last executing test programs:

5m26.793288196s ago: executing program 0 (id=236):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a02000000039b180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

5m26.697754613s ago: executing program 0 (id=238):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000b0000000080000004"], 0x50)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_ax25_SIOCADDRT(r1, 0x891d, 0x0)
ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r5, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0xff}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x3c}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000b0000000080000004"], 0x50) (async)
syz_init_net_socket$ax25(0x3, 0x2, 0xf0) (async)
ioctl$sock_ax25_SIOCADDRT(r1, 0x891d, 0x0) (async)
ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async)
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) (async)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x300) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r5, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0xff}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x3c}}, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) (async)

5m26.401573288s ago: executing program 0 (id=241):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
close(0x3)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000000000)) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000400000002c0012800c0001006d6163766c616e001c00028008000900ffffffff080001000100000008000300000080"], 0x60}}, 0x8000) (async, rerun: 64)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64)
sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a00)}}], 0x1, 0x4000) (async)
socket$packet(0x11, 0xa, 0x300)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800deff010000009bcf7339150d25a295"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="259a53f27137b5a76d2688f54c65", 0x0, 0x4d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
shutdown(r3, 0x1) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x4, @remote, 0x4c7}}, 0x67c0}, 0x90)
r5 = socket$inet(0x2, 0x80000, 0x2) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={<r6=>0x0, 0x3, 0x6, 0x2, 0x1000, 0x7}, &(0x7f0000000100)=0x14) (rerun: 32)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000180)={r6, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, @in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000200)=0x10)

5m26.210968302s ago: executing program 0 (id=243):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
recvfrom$unix(r2, &(0x7f0000000480)=""/133, 0x85, 0x20, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)

5m26.086221508s ago: executing program 0 (id=245):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18)

5m25.839087012s ago: executing program 0 (id=249):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) (async)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc}, 0x60}, 0x1, 0x0, 0x0, 0x48004}, 0x24000040)

5m10.758905428s ago: executing program 32 (id=249):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) (async)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc}, 0x60}, 0x1, 0x0, 0x0, 0x48004}, 0x24000040)

2m41.064673447s ago: executing program 5 (id=1241):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000500)=r3, 0x4)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r6 = getuid()
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4e20, 0xe9eb, 0x4e20, 0x9, 0xa, 0x0, 0x0, 0x5e, r5, r6}, {0x3, 0x3, 0x0, 0x1, 0xffffffff, 0x9, 0x5, 0xf}, {0x100, 0x4d21a7df, 0x4, 0x7}, 0x5, 0x6e6bba, 0x1, 0x1}, {{@in=@empty, 0x4d3, 0x2b}, 0xa, @in=@multicast1, 0x3500, 0x2, 0x0, 0x8, 0x5, 0x7, 0x2}}, 0xe8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m40.806948721s ago: executing program 5 (id=1245):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket(0x2, 0x2, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x1, 0x0, 0xfa9a, 0x5, 0x3, 0x1, 0xffffe7cf}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0x10, 0x10, 0x509}, 0x10}], 0x1}, 0x40040)

2m40.269586056s ago: executing program 5 (id=1252):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x24c)

2m39.34187254s ago: executing program 5 (id=1265):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300100000fe8000000000000000000000000000aafe8000000000000000000000000000aa890100"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x2}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd250}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x20000084)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
close(r8)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='vegas', 0x5)

2m37.91099757s ago: executing program 5 (id=1280):
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0x4]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x6, 0x0, 0x2]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4040051)
recvfrom$inet(0xffffffffffffffff, &(0x7f00000002c0)=""/24, 0x18, 0x40, &(0x7f0000000300)={0x2, 0x4e24, @local}, 0x10)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000440)={<r2=>r1, &(0x7f0000000340)='\x00', 0x80001, &(0x7f0000000380)={@align=0x4800000000, {0x4, 0x4, 0x400, 0x5}}, 0xb9, &(0x7f00000003c0), &(0x7f0000000400)=0x9})
r3 = openat$cgroup_devices(r2, &(0x7f0000000480)='devices.allow\x00', 0x2, 0x0)
sendto$inet(r2, &(0x7f00000004c0)="38d5ee9a3a509ddb7c35a51fe2a93d5741bb488d5d78581b28780d76030127be5a75d497bb9bc35379c8b7f25189e582e5", 0x31, 0x4000, &(0x7f0000000500)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
sendto$inet(r2, &(0x7f0000000540)="44a726e23a6928a3532e8df71f56a9a30415d1057e97e65bc6101808f4216ed5093c1fc914b60448e95e8f7ca9687108ddcc284e84fa9653082d7527df32d4614ade90ac986be766903ae69f5a623089251150795a43356559f3f59c4c56c9851d479a6ccc34e673ca8c678377efb5bb53093d88a01df79056546808ca8a26dde5addc6f5b36fb82d906962e49826d543e72269a2137050128017dfcbea9d825b601c75ab0651f4de271b48b9b51614e6400d4393019d6734d86a1c26724572931c7b8aa0341b694c3", 0xc9, 0x108, &(0x7f0000000640)={0x2, 0x4e22, @loopback}, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x400c0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f00000007c0)=0x7, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000800)={@local, 0x40, 0x0, 0x0, 0x1, 0x1, 0x8}, 0x20)
bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e22, @private=0xa010102}, 0x10)
read$rfkill(r2, &(0x7f0000000880), 0x8)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000009c0)={<r5=>r3, &(0x7f00000008c0)='\x00', 0x460003, &(0x7f0000000900)={@_ha_fsid={[0x6, 0x7]}, {0x8, 0x8, 0xa, 0x9}}, 0x6, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0xc7e})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x108, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10000, 0xb}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xf, 0x6}, {0x9, 0x3}, {0x5, 0x1}, {}, {0x7}, {0x9, 0x3}, {0xd9, 0x1}, {0x8, 0x1}, {0x8, 0x1}, {0xe, 0x4}], "2574f02a29bc55eb"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x0, 0x5}, {0xf7, 0x4}, {0x4, 0x5}, {0x7}, {0x4, 0x1}, {0x2, 0x5}, {0x7f, 0x6}, {0x0, 0x4}, {0x4, 0x2}, {0xa, 0x4}, {0xfa, 0x3}, {0xf, 0x2}, {0x8f, 0x7}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x4}, {0x9, 0x2}, {0x2, 0x4}, {0x8, 0x7}, {0x1, 0x1}], "a90b5860cc335c81"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x0, 0x3}, {0xd, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x9, 0x5}, {0xd4, 0x2}, {0x7, 0x1}, {0x7, 0x2}, {0x3a, 0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x5, 0x2}, {0xc0, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0xff, 0x7}, {0x3, 0x2}, {0x5, 0x6}], "245ba2e63347abd3"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x10}, {0x1, 0x5}, {0x8, 0x4}, {0x38, 0x4}, {0x1, 0x4}, {0x3, 0x1}, {0x4, 0x2}, {0xfb, 0x4}, {0xe, 0x6}, {0x2, 0x1}], "1013cc0db8a93844"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6, 0x4}, {0x0, 0x3}, {0x9, 0x4}, {0x7f, 0x3}, {0x2}, {0x0, 0x1}, {0x3, 0x7}, {0x8, 0x2}], "c00f896a8bee2c7e"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x8}, {0x7, 0x3}, {0x4, 0x4}, {0xa, 0x1}, {0x8}, {0x7, 0x1}, {0xf, 0x5}], "4eb14b67a6c18c9f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x5}, 0x4000040)
setsockopt(r2, 0x40, 0x1, &(0x7f0000000c40)="54ce504fceef00ba8d908953ee9d0c839d0c5696e8410a32d5", 0x19)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x802, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r1, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d40)=[0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000001040)={@ipv4={""/10, ""/2, @dev}, <r10=>0x0}, &(0x7f0000001080)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001140)={'gretap0\x00', &(0x7f00000010c0)={'sit0\x00', <r11=>0x0, 0x700, 0x40, 0x1, 0x6, {{0x14, 0x4, 0x2, 0x4, 0x50, 0x67, 0x0, 0xf, 0x4, 0x0, @private=0xa010100, @empty, {[@cipso={0x86, 0x28, 0x3, [{0x1, 0xb, "11bb9159dae93f389d"}, {0x6, 0xf, "69bfdb8379820163338a92cef8"}, {0x6, 0x3, '\f'}, {0x7, 0x3, "fa"}, {0x0, 0x2}]}, @cipso={0x86, 0x13, 0x3, [{0x6, 0xd, "0fc24c5c06ec031fe16bb3"}]}, @end]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r2, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x54, 0x8, 0x8, &(0x7f0000001340)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001540)={'syztnl2\x00', &(0x7f00000014c0)={'syztnl0\x00', <r13=>0x0, 0x2f, 0xd2, 0x6, 0x7ff, 0x1d, @loopback, @remote, 0x8, 0x1, 0xc0000000, 0x6}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r2, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000001640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000001700)}}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000001fc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000001f80)={&(0x7f0000001d80)={0x1d8, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x44000}, 0x10)

2m37.828531686s ago: executing program 5 (id=1282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4b64}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x300, 0x70bd26, 0x6, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}}, 0x40000c4)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000000800064000000002040004800900010073797a30"], 0x10c}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000000901040000001c00000000070000000900010073797a292e2f3a759e9aff4a0a5c30000000000c000480080001400000000072d25efe1dd5ab4134849912313857729619b359e4cbedbf7170862db525a8ab08d41a6e1b942ed577aee853e12adccfe7f638200231dfc3ada85ab3353497dc5d57786092c4b47e9fe9f988ae56d6a1002e5addb23e1e18eab0e70e6d71d4e4ee72"], 0x2c}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x1a, 0xe11, 0x0, 0x0, {0x1c, 0x0, 0x300}}, 0x14}}, 0x44800)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x8000000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@delnexthop={0x50, 0x69, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x50}}, 0x0)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x90, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1a8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0x47, 0xd, 0x1, 0x0, "9c416a80b7fd9fa5769ba618df208470cae34552cb9b25a990567fc89391b4da139ffed12b06f114106a35bd5980b069cc69725d8ad27659b426bea05358257b23f9e4"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2m22.782811081s ago: executing program 33 (id=1282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4b64}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x300, 0x70bd26, 0x6, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}}, 0x40000c4)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000000800064000000002040004800900010073797a30"], 0x10c}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000000901040000001c00000000070000000900010073797a292e2f3a759e9aff4a0a5c30000000000c000480080001400000000072d25efe1dd5ab4134849912313857729619b359e4cbedbf7170862db525a8ab08d41a6e1b942ed577aee853e12adccfe7f638200231dfc3ada85ab3353497dc5d57786092c4b47e9fe9f988ae56d6a1002e5addb23e1e18eab0e70e6d71d4e4ee72"], 0x2c}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x1a, 0xe11, 0x0, 0x0, {0x1c, 0x0, 0x300}}, 0x14}}, 0x44800)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x8000000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@delnexthop={0x50, 0x69, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x50}}, 0x0)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x90, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1a8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0x47, 0xd, 0x1, 0x0, "9c416a80b7fd9fa5769ba618df208470cae34552cb9b25a990567fc89391b4da139ffed12b06f114106a35bd5980b069cc69725d8ad27659b426bea05358257b23f9e4"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

7.539572171s ago: executing program 2 (id=2768):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1}], 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r4, &(0x7f00000006c0), 0x0}, 0x20)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @multicast2}, {0x0, @remote}, 0x0, {0x2, 0x4e20, @local}, 'pimreg1\x00'})
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xfffffffd}, 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r6)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050529bd7000fddbdf252100000005002000010000000a0001007770616e3000000005002000000000000c0005000203aaaaaaaaaaaa050020000100000005002000000000000a0001007770616e3100000005002000fc0000000c000500000000000000000009001f0070687932"], 0x78}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000800)
r9 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x98, r13, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x70, r10, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x4041)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

6.934915796s ago: executing program 2 (id=2773):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=r1, @ANYRES8=r0, @ANYRES8=r2], 0x48}, 0x1, 0x580f0200000000, 0x0, 0x24044843}, 0x0)

6.60791299s ago: executing program 2 (id=2778):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@beacon, @NL80211_ATTR_HE_OBSS_PD={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048044}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4)
recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000740)=[{0x1, 0x1, {0x0, 0xf0, 0xd}, {0x2, 0x1}, 0xfe, 0x1}], 0x20)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x51}, 0x28)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@null, @rose, @remote, @netrom, @bcast, @remote, @null, @null]}, &(0x7f0000000100)=0x48, 0x180000)
sendto$ax25(r9, &(0x7f0000000200)="3cfe6c5bfe1cd55727883b7c286cb3001a560765c75d34133bcac69bbf3d0e8b146ecca2a9140e1a61769d8f9b448954a75e04044b66c502ff681388c7be3a786414169ae87136dda55c9926a318e3e54517623ffe047f12942573610b87d9e69093cd326b9985f07b258ba5c8c930743752ce9767", 0x75, 0x2000c004, 0x0, 0x0)
setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x5f)

6.391762002s ago: executing program 2 (id=2781):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020605200700000000000000000000000c00078008001200000000000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x404)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_PORT={0x6, 0x6, 0x4e24}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0)
recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002700)=""/4113, 0x1011}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000002540)=""/210, 0xd2}], 0x8}, 0x40030162)
syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="110000200000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x20000010)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r6)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd8, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0xfffffffffffffe76, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x2c0, 0x18, 0xa, 0x101, 0xb00, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0xfffffffffffffdda, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x9, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x3e0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006b01a400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000840)={0x41, 0x1, 0x3}, 0x10)

4.721126449s ago: executing program 2 (id=2789):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=r1, @ANYRES8=r0, @ANYRES8=r2], 0x48}, 0x1, 0x100000000000000, 0x0, 0x24044843}, 0x0)

4.466271511s ago: executing program 2 (id=2792):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000001980)=ANY=[@ANYRES16=r0, @ANYRES16], 0x1c)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
close(0x3)

4.014491321s ago: executing program 1 (id=2799):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8e32})
r1 = socket$kcm(0x2, 0xa, 0x2)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x4, 0x7ff, 0x6, 0x401, 0x5]}, &(0x7f0000000300)=0x78)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000580)={<r2=>r1, &(0x7f0000000480)='\xaa\xaa\xaa\xaa\xaa', 0x0, &(0x7f00000004c0)={@align=0x1, {0x3, 0x5d4, 0xfffffffb, 0x1c}}, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0xffffff01})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x154, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eeaa00b6605240cae008fcf811dc0ef242127793f9ea44f5"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2cf8b3a5e2aae7e17d06f1d82498a0920e29170db73a94a0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4af12dff654b095770ac7ce7f19b3e596cd8a0a7d6afdf3e"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d65a1ca1c86bfd0fe504d3c3fff8bcce1de5b813d62d8688"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x154}, 0x1, 0x0, 0x0, 0x48880}, 0x20040800)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
recvmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1, &(0x7f0000000200)=""/23, 0x17}, 0x42)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000340)={0x3, {{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, 0x108)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000030425bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00130000000000007000128009000100766c616e00000000600002800600010002000000280003800c00010023000000060000000c00010000020000090000000c0001000000000001000100100004800c00010001000000010400001c0004800c00010003000000020000000c0001c3405521e0a2c7760008000500", @ANYRES32=r6], 0x98}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)
write$tun(r2, &(0x7f0000000880)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@val={0x88a8, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4000, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0xa000, 0x6558, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "b16b0ab26a0aebe7e505b4ad6ff060ac607f242ffc52759d13895783dcc78bd6", "99148cd590b0bb4c35655341498a6100", {"ca81328caf98614f5d097b8930166828", "53f65125cadda9728c8c2c09a611d463"}}}}}}}}, 0x8e)

3.534274939s ago: executing program 4 (id=2800):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x80047437, &(0x7f00000002c0)={'vlan0\x00', 0x8401})

3.350421987s ago: executing program 4 (id=2802):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)=""/40, 0x28}], 0x2}, 0x5}], 0x1, 0x10022, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)

3.284018247s ago: executing program 1 (id=2803):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=r1, @ANYRES8=r0, @ANYRES8=r2], 0x48}, 0x1, 0x101000000000000, 0x0, 0x24044843}, 0x0)

3.151139603s ago: executing program 4 (id=2805):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f00000002c0)={'vlan0\x00', 0x8401}) (fail_nth: 3)

3.149088302s ago: executing program 1 (id=2806):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001214000126bd7000fcdbdf25080001000000000008004b001300000008004f000300000008004f0001000000080003000300000008004b001300000008004b0013000000488f48303cb2d4910f1e2630f431283367c6218e58f3162253fbd6beeb93da0583b599e023967eedda1f387a9f2ffa20f551fc6584c055685b616db89a4deeedc7c6cb34b68b85bf1bf93d0643c7f98fa2baf6832dac71a7894e0cc0c1bb856d5ec3c0648ca32bd846b4e199eb7e7b54b2ed75ad6170c712b9d1704cfd8889331aed83650d0ed37014de5e5037b5474838f1a3e637732c1a1bbd5a09f86705e74ae4069b0cafa7904528b6e88e63"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x400000000010, 0x3, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010202001400020077673200000000000000000000000000090001"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x5, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

2.981848422s ago: executing program 6 (id=2807):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/195, 0xc3}], 0x1}, 0x0)
recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/192, 0xc0}], 0x1}, 0x2103)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67)
ioctl$sock_netdev_private(r4, 0x8924, &(0x7f0000000000))

