invalid length.
[  700.184224][T26346] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4774'.
[  700.619964][T26365] wg2 speed is unknown, defaulting to 1000
[  701.213544][T26365] wg2 speed is unknown, defaulting to 1000
[  701.632211][T26408] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4790'.
[  701.687677][ T4945] block nbd4: Possible stuck request ffff888026cf0000: control (read@0,1024B). Runtime 60 seconds
[  701.723634][T26412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4791'.
[  702.057196][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4794'.
[  702.585758][T26444] vlan2: entered promiscuous mode
[  702.585783][T26444] gretap0: entered promiscuous mode
[  702.637976][T26445] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4798'.
[  702.694150][T26444] team0: Port device dummy0 removed
[  702.705263][T26444] bond0: (slave bond_slave_0): Releasing backup interface
[  702.729385][T26444] bond0: (slave bond_slave_1): Releasing backup interface
[  702.789045][T26444] team0: Port device team_slave_0 removed
[  702.794986][T26444] team0: Port device team_slave_1 removed
[  702.795399][T26444] net_ratelimit: 59 callbacks suppressed
[  702.795415][T26444] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  702.966344][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  703.164003][T26462] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4800'.
[  703.228586][T26463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4803'.
[  703.579598][T26473] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  703.770318][T26483] netlink: 'syz.3.4812': attribute type 3 has an invalid length.
[  703.770341][T26483] netlink: 'syz.3.4812': attribute type 1 has an invalid length.
[  703.770357][T26483] NCSI netlink: No device for ifindex 0
[  703.902268][T26497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  704.847984][T26559] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  705.070098][T26582] __nla_validate_parse: 7 callbacks suppressed
[  705.070122][T26582] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4835'.
[  705.106456][T26582] netlink: 'syz.4.4835': attribute type 9 has an invalid length.
[  705.106481][T26582] netlink: 'syz.4.4835': attribute type 6 has an invalid length.
[  705.106494][T26582] netlink: 'syz.4.4835': attribute type 7 has an invalid length.
[  705.106505][T26582] netlink: 'syz.4.4835': attribute type 8 has an invalid length.
[  705.108427][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4835'.
[  705.108476][T26582] openvswitch: netlink: Key type 29 is not supported
[  705.571205][T26587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4837'.
[  706.191100][T26609] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4844'.
[  706.390596][T26619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4844'.
[  706.508597][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4849'.
[  706.508619][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4849'.
[  706.764378][T26632] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  707.584255][T26656] netlink: 'syz.2.4856': attribute type 2 has an invalid length.
[  707.673818][T26656] : entered promiscuous mode
[  707.808414][T26640] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  708.051430][ T4933] Bluetooth: hci3: link tx timeout
[  708.051451][ T4933] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  708.165899][T26676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4859'.
[  708.337379][T26676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4859'.
[  708.549369][T26695] syzkaller0: entered promiscuous mode
[  708.549391][T26695] syzkaller0: entered allmulticast mode
[  708.777533][T26702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4869'.
[  708.966193][T20154] IPVS: ip_vs_send_async error -101
[  709.576445][T26735] netlink: 'syz.3.4876': attribute type 1 has an invalid length.
[  709.999313][T26750] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  710.089913][ T4933] Bluetooth: hci3: command 0x0405 tx timeout
[  710.127261][T26754] --map-set only usable from mangle table
[  710.266991][T26765] netlink: 'syz.0.4881': attribute type 11 has an invalid length.