2.942427472s ago: executing program 3 (id=2808):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d6174636800000024000280080003000100000008000240000000000e000100636f6e6e6c6162656c0000000900010073797a3000"], 0xd4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa000000000000000000000000750b4e0000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000200010028001d00"], 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000004c0)=0x14)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
unshare(0xa020480)
r7 = gettid()
r8 = syz_open_procfs$namespace(r7, &(0x7f0000000040)='ns/mnt\x00')
unshare(0x6020400)
close(r8)
sendmsg$netlink(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c28"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0x90}}, 0x0)

2.843045852s ago: executing program 4 (id=2809):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0x90}}, 0x0) (fail_nth: 5)

2.557388302s ago: executing program 4 (id=2810):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) (rerun: 64)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x40, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_O_TEI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20008041) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067256e65766500c22125cd8004000600060005004e24000008000a00", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32)

2.221792489s ago: executing program 3 (id=2811):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
close(0x4)

2.091301144s ago: executing program 3 (id=2812):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
splice(r0, &(0x7f0000000040)=0x8000000000000000, r0, &(0x7f0000000080)=0xfffffffffffffffd, 0x2, 0x5)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
writev(r0, &(0x7f0000000240), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000068000000000000000000fc0963e89a0cba3d68cc2143960071121800000000009500000000e549d91919415228add0f19c3ed53e21031de085aea30e464165d9e6d4e3b3b47c7f8921b3e86b181d54e4c3fb22d854f1f8c47c751d844e272dc17cea750776af2960aff62a0e55102a6dec27d64a14d640f03c2aad6ac10c2ee2a2b5f8a861f8c68109836970e6ba0c77b2f276786c4647e66a74d0dceb26e035db"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xd4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xfffffffffffffc3e, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x104}}, 0x2000c800)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001c00200025bd7000fcdbdf251c0e3dc6", @ANYRES32=r1, @ANYBLOB="40000304140003003c060000bd00000007000000eb010000080004000400000005000c000200000008000d000900000005000c0002000000060006004e20000008000100ffffffff08000a00040000000a000200201cabd068d10000"], 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x44000)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000780)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x1, 0xfffffffffffffff5, 0x80, 0x2, 0x9], 0x0, 0x0}, 0x78)

1.89890837s ago: executing program 6 (id=2813):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x68, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, '\x00\b\x00'}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0x9, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4)
r4 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x0, @broadcast}, &(0x7f0000000100)=0x80, 0x800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6, @local, 0x2}]}, &(0x7f0000000200)=0x10)

1.73203951s ago: executing program 6 (id=2814):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fe0500254c0000000c0058003b000000000000000c00580008000000000006000c0058002a000000000000000c0058007a000000000000000c00580007000000000002000c0058004200000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) (async)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fe0500254c0000000c0058003b000000000000000c00580008000000000006000c0058002a000000000000000c0058007a000000000000000c00580007000000000002000c0058004200000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x3) (async)
shutdown(r1, 0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x54, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e22, 0x0, @loopback, 0x3}, @in6={0xa, 0x4e1d, 0x1, @mcast2, 0xa00e}]}, &(0x7f0000000180)=0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x816a, 0x3, 0x3, 0x9}]}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000540)={r2, 0xc, 0x30, 0x6a, 0x1000}, &(0x7f0000000580)=0x18) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000540)={r2, 0xc, 0x30, 0x6a, 0x1000}, &(0x7f0000000580)=0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000100)=""/183}, 0x20)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0x11, 0x3, 0x0) (async)
r6 = socket$kcm(0x11, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000180)=0xc)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x81}, 0x3c)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050425bd7000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xad}, 0x1, 0x0, 0x0, 0x4000431}, 0x20000084)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x200008c0}, 0x6040000)

1.560037629s ago: executing program 4 (id=2815):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7f}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9f223785b5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000400)={0x7, 'wlan1\x00', {0x9}, 0x5})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40084)
listen(0xffffffffffffffff, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff})
accept4$alg(r6, 0x0, 0x0, 0x800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="f616675411cebfad0f2315d3c7447fc15eff4fa73074741b5f8061729e84ae5035aa7675c1b16aae10d1c9b1ec0ae523d54febdafaf702e1761e65c4e3d9034b228f30486ec7f270f941e378cf1d2d2be5005a0e4570265d5fb92e5599994a551517858b4c6f31ba87bcf225eeeb7a0c7c7ba27b445b8b80476c09c9adc06c42c78b024a890b32495689eba888678a963b554cd529947b28454e51232397c5ad46d2bca05a41dcfd1dada57523af3cd32d2bdb119b88b5f7e92d9ed78af44ba29b84b8c84e639b6212ba2b66674c8cd4c3907f8644203bc728147f8b", @ANYRESDEC=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000001780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.417500376s ago: executing program 3 (id=2816):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffffe00}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080)
r6 = socket$inet6(0xa, 0x805, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r7], 0x40}}, 0x0)
poll(&(0x7f0000000240)=[{r8, 0x2220}], 0x1, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, 0x0, 0x25, 0x2, @void}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x800)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x288, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_VFINFO_LIST={0x258, 0x16, 0x0, 0x1, [{0xc8, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xffffffff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x33e5, 0x10000, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x800, 0x40}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7fffffff, 0xbeb, 0x0, 0x88a8}}, {0x14, 0x1, {0x8, 0xd22, 0x1ff}}, {0x14, 0x1, {0x3ff, 0x5b8, 0x5, 0x88a8}}, {0x14, 0x1, {0x24, 0x100, 0x3ff, 0x8100}}, {0x14, 0x1, {0x5, 0xce1, 0x8}}, {0x14, 0x1, {0xc, 0xfdb, 0x5, 0x8100}}]}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x5af, 0xe5e8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xd, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x2, 0x7}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x6c9, 0x9}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1, @remote}}]}, {0x108, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x80}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x80000000, 0x7f}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0xfffffffe}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf, 0xa85c}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x2}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x969, 0xffffffff, 0x8100}}, {0x14, 0x1, {0x7f, 0x899, 0x1ff, 0x88a8}}, {0x14, 0x1, {0x4, 0xfa8, 0x1, 0x88a8}}, {0x14, 0x1, {0xe, 0x750, 0x3, 0x8100}}, {0x14, 0x1, {0x2, 0xd4f, 0x1, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xa089, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @broadcast}}]}]}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x288}}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)

1.396447454s ago: executing program 1 (id=2817):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socket$inet6(0xa, 0x3, 0x6) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)

1.297334652s ago: executing program 1 (id=2818):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f00000002c0)={'vlan0\x00', 0x8401}) (fail_nth: 4)

1.109859684s ago: executing program 6 (id=2819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0x90}}, 0x0) (fail_nth: 6)

1.064271704s ago: executing program 3 (id=2820):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async)

838.525128ms ago: executing program 1 (id=2821):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0xf, 0x6, 0x1c0000)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xfffffd97, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a)
read$nci(r13, 0x0, 0x0)

490.678747ms ago: executing program 6 (id=2822):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) (async)

385.323751ms ago: executing program 3 (id=2823):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a0a16ca38b7d66731575fdaa03ed00cda83c3e0d6f48536847fa956461e9e32e694348191d9446b3b18f775d4b19069d56c04931faffffffffffffffe3b3763adfd62f66964395726f42d9a096d047897a0cc756715b406726567833c77d673fb7ca9db324465244bd0c8bebe99dded1216f970fcc3fab6f304504b423ebe99589f7dbf2d5bda597cd96b1facb19c1f26da747df6b2835551d81f8e7fb9b94010df642abe6f28860681d4960d80820c827674d7db8fde5a71ee1f2d90927f71a13312ebfa1350276e62be0f37fa3fd5086abb43ddc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r1 = socket(0x10, 0x803, 0x2)
r2 = epoll_create1(0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100c3ffffff660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30)
r5 = socket(0x1, 0x80802, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
close(r6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200))
shutdown(r5, 0x0)
close(r1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r0, &(0x7f0000001040)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x7, 0xc5, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x7, 0xe2, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1, [0x1]}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xde, 0x1, 0x1, 0x1, 0x2, 0x4}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x2, {{0xc, 0x2, 0x42, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x2, {0x40, 0x200, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "c60a1891ee42184d6c69e305b7a82a3dc45a42e2df696a257241df4db187b59d0874adc6fb98f42729216e060dfdcd871da0abfa54faec83519f0646824d1b5a00d94d50e271907d6c9e61c5749b41dd2a7b85358dd8eca78f465505de1668b82968537985b5dc566f9e2256b0374f1f588a8443e824b9f2ca99fe25b8950382223c7931fa357112"}}}}, 0xf0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r7, 0x8947, &(0x7f00000002c0)={'vlan0\x00', 0x8401})

0s ago: executing program 6 (id=2824):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10, 0x2}, 0xe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', <r4=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000180)={0xbe4, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0xb84, 0x8, 0x0, 0x1, [{0x630, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_ALLOWEDIPS={0x59c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a2bcda60da6398f3aab33761dda421644b4a512222bebef812be34adaae539e2"}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2420d4af9f515d2576ce8402964977896abbb00128d881e37c7b79e5e26788bf"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80000000, @loopback, 0x10000}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9fd1b310f72c22359f21c9a820d5bf77ba73f15f4f3414c2d803affeadc00eef"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe01e}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2ee0}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @local, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @private0, 0x1}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x31c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ae995c2d36feebdc54cdce94192f0811bbd6698593556eb4362f7e9629f29761"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4fc4beae317074e964cf4629f7a68a27ee440519dc17183ffb4febbf91ec23c1"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4b5c3ad2d4de1f2e2833614ea7462caa96d1864792c59c4bc5ff095d478d35ea"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffff9, @private2, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xad}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xbe4}, 0x1, 0x0, 0x0, 0x24000800}, 0x20040084)
socketpair(0x0, 0x7, 0x4, &(0x7f0000000e00)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r5)
sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xec, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x20000041)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r5)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000001300)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f00000010c0)={0x200, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5cc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffffff, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8f, 0x3, "07af33d08c5bbdf7b1616608aa9e29307dc8d4ae80ab78a4f60747f68eb74874975241a21ebb60a481b8d1de57262392bfe6bfc285acb562bedd8f9a575e6fee866014c1b1345f369cec86fff25260c70bd2e4c0fed548f8551c8e96fcf26dc1dc5e4bb11144a6120332164231cab780c2c5617f075b3e8388a648923ad3ac0a319b5a73ef22704f016054"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e4a1e9a99a16c95501f6d494439ad7adce232ee15853"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40}, 0x11)
getsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000001340)={@dev, @private}, &(0x7f0000001380)=0x8)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000013c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000001800)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xd4, r9, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TESTDATA={0xb8, 0x45, "709b4d5501693915d9362c9a83e6c9f8facb9b733cdd647fcecc2af128e00ba9df4d3a92be9b48bb3a1bc9e5c476c055490d9e5905e0f9f2c68fca3dfb45319f995e91793407af58322574972976974185c17644cb27c473f6cc14b5c53860c10ea9e9f7e3b463c34045174fe3371868af7c0814f83caa748e451ae250260fe3a26609e26a89821ca0ac91dacdbf601e217ad4a128baeb66d758720c24d58729a9499d5981dc19b408cb63b8f0e2516666c82511"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008850}, 0x4c000)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000001840)={0x1, 0x1}, 0x8)
r11 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IP_SET_OP_GET_BYINDEX(r11, 0x1, 0x53, &(0x7f0000001880)={0x7, 0x7, 0x1}, &(0x7f00000018c0)=0x28)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000002900)={&(0x7f0000001900)=""/4096, 0x1000, 0xe, 0x211})
sendmsg$nl_generic(r2, &(0x7f0000002bc0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000002980)={0x1f0, 0x42, 0x20, 0x70bd29, 0x25dfdbfd, {0x13}, [@nested={0x10, 0x9c, 0x0, 0x1, [@typed={0x5, 0x142, 0x0, 0x0, @str='\x00'}, @generic, @nested={0x4, 0x11d}]}, @nested={0x15e, 0x28, 0x0, 0x1, [@nested={0x4, 0x58}, @nested={0x4, 0x16}, @generic="c14a48957c74d7e77dbf3675781d8f4f14ed6d4c618af91bbb67befaa56020416ad9622d855ae21485fd2b682bbe60c958832c78e5fc8ee3993f4b531273dfec83e4a95f2e05fd415494e9374da257580dfb5e2eeee219474122a17f98dcc3a5e8709296570c6aaa3f454b4dd9fd54e99bbe43ae71d8ebba761cb41ac0346aa516d13e645312", @generic="afe0e4ca6cfd7c29849419fc9b39ffa3b2338e8d56c97403f4aeaf1560eba33a230597488789c178439b220267533785becdb721d6dba0cc448e2e0716842e406c9355b218397df1b1aaa52820a6b59b82a05ad7a066f95172e507645830d642959e7edc7cacdf988a7e52a3bb03c39f8b5fccdc4a437e6cf2b6dd62b092cec8ddf780cf12a5e252d5000ecedd35e59067b71a29dce1d0942c3d50847af3a997c37cb63650d4af8785bbb253953d", @nested={0x4, 0xdc}, @generic="af5e6ee0730dfddab644f6f0cd35b52fa68bf1ed6a1466576024"]}, @generic="7f0f6734be060299cee3e61493253a30212c8a9337c5c8c575f903909caf9db16fba8635ae9fd87a21c83f32f0e6cabe9c629dc12c8e296aee0b33b5ff636bf29fc363de88f464c545", @generic="aa18750fa4f0684e4516a468d9b06bda8431007b7cae1fe9260535a5895591402dbd"]}, 0x1f0}, 0x1, 0x0, 0x0, 0x50}, 0x400c5)
connect$inet(r6, &(0x7f0000002c00)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000002d40)={<r12=>r2, &(0x7f0000002c40)='@--{%)[^](\x00', 0x101000, &(0x7f0000002c80)={@align=0xa84, {0x10, 0x8d9, 0x7f}}, 0x0, &(0x7f0000002cc0)={@_ha_fsid}, &(0x7f0000002d00)=0x5})
r13 = syz_genetlink_get_family_id$fou(&(0x7f0000002dc0), r5)
sendmsg$FOU_CMD_GET(r12, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x78, r13, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x19}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$inet(r12, &(0x7f00000033c0)={&(0x7f0000002f00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003280)=[{&(0x7f0000002f40)="45754636b058c50093877aaf2ce264fcb6e07d2d5ce7f1808d8f9b7a1e2ff21e6d318800194076c3c9df40c4c5bd624ad6083827dc4f145f5b94e5404cdcd670019b594b77f12d141ddc91426a744a978be24190cdb4f3c863849729f4d6cb8a63f9672f2c8bca45ffeee56dd0260807561eb3bbb4ede0b98f79e746fc3509f4f640d316248a97051eb6e9752646a6e99db772e42bfdc19bf623e979fe86ed95c9965db4e7a54dd97d737bf108e187072991caea0e8c7578cf11d983d591a3fb8d84db5efeadaa9e8a1205f39c081f8927b0c79ee69d7d954659164d7958", 0xde}, {&(0x7f0000003040)="3bb572b30165c240608cd7305c", 0xd}, {&(0x7f0000003080)="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", 0xff}, {&(0x7f0000003180)="389202eba27868a2f76534f5bac64bc5b8cef15cb383c78b827434522d33746f135e6ed0b16e99796e1047d2c8d5499338bbf5cec77b46a5e3cf150f56eedf9dadc4a71b18459e950b0583245ca2400e6a93cfc186da6b99e02652c132bf79f45f97b210be2c76cb425fa058bc1cd54d56553bf578e132dbce5cb9f0fa022f8d6a3a3139309223dc141675a734dbf6a929257c27bebcea3e34e2c5731c3b16f445831b95ab88b5fe6bbea1093832d9aff9d2e1e60e35fec7a801752a201be8445e3133f8481494f936e7888c902d1192b1f0cde4c494b2a939c78c2d2fcb375adef54c12cbf4395d2f8e51c88d556d059f4a", 0xf2}], 0x4, &(0x7f00000032c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0x17, 0x78, [@broadcast, @multicast2, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}]}, @lsrr={0x83, 0x2b, 0xd5, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, @local, @empty, @remote, @empty, @empty, @local, @broadcast, @multicast2]}, @rr={0x7, 0xb, 0x66, [@broadcast, @broadcast]}, @lsrr={0x83, 0xb, 0x8d, [@broadcast, @private=0xa010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xc8}, 0x20000000)
bind$inet(r6, &(0x7f0000003400)={0x2, 0x4e22, @multicast1}, 0x10)
writev(r12, &(0x7f0000003600)=[{&(0x7f0000003440)="f1220ad3f4537edb943701a4fe1b1320148faed5beffe84eb7a2492d842ecde355133fd1f6ade74086c111a7b2561976e53548974fd8d625eeb73c", 0x3b}, {&(0x7f0000003480)="781d9d4597db80293b8316d43780aa0a7c7cbfad32fb393cf69815e6ab8e3e03d70c610dc00bfc346b61144540e188141a28c8c5e848f2d74eb9713b5c8481eaea399ac755a544d1daf1ee26a1b2254873f4bf8178673cf3514078a285a8a47f96ddd1b299bfbd7598a12d80bfba44f7b59234aa2dc9cd2dce3e809efe80f4a55f022b6ab8bcc60be13895351c03d3df60eb474a7cfca485dce45399cce3c41bc8dbfa5c87f66f8bf522ff8a979da5416f7a472aeec417d2d6eecf381519797fee8304763ee8b7ee8f92068b1210980f966d510078f9b3", 0xd7}, {&(0x7f0000003580)="82b0504643942619a338eb5016cd697c1e792823991e0ff4361746fe4bea0c7ef3977f3d1e7d9878163df2646d9c2f2b61e3301dd015a5d5d68d409a0b0e9475b54f04", 0x43}], 0x3)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000003640)=0xfffffff7, 0x4)

kernel console output (not intermixed with test programs):

vsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.622143][ T5968] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.640040][ T5968] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.689842][ T5968] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.900339][ T6300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.908220][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.972524][ T6300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.995600][ T6300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  661.011435][ T5851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  661.602489][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'.
[  661.666365][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'.
[  661.675549][T11852] netlink: 'syz.3.1464': attribute type 15 has an invalid length.
[  662.140136][ T5891] Bluetooth: hci6: command tx timeout
[  662.404650][T11870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1467'.
[  663.640194][T11918] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1479'.
[  663.748139][T11923] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  663.816068][T11906] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  663.900803][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'.
[  664.179840][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1484'.
[  664.210596][ T5891] Bluetooth: hci6: command tx timeout
[  664.227144][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1484'.
[  664.251273][T11940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1484'.
[  664.279249][   T10] lo speed is unknown, defaulting to 1000
[  664.471124][T11941] netlink: 'syz.4.1484': attribute type 2 has an invalid length.
[  664.505705][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'.
[  664.596350][T11953] lo speed is unknown, defaulting to 1000
[  664.779676][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'.
[  664.832341][T11965] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1492'.
[  665.176636][T11980] bridge_slave_0: left allmulticast mode
[  665.190158][T11980] bridge_slave_0: left promiscuous mode
[  665.202968][T11980] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.264902][T11981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1494'.
[  665.287302][T11980] bridge_slave_1: left allmulticast mode
[  665.296439][T11980] bridge_slave_1: left promiscuous mode
[  665.302718][T11980] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.353628][T11980] bond0: (slave bond_slave_0): Releasing backup interface
[  665.379120][T11980] bond0: (slave bond_slave_1): Releasing backup interface
[  665.423932][T11980] team0: Port device team_slave_0 removed
[  665.436399][T11980] team0: Port device team_slave_1 removed
[  665.443955][T11980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  665.451559][T11980] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.461978][T11980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  665.469585][T11980] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.987836][T11980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  666.034701][T11983] team0: Mode changed to "loadbalance"
[  666.257923][T12000] block nbd3: NBD_DISCONNECT
[  666.268592][T12003] dvmrp0: left allmulticast mode
[  666.323547][T12007] siw: device registration error -23
[  666.375288][T12004] lo speed is unknown, defaulting to 1000
[  666.479663][T12000] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  666.597954][T12017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  666.608433][T12016] syzkaller0: entered promiscuous mode
[  666.648075][T12016] syzkaller0: entered allmulticast mode
[  666.943202][T12016] tipc: Resetting bearer <eth:syzkaller0>
[  667.331334][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'.
[  667.624782][T12013] tipc: Resetting bearer <eth:syzkaller0>
[  667.791871][T12064] netlink: 'syz.6.1519': attribute type 1 has an invalid length.
[  667.910618][T12013] tipc: Disabling bearer <eth:syzkaller0>
[  668.015843][ T5882] tipc: Node number set to 3893496908
[  668.082898][T12064] bond1: entered promiscuous mode
[  668.088504][T12064] 8021q: adding VLAN 0 to HW filter on device bond1
[  669.247412][T12137] Cannot find del_set index 1 as target
[  669.345902][   T30] audit: type=1800 audit(1773713376.731:73): pid=12137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1538" name=CB dev="tmpfs" ino=1539 res=0 errno=0
[  669.421477][T12145] siw: device registration error -23
[  669.430282][T12141] sch_fq: defrate 4294967293 ignored.
[  669.661949][T12153] lo speed is unknown, defaulting to 1000
[  669.785513][ T3021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  669.810960][ T3021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  669.830686][ T3021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  669.918986][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'.
[  669.935174][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1546'.
[  669.946942][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1546'.
[  669.956349][T12166] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1546'.
[  669.982534][ T3021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.036823][T12162] netlink: 'syz.4.1545': attribute type 1 has an invalid length.
[  670.049239][T12166] netlink: 'syz.1.1546': attribute type 1 has an invalid length.
[  670.057272][T12166] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1546'.
[  670.101582][T12162] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1545'.
[  670.621082][   T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  670.632512][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  670.721969][T12188] syzkaller0: entered promiscuous mode
[  670.730044][T12188] syzkaller0: entered allmulticast mode
[  670.759550][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'.
[  671.075593][T12217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  671.150810][T12215] syzkaller0: entered promiscuous mode
[  671.156693][T12215] syzkaller0: entered allmulticast mode
[  671.208076][T12215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1558'.
[  671.249406][T12211] tipc: Resetting bearer <eth:syzkaller0>
[  671.288327][T12211] tipc: Disabling bearer <eth:syzkaller0>
[  671.623736][T12228] syzkaller0: entered promiscuous mode
[  671.632462][T12236] netlink: 'syz.2.1564': attribute type 13 has an invalid length.
[  671.642168][T12228] syzkaller0: entered allmulticast mode
[  671.647885][T12236] netlink: 'syz.2.1564': attribute type 27 has an invalid length.
[  671.686873][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'.
[  671.893706][T12251] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  674.071920][T12268] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1576'.
[  674.120511][T12268] netlink: 'syz.6.1576': attribute type 5 has an invalid length.
[  674.706939][T12307] sit1: entered promiscuous mode
[  674.936462][T12325] __nla_validate_parse: 2 callbacks suppressed
[  674.936485][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'.
[  675.088594][T12328] syzkaller0: entered promiscuous mode
[  675.109012][T12328] syzkaller0: entered allmulticast mode
[  675.607927][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'.
[  675.629526][T12352] bond8: entered promiscuous mode
[  675.635281][T12352] 8021q: adding VLAN 0 to HW filter on device bond8
[  675.809676][T12367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1604'.
[  675.950312][T12374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1607'.
[  676.376297][ T1820] block nbd2: Connection timed out, retrying (0/4 alive)
[  676.386122][ T1820] block nbd2: Connection timed out, retrying (0/4 alive)
[  676.394048][ T1820] block nbd2: Connection timed out, retrying (0/4 alive)
[  676.401540][ T1820] block nbd2: Connection timed out, retrying (0/4 alive)
[  676.409260][ T1820] block nbd2: Dead connection, failed to find a fallback
[  676.418317][ T1820] block nbd2: shutting down sockets
[  676.425105][ T1820] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.436169][ T1820] Buffer I/O error on dev nbd2, logical block 3, async page read
[  676.445034][ T1820] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.454913][ T1820] Buffer I/O error on dev nbd2, logical block 2, async page read
[  676.462805][ T1820] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.472671][ T1820] Buffer I/O error on dev nbd2, logical block 1, async page read
[  676.481845][ T1820] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.492313][ T1820] Buffer I/O error on dev nbd2, logical block 0, async page read
[  676.503732][T10710] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.514800][T10710] Buffer I/O error on dev nbd2, logical block 0, async page read
[  676.522966][T10710] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.532599][T10710] Buffer I/O error on dev nbd2, logical block 1, async page read
[  676.541429][T10710] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.551122][T10710] Buffer I/O error on dev nbd2, logical block 2, async page read
[  676.558948][T10710] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.568553][T10710] Buffer I/O error on dev nbd2, logical block 3, async page read
[  676.576680][T10710] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.587242][T10710] Buffer I/O error on dev nbd2, logical block 0, async page read
[  676.595337][T10710] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  676.604932][T10710] Buffer I/O error on dev nbd2, logical block 1, async page read
[  676.615210][T10710] ldm_validate_partition_table(): Disk read failed.
[  676.623154][T10710] Dev nbd2: unable to read RDB block 0
[  676.629518][T10710]  nbd2: unable to read partition table
[  676.640596][T10710] ldm_validate_partition_table(): Disk read failed.
[  676.648793][T10710] Dev nbd2: unable to read RDB block 0
[  676.655494][T10710]  nbd2: unable to read partition table
[  676.782729][T12396] tc action pedit offset must be on 32 bit boundaries
[  677.239165][T12406] bond0: entered promiscuous mode
[  677.244344][T12406] : entered promiscuous mode
[  677.249345][T12406] bond0: entered allmulticast mode
[  677.255693][T12406] : entered allmulticast mode
[  677.271874][T12406] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.345605][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1622'.
[  677.358043][T12417] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1622'.
[  677.378096][T12415] delete_channel: no stack
[  677.602556][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1626'.
[  677.612871][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1623'.
[  678.017103][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'.
[  678.552057][T12449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1631'.
[  678.731961][T12457] netlink: 'syz.3.1635': attribute type 1 has an invalid length.
[  678.811383][T12464] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  679.223647][T12479] sctp: [Deprecated]: syz.1.1641 (pid 12479) Use of int in max_burst socket option deprecated.
[  679.223647][T12479] Use struct sctp_assoc_value instead
[  679.356856][T12489] netlink: 'syz.6.1643': attribute type 10 has an invalid length.
[  679.378961][T12489] 8021q: adding VLAN 0 to HW filter on device bond0
[  679.403856][T12489] team0: Port device bond0 added
[  679.447656][T12494] xt_hashlimit: max too large, truncated to 1048576
[  679.470686][T12494] Cannot find add_set index 3 as target
[  679.764152][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.782358][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.088557][T12517] netlink: 'syz.1.1652': attribute type 4 has an invalid length.
[  680.210870][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  680.346622][T12531] __nla_validate_parse: 7 callbacks suppressed
[  680.346645][T12531] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1654'.
[  680.384004][T12531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1654'.
[  680.424986][T12532] lo speed is unknown, defaulting to 1000
[  680.562909][T12543] netlink: 'syz.2.1657': attribute type 32 has an invalid length.
[  680.616600][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'.
[  680.702690][T12543] bond9: Setting coupled_control to off (0)
[  682.276832][T12584] netlink: 'syz.3.1671': attribute type 4 has an invalid length.
[  682.279944][T12595] syzkaller0: entered promiscuous mode
[  682.312603][T12595] syzkaller0: entered allmulticast mode
[  682.332406][T12600] netlink: 'syz.3.1671': attribute type 4 has an invalid length.
[  682.358426][T12601] sctp: [Deprecated]: syz.1.1674 (pid 12601) Use of int in max_burst socket option deprecated.
[  682.358426][T12601] Use struct sctp_assoc_value instead
[  682.436618][T12601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1674'.
[  682.467139][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'.
[  682.520581][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'.
[  682.532180][T12601] team1: entered promiscuous mode
[  682.537367][T12601] team1: entered allmulticast mode
[  682.543564][T12601] 8021q: adding VLAN 0 to HW filter on device team1
[  682.589714][T12607] team2: entered promiscuous mode
[  682.599800][T12607] team2: entered allmulticast mode
[  682.606367][T12607] 8021q: adding VLAN 0 to HW filter on device team2
[  682.641877][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'.
[  682.682852][T12611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1676'.
[  682.729856][T12611] netlink: 'syz.2.1676': attribute type 13 has an invalid length.
[  682.745660][T12611] netlink: 'syz.2.1676': attribute type 17 has an invalid length.
[  682.867691][T12611] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.876949][T12611] 8021q: adding VLAN 0 to HW filter on device team0
[  682.898734][T12611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  683.145369][T12626] netlink: 'syz.4.1679': attribute type 1 has an invalid length.
[  683.355055][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'.
[  683.365268][T12630] bond5: (slave geneve4): making interface the new active one
[  683.375325][T12630] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  683.442269][T12632] macsec3: entered promiscuous mode
[  683.457942][T12632] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  683.680956][T12626] bond5 (unregistering): (slave geneve4): Releasing active interface
[  683.727847][T12626] bond5 (unregistering): Released all slaves
[  683.751655][  T796] IPVS: starting estimator thread 0...
[  683.807205][ T5968] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  683.820892][T12639] netlink: 'syz.6.1682': attribute type 39 has an invalid length.
[  683.820927][T12643] netlink: 'syz.6.1682': attribute type 39 has an invalid length.
[  683.841308][T12640] IPVS: using max 26 ests per chain, 62400 per kthread
[  683.860725][T12644] netlink: 'syz.2.1683': attribute type 21 has an invalid length.
[  683.869143][T12644] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1683'.
[  683.909084][T12644] netlink: 'syz.2.1683': attribute type 4 has an invalid length.
[  683.922313][T12644] netlink: 'syz.2.1683': attribute type 5 has an invalid length.
[  684.427076][T12668] netlink: 'syz.3.1688': attribute type 7 has an invalid length.
[  684.435324][T12668] netlink: 'syz.3.1688': attribute type 8 has an invalid length.
[  684.456550][T12668] ip6gretap0: entered promiscuous mode
[  684.464282][T12668] gretap0: entered promiscuous mode
[  684.826153][T12680] 8021q: adding VLAN 0 to HW filter on device bond2
[  684.965482][T12690] macvlan2: entered allmulticast mode
[  684.976186][T12690] veth0_to_bond: entered promiscuous mode
[  684.986554][T12690] veth0_to_bond: entered allmulticast mode
[  685.018290][T12690] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  685.082619][T12695] netlink: 'syz.2.1699': attribute type 1 has an invalid length.
[  685.724952][T12712] lo speed is unknown, defaulting to 1000
[  685.737054][T12725] __nla_validate_parse: 8 callbacks suppressed
[  685.737076][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'.
[  685.738339][T12724] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  685.865327][T12725] ip6tnl3: entered allmulticast mode
[  685.870095][   T30] audit: type=1800 audit(1773713393.251:74): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1704" name="memory.events" dev="tmpfs" ino=1991 res=0 errno=0
[  685.976783][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  686.524385][T12754] netlink: 'syz.6.1718': attribute type 1 has an invalid length.
[  687.146263][T12771] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1721'.
[  687.167997][T12762] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  687.175389][T12762] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  687.495764][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1728'.
[  687.733903][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1726'.
[  687.742988][T12784] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1726'.
[  687.755000][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1726'.
[  687.970164][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  688.002686][T12810] bond0: Error: Cannot enslave bond to itself.
[  688.036492][T12812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.076950][T12812] netlink: 'syz.2.1733': attribute type 10 has an invalid length.
[  688.104350][T12812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.123842][T12812] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  688.315443][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1741'.
[  688.315689][T12830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1741'.
[  688.378606][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1741'.
[  688.450102][T12830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1741'.
[  688.492509][T12833] openvswitch: netlink: IPv4 tunnel dst address is zero
[  688.761949][T12846] tipc: Failed to remove unknown binding: 66,1,1/0:2541240737/2541240739
[  688.778951][T12846] tipc: Failed to remove unknown binding: 66,1,1/0:2541240737/2541240739
[  688.934244][T12853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  688.964858][T12853] syzkaller0: entered promiscuous mode
[  689.000409][T12853] syzkaller0: entered allmulticast mode
[  689.049976][T12853] tipc: Resetting bearer <eth:syzkaller0>
[  689.074662][T12852] tipc: Resetting bearer <eth:syzkaller0>
[  689.111054][T12852] tipc: Disabling bearer <eth:syzkaller0>
[  689.139044][T12862] rdma_rxe: rxe_newlink: failed to add bond0
[  689.150402][T12866] rdma_rxe: rxe_newlink: failed to add bond0
[  689.207742][T12861] bond0 (unregistering): (slave ): Releasing backup interface
[  689.231564][T12861] : left promiscuous mode
[  689.238704][T12861] : left allmulticast mode
[  689.255186][T12861] bond0 (unregistering): Released all slaves