[  710.673699][    C0] ==================================================================
[  710.673717][    C0] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200
[  710.673752][    C0] Free of addr ffff888056461d80 by task sed/26782
[  710.673766][    C0] 
[  710.673778][    C0] CPU: 0 UID: 0 PID: 26782 Comm: sed Not tainted syzkaller #0 PREEMPT(full) 
[  710.673804][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  710.673817][    C0] Call Trace:
[  710.673826][    C0]  <IRQ>
[  710.673836][    C0]  dump_stack_lvl+0xe8/0x150
[  710.673869][    C0]  print_address_description+0x55/0x1e0
[  710.673924][    C0]  print_report+0x58/0x70
[  710.673947][    C0]  ? rcu_free_sheaf+0x31/0x200
[  710.673967][    C0]  kasan_report_invalid_free+0xea/0x110
[  710.673996][    C0]  ? rcu_free_sheaf+0x31/0x200
[  710.674019][    C0]  ? rcu_free_sheaf+0x31/0x200
[  710.674043][    C0]  __kasan_slab_pre_free+0x104/0x120
[  710.674066][    C0]  __rcu_free_sheaf_prepare+0x10a/0x2a0
[  710.674096][    C0]  ? rcu_core+0x8a8/0x1260
[  710.674120][    C0]  rcu_free_sheaf+0x31/0x200
[  710.674142][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  710.674176][    C0]  ? __pfx_rcu_free_sheaf+0x10/0x10
[  710.674196][    C0]  ? rcu_core+0x8a8/0x1260
[  710.674218][    C0]  rcu_core+0x926/0x1260
[  710.674248][    C0]  ? __pfx_rcu_core+0x10/0x10
[  710.674272][    C0]  ? ktime_get+0x1f5/0x220
[  710.674303][    C0]  ? lapic_next_event+0x11/0x20
[  710.674331][    C0]  handle_softirqs+0x226/0x860
[  710.674361][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  710.674391][    C0]  __irq_exit_rcu+0xcb/0x220
[  710.674419][    C0]  irq_exit_rcu+0x9/0x30
[  710.674445][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  710.674473][    C0]  </IRQ>
[  710.674481][    C0]  <TASK>
[  710.674490][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  710.674517][    C0] RIP: 0010:lock_is_held_type+0x4/0x150
[  710.674550][    C0] Code: 96 04 48 c7 c6 84 b6 61 8e 67 48 0f b9 3a 90 eb ce 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 bb ff ff ff ff 83 3d 46 83 93 04 00
[  710.674570][    C0] RSP: 0018:ffffc9000448f2d8 EFLAGS: 00000246
[  710.674593][    C0] RAX: 1ffff92000891f42 RBX: dffffc0000000000 RCX: ffff88804100ddc0
[  710.674612][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888049f0e9b8
[  710.674628][    C0] RBP: ffffc9000448f430 R08: ffffc9000448f387 R09: 1ffff92000891e70
[  710.674646][    C0] R10: dffffc0000000000 R11: fffff52000891e71 R12: 1ffff92000891e6c
[  710.674662][    C0] R13: ffffc9000448fa10 R14: 0000000000000001 R15: ffff88804b125500
[  710.674689][    C0]  vma_expand+0x18f/0xf40
[  710.674713][    C0]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  710.674738][    C0]  ? seqcount_lockdep_reader_access+0xea/0x100
[  710.674765][    C0]  ? __pfx_vma_expand+0x10/0x10
[  710.674787][    C0]  ? is_mergeable_anon_vma+0x26f/0x3a0
[  710.674819][    C0]  ? can_vma_merge_right+0x69a/0x6e0
[  710.674845][    C0]  vma_merge_new_range+0x600/0x840
[  710.674869][    C0]  ? atime_needs_update+0x58e/0x6f0
[  710.674888][    C0]  ? __pfx_unmap_region+0x10/0x10
[  710.674916][    C0]  ? __pfx_vma_merge_new_range+0x10/0x10
[  710.674945][    C0]  mmap_region+0x1106/0x2270
[  710.674978][    C0]  ? __pfx_mmap_region+0x10/0x10