[  689.274223][T12871] x_tables: duplicate underflow at hook 1
[  689.812251][  T796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  689.823817][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  689.846674][ T5968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  689.873423][T12905] netlink: 'syz.6.1765': attribute type 1 has an invalid length.
[  689.914114][T12905] NCSI netlink: No device for ifindex 0
[  690.062689][T12898] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up
[  690.079600][T12913] lo speed is unknown, defaulting to 1000
[  690.102608][T12914] lo speed is unknown, defaulting to 1000
[  691.301673][T12961] netlink: 'syz.2.1772': attribute type 6 has an invalid length.
[  691.404812][T12961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  691.423770][T12964] syzkaller0: entered promiscuous mode
[  691.436324][T12964] syzkaller0: entered allmulticast mode
[  691.537309][T12968] __nla_validate_parse: 9 callbacks suppressed
[  691.537331][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'.
[  691.555987][T12961] tipc: Resetting bearer <eth:syzkaller0>
[  691.576786][T12968] netlink: 'syz.3.1776': attribute type 30 has an invalid length.
[  691.611581][T12955] tipc: Resetting bearer <eth:syzkaller0>
[  691.632623][T12955] tipc: Disabling bearer <eth:syzkaller0>
[  691.711663][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'.
[  691.722807][T12968] netlink: 'syz.3.1776': attribute type 30 has an invalid length.
[  691.742584][T12945] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  691.763343][T12945] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  691.854716][T12945] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  691.864910][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1779'.
[  691.877100][T12983] netlink: 'syz.1.1778': attribute type 1 has an invalid length.
[  691.885194][T12945] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  691.985455][T12994] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  692.012182][T12994] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  692.058667][T12983] bond0: (slave bridge5): Enslaving as an active interface with a down link
[  692.331708][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1786'.
[  692.352345][T13005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1785'.
[  692.407370][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1788'.
[  692.475457][T13009] lo speed is unknown, defaulting to 1000
[  693.665912][T13078] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1801'.
[  693.825215][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1800'.
[  693.874753][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'.
[  693.910917][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'.
[  693.940243][T13086] netlink: 'syz.1.1802': attribute type 14 has an invalid length.
[  693.958719][T13086] netlink: 'syz.1.1802': attribute type 12 has an invalid length.
[  694.577785][T13103] lo speed is unknown, defaulting to 1000
[  694.601175][T13105] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  694.610595][T13110] lo speed is unknown, defaulting to 1000
[  694.765701][T13114] syzkaller0: entered promiscuous mode
[  694.777002][T13114] syzkaller0: entered allmulticast mode
[  694.784447][T13122] ip6erspan0: mtu less than device minimum
[  695.573342][T12952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  695.587034][T13122] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  695.917077][T13171] netlink: 'syz.4.1820': attribute type 10 has an invalid length.
[  696.264137][T13186] lo speed is unknown, defaulting to 1000
[  696.363617][T13201] netlink: 'syz.6.1825': attribute type 13 has an invalid length.
[  696.850144][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  696.858549][ T5891] Bluetooth: hci2: command 0x0406 tx timeout
[  697.096475][T13231] __nla_validate_parse: 6 callbacks suppressed
[  697.096496][T13231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1831'.
[  697.231459][T13237] netlink: 'syz.3.1832': attribute type 29 has an invalid length.
[  697.268797][T13237] netlink: 'syz.3.1832': attribute type 29 has an invalid length.
[  697.363980][T13237] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1832'.
[  697.381492][T13234] lo speed is unknown, defaulting to 1000
[  697.616102][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'.
[  698.209140][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1846'.
[  698.381500][T13308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1847'.
[  698.470297][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'.
[  698.660299][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'.
[  698.686284][T13324] netem: incorrect ge model size
[  698.700620][T13324] netem: change failed
[  698.967267][T13340] netlink: 'syz.3.1855': attribute type 32 has an invalid length.
[  698.977592][T13341] netlink: 'syz.3.1855': attribute type 32 has an invalid length.
[  698.986971][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'.
[  699.006290][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'.
[  699.047075][T13340] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  699.057389][T13341] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  699.229330][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1857'.
[  699.413467][   T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  699.450740][T13359] wireguard0: entered promiscuous mode
[  699.456425][T13359] wireguard0: entered allmulticast mode
[  699.639398][T13375] netlink: 'syz.3.1863': attribute type 3 has an invalid length.
[  701.344054][T12941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  702.979265][T13393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  703.157649][T13481] netlink: 'syz.2.1872': attribute type 1 has an invalid length.
[  703.175161][T13481] netlink: 'syz.2.1872': attribute type 2 has an invalid length.
[  703.202084][T13489] netlink: 'syz.6.1874': attribute type 6 has an invalid length.
[  703.210087][ T5891] Bluetooth: hci6: link tx timeout
[  703.215540][T13481] netlink: 'syz.2.1872': attribute type 1 has an invalid length.
[  703.215984][ T5891] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  703.226786][T13486] netlink: 'syz.1.1875': attribute type 3 has an invalid length.
[  703.240689][T13481] __nla_validate_parse: 3 callbacks suppressed
[  703.240707][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1872'.
[  703.254546][T13489] netlink: 'syz.6.1874': attribute type 7 has an invalid length.
[  703.268429][T13489] netlink: 'syz.6.1874': attribute type 8 has an invalid length.
[  703.334704][T13486] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1875'.
[  703.387125][T13483] gretap1: entered promiscuous mode
[  703.440643][T13483] batman_adv: batadv0: Adding interface: gretap1
[  703.457593][T13483] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  703.531368][T13483] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  703.842274][T13521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1882'.
[  703.974183][T13521] syzkaller0: entered promiscuous mode
[  703.980410][T13521] syzkaller0: entered allmulticast mode
[  705.250113][ T5886] Bluetooth: hci6: command 0x0406 tx timeout
[  706.997543][T13544] netlink: 'syz.4.1887': attribute type 1 has an invalid length.
[  707.096324][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  707.357822][T13544] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  707.359355][T13545] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  707.515434][T13551] bond1: (slave lo): Releasing backup interface
[  707.555281][T13551] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  707.599682][T13551] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  708.055529][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'.
[  708.102788][T13578] xt_hashlimit: size too large, truncated to 1048576
[  708.299960][ T5950] lo speed is unknown, defaulting to 1000
[  708.477806][T13595] 8021q: VLANs not supported on ip6gre0
[  708.487187][T13599] netlink: 'syz.1.1903': attribute type 4 has an invalid length.
[  708.652043][T13605] netlink: 'syz.3.1905': attribute type 11 has an invalid length.
[  708.811391][T13612] IPv6: sit2: Disabled Multicast RS
[  708.881004][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1910'.
[  708.881043][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'.
[  709.011756][   T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  709.153077][T13629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1911'.
[  709.170471][T13628] netlink: 'syz.4.1908': attribute type 1 has an invalid length.
[  709.200996][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1911'.
[  709.816678][T13659] xt_hashlimit: size too large, truncated to 1048576
[  709.869014][T13662] lo speed is unknown, defaulting to 1000
[  710.132890][T13671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  710.140200][T13671] IPv6: NLM_F_CREATE should be set when creating new route
[  710.156904][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'.
[  710.185825][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1919'.
[  710.512900][T13677] macvtap1: entered promiscuous mode
[  710.537307][T13677] macvtap1: entered allmulticast mode
[  710.555865][T13677] : entered allmulticast mode
[  710.578955][T13677] : entered promiscuous mode
[  710.595328][T13677] team0: Device macvtap1 failed to register rx_handler
[  710.615778][T13677] : left allmulticast mode
[  710.631230][T13677] : left promiscuous mode
[  710.730174][T13695] tap0: tun_chr_ioctl cmd 1074025681
[  711.088292][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1931'.
[  711.151936][T13717] wg2: Caught tx_queue_len zero misconfig
[  711.212695][T13719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1934'.
[  711.236143][T13719] wg1: Caught tx_queue_len zero misconfig
[  711.469171][T13736] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1938'.
[  711.501650][T13736] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1938'.
[  711.912233][T13761] xt_ecn: cannot match TCP bits for non-tcp packets
[  712.054054][ T6302] wlan1: Trigger new scan to find an IBSS to join
[  712.688694][T13797] netlink: 'syz.4.1951': attribute type 6 has an invalid length.
[  712.826983][T13792] syzkaller1: entered allmulticast mode
[  712.850854][T12952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  712.901782][T13809] netlink: 'syz.1.1955': attribute type 10 has an invalid length.
[  713.592594][T13838] netlink: 'syz.6.1960': attribute type 1 has an invalid length.
[  713.693085][T13838] bond3: entered promiscuous mode
[  713.698909][T13838] 8021q: adding VLAN 0 to HW filter on device bond3
[  713.857964][T13838] bond3: (slave bridge2): making interface the new active one
[  713.884509][T13838] bridge2: entered promiscuous mode
[  713.932096][T13838] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  714.140730][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  714.379816][T13874] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  714.666328][T13883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  714.724338][T13883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  714.775149][T13889] __nla_validate_parse: 2 callbacks suppressed
[  714.775172][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1972'.
[  714.793876][T13892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  714.801637][T13891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  714.824240][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1972'.
[  714.908099][T13897] lo speed is unknown, defaulting to 1000
[  714.945571][T13893] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  715.025301][T13901] FAULT_INJECTION: forcing a failure.
[  715.025301][T13901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  715.065623][T13901] CPU: 1 UID: 0 PID: 13901 Comm: syz.2.1975 Not tainted syzkaller #0 PREEMPT(full) 
[  715.065655][T13901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  715.065668][T13901] Call Trace:
[  715.065677][T13901]  <TASK>
[  715.065686][T13901]  dump_stack_lvl+0xe8/0x150
[  715.065727][T13901]  should_fail_ex+0x412/0x560
[  715.065763][T13901]  _copy_from_user+0x2d/0xb0
[  715.065796][T13901]  ___sys_sendmsg+0x1c6/0x360
[  715.065830][T13901]  ? __pfx____sys_sendmsg+0x10/0x10
[  715.065891][T13901]  ? __fget_files+0x2a/0x420
[  715.065923][T13901]  ? __fget_files+0x3a0/0x420
[  715.065963][T13901]  __x64_sys_sendmsg+0x1bd/0x2a0
[  715.065988][T13901]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  715.066020][T13901]  ? __pfx_ksys_write+0x10/0x10
[  715.066058][T13901]  do_syscall_64+0x14d/0xf80
[  715.066090][T13901]  ? trace_irq_disable+0x3b/0x150
[  715.066121][T13901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.066144][T13901]  ? clear_bhb_loop+0x40/0x90
[  715.066171][T13901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.066193][T13901] RIP: 0033:0x7f465279c799
[  715.066215][T13901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.066234][T13901] RSP: 002b:00007f46536d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  715.066280][T13901] RAX: ffffffffffffffda RBX: 00007f4652a15fa0 RCX: 00007f465279c799
[  715.066301][T13901] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  715.066314][T13901] RBP: 00007f46536d6090 R08: 0000000000000000 R09: 0000000000000000
[  715.066328][T13901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  715.066341][T13901] R13: 00007f4652a16038 R14: 00007f4652a15fa0 R15: 00007ffdc6943c28
[  715.066376][T13901]  </TASK>
[  715.130789][ T6302] wlan1: Trigger new scan to find an IBSS to join
[  715.496665][T13911] netlink: 'syz.1.1981': attribute type 1 has an invalid length.
[  715.512854][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'.
[  715.608136][T13922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1981'.
[  715.907932][T13916] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  715.932059][T13916] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  715.986977][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1982'.
[  716.070178][T13927] macvlan2: entered promiscuous mode
[  716.085732][T13927] macvlan2: entered allmulticast mode
[  716.102047][T13927] bond9: (slave macvlan2): Error -98 calling set_mac_address
[  716.152333][T13935] dvmrp0: entered allmulticast mode
[  716.314290][T13943] netlink: 'syz.2.1985': attribute type 2 has an invalid length.
[  716.366969][T13947] netlink: 'syz.2.1985': attribute type 1 has an invalid length.
[  716.377655][T13947] netlink: 'syz.2.1985': attribute type 2 has an invalid length.
[  716.399762][T13947] netlink: 'syz.2.1985': attribute type 1 has an invalid length.
[  716.414571][T13943] !©�9: entered promiscuous mode
[  716.446729][T13947] netlink: 'syz.2.1985': attribute type 3 has an invalid length.
[  716.473074][T13954] ipt_rpfilter: unknown options
[  716.482509][T13951] bridge0: entered allmulticast mode
[  716.570113][T13920] lo speed is unknown, defaulting to 1000
[  716.576021][T13948] netlink: 'syz.1.1988': attribute type 5 has an invalid length.
[  716.607469][T13940] lo speed is unknown, defaulting to 1000
[  716.902430][T13963] 8021q: VLANs not supported on vxcan1
[  717.021930][T13945] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1986'.
[  717.038783][T13977] ip6tnl0: Caught tx_queue_len zero misconfig
[  717.051634][T13977] netlink: 'syz.4.1995': attribute type 3 has an invalid length.
[  717.065459][T13972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1993'.
[  717.120168][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'.
[  717.195570][T13973] pimreg: entered allmulticast mode
[  717.316599][T13984] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1998'.
[  717.362469][T13989] netlink: 'syz.1.1997': attribute type 1 has an invalid length.
[  717.408412][T13989] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  717.951464][T14019] syzkaller0: entered promiscuous mode
[  717.980564][T14019] syzkaller0: entered allmulticast mode
[  717.997028][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2007'.
[  718.051069][T12943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.162632][T14029] batadv0: entered promiscuous mode
[  718.169463][T14029] bond0: entered promiscuous mode
[  718.176804][T14029] debugfs: 'hsr1' already exists in 'hsr'
[  718.190816][T14029] Cannot create hsr debugfs directory
[  718.196571][T14029] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  718.223611][T14029] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  718.234798][T14029] hsr1: entered allmulticast mode
[  718.240747][T14029] batadv0: entered allmulticast mode
[  718.246240][T14029] bond0: entered allmulticast mode
[  718.252475][T14029] 8021q: adding VLAN 0 to HW filter on device hsr1
[  718.342791][T14041] tunl0: Caught tx_queue_len zero misconfig
[  718.436012][T14045] syzkaller0: entered promiscuous mode
[  718.441823][T14045] syzkaller0: entered allmulticast mode
[  718.611483][  T796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  718.630325][T12952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  718.883256][T14063] chnl_net:caif_netlink_parms(): no params data found
[  718.988459][T14066] netlink: 'syz.2.2019': attribute type 8 has an invalid length.
[  719.349180][T14077] FAULT_INJECTION: forcing a failure.
[  719.349180][T14077] name failslab, interval 1, probability 0, space 0, times 0
[  719.383088][T14077] CPU: 0 UID: 0 PID: 14077 Comm: syz.3.2022 Not tainted syzkaller #0 PREEMPT(full) 
[  719.383118][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  719.383130][T14077] Call Trace:
[  719.383139][T14077]  <TASK>
[  719.383147][T14077]  dump_stack_lvl+0xe8/0x150
[  719.383193][T14077]  should_fail_ex+0x412/0x560
[  719.383226][T14077]  should_failslab+0xa8/0x100
[  719.383256][T14077]  __kmalloc_noprof+0xe8/0x760
[  719.383279][T14077]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  719.383312][T14077]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  719.383344][T14077]  genl_family_rcv_msg_doit+0xd9/0x330
[  719.383374][T14077]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  719.383406][T14077]  ? apparmor_capable+0x126/0x170
[  719.383439][T14077]  ? bpf_lsm_capable+0x9/0x20
[  719.383468][T14077]  ? security_capable+0x7e/0x2c0
[  719.383503][T14077]  genl_rcv_msg+0x61c/0x7a0
[  719.383534][T14077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  719.383555][T14077]  ? __pfx_netlbl_mgmt_adddef+0x10/0x10
[  719.383589][T14077]  ? __lock_acquire+0x6b5/0x2cf0
[  719.383631][T14077]  netlink_rcv_skb+0x232/0x4b0
[  719.383660][T14077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  719.383683][T14077]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  719.383731][T14077]  ? down_read+0x272/0x2e0
[  719.383750][T14077]  ? genl_rcv+0xd/0x40
[  719.383773][T14077]  genl_rcv+0x28/0x40
[  719.383792][T14077]  netlink_unicast+0x80f/0x9b0
[  719.383829][T14077]  ? __pfx_netlink_unicast+0x10/0x10
[  719.383857][T14077]  ? netlink_sendmsg+0x650/0xb40
[  719.383883][T14077]  ? skb_put+0x11b/0x210
[  719.383918][T14077]  netlink_sendmsg+0x813/0xb40
[  719.383959][T14077]  ? __pfx_netlink_sendmsg+0x10/0x10
[  719.383992][T14077]  ? aa_sock_msg_perm+0xf1/0x1b0
[  719.384020][T14077]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  719.384047][T14077]  ____sys_sendmsg+0x972/0x9f0
[  719.384081][T14077]  ? __pfx_____sys_sendmsg+0x10/0x10
[  719.384113][T14077]  ? import_iovec+0x73/0xa0
[  719.384151][T14077]  ___sys_sendmsg+0x2a5/0x360
[  719.384180][T14077]  ? __pfx____sys_sendmsg+0x10/0x10
[  719.384254][T14077]  ? __fget_files+0x2a/0x420
[  719.384283][T14077]  ? __fget_files+0x3a0/0x420
[  719.384324][T14077]  __x64_sys_sendmsg+0x1bd/0x2a0
[  719.384349][T14077]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  719.384381][T14077]  ? __pfx_ksys_write+0x10/0x10
[  719.384417][T14077]  do_syscall_64+0x14d/0xf80
[  719.384446][T14077]  ? trace_irq_disable+0x3b/0x150
[  719.384473][T14077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.384494][T14077]  ? clear_bhb_loop+0x40/0x90
[  719.384520][T14077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.384541][T14077] RIP: 0033:0x7fd40139c799
[  719.384561][T14077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.384579][T14077] RSP: 002b:00007fd402233028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  719.384603][T14077] RAX: ffffffffffffffda RBX: 00007fd401615fa0 RCX: 00007fd40139c799
[  719.384618][T14077] RDX: 0000000000004080 RSI: 0000200000002380 RDI: 0000000000000004
[  719.384632][T14077] RBP: 00007fd402233090 R08: 0000000000000000 R09: 0000000000000000
[  719.384645][T14077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  719.384658][T14077] R13: 00007fd401616038 R14: 00007fd401615fa0 R15: 00007ffdbfdc1688
[  719.384693][T14077]  </TASK>
[  719.800986][T14086] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  719.816483][T14090] netlink: 'syz.1.2026': attribute type 20 has an invalid length.
[  719.846674][T14086] __nla_validate_parse: 2 callbacks suppressed
[  719.846694][T14086] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2025'.
[  719.899136][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2025'.
[  720.323436][T14116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  720.400103][T14121] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  720.437520][T14121] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  720.545400][T14129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2038'.
[  720.571219][T14129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2038'.
[  720.582781][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2039'.
[  720.790241][T14139] tun0: tun_chr_ioctl cmd 1074025672
[  720.797673][T14139] tun0: ignored: set checksum disabled
[  720.953486][T14147] netlink: 'syz.4.2045': attribute type 13 has an invalid length.
[  720.972118][T14147] netlink: 'syz.4.2045': attribute type 27 has an invalid length.
[  721.027541][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'.
[  721.612673][T14155] netlink: 'syz.3.2046': attribute type 39 has an invalid length.
[  722.156403][T14169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2049'.
[  722.232518][T14169] netlink: 'syz.2.2049': attribute type 8 has an invalid length.
[  722.267297][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'.
[  722.302420][T14169] bond0: entered promiscuous mode
[  722.325996][T14169] batadv0: entered promiscuous mode
[  722.341019][T14169] gretap0: entered promiscuous mode
[  722.356614][T14169] team_slave_0: entered promiscuous mode
[  722.389237][T14169] debugfs: 'hsr0' already exists in 'hsr'
[  722.412491][T14169] Cannot create hsr debugfs directory
[  722.418802][T14169] hsr0: entered promiscuous mode
[  722.426807][T14186] FAULT_INJECTION: forcing a failure.
[  722.426807][T14186] name failslab, interval 1, probability 0, space 0, times 0
[  722.468768][T14186] CPU: 1 UID: 0 PID: 14186 Comm: syz.1.2056 Not tainted syzkaller #0 PREEMPT(full) 
[  722.468800][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  722.468811][T14186] Call Trace:
[  722.468819][T14186]  <TASK>
[  722.468828][T14186]  dump_stack_lvl+0xe8/0x150
[  722.468863][T14186]  should_fail_ex+0x412/0x560
[  722.468897][T14186]  should_failslab+0xa8/0x100
[  722.468926][T14186]  __kmalloc_cache_noprof+0x88/0x660
[  722.468950][T14186]  ? netlbl_mgmt_add_common+0x57/0x13b0
[  722.468988][T14186]  netlbl_mgmt_add_common+0x57/0x13b0
[  722.469028][T14186]  ? apparmor_current_getlsmprop_subj+0xce/0x150
[  722.469060][T14186]  netlbl_mgmt_adddef+0x28f/0x330
[  722.469093][T14186]  ? __pfx_netlbl_mgmt_adddef+0x10/0x10
[  722.469127][T14186]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  722.469149][T14186]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  722.469180][T14186]  genl_family_rcv_msg_doit+0x22a/0x330
[  722.469210][T14186]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  722.469246][T14186]  ? bpf_lsm_capable+0x9/0x20
[  722.469273][T14186]  ? security_capable+0x7e/0x2c0
[  722.469305][T14186]  genl_rcv_msg+0x61c/0x7a0
[  722.469334][T14186]  ? __pfx_genl_rcv_msg+0x10/0x10
[  722.469355][T14186]  ? __pfx_netlbl_mgmt_adddef+0x10/0x10
[  722.469384][T14186]  ? __lock_acquire+0x6b5/0x2cf0
[  722.469423][T14186]  netlink_rcv_skb+0x232/0x4b0
[  722.469451][T14186]  ? __pfx_genl_rcv_msg+0x10/0x10
[  722.469475][T14186]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  722.469533][T14186]  ? down_read+0x272/0x2e0
[  722.469551][T14186]  ? genl_rcv+0xd/0x40
[  722.469572][T14186]  genl_rcv+0x28/0x40
[  722.469591][T14186]  netlink_unicast+0x80f/0x9b0
[  722.469626][T14186]  ? __pfx_netlink_unicast+0x10/0x10
[  722.469653][T14186]  ? netlink_sendmsg+0x650/0xb40
[  722.469675][T14186]  ? skb_put+0x11b/0x210
[  722.469709][T14186]  netlink_sendmsg+0x813/0xb40
[  722.469745][T14186]  ? __pfx_netlink_sendmsg+0x10/0x10
[  722.469778][T14186]  ? aa_sock_msg_perm+0xf1/0x1b0
[  722.469806][T14186]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  722.469833][T14186]  ____sys_sendmsg+0x972/0x9f0
[  722.469863][T14186]  ? __pfx_____sys_sendmsg+0x10/0x10
[  722.469898][T14186]  ? import_iovec+0x73/0xa0
[  722.469931][T14186]  ___sys_sendmsg+0x2a5/0x360
[  722.469958][T14186]  ? __pfx____sys_sendmsg+0x10/0x10
[  722.470017][T14186]  ? __fget_files+0x2a/0x420
[  722.470046][T14186]  ? __fget_files+0x3a0/0x420
[  722.470087][T14186]  __x64_sys_sendmsg+0x1bd/0x2a0
[  722.470109][T14186]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  722.470142][T14186]  ? __pfx_ksys_write+0x10/0x10
[  722.470178][T14186]  do_syscall_64+0x14d/0xf80
[  722.470207][T14186]  ? trace_irq_disable+0x3b/0x150
[  722.470234][T14186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.470255][T14186]  ? clear_bhb_loop+0x40/0x90
[  722.470281][T14186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.470301][T14186] RIP: 0033:0x7fb2d2b9c799
[  722.470321][T14186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  722.470338][T14186] RSP: 002b:00007fb2d0df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  722.470360][T14186] RAX: ffffffffffffffda RBX: 00007fb2d2e15fa0 RCX: 00007fb2d2b9c799
[  722.470375][T14186] RDX: 0000000000004080 RSI: 0000200000002380 RDI: 0000000000000004
[  722.470388][T14186] RBP: 00007fb2d0df6090 R08: 0000000000000000 R09: 0000000000000000
[  722.470401][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.470413][T14186] R13: 00007fb2d2e16038 R14: 00007fb2d2e15fa0 R15: 00007ffc95120a28
[  722.470447][T14186]  </TASK>
[  723.103926][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2062'.
[  723.205851][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'.
[  723.939132][T14230] siw: device registration error -23
[  724.331504][T14244] bridge0: port 1(batadv1) entered blocking state
[  724.351961][T14244] bridge0: port 1(batadv1) entered disabled state
[  724.359001][T14244] batadv1: entered allmulticast mode
[  724.368015][T14244] batadv1: entered promiscuous mode
[  724.376243][T12947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  724.390199][T14236] nbd3: detected capacity change from 0 to 63
[  724.417770][ T5890] block nbd3: Receive control failed (result -32)
[  724.428441][ T5891] block nbd3: Receive control failed (result -104)
[  724.428441][ T5886] block nbd3: Receive control failed (result -32)
[  724.428616][ T5881] block nbd3: Receive control failed (result -32)
[  724.436769][   T51] block nbd3: Receive control failed (result -32)
[  724.820651][T12947] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  724.831095][T12947] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  724.852167][T14264] netlink: 'syz.3.2081': attribute type 61 has an invalid length.
[  724.908217][T14264] netlink: 'syz.3.2081': attribute type 62 has an invalid length.
[  724.977617][T14270] __nla_validate_parse: 4 callbacks suppressed
[  724.977637][T14270] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2082'.
[  725.303424][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'.
[  725.353193][T14276] team_slave_0 (unregistering): left promiscuous mode
[  725.860312][T14289] ip_vti0: entered allmulticast mode
[  726.890263][T14326] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  727.509616][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'.
[  727.562958][T14348] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2102'.
[  727.976764][T14365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  728.025202][T14366] tipc: Started in network mode
[  728.031142][T14366] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  728.055227][T14366] tipc: Enabled bearer <udp:syz0>, priority 6
[  728.202330][T14375] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2109'.
[  728.220898][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  728.252448][T14379] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2109'.
[  728.620029][T14402] ipt_ECN: cannot use operation on non-tcp rule
[  728.630318][T14402] GUP no longer grows the stack in syz.6.2115 (14402): 200000003000-20000000a000 (200000001000)
[  728.652067][T14402] CPU: 1 UID: 0 PID: 14402 Comm: syz.6.2115 Not tainted syzkaller #0 PREEMPT(full) 
[  728.652097][T14402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  728.652109][T14402] Call Trace:
[  728.652116][T14402]  <TASK>
[  728.652125][T14402]  dump_stack_lvl+0xe8/0x150
[  728.652160][T14402]  __get_user_pages+0x2453/0x29d0
[  728.652193][T14402]  ? __lock_acquire+0x6b5/0x2cf0
[  728.652242][T14402]  ? __gup_longterm_locked+0xc4e/0x1630
[  728.652272][T14402]  ? down_read_killable+0x1bb/0x340
[  728.652304][T14402]  __gup_longterm_locked+0xdcf/0x1630
[  728.652362][T14402]  gup_fast_fallback+0x1d82/0x22e0
[  728.652431][T14402]  ? __pfx_gup_fast_fallback+0x10/0x10
[  728.652463][T14402]  ? is_valid_gup_args+0x11f/0x200
[  728.652496][T14402]  ? get_user_pages_fast+0x4d/0xb0
[  728.652529][T14402]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  728.652569][T14402]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  728.652597][T14402]  iov_iter_get_pages2+0x5e/0xa0
[  728.652631][T14402]  __se_sys_vmsplice+0x7b3/0x1490
[  728.652686][T14402]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  728.652720][T14402]  ? __pfx_futex_wake+0x10/0x10
[  728.652760][T14402]  ? lockdep_hardirqs_on+0x7a/0x110
[  728.652868][T14402]  do_syscall_64+0x14d/0xf80
[  728.652896][T14402]  ? trace_irq_disable+0x3b/0x150
[  728.652924][T14402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.652944][T14402]  ? clear_bhb_loop+0x40/0x90
[  728.652971][T14402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.652992][T14402] RIP: 0033:0x7f05aa79c799
[  728.653013][T14402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.653031][T14402] RSP: 002b:00007f05ab67e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  728.653054][T14402] RAX: ffffffffffffffda RBX: 00007f05aaa16090 RCX: 00007f05aa79c799
[  728.653069][T14402] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007
[  728.653082][T14402] RBP: 00007f05aa832c99 R08: 0000000000000000 R09: 0000000000000000
[  728.653094][T14402] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  728.653106][T14402] R13: 00007f05aaa16128 R14: 00007f05aaa16090 R15: 00007ffec81dfa38
[  728.653143][T14402]  </TASK>
[  728.978715][T14391] netlink: 'syz.2.2114': attribute type 9 has an invalid length.
[  729.035651][T14391] netlink: 'syz.2.2114': attribute type 6 has an invalid length.
[  729.150108][ T7413] tipc: Node number set to 4269801491
[  729.238492][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'.
[  729.289658][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2120'.
[  729.707227][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'.
[  729.726468][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2127'.
[  729.737123][T14441] lo speed is unknown, defaulting to 1000
[  730.133596][T12952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  731.138931][T14488] bond1: left promiscuous mode
[  731.149360][T14488] veth0_to_bond: left allmulticast mode
[  731.156246][T14488] macvlan2: left allmulticast mode
[  731.167501][T14488] bond3: left promiscuous mode
[  731.172848][T14488] bridge2: left promiscuous mode
[  731.269779][T14492] vlan2: entered allmulticast mode
[  731.300018][T14492] bridge_slave_0: entered allmulticast mode
[  731.306345][T14492] bridge0: port 1(vlan2) entered blocking state
[  731.328620][T14492] bridge0: port 1(vlan2) entered disabled state
[  731.339338][T14492] bridge0: mtu less than device minimum
[  731.351979][   T49] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.361648][   T49] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.395807][   T49] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.428381][   T49] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.459051][T14503] lo speed is unknown, defaulting to 1000
[  731.933813][T14522] __nla_validate_parse: 1 callbacks suppressed
[  731.933837][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2144'.
[  732.051852][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  732.158201][T14522] hsr_slave_1 (unregistering): left promiscuous mode
[  732.673721][T14553] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2153'.
[  733.025566][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'.
[  733.417946][T14582] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2158'.
[  733.712728][T14594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2163'.
[  733.777625][T14594] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  733.929001][T14604] xt_hashlimit: size too large, truncated to 1048576
[  733.945823][T14605] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2165'.
[  734.226150][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'.
[  734.260333][T14617] netlink: zone id is out of range
[  734.264999][T14613] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  734.265522][T14617] netlink: zone id is out of range
[  734.301803][T14613] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  734.308937][T14617] netlink: zone id is out of range
[  734.322275][T14613] tipc: Resetting bearer <eth:syzkaller0>
[  734.322873][T14617] netlink: zone id is out of range
[  734.354098][T14617] netlink: zone id is out of range
[  734.359329][T14617] netlink: zone id is out of range
[  734.470683][ T5984] tipc: Resetting bearer <eth:syzkaller0>
[  735.026987][T14646] bond4: invalid ARP target 0.0.0.0 specified for addition
[  735.042512][T14646] bond4: option arp_ip_target: invalid value (0)
[  735.069848][T14646] bond4 (unregistering): Released all slaves
[  735.378358][T14669] lo speed is unknown, defaulting to 1000
[  735.419134][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'.
[  735.428464][T14665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2183'.
[  735.579859][T14674] vlan3: entered promiscuous mode
[  735.890866][ T6302] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  736.334540][T14680] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2187'.
[  736.426665][T14691] bond0: Unable to set up delay as MII monitoring is disabled
[  736.437150][T14690] bond0: Unable to set up delay as MII monitoring is disabled
[  736.443060][T14694] netlink: zone id is out of range
[  736.480824][T14694] netlink: set zone limit has 8 unknown bytes
[  736.606520][T14697] netlink: 'syz.6.2191': attribute type 29 has an invalid length.
[  736.626130][T14702] netlink: 'syz.6.2191': attribute type 29 has an invalid length.
[  736.753619][T14706] netlink: 'syz.3.2193': attribute type 5 has an invalid length.
[  736.996260][T14723] lo speed is unknown, defaulting to 1000
[  739.708689][T14713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  739.973323][T14765] xt_hashlimit: size too large, truncated to 1048576
[  740.283099][T14784] syzkaller1: entered promiscuous mode
[  740.302771][T14784] syzkaller1: entered allmulticast mode
[  740.314678][T14785] __nla_validate_parse: 5 callbacks suppressed
[  740.314698][T14785] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2209'.
[  740.610922][T14799] netlink: 'syz.3.2212': attribute type 32 has an invalid length.
[  740.618823][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'.
[  740.737097][T14805] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2212'.
[  740.737800][T14799] bond5: option coupled_control: invalid value (12)
[  740.757205][T14799] bond5 (unregistering): Released all slaves
[  741.052230][T14819] pimreg: left allmulticast mode
[  741.651061][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  741.664763][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  742.201117][T14891] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2232'.
[  742.221554][T14891] netlink: 'syz.4.2232': attribute type 1 has an invalid length.
[  742.229342][T14891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2232'.
[  742.246118][T14888] lo speed is unknown, defaulting to 1000
[  742.255115][T14893] netlink: 'syz.1.2235': attribute type 29 has an invalid length.
[  742.270062][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'.
[  742.324149][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'.
[  742.371438][T14891] netlink: 'syz.4.2232': attribute type 7 has an invalid length.
[  742.567122][T14913] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2236'.
[  742.832518][T14925] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2240'.
[  743.250393][T14946] netlink: 'syz.3.2244': attribute type 1 has an invalid length.
[  743.267996][T14941] lo speed is unknown, defaulting to 1000
[  743.298690][T14945] netlink: 'syz.3.2244': attribute type 1 has an invalid length.
[  743.324691][T10710] udevd[10710]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  743.338475][T14945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  743.363952][T14946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  743.527087][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2249'.