[  710.675004][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  710.675031][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  710.675066][    C0]  ? __mutex_trylock_common+0x15f/0x270
[  710.675100][    C0]  ? rcu_is_watching+0x16/0xb0
[  710.675148][    C0]  ? ima_free_modsig+0x4c/0x60
[  710.675280][    C0]  ? mm_get_unmapped_area_vmaflags+0xd9/0x110
[  710.675312][    C0]  ? cap_mmap_addr+0xaf/0x100
[  710.675335][    C0]  ? bpf_lsm_mmap_addr+0x9/0x50
[  710.675361][    C0]  ? security_mmap_addr+0x71/0x240
[  710.675381][    C0]  ? shmem_mapping+0xd/0x50
[  710.675402][    C0]  ? memfd_check_seals_mmap+0xc5/0x220
[  710.675439][    C0]  do_mmap+0xe0a/0x1300
[  710.675467][    C0]  ? _copy_to_user+0x8a/0xb0
[  710.675496][    C0]  ? __pfx_do_mmap+0x10/0x10
[  710.675526][    C0]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  710.675547][    C0]  ? down_write_killable+0x17e/0x240
[  710.675580][    C0]  ? __pfx_down_write_killable+0x10/0x10
[  710.675617][    C0]  vm_mmap_pgoff+0x272/0x4e0
[  710.675644][    C0]  ? lock_acquire+0x115/0x350
[  710.675667][    C0]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  710.675694][    C0]  ? __fget_files+0x2a/0x420
[  710.675727][    C0]  ? __fget_files+0x3a2/0x420
[  710.675756][    C0]  ? __fget_files+0x2a/0x420
[  710.675787][    C0]  ksys_mmap_pgoff+0x4dc/0x760
[  710.675822][    C0]  do_syscall_64+0x166/0x520
[  710.675852][    C0]  ? trace_irq_disable+0x3b/0x140
[  710.675875][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.675897][    C0]  ? clear_bhb_loop+0x70/0xc0
[  710.675921][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.675942][    C0] RIP: 0033:0x7f87f5e9f242
[  710.675963][    C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
[  710.675983][    C0] RSP: 002b:00007ffecfb3c6a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  710.676008][    C0] RAX: ffffffffffffffda RBX: 00007f87f5e47000 RCX: 00007f87f5e9f242
[  710.676026][    C0] RDX: 0000000000000001 RSI: 0000000000028000 RDI: 00007f87f5e47000
[  710.676042][    C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000096000
[  710.676057][    C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffecfb3c730
[  710.676072][    C0] R13: 00007f87f5e730c0 R14: 00007ffecfb3cab0 R15: 00000fffd9f678d8
[  710.676100][    C0]  </TASK>
[  710.676109][    C0] 
[  710.676115][    C0] Allocated by task 9756:
[  710.676179][    C0]  kasan_save_track+0x3e/0x80
[  710.676203][    C0]  __kasan_kmalloc+0x93/0xb0
[  710.676226][    C0]  __kmalloc_cache_noprof+0x321/0x600
[  710.676247][    C0]  hwsim_update_pib+0x7e/0x400
[  710.676339][    C0]  hwsim_set_promiscuous_mode+0x196/0x2e0
[  710.676368][    C0]  drv_set_promiscuous_mode+0x159/0x2e0
[  710.676462][    C0]  drv_start+0x4ea/0x1010
[  710.676484][    C0]  mac802154_scan_worker+0x8e6/0xe60
[  710.676508][    C0]  process_scheduled_works+0xc3d/0x1630
[  710.676535][    C0]  worker_thread+0xa47/0xfb0
[  710.676563][    C0]  kthread+0x38b/0x480
[  710.676581][    C0]  ret_from_fork+0x514/0xb70
[  710.676599][    C0]  ret_from_fork_asm+0x1a/0x30
[  710.676632][    C0] 
[  710.676637][    C0] Freed by task 26782:
[  710.676648][    C0]  kasan_save_track+0x3e/0x80
[  710.676668][    C0]  kasan_save_free_info+0x40/0x50
[  710.676698][    C0]  __kasan_slab_free+0x5c/0x80
[  710.676720][    C0]  __rcu_free_sheaf_prepare+0x12d/0x2a0
[  710.676747][    C0]  rcu_free_sheaf+0x31/0x200
[  710.676767][    C0]  rcu_core+0x926/0x1260