[  743.536765][T14961] netlink: 'syz.4.2250': attribute type 1 has an invalid length.
[  743.536791][T14961] netlink: 'syz.4.2250': attribute type 2 has an invalid length.
[  743.536806][T14961] netlink: 'syz.4.2250': attribute type 3 has an invalid length.
[  743.610935][T14957] vlan0: entered promiscuous mode
[  743.773017][T14975] netlink: 'syz.3.2254': attribute type 3 has an invalid length.
[  743.952372][T14986] netlink: 'syz.1.2256': attribute type 1 has an invalid length.
[  744.108661][T14975] block nbd3: NBD_DISCONNECT
[  744.113694][T14975] block nbd3: Send disconnect failed -32
[  744.121577][T14975] block nbd3: Send disconnect failed -32
[  744.127540][T14975] block nbd3: Send disconnect failed -32
[  744.141448][T14975] block nbd3: Send disconnect failed -32
[  744.186493][T14975] block nbd3: Send disconnect failed -32
[  744.194206][T14975] block nbd3: shutting down sockets
[  744.246250][T14975] blk_print_req_error: 138 callbacks suppressed
[  744.246275][T14975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  744.290705][T14975] buffer_io_error: 138 callbacks suppressed
[  744.290728][T14975] Buffer I/O error on dev nbd3, logical block 0, async page read
[  744.382750][T14975] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  744.441032][T14975] Buffer I/O error on dev nbd3, logical block 1, async page read
[  744.461779][T14975] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  744.488449][T15012] syzkaller0: entered promiscuous mode
[  744.497291][T14975] Buffer I/O error on dev nbd3, logical block 2, async page read
[  744.497397][T15012] syzkaller0: entered allmulticast mode
[  744.516411][T15012] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) !
[  744.520503][T14975] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  744.536522][T14975] Buffer I/O error on dev nbd3, logical block 3, async page read
[  744.546933][ T1745] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  744.559471][ T1745] Buffer I/O error on dev nbd3, logical block 0, async page read
[  744.568130][ T1745] Buffer I/O error on dev nbd3, logical block 1, async page read
[  744.576666][ T1745] Buffer I/O error on dev nbd3, logical block 2, async page read
[  744.584879][ T1745] Buffer I/O error on dev nbd3, logical block 3, async page read
[  744.596062][T11432] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  744.618569][T11432] Buffer I/O error on dev nbd3, logical block 0, async page read
[  744.627138][T11432] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  744.641360][T11432] Buffer I/O error on dev nbd3, logical block 1, async page read
[  744.649234][T11432] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  744.659515][T11432] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  744.670644][T11432] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  744.693956][T11432] ldm_validate_partition_table(): Disk read failed.
[  744.708841][T11432] Dev nbd3: unable to read RDB block 0
[  744.715396][T11432]  nbd3: unable to read partition table
[  744.729684][T11432] ldm_validate_partition_table(): Disk read failed.
[  744.737041][T11432] Dev nbd3: unable to read RDB block 0
[  744.743334][T11432]  nbd3: unable to read partition table
[  744.957665][T15035] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  745.086261][T15041] lo speed is unknown, defaulting to 1000
[  745.910717][T15088] __nla_validate_parse: 3 callbacks suppressed
[  745.910739][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2283'.
[  746.127778][T15106] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  746.171806][T15106] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  746.238130][T15101] bond11: (slave gretap3): making interface the new active one
[  746.251451][T15101] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  746.277492][T15101] macvlan3: entered promiscuous mode
[  746.285574][T15101] macvlan3: entered allmulticast mode
[  746.292750][T15101] bond11: entered promiscuous mode
[  746.298478][T15101] gretap3: entered promiscuous mode
[  746.304677][T15101] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  746.314740][T15101] bond11: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap3
[  746.326580][T15119] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2289'.
[  746.336464][T15101] bond11: left promiscuous mode
[  746.342095][T15101] gretap3: left promiscuous mode
[  746.394093][T15120] syzkaller0: entered promiscuous mode
[  746.401341][T15120] syzkaller0: entered allmulticast mode
[  746.423096][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2289'.
[  746.771610][ T5984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  747.437798][ T6302] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  748.647120][T15164] digital: digital_start_poll: Unknown protocol
[  749.031185][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'.
[  749.281617][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'.
[  749.317221][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2313'.
[  749.970144][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  750.197674][T15232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  750.341972][T15232] lo speed is unknown, defaulting to 1000
[  750.658962][ T5930] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  750.806754][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2326'.
[  751.153969][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2333'.
[  751.195465][T15270] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  751.337235][T15280] sctp: [Deprecated]: syz.4.2336 (pid 15280) Use of int in max_burst socket option deprecated.
[  751.337235][T15280] Use struct sctp_assoc_value instead
[  751.393322][T15282] validate_nla: 5 callbacks suppressed
[  751.393342][T15282] netlink: 'syz.4.2336': attribute type 1 has an invalid length.
[  751.393629][T15284] "syz.1.2337" (15284) uses obsolete ecb(arc4) skcipher
[  751.441500][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2338'.
[  751.823457][T15302] netlink: 'syz.6.2343': attribute type 5 has an invalid length.
[  751.947356][T15307] bridge3: entered promiscuous mode
[  751.952894][T15307] bridge3: entered allmulticast mode
[  752.041581][T15311] netlink: 'syz.4.2346': attribute type 3 has an invalid length.
[  752.049701][T15311] netlink: 'syz.4.2346': attribute type 3 has an invalid length.
[  752.083476][T15313] netlink: 'syz.6.2345': attribute type 1 has an invalid length.
[  752.140544][T15313] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2345'.
[  752.184963][T15315] lo speed is unknown, defaulting to 1000
[  752.495426][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'.
[  752.536194][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  752.548869][T12952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  753.400497][T15360] netlink: 'syz.3.2358': attribute type 61 has an invalid length.
[  753.456602][T15360] tun0: tun_chr_ioctl cmd 1074025675
[  753.475163][T15360] tun0: persist enabled
[  753.493717][T15360] tun0: tun_chr_ioctl cmd 1074025675
[  753.505241][T15360] tun0: persist enabled
[  753.549039][T15360] tun0: tun_chr_ioctl cmd 1074025673
[  753.804585][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2364'.
[  753.820073][T15380] netlink: 580 bytes leftover after parsing attributes in process `syz.3.2364'.
[  753.883660][T15382] netlink: 'syz.4.2365': attribute type 1 has an invalid length.
[  753.912607][T15382] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2365'.
[  753.933110][T15386] batadv_slave_0: entered promiscuous mode
[  754.022880][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'.
[  754.045495][T15391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2367'.
[  754.112472][T15399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2368'.
[  754.331790][T15411] netlink: 'syz.6.2370': attribute type 1 has an invalid length.
[  754.339617][T15411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  754.431850][T15417] netlink: 'syz.6.2370': attribute type 1 has an invalid length.
[  754.480813][T15417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  754.662222][T15435] 8021q: VLANs not supported on ip_vti0
[  754.693357][T15385] batadv_slave_0: left promiscuous mode
[  754.905483][T15450] netlink: 'syz.3.2377': attribute type 1 has an invalid length.
[  754.964841][T15454] : entered promiscuous mode
[  755.095078][   T30] audit: type=1804 audit(1773713462.471:75): pid=15463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2381" name="/newroot/498/cgroup.controllers" dev="tmpfs" ino=2556 res=1 errno=0
[  755.163207][   T30] audit: type=1800 audit(1773713462.481:76): pid=15463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2381" name="cgroup.controllers" dev="tmpfs" ino=2556 res=0 errno=0
[  755.186746][T15462] lo speed is unknown, defaulting to 1000
[  755.856782][T15487] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  756.199383][T15507] pim6reg: entered allmulticast mode
[  756.323943][T15516] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  756.363447][T15507] __nla_validate_parse: 5 callbacks suppressed
[  756.363469][T15507] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2390'.
[  756.392108][T15515] vlan4: entered allmulticast mode
[  756.397291][T15515] bridge_slave_0: entered allmulticast mode
[  756.421973][T15515] bridge0: port 1(vlan4) entered blocking state
[  756.439267][T15519] validate_nla: 2 callbacks suppressed
[  756.439288][T15519] netlink: 'syz.6.2392': attribute type 9 has an invalid length.
[  756.463793][T15517] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2382'.
[  756.476828][T15515] bridge0: port 1(vlan4) entered disabled state
[  756.492314][T15519] netlink: 'syz.6.2392': attribute type 11 has an invalid length.
[  756.515986][T15516] pim6reg: left allmulticast mode
[  756.516072][T15519] netlink: 'syz.6.2392': attribute type 12 has an invalid length.
[  756.552103][T15515] Cannot find add_set index 0 as target
[  756.568358][T15519] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.2392'.
[  756.594175][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2392'.
[  756.647115][T15523] bond4: Unable to set down delay as MII monitoring is disabled
[  756.668193][T15521] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2393'.
[  756.691207][T15523] bond4 (unregistering): Released all slaves
[  756.913608][T15538] netlink: 'syz.3.2395': attribute type 21 has an invalid length.
[  756.994385][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'.
[  757.223554][T15546] lo speed is unknown, defaulting to 1000
[  757.379798][T15567] netlink: 'syz.6.2403': attribute type 1 has an invalid length.
[  757.451482][T15567] netlink: 'syz.6.2403': attribute type 1 has an invalid length.
[  757.527105][T15568] lo speed is unknown, defaulting to 1000
[  758.009328][T15595] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2411'.
[  758.259326][T15604] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2413'.
[  758.268742][T15604] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2413'.
[  758.290775][T12947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  758.302605][ T5930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  758.532381][T15616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2417'.
[  758.722733][T15623] mac80211_hwsim hwsim42 wlan1: Caught tx_queue_len zero misconfig
[  758.755403][T15623] netlink: 'syz.6.2418': attribute type 3 has an invalid length.
[  759.072430][T15638] netlink: 'syz.6.2424': attribute type 1 has an invalid length.
[  759.109064][T15638] bond4: entered promiscuous mode
[  759.114441][T15638] bond4: entered allmulticast mode
[  759.128588][T15638] 8021q: adding VLAN 0 to HW filter on device bond4
[  759.148461][T15639] macvlan0: entered promiscuous mode
[  759.154152][T15639] macvlan0: entered allmulticast mode
[  759.162716][T15639] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  759.705978][T15649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  759.869001][T15666] siw: device registration error -23
[  759.982192][T15674] netlink: 'syz.2.2433': attribute type 1 has an invalid length.
[  759.994797][T15678] openvswitch: netlink: IP tunnel dst address not specified
[  760.073075][T15674] bond12: entered promiscuous mode
[  760.086110][T15674] 8021q: adding VLAN 0 to HW filter on device bond12
[  760.152587][T15688] bond12: (slave bridge4): making interface the new active one
[  760.167660][T15688] bridge4: entered promiscuous mode
[  760.176376][T15688] bond12: (slave bridge4): Enslaving as an active interface with an up link
[  760.272984][T15686] xt_l2tp: missing protocol rule (udp|l2tpip)
[  760.927824][T15738] IPVS: nq: FWM 3 0x00000003 - no destination available
[  760.956993][T15737] IPVS: nq: FWM 3 0x00000003 - no destination available
[  761.213570][T15747] netlink: 'syz.3.2453': attribute type 13 has an invalid length.
[  761.305997][T15747] tipc: Resetting bearer <eth:syzkaller0>
[  761.375484][T15771] tipc: Resetting bearer <eth:syzkaller0>
[  761.778839][T15778] batadv_slave_1: Caught tx_queue_len zero misconfig
[  761.786744][T15778] __nla_validate_parse: 11 callbacks suppressed
[  761.786765][T15778] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2461'.
[  761.805779][T15778] syzkaller1: entered promiscuous mode
[  761.811795][T15778] syzkaller1: entered allmulticast mode
[  762.201199][T15794] netlink: 'syz.6.2467': attribute type 4 has an invalid length.
[  762.209132][T15794] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2467'.
[  762.329566][T15798] lo: Caught tx_queue_len zero misconfig
[  762.614414][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2472'.
[  762.624247][T15813] netlink: 'syz.6.2472': attribute type 29 has an invalid length.
[  762.633067][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2472'.
[  762.819677][T15820] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2475'.
[  764.050907][ T5984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  764.050911][T12952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  764.171529][T15755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  764.432478][T15832] macvtap2: entered promiscuous mode
[  764.437841][T15832] macvtap2: entered allmulticast mode
[  764.444031][T15832] dummy0: entered allmulticast mode
[  764.449284][T15832] dummy0: entered promiscuous mode
[  764.457475][T15832] team0: Device macvtap2 failed to register rx_handler
[  764.483251][T15832] dummy0: left allmulticast mode
[  764.503271][T15832] dummy0: left promiscuous mode
[  764.952198][T15868] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  765.065708][T15873] netlink: 'syz.1.2491': attribute type 1 has an invalid length.
[  765.266316][T15877] team0: Port device bond0 removed
[  765.275155][T15877] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  765.335539][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'.
[  765.350500][T15889] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  765.604413][T15901] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2501'.
[  765.613892][T15901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2501'.
[  765.852240][T15912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  766.131539][T15929] netlink: 'syz.4.2508': attribute type 3 has an invalid length.
[  766.141282][T15933] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2509'.
[  766.150668][T15933] ip6gre0: Caught tx_queue_len zero misconfig
[  766.156913][T15933] netlink: 175 bytes leftover after parsing attributes in process `syz.3.2509'.
[  766.842428][T15959] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  766.898300][T15963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  767.395648][T15975] __nla_validate_parse: 3 callbacks suppressed
[  767.395671][T15975] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2523'.
[  767.515268][T15979] netlink: 'syz.1.2524': attribute type 12 has an invalid length.
[  767.523743][T15979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2524'.
[  769.573316][T15975] 0ªX¹¦À: renamed from caif0
[  769.583213][T15975] 0ªX¹¦À: entered allmulticast mode
[  769.588493][T15975] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  769.673797][T15976] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  769.816806][ T6302] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  769.816806][ T5984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  769.874612][T15990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2527'.
[  769.892626][T15993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2527'.
[  770.051067][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2531'.
[  770.139525][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2533'.
[  770.201551][T16004] bond13: option xmit_hash_policy: invalid value (10)
[  770.232734][T16004] bond13 (unregistering): Released all slaves
[  770.392648][T16002] lo speed is unknown, defaulting to 1000
[  770.428466][T15997] lo speed is unknown, defaulting to 1000
[  770.682033][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2537'.
[  770.763728][T16031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2536'.
[  771.448999][T16055] pimreg: entered allmulticast mode
[  771.831199][T16072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2548'.
[  772.063077][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'.
[  772.113460][T16081] ip6gre1: entered promiscuous mode
[  772.694946][T16114] netlink: 'syz.3.2559': attribute type 11 has an invalid length.
[  772.721289][T16114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2559'.
[  772.954109][T16126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2563'.
[  773.016719][T16120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2561'.
[  773.071287][T16128] geneve1: Caught tx_queue_len zero misconfig
[  773.223473][T16134] netlink: 'syz.2.2567': attribute type 2 has an invalid length.
[  773.253628][T16134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  773.416124][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  773.466817][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  773.496804][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  773.525224][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  773.603634][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  773.633077][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  773.649554][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  773.796911][T16158] ip6gre1: entered promiscuous mode
[  773.814369][T16158] ip6gre1: entered allmulticast mode
[  773.831891][T12947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  773.842129][T12947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  773.861078][  T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  773.961048][  T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  773.970437][T16161] lo speed is unknown, defaulting to 1000
[  773.982861][T16168] x_tables: duplicate underflow at hook 2
[  774.064764][T16174] lo: Caught tx_queue_len zero misconfig
[  774.091588][   T30] audit: type=1804 audit(1773713481.481:77): pid=16177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2576" name="/newroot/537/cgroup.controllers" dev="tmpfs" ino=2762 res=1 errno=0
[  774.180026][   T30] audit: type=1800 audit(1773713481.481:78): pid=16177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2576" name="cgroup.controllers" dev="tmpfs" ino=2762 res=0 errno=0
[  774.257639][   T30] audit: type=1800 audit(1773713481.501:79): pid=16177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2576" name="cgroup.controllers" dev="tmpfs" ino=2762 res=0 errno=0
[  774.311244][   T30] audit: type=1804 audit(1773713481.501:80): pid=16177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2576" name="/newroot/537/cgroup.controllers" dev="tmpfs" ino=2762 res=1 errno=0
[  774.450759][T16192] FAULT_INJECTION: forcing a failure.
[  774.450759][T16192] name failslab, interval 1, probability 0, space 0, times 0
[  774.490022][T16192] CPU: 1 UID: 0 PID: 16192 Comm: syz.2.2580 Not tainted syzkaller #0 PREEMPT(full) 
[  774.490053][T16192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  774.490066][T16192] Call Trace:
[  774.490075][T16192]  <TASK>
[  774.490084][T16192]  dump_stack_lvl+0xe8/0x150
[  774.490120][T16192]  should_fail_ex+0x412/0x560
[  774.490153][T16192]  should_failslab+0xa8/0x100
[  774.490179][T16192]  ? skb_clone+0x212/0x3a0
[  774.490204][T16192]  kmem_cache_alloc_noprof+0x87/0x650
[  774.490236][T16192]  skb_clone+0x212/0x3a0
[  774.490262][T16192]  __netlink_deliver_tap+0x404/0x850
[  774.490318][T16192]  ? netlink_deliver_tap+0x2e/0x1b0
[  774.490348][T16192]  netlink_deliver_tap+0x19c/0x1b0
[  774.490378][T16192]  netlink_sendskb+0x68/0x140
[  774.490406][T16192]  netlink_unicast+0x3a3/0x9b0
[  774.490442][T16192]  ? __pfx_netlink_unicast+0x10/0x10
[  774.490479][T16192]  nfnetlink_rcv+0x2517/0x27b0
[  774.490547][T16192]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  774.490591][T16192]  ? ref_tracker_free+0x693/0x840
[  774.490652][T16192]  ? __netlink_deliver_tap+0x807/0x850
[  774.490680][T16192]  ? netlink_deliver_tap+0x2e/0x1b0
[  774.490728][T16192]  netlink_unicast+0x80f/0x9b0
[  774.490763][T16192]  ? __pfx_netlink_unicast+0x10/0x10
[  774.490790][T16192]  ? netlink_sendmsg+0x650/0xb40
[  774.490815][T16192]  ? skb_put+0x11b/0x210
[  774.490850][T16192]  netlink_sendmsg+0x813/0xb40
[  774.490890][T16192]  ? __pfx_netlink_sendmsg+0x10/0x10
[  774.490922][T16192]  ? aa_sock_msg_perm+0xf1/0x1b0
[  774.490952][T16192]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  774.490980][T16192]  ____sys_sendmsg+0x972/0x9f0
[  774.491013][T16192]  ? __pfx_____sys_sendmsg+0x10/0x10
[  774.491045][T16192]  ? import_iovec+0x73/0xa0
[  774.491080][T16192]  ___sys_sendmsg+0x2a5/0x360
[  774.491108][T16192]  ? __pfx____sys_sendmsg+0x10/0x10
[  774.491172][T16192]  ? __fget_files+0x2a/0x420
[  774.491201][T16192]  ? __fget_files+0x3a0/0x420
[  774.491243][T16192]  __x64_sys_sendmsg+0x1bd/0x2a0
[  774.491268][T16192]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  774.491308][T16192]  ? __pfx_ksys_write+0x10/0x10
[  774.491346][T16192]  do_syscall_64+0x14d/0xf80
[  774.491375][T16192]  ? trace_irq_disable+0x3b/0x150
[  774.491403][T16192]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.491424][T16192]  ? clear_bhb_loop+0x40/0x90
[  774.491450][T16192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.491471][T16192] RIP: 0033:0x7f465279c799
[  774.491492][T16192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  774.491509][T16192] RSP: 002b:00007f46536d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  774.491533][T16192] RAX: ffffffffffffffda RBX: 00007f4652a15fa0 RCX: 00007f465279c799
[  774.491548][T16192] RDX: 0000000000040050 RSI: 0000200000000100 RDI: 0000000000000003
[  774.491561][T16192] RBP: 00007f46536d6090 R08: 0000000000000000 R09: 0000000000000000
[  774.491574][T16192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  774.491587][T16192] R13: 00007f4652a16038 R14: 00007f4652a15fa0 R15: 00007ffdc6943c28
[  774.491622][T16192]  </TASK>
[  774.880701][  T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  774.937296][ T5930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  775.090589][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  775.590203][ T5984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  775.870961][T16252] bridge0: entered promiscuous mode
[  775.880458][T16252] vlan4: entered promiscuous mode
[  775.885743][T16252] bridge_slave_0: entered promiscuous mode
[  775.892854][T16252] bridge0: entered allmulticast mode
[  776.466138][T16281] bridge8: entered promiscuous mode
[  776.472505][T16281] macsec4: entered promiscuous mode
[  776.477856][T16281] macsec4: entered allmulticast mode
[  776.484444][T16281] bridge8: entered allmulticast mode
[  776.492129][T16281] bridge8: port 1(macsec4) entered blocking state
[  776.498809][T16281] bridge8: port 1(macsec4) entered disabled state
[  776.508225][T16281] bridge8: left allmulticast mode
[  776.513577][T16281] bridge8: left promiscuous mode
[  776.593480][T16284] vlan3: entered promiscuous mode
[  776.599002][T16284] geneve1: entered promiscuous mode
[  776.606622][T16284] vlan3: entered allmulticast mode
[  776.611995][T16284] geneve1: entered allmulticast mode
[  777.068213][T16304] lo speed is unknown, defaulting to 1000
[  777.243763][T16307] lo speed is unknown, defaulting to 1000
[  777.273320][T16309] batadv_slave_0: entered promiscuous mode
[  777.323729][T16306] batadv_slave_0: left promiscuous mode
[  777.762680][T16320] xt_TCPMSS: Only works on TCP SYN packets
[  778.210468][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  778.697772][T16239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  778.885728][T16331] netlink: 'syz.4.2623': attribute type 4 has an invalid length.
[  778.938190][T16331] netlink: 'syz.4.2623': attribute type 4 has an invalid length.
[  778.966716][T16334] pim6reg1: entered promiscuous mode
[  778.972452][T16334] pim6reg1: entered allmulticast mode
[  779.101981][T16331] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  779.210532][T16353] __nla_validate_parse: 118 callbacks suppressed
[  779.210553][T16353] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2627'.
[  779.252411][T16353] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2627'.
[  779.498548][T16369] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  779.666704][T16380] netlink: 'syz.3.2633': attribute type 1 has an invalid length.
[  779.712681][T16380] gretap2: entered allmulticast mode
[  779.741392][T16380] bond5: (slave gretap2): making interface the new active one
[  779.756659][T16380] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  779.895384][T16395] Cannot find set identified by id 65534 to match
[  779.945169][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2637'.
[  780.050688][T12943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  780.154415][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2644'.
[  781.332539][T12943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  781.367987][T16446] netlink: 'syz.3.2653': attribute type 1 has an invalid length.
[  781.376194][T16446] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2653'.
[  781.684941][T16451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2655'.
[  781.818549][T16461] FAULT_INJECTION: forcing a failure.
[  781.818549][T16461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  781.882825][T16461] CPU: 1 UID: 0 PID: 16461 Comm: syz.2.2658 Not tainted syzkaller #0 PREEMPT(full) 
[  781.882854][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  781.882865][T16461] Call Trace:
[  781.882873][T16461]  <TASK>
[  781.882889][T16461]  dump_stack_lvl+0xe8/0x150
[  781.882925][T16461]  should_fail_ex+0x412/0x560
[  781.882955][T16461]  _copy_from_user+0x2d/0xb0
[  781.882985][T16461]  ___sys_sendmsg+0x1c6/0x360
[  781.883010][T16461]  ? __pfx____sys_sendmsg+0x10/0x10
[  781.883063][T16461]  ? __fget_files+0x2a/0x420
[  781.883088][T16461]  ? __fget_files+0x3a0/0x420
[  781.883124][T16461]  __x64_sys_sendmsg+0x1bd/0x2a0
[  781.883147][T16461]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  781.883176][T16461]  ? __pfx_ksys_write+0x10/0x10
[  781.883208][T16461]  do_syscall_64+0x14d/0xf80
[  781.883234][T16461]  ? trace_irq_disable+0x3b/0x150
[  781.883260][T16461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.883279][T16461]  ? clear_bhb_loop+0x40/0x90
[  781.883302][T16461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.883321][T16461] RIP: 0033:0x7f465279c799
[  781.883338][T16461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  781.883355][T16461] RSP: 002b:00007f46536d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  781.883375][T16461] RAX: ffffffffffffffda RBX: 00007f4652a15fa0 RCX: 00007f465279c799
[  781.883388][T16461] RDX: 0000000000040050 RSI: 0000200000000100 RDI: 0000000000000003
[  781.883400][T16461] RBP: 00007f46536d6090 R08: 0000000000000000 R09: 0000000000000000
[  781.883411][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  781.883422][T16461] R13: 00007f4652a16038 R14: 00007f4652a15fa0 R15: 00007ffdc6943c28
[  781.883455][T16461]  </TASK>
[  783.266210][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2669'.
[  783.693883][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'.
[  783.767726][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2675'.
[  785.391709][T16524] vlan2: entered promiscuous mode
[  785.480065][T16527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  785.524992][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2678'.
[  785.548491][T16529] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2678'.
[  785.600226][T16535] netlink: 'syz.1.2681': attribute type 9 has an invalid length.
[  785.762491][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'.
[  785.810698][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  785.901034][T16550] netlink: 'syz.2.2685': attribute type 4 has an invalid length.
[  786.016898][T16556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  786.025999][T16552] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  786.043586][T16552] bond5 (unregistering): Released all slaves
[  786.072278][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'.
[  786.181620][T16556] team1: entered promiscuous mode
[  786.193636][T16556] team1: entered allmulticast mode
[  786.199484][T16556] 8021q: adding VLAN 0 to HW filter on device team1
[  786.209295][T16567] delete_channel: no stack
[  786.217259][T16567] delete_channel: no stack
[  786.223568][T16567] delete_channel: no stack
[  786.231623][T16567] delete_channel: no stack
[  786.237775][T16567] delete_channel: no stack
[  786.243355][T16567] delete_channel: no stack
[  786.246927][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2686'.
[  786.248068][T16567] delete_channel: no stack
[  786.268323][T16567] delete_channel: no stack
[  786.273373][T16567] delete_channel: no stack
[  786.278114][T16567] delete_channel: no stack
[  786.283372][T16567] delete_channel: no stack
[  786.290888][T16567] delete_channel: no stack
[  786.295753][T16567] delete_channel: no stack
[  786.302669][T16567] delete_channel: no stack
[  786.308040][T16567] delete_channel: no stack
[  786.313509][T16567] delete_channel: no stack
[  786.318255][T16575] x_tables: duplicate underflow at hook 1
[  786.325098][T16567] delete_channel: no stack
[  786.330309][T16567] delete_channel: no stack
[  786.338109][T16567] delete_channel: no stack
[  786.343963][T16567] delete_channel: no stack
[  786.348948][T16567] delete_channel: no stack
[  786.355737][T16575] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001
[  786.364354][T16567] delete_channel: no stack
[  786.369385][T16567] delete_channel: no stack
[  786.377380][T16567] delete_channel: no stack
[  786.382751][T16567] delete_channel: no stack
[  786.387542][T16567] delete_channel: no stack
[  786.392937][T16567] delete_channel: no stack
[  786.409004][T16567] delete_channel: no stack
[  786.420510][T16567] delete_channel: no stack
[  786.428720][T16567] delete_channel: no stack
[  786.435583][T16567] delete_channel: no stack
[  786.441419][T16567] delete_channel: no stack
[  786.446478][T16567] delete_channel: no stack
[  786.451479][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  786.456887][T16567] delete_channel: no stack
[  786.484338][T16567] delete_channel: no stack
[  786.489058][T16567] delete_channel: no stack
[  786.493968][T16567] delete_channel: no stack
[  786.499082][T16567] delete_channel: no stack
[  786.503996][T16567] delete_channel: no stack
[  786.509202][T16567] delete_channel: no stack
[  786.514962][T16567] delete_channel: no stack
[  786.525471][T16567] delete_channel: no stack
[  786.560256][T16567] delete_channel: no stack
[  786.564944][T16567] delete_channel: no stack
[  786.592756][T16567] delete_channel: no stack
[  786.597425][T16567] delete_channel: no stack
[  786.598806][T16588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  786.627496][T16567] delete_channel: no stack
[  786.651886][T16567] delete_channel: no stack
[  786.667962][T16567] delete_channel: no stack
[  786.688405][T16567] delete_channel: no stack
[  786.702970][T16567] delete_channel: no stack
[  786.714480][T16567] delete_channel: no stack
[  786.725183][T16567] delete_channel: no stack
[  786.733496][T16567] delete_channel: no stack
[  786.743883][T16567] delete_channel: no stack
[  786.772734][T16567] delete_channel: no stack
[  786.779058][T16567] delete_channel: no stack
[  786.786549][T16567] delete_channel: no stack
[  786.803931][T16567] delete_channel: no stack
[  786.809141][T16567] delete_channel: no stack
[  786.814760][T16567] delete_channel: no stack
[  786.819548][T16567] delete_channel: no stack
[  786.824717][T16567] delete_channel: no stack
[  786.829577][T16567] delete_channel: no stack
[  786.836672][T16567] delete_channel: no stack
[  786.862854][T16601] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2699'.
[  786.903249][T16601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2699'.
[  786.937146][T16601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2699'.
[  787.337718][T16626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2709'.
[  787.347912][T16626] bond0: ARP target 170.170.170.170 is already present
[  787.355686][T16626] bond0: option arp_ip_target: invalid value (2863311530)
[  787.370996][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2709'.
[  787.468427][T16623] batadv1: left allmulticast mode
[  787.478858][T16623] batadv1: left promiscuous mode
[  787.484613][T16623] bridge0: port 1(batadv1) entered disabled state
[  787.730145][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  788.145814][T16669] netlink: 'syz.4.2724': attribute type 1 has an invalid length.
[  788.258246][T16670] bond7: left allmulticast mode
[  788.264167][T16670] bond7: left promiscuous mode
[  788.376353][T16669] 8021q: adding VLAN 0 to HW filter on device bond5
[  788.391974][T12947] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  788.409831][T12947] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  788.419505][T16679] sch_tbf: burst 2097152 is lower than device lo mtu (11337746) !
[  788.459519][T12947] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  788.471092][T12947] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  789.388961][T16729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  789.517530][T16736] xt_hashlimit: size too large, truncated to 1048576
[  789.932926][T16763] nft_compat: unsupported protocol 1
[  790.035061][T16764] lo speed is unknown, defaulting to 1000
[  790.201066][T16766] lo speed is unknown, defaulting to 1000
[  790.458679][T16784] syzkaller0: entered promiscuous mode
[  790.489283][T16784] syzkaller0: entered allmulticast mode
[  790.533569][T16792] __nla_validate_parse: 7 callbacks suppressed
[  790.533591][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2760'.
[  790.847043][T16801] netlink: 'syz.4.2763': attribute type 9 has an invalid length.
[  790.853601][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2762'.
[  790.864634][T16800] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  790.878613][T16801] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2763'.
[  790.901172][T16801] openvswitch: netlink: Message has 6 unknown bytes.
[  791.133453][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'.
[  791.349766][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2770'.
[  791.451858][T16826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2771'.
[  791.493058][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'.
[  791.502477][T16826] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2771'.
[  791.517088][T16826] 0ªX¹¦À: left allmulticast mode
[  791.525350][T16826] batadv_slave_0: left promiscuous mode
[  791.531416][T16826] batadv_slave_0: left allmulticast mode
[  791.540201][T16826] ip6erspan0: left allmulticast mode
[  791.559461][T16826] bridge1: left promiscuous mode
[  791.568464][T16826] geneve3: left promiscuous mode
[  791.574187][T12943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  791.605040][T16826] vlan1: left promiscuous mode
[  791.630103][T16826] geneve1: left promiscuous mode
[  791.635491][T16826] vlan1: left allmulticast mode
[  791.655529][T16826] geneve1: left allmulticast mode
[  791.676690][T16826] sit1: left promiscuous mode
[  791.689157][T16833] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2772'.
[  791.748930][T16826] macsec1: left promiscuous mode
[  791.755237][T16826] gretap1: left promiscuous mode
[  791.781743][T16826] hsr1: left allmulticast mode
[  791.807015][T16826] batadv0: left allmulticast mode
[  791.820933][T16826] bond0: left allmulticast mode
[  791.834675][T16826] ip6gre1: left promiscuous mode
[  791.888658][T16842] netlink: 'syz.6.2775': attribute type 10 has an invalid length.
[  791.925962][T16842] team0: Port device dummy0 added
[  791.971170][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2776'.
[  792.100896][T16847] lo speed is unknown, defaulting to 1000
[  792.112617][T16854] netlink: 'syz.3.2780': attribute type 4 has an invalid length.
[  792.316681][T16861] gre0: left promiscuous mode
[  792.325512][T16861] gre0: left allmulticast mode
[  792.426002][T16861] ip_vti0: left allmulticast mode
[  793.321570][T16861] macvtap1: left allmulticast mode
[  793.346040][T16861] geneve3: left promiscuous mode
[  793.353553][T16861] tipc: Resetting bearer <eth:syzkaller0>
[  793.383167][T16861] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  793.390462][T16861] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  793.404829][T16861] veth9: left promiscuous mode