[  710.676789][    C0]  handle_softirqs+0x226/0x860
[  710.676816][    C0]  __irq_exit_rcu+0xcb/0x220
[  710.676842][    C0]  irq_exit_rcu+0x9/0x30
[  710.676868][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  710.676896][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  710.676918][    C0] 
[  710.676924][    C0] The buggy address belongs to the object at ffff888056461d80
[  710.676924][    C0]  which belongs to the cache kmalloc-64 of size 64
[  710.676944][    C0] The buggy address is located 0 bytes inside of
[  710.676944][    C0]  64-byte region [ffff888056461d80, ffff888056461dc0)
[  710.676996][    C0] 
[  710.677002][    C0] The buggy address belongs to the physical page:
[  710.677020][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56461
[  710.677039][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  710.677056][    C0] page_type: f5(slab)
[  710.677076][    C0] raw: 00fff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122
[  710.677095][    C0] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000
[  710.677107][    C0] page dumped because: kasan: bad access detected
[  710.677123][    C0] page_owner tracks the page as allocated
[  710.677132][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6826, tgid 6825 (syz.4.276), ts 112125464629
[  710.677170][    C0]  post_alloc_hook+0x1f9/0x250
[  710.677200][    C0]  get_page_from_freelist+0x2209/0x2280
[  710.677223][    C0]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  710.677245][    C0]  allocate_slab+0x7d/0x620
[  710.677271][    C0]  refill_objects+0x2d5/0x350
[  710.677297][    C0]  __pcs_replace_empty_main+0x2c8/0x6c0
[  710.677320][    C0]  __kmalloc_cache_noprof+0x39b/0x600
[  710.677339][    C0]  ipip6_tunnel_clone_6rd+0x53/0x4e0
[  710.677404][    C0]  sit_init_net+0x3ab/0x680
[  710.677432][    C0]  ops_init+0x35d/0x5d0
[  710.677457][    C0]  setup_net+0x118/0x350
[  710.677474][    C0]  copy_net_ns+0x53b/0x780
[  710.677493][    C0]  create_new_namespaces+0x3f0/0x6b0
[  710.677518][    C0]  unshare_nsproxy_namespaces+0x149/0x190
[  710.677542][    C0]  ksys_unshare+0x5a7/0x950
[  710.677572][    C0]  __x64_sys_unshare+0x38/0x50
[  710.677601][    C0] page last free pid 6848 tgid 6845 ts 112034734612 stack trace:
[  710.677615][    C0]  __free_frozen_pages+0xc93/0xd90
[  710.677643][    C0]  __slab_free+0x274/0x2c0
[  710.677661][    C0]  qlist_free_all+0x99/0x100
[  710.677678][    C0]  kasan_quarantine_reduce+0x148/0x160
[  710.677698][    C0]  __kasan_slab_alloc+0x22/0x80
[  710.677719][    C0]  __kmalloc_cache_noprof+0x29f/0x600
[  710.677737][    C0]  kobject_uevent_env+0x289/0x9e0
[  710.677813][    C0]  __kobject_del+0xd1/0x310
[  710.677830][    C0]  kobject_put+0x23a/0x550
[  710.677844][    C0]  net_rx_queue_update_kobjects+0x6bf/0x780
[  710.677901][    C0]  netdev_unregister_kobject+0xff/0x450
[  710.677921][    C0]  unregister_netdevice_many_notify+0x1be1/0x2140
[  710.677943][    C0]  rtnl_newlink_create+0x664/0x7b0
[  710.677968][    C0]  rtnl_newlink+0x167a/0x1c30
[  710.677991][    C0]  rtnetlink_rcv_msg+0x802/0xc00
[  710.678012][    C0]  netlink_rcv_skb+0x226/0x4a0
[  710.678030][    C0] 
[  710.678051][T26770] __nla_validate_parse: 3 callbacks suppressed
[  710.678035][    C0] Memory state around the buggy address:
[  710.678066][T26770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4882'.
[  710.678076][    C0]  ffff888056461c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  710.678091][    C0]  ffff888056461d00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  710.678106][    C0] >ffff888056461d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  710.678117][    C0]                    ^
[  710.678127][    C0]  ffff888056461e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  710.678141][    C0]  ffff888056461e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  710.678151][    C0] ==================================================================
[  710.678236][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  711.686770][    C0] CPU: 0 UID: 0 PID: 26782 Comm: sed Not tainted syzkaller #0 PREEMPT(full) 
[  711.695523][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  711.705567][    C0] Call Trace:
[  711.708839][    C0]  <IRQ>
[  711.711681][    C0]  vpanic+0x56d/0xa60
[  711.715661][    C0]  ? rcu_is_watching+0x16/0xb0
[  711.720415][    C0]  ? __pfx_vpanic+0x10/0x10
[  711.724916][    C0]  panic+0xc5/0xd0
[  711.728645][    C0]  ? __pfx_panic+0x10/0x10
[  711.733084][    C0]  check_panic_on_warn+0x89/0xb0
[  711.738025][    C0]  end_report+0x73/0x170
[  711.742269][    C0]  ? rcu_free_sheaf+0x31/0x200
[  711.747022][    C0]  kasan_report_invalid_free+0xfa/0x110
[  711.752563][    C0]  ? rcu_free_sheaf+0x31/0x200
[  711.757318][    C0]  ? rcu_free_sheaf+0x31/0x200
[  711.762075][    C0]  __kasan_slab_pre_free+0x104/0x120
[  711.767352][    C0]  __rcu_free_sheaf_prepare+0x10a/0x2a0
[  711.772892][    C0]  ? rcu_core+0x8a8/0x1260
[  711.777298][    C0]  rcu_free_sheaf+0x31/0x200
[  711.781880][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  711.787683][    C0]  ? __pfx_rcu_free_sheaf+0x10/0x10
[  711.792878][    C0]  ? rcu_core+0x8a8/0x1260
[  711.797284][    C0]  rcu_core+0x926/0x1260
[  711.801525][    C0]  ? __pfx_rcu_core+0x10/0x10
[  711.806196][    C0]  ? ktime_get+0x1f5/0x220
[  711.810604][    C0]  ? lapic_next_event+0x11/0x20
[  711.815450][    C0]  handle_softirqs+0x226/0x860
[  711.820219][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  711.824980][    C0]  __irq_exit_rcu+0xcb/0x220
[  711.829565][    C0]  irq_exit_rcu+0x9/0x30
[  711.833800][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  711.839427][    C0]  </IRQ>
[  711.842345][    C0]  <TASK>
[  711.845268][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  711.851239][    C0] RIP: 0010:lock_is_held_type+0x4/0x150
[  711.856792][    C0] Code: 96 04 48 c7 c6 84 b6 61 8e 67 48 0f b9 3a 90 eb ce 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 bb ff ff ff ff 83 3d 46 83 93 04 00
[  711.876581][    C0] RSP: 0018:ffffc9000448f2d8 EFLAGS: 00000246
[  711.882655][    C0] RAX: 1ffff92000891f42 RBX: dffffc0000000000 RCX: ffff88804100ddc0
[  711.890658][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888049f0e9b8
[  711.898636][    C0] RBP: ffffc9000448f430 R08: ffffc9000448f387 R09: 1ffff92000891e70
[  711.906601][    C0] R10: dffffc0000000000 R11: fffff52000891e71 R12: 1ffff92000891e6c
[  711.914561][    C0] R13: ffffc9000448fa10 R14: 0000000000000001 R15: ffff88804b125500
[  711.922545][    C0]  vma_expand+0x18f/0xf40
[  711.926891][    C0]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  711.933049][    C0]  ? seqcount_lockdep_reader_access+0xea/0x100
[  711.939228][    C0]  ? __pfx_vma_expand+0x10/0x10
[  711.944086][    C0]  ? is_mergeable_anon_vma+0x26f/0x3a0
[  711.949569][    C0]  ? can_vma_merge_right+0x69a/0x6e0
[  711.954853][    C0]  vma_merge_new_range+0x600/0x840
[  711.959963][    C0]  ? atime_needs_update+0x58e/0x6f0
[  711.965149][    C0]  ? __pfx_unmap_region+0x10/0x10
[  711.970169][    C0]  ? __pfx_vma_merge_new_range+0x10/0x10
[  711.975796][    C0]  mmap_region+0x1106/0x2270
[  711.980397][    C0]  ? __pfx_mmap_region+0x10/0x10
[  711.985323][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  711.990603][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  711.995804][    C0]  ? __mutex_trylock_common+0x15f/0x270
[  712.001351][    C0]  ? rcu_is_watching+0x16/0xb0
[  712.006124][    C0]  ? ima_free_modsig+0x4c/0x60
[  712.010993][    C0]  ? mm_get_unmapped_area_vmaflags+0xd9/0x110
[  712.017056][    C0]  ? cap_mmap_addr+0xaf/0x100
[  712.021734][    C0]  ? bpf_lsm_mmap_addr+0x9/0x50
[  712.026597][    C0]  ? security_mmap_addr+0x71/0x240
[  712.031697][    C0]  ? shmem_mapping+0xd/0x50
[  712.036195][    C0]  ? memfd_check_seals_mmap+0xc5/0x220
[  712.041663][    C0]  do_mmap+0xe0a/0x1300
[  712.045835][    C0]  ? _copy_to_user+0x8a/0xb0
[  712.051132][    C0]  ? __pfx_do_mmap+0x10/0x10
[  712.055743][    C0]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  712.060511][    C0]  ? down_write_killable+0x17e/0x240
[  712.065812][    C0]  ? __pfx_down_write_killable+0x10/0x10
[  712.071452][    C0]  vm_mmap_pgoff+0x272/0x4e0
[  712.076046][    C0]  ? lock_acquire+0x115/0x350
[  712.080722][    C0]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  712.085832][    C0]  ? __fget_files+0x2a/0x420
[  712.090422][    C0]  ? __fget_files+0x3a2/0x420
[  712.095095][    C0]  ? __fget_files+0x2a/0x420
[  712.099687][    C0]  ksys_mmap_pgoff+0x4dc/0x760
[  712.104456][    C0]  do_syscall_64+0x166/0x520
[  712.109052][    C0]  ? trace_irq_disable+0x3b/0x140
[  712.114069][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.120131][    C0]  ? clear_bhb_loop+0x70/0xc0
[  712.124804][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.130693][    C0] RIP: 0033:0x7f87f5e9f242
[  712.135105][    C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
[  712.154704][    C0] RSP: 002b:00007ffecfb3c6a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  712.163123][    C0] RAX: ffffffffffffffda RBX: 00007f87f5e47000 RCX: 00007f87f5e9f242
[  712.171179][    C0] RDX: 0000000000000001 RSI: 0000000000028000 RDI: 00007f87f5e47000
[  712.179148][    C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000096000
[  712.187116][    C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffecfb3c730
[  712.195085][    C0] R13: 00007f87f5e730c0 R14: 00007ffecfb3cab0 R15: 00000fffd9f678d8
[  712.203060][    C0]  </TASK>
[  712.206210][    C0] Kernel Offset: disabled
[  712.210527][    C0] Rebooting in 86400 seconds..