[  793.427416][T16861] team1: left promiscuous mode
[  793.433099][T16861] team1: left allmulticast mode
[  793.441660][T16861] team2: left promiscuous mode
[  793.446507][T16861] team2: left allmulticast mode
[  793.454110][T16861] bridge1: left promiscuous mode
[  793.459071][T16861] bridge1: left allmulticast mode
[  793.466138][T16861] sit1: left allmulticast mode
[  793.497146][T16861] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  793.510285][T16861] macsec3: left promiscuous mode
[  793.525382][T16861] ip6tnl3: left allmulticast mode
[  793.542883][T16861] wireguard0: left promiscuous mode
[  793.551651][T16861] wireguard0: left allmulticast mode
[  793.609228][T16861] vlan3: left promiscuous mode
[  793.616520][T16861] geneve1: left promiscuous mode
[  793.622925][T16861] vlan3: left allmulticast mode
[  793.627984][T16861] geneve1: left allmulticast mode
[  793.634928][T16861] gretap2: left allmulticast mode
[  793.749974][T12947] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  793.761809][T12947] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  793.774565][T12947] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  793.783325][T12947] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  793.799692][T12947] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  793.827661][T12947] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  793.871309][T16896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  793.899723][T16881] lo speed is unknown, defaulting to 1000
[  793.954509][T12947] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  793.974137][T12947] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  794.147458][T16905] tipc: Trying to set illegal importance in message
[  794.304075][T12947] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  794.339382][   T10] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  794.347288][T12947] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  794.543048][T16925] FAULT_INJECTION: forcing a failure.
[  794.543048][T16925] name failslab, interval 1, probability 0, space 0, times 0
[  794.570815][T16925] CPU: 0 UID: 0 PID: 16925 Comm: syz.4.2798 Not tainted syzkaller #0 PREEMPT(full) 
[  794.570846][T16925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  794.570859][T16925] Call Trace:
[  794.570867][T16925]  <TASK>
[  794.570876][T16925]  dump_stack_lvl+0xe8/0x150
[  794.570912][T16925]  should_fail_ex+0x412/0x560
[  794.570945][T16925]  should_failslab+0xa8/0x100
[  794.570971][T16925]  ? skb_clone+0x212/0x3a0
[  794.570994][T16925]  kmem_cache_alloc_noprof+0x87/0x650
[  794.571015][T16925]  ? apparmor_capable+0x126/0x170
[  794.571054][T16925]  skb_clone+0x212/0x3a0
[  794.571074][T16925]  ? nfnetlink_rcv+0x4b0/0x27b0
[  794.571102][T16925]  nfnetlink_rcv+0x4e2/0x27b0
[  794.571125][T16925]  ? is_bpf_text_address+0x26/0x2b0
[  794.571164][T16925]  ? is_bpf_text_address+0x292/0x2b0
[  794.571184][T16925]  ? is_bpf_text_address+0x26/0x2b0
[  794.571212][T16925]  ? __kernel_text_address+0xd/0x30
[  794.571235][T16925]  ? unwind_get_return_address+0x4d/0x90
[  794.571263][T16925]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  794.571285][T16925]  ? arch_stack_walk+0xfb/0x150
[  794.571324][T16925]  ? __lock_acquire+0x6b5/0x2cf0
[  794.571351][T16925]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  794.571387][T16925]  ? __lock_acquire+0x6b5/0x2cf0
[  794.571423][T16925]  ? __lock_acquire+0x6b5/0x2cf0
[  794.571455][T16925]  ? __netlink_lookup+0xc6/0x8b0
[  794.571490][T16925]  ? __netlink_lookup+0x7e4/0x8b0
[  794.571527][T16925]  ? netlink_deliver_tap+0x2e/0x1b0
[  794.571576][T16925]  netlink_unicast+0x80f/0x9b0
[  794.571612][T16925]  ? __pfx_netlink_unicast+0x10/0x10
[  794.571639][T16925]  ? netlink_sendmsg+0x650/0xb40
[  794.571665][T16925]  ? skb_put+0x11b/0x210
[  794.571697][T16925]  netlink_sendmsg+0x813/0xb40
[  794.571733][T16925]  ? __pfx_netlink_sendmsg+0x10/0x10
[  794.571763][T16925]  ? aa_sock_msg_perm+0xf1/0x1b0
[  794.571790][T16925]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  794.571817][T16925]  ____sys_sendmsg+0x972/0x9f0
[  794.571847][T16925]  ? __pfx_____sys_sendmsg+0x10/0x10
[  794.571876][T16925]  ? import_iovec+0x73/0xa0
[  794.571910][T16925]  ___sys_sendmsg+0x2a5/0x360
[  794.571936][T16925]  ? __pfx____sys_sendmsg+0x10/0x10
[  794.571993][T16925]  ? __fget_files+0x2a/0x420
[  794.572022][T16925]  ? __fget_files+0x3a0/0x420
[  794.572062][T16925]  __x64_sys_sendmsg+0x1bd/0x2a0
[  794.572086][T16925]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  794.572117][T16925]  ? __pfx_ksys_write+0x10/0x10
[  794.572162][T16925]  do_syscall_64+0x14d/0xf80
[  794.572191][T16925]  ? trace_irq_disable+0x3b/0x150
[  794.572219][T16925]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.572240][T16925]  ? clear_bhb_loop+0x40/0x90
[  794.572265][T16925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.572286][T16925] RIP: 0033:0x7faaf699c799
[  794.572306][T16925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  794.572324][T16925] RSP: 002b:00007faaf78dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  794.572347][T16925] RAX: ffffffffffffffda RBX: 00007faaf6c15fa0 RCX: 00007faaf699c799
[  794.572362][T16925] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  794.572375][T16925] RBP: 00007faaf78dc090 R08: 0000000000000000 R09: 0000000000000000
[  794.572388][T16925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.572400][T16925] R13: 00007faaf6c16038 R14: 00007faaf6c15fa0 R15: 00007ffd0755bc78
[  794.572434][T16925]  </TASK>
[  794.956739][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  794.966346][   T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  794.975572][   T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  794.983766][   T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  794.991659][   T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  795.090328][T16883] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  795.170654][T16883] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  795.238598][T16928] lo speed is unknown, defaulting to 1000
[  795.546724][T16947] FAULT_INJECTION: forcing a failure.
[  795.546724][T16947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  795.628294][T16947] CPU: 0 UID: 0 PID: 16947 Comm: syz.4.2805 Not tainted syzkaller #0 PREEMPT(full) 
[  795.628325][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  795.628337][T16947] Call Trace:
[  795.628346][T16947]  <TASK>
[  795.628355][T16947]  dump_stack_lvl+0xe8/0x150
[  795.628392][T16947]  should_fail_ex+0x412/0x560
[  795.628424][T16947]  _copy_from_user+0x2d/0xb0
[  795.628457][T16947]  sock_do_ioctl+0x195/0x320
[  795.628486][T16947]  ? __pfx_sock_do_ioctl+0x10/0x10
[  795.628509][T16947]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  795.628569][T16947]  sock_ioctl+0x5c6/0x7f0
[  795.628596][T16947]  ? __pfx_sock_ioctl+0x10/0x10
[  795.628620][T16947]  ? __fget_files+0x2a/0x420
[  795.628650][T16947]  ? __fget_files+0x3a0/0x420
[  795.628677][T16947]  ? __fget_files+0x2a/0x420
[  795.628709][T16947]  ? bpf_lsm_file_ioctl+0x9/0x20
[  795.628736][T16947]  ? __pfx_sock_ioctl+0x10/0x10
[  795.628760][T16947]  __se_sys_ioctl+0xfc/0x170
[  795.628788][T16947]  do_syscall_64+0x14d/0xf80
[  795.628816][T16947]  ? trace_irq_disable+0x3b/0x150
[  795.628844][T16947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.628865][T16947]  ? clear_bhb_loop+0x40/0x90
[  795.628891][T16947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.628912][T16947] RIP: 0033:0x7faaf699c799
[  795.628932][T16947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  795.628949][T16947] RSP: 002b:00007faaf78dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  795.628972][T16947] RAX: ffffffffffffffda RBX: 00007faaf6c15fa0 RCX: 00007faaf699c799
[  795.628987][T16947] RDX: 00002000000002c0 RSI: 0000000000008947 RDI: 0000000000000003
[  795.629000][T16947] RBP: 00007faaf78dc090 R08: 0000000000000000 R09: 0000000000000000
[  795.629012][T16947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  795.629023][T16947] R13: 00007faaf6c16038 R14: 00007faaf6c15fa0 R15: 00007ffd0755bc78
[  795.629057][T16947]  </TASK>
[  795.663918][T16928] chnl_net:caif_netlink_parms(): no params data found
[  795.835463][T16951] __nla_validate_parse: 8 callbacks suppressed
[  795.835486][T16951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2806'.
[  795.836337][T16957] FAULT_INJECTION: forcing a failure.
[  795.836337][T16957] name failslab, interval 1, probability 0, space 0, times 0
[  795.845410][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2806'.
[  795.858394][T16957] CPU: 1 UID: 0 PID: 16957 Comm: syz.4.2809 Not tainted syzkaller #0 PREEMPT(full) 
[  795.858421][T16957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  795.858433][T16957] Call Trace:
[  795.858441][T16957]  <TASK>
[  795.858448][T16957]  dump_stack_lvl+0xe8/0x150
[  795.858480][T16957]  should_fail_ex+0x412/0x560
[  795.858509][T16957]  should_failslab+0xa8/0x100
[  795.858532][T16957]  ? skb_clone+0x212/0x3a0
[  795.858553][T16957]  kmem_cache_alloc_noprof+0x87/0x650
[  795.858572][T16957]  ? apparmor_capable+0x126/0x170
[  795.858606][T16957]  skb_clone+0x212/0x3a0
[  795.858624][T16957]  ? nfnetlink_rcv+0x4b0/0x27b0
[  795.858649][T16957]  nfnetlink_rcv+0x4e2/0x27b0
[  795.858670][T16957]  ? is_bpf_text_address+0x26/0x2b0
[  795.858694][T16957]  ? is_bpf_text_address+0x292/0x2b0
[  795.858712][T16957]  ? is_bpf_text_address+0x26/0x2b0
[  795.858736][T16957]  ? __kernel_text_address+0xd/0x30
[  795.858755][T16957]  ? unwind_get_return_address+0x4d/0x90
[  795.858781][T16957]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  795.858800][T16957]  ? arch_stack_walk+0xfb/0x150
[  795.858835][T16957]  ? __lock_acquire+0x6b5/0x2cf0
[  795.858858][T16957]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  795.858890][T16957]  ? __lock_acquire+0x6b5/0x2cf0
[  795.858921][T16957]  ? __lock_acquire+0x6b5/0x2cf0
[  795.858950][T16957]  ? __netlink_lookup+0xc6/0x8b0
[  795.858981][T16957]  ? __netlink_lookup+0x7e4/0x8b0
[  795.859015][T16957]  ? netlink_deliver_tap+0x2e/0x1b0
[  795.859056][T16957]  netlink_unicast+0x80f/0x9b0
[  795.859087][T16957]  ? __pfx_netlink_unicast+0x10/0x10
[  795.859119][T16957]  ? netlink_sendmsg+0x650/0xb40
[  795.859142][T16957]  ? skb_put+0x11b/0x210
[  795.859171][T16957]  netlink_sendmsg+0x813/0xb40
[  795.859204][T16957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  795.859233][T16957]  ? aa_sock_msg_perm+0xf1/0x1b0
[  795.859257][T16957]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  795.859281][T16957]  ____sys_sendmsg+0x972/0x9f0
[  795.859308][T16957]  ? __pfx_____sys_sendmsg+0x10/0x10
[  795.859336][T16957]  ? import_iovec+0x73/0xa0
[  795.859368][T16957]  ___sys_sendmsg+0x2a5/0x360
[  795.859392][T16957]  ? __pfx____sys_sendmsg+0x10/0x10
[  795.859445][T16957]  ? __fget_files+0x2a/0x420
[  795.859470][T16957]  ? __fget_files+0x3a0/0x420
[  795.859505][T16957]  __x64_sys_sendmsg+0x1bd/0x2a0
[  795.859527][T16957]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  795.859555][T16957]  ? __pfx_ksys_write+0x10/0x10
[  795.859586][T16957]  do_syscall_64+0x14d/0xf80
[  795.859612][T16957]  ? trace_irq_disable+0x3b/0x150
[  795.859637][T16957]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.859655][T16957]  ? clear_bhb_loop+0x40/0x90
[  795.859678][T16957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.859697][T16957] RIP: 0033:0x7faaf699c799
[  795.859714][T16957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  795.859730][T16957] RSP: 002b:00007faaf78dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  795.859751][T16957] RAX: ffffffffffffffda RBX: 00007faaf6c15fa0 RCX: 00007faaf699c799
[  795.859764][T16957] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  795.859776][T16957] RBP: 00007faaf78dc090 R08: 0000000000000000 R09: 0000000000000000
[  795.859787][T16957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  795.859798][T16957] R13: 00007faaf6c16038 R14: 00007faaf6c15fa0 R15: 00007ffd0755bc78
[  795.859828][T16957]  </TASK>
[  795.886572][T16948] lo speed is unknown, defaulting to 1000
[  795.952234][T16951] 8021q: VLANs not supported on caif0
[  796.054820][T16961] netlink: 'syz.4.2810': attribute type 1 has an invalid length.
[  796.159018][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'.
[  796.336948][T16961] 8021q: adding VLAN 0 to HW filter on device bond6
[  796.362754][T16961] netlink: 'syz.4.2810': attribute type 1 has an invalid length.
[  796.430798][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'.
[  796.460558][T16961] netlink: 'syz.4.2810': attribute type 1 has an invalid length.
[  796.502042][T16961] netlink: 'syz.4.2810': attribute type 1 has an invalid length.
[  796.543464][T16961] netlink: 'syz.4.2810': attribute type 1 has an invalid length.
[  796.556531][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'.
[  796.636196][T16978] lo speed is unknown, defaulting to 1000
[  796.660665][T16961] netlink: 'syz.4.2810': attribute type 1 has an invalid length.
[  796.689317][T16982] lo: Caught tx_queue_len zero misconfig
[  796.708849][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'.
[  796.708900][T16928] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.725730][T16928] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.734598][T16928] bridge_slave_0: entered allmulticast mode
[  796.746699][T16928] bridge_slave_0: entered promiscuous mode
[  796.756270][T16928] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.763886][T16928] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.771507][T16928] bridge_slave_1: entered allmulticast mode
[  796.779618][T16928] bridge_slave_1: entered promiscuous mode
[  796.787142][T16961] netlink: 'syz.4.2810': attribute type 1 has an invalid length.
[  796.801695][T16985] netlink: 'syz.6.2813': attribute type 4 has an invalid length.
[  796.815008][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'.
[  796.917341][T16928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  796.964285][T16928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  796.977838][T16990] netlink: 170880 bytes leftover after parsing attributes in process `syz.6.2814'.
[  796.987857][T16991] netlink: 170880 bytes leftover after parsing attributes in process `syz.6.2814'.
[  797.031166][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2814'.
[  797.094670][   T51] Bluetooth: hci7: command tx timeout
[  797.146898][T16993] lo speed is unknown, defaulting to 1000
[  797.249434][T16928] team0: Port device team_slave_0 added
[  797.333073][T16928] team0: Port device team_slave_1 added
[  797.385035][T16928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  797.392681][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.429810][T16928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  797.447853][T17009] FAULT_INJECTION: forcing a failure.
[  797.447853][T17009] name failslab, interval 1, probability 0, space 0, times 0
[  797.454905][T17007] FAULT_INJECTION: forcing a failure.
[  797.454905][T17007] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.465077][T17009] CPU: 0 UID: 0 PID: 17009 Comm: syz.6.2819 Not tainted syzkaller #0 PREEMPT(full) 
[  797.465105][T17009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  797.465116][T17009] Call Trace:
[  797.465123][T17009]  <TASK>
[  797.465131][T17009]  dump_stack_lvl+0xe8/0x150
[  797.465165][T17009]  should_fail_ex+0x412/0x560
[  797.465195][T17009]  should_failslab+0xa8/0x100
[  797.465222][T17009]  __kmalloc_cache_noprof+0x88/0x660
[  797.465245][T17009]  ? nfnetlink_rcv+0xfe1/0x27b0
[  797.465275][T17009]  nfnetlink_rcv+0xfe1/0x27b0
[  797.465297][T17009]  ? is_bpf_text_address+0x26/0x2b0
[  797.465352][T17009]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  797.465387][T17009]  ? __lock_acquire+0x6b5/0x2cf0
[  797.465448][T17009]  ? netlink_deliver_tap+0x2e/0x1b0
[  797.465492][T17009]  netlink_unicast+0x80f/0x9b0
[  797.465524][T17009]  ? __pfx_netlink_unicast+0x10/0x10
[  797.465558][T17009]  ? netlink_sendmsg+0x650/0xb40
[  797.465582][T17009]  ? skb_put+0x11b/0x210
[  797.465612][T17009]  netlink_sendmsg+0x813/0xb40
[  797.465647][T17009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  797.465677][T17009]  ? aa_sock_msg_perm+0xf1/0x1b0
[  797.465703][T17009]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  797.465727][T17009]  ____sys_sendmsg+0x972/0x9f0
[  797.465756][T17009]  ? __pfx_____sys_sendmsg+0x10/0x10
[  797.465784][T17009]  ? import_iovec+0x73/0xa0
[  797.465816][T17009]  ___sys_sendmsg+0x2a5/0x360
[  797.465842][T17009]  ? __pfx____sys_sendmsg+0x10/0x10
[  797.465898][T17009]  ? __fget_files+0x2a/0x420
[  797.465924][T17009]  ? __fget_files+0x3a0/0x420
[  797.465978][T17009]  __x64_sys_sendmsg+0x1bd/0x2a0
[  797.466002][T17009]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  797.466032][T17009]  ? __pfx_ksys_write+0x10/0x10
[  797.466066][T17009]  do_syscall_64+0x14d/0xf80
[  797.466091][T17009]  ? trace_irq_disable+0x3b/0x150
[  797.466116][T17009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.466135][T17009]  ? clear_bhb_loop+0x40/0x90
[  797.466158][T17009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.466177][T17009] RIP: 0033:0x7f05aa79c799
[  797.466196][T17009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.466211][T17009] RSP: 002b:00007f05ab69f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  797.466232][T17009] RAX: ffffffffffffffda RBX: 00007f05aaa15fa0 RCX: 00007f05aa79c799
[  797.466245][T17009] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  797.466257][T17009] RBP: 00007f05ab69f090 R08: 0000000000000000 R09: 0000000000000000
[  797.466269][T17009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  797.466280][T17009] R13: 00007f05aaa16038 R14: 00007f05aaa15fa0 R15: 00007ffec81dfa38
[  797.466312][T17009]  </TASK>
[  797.637425][T17013] netlink: 'syz.3.2820': attribute type 10 has an invalid length.
[  797.640225][T17007] CPU: 1 UID: 0 PID: 17007 Comm: syz.1.2818 Not tainted syzkaller #0 PREEMPT(full) 
[  797.640249][T17007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  797.640260][T17007] Call Trace:
[  797.640268][T17007]  <TASK>
[  797.640276][T17007]  dump_stack_lvl+0xe8/0x150
[  797.640309][T17007]  should_fail_ex+0x412/0x560
[  797.640338][T17007]  _copy_to_user+0x31/0xb0
[  797.640368][T17007]  simple_read_from_buffer+0xe1/0x170
[  797.640400][T17007]  proc_fail_nth_read+0x1bb/0x230
[  797.640433][T17007]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  797.640462][T17007]  ? rw_verify_area+0x2a6/0x4d0
[  797.640480][T17007]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  797.640507][T17007]  vfs_read+0x20c/0xa70
[  797.640524][T17007]  ? fdget_pos+0x246/0x320
[  797.640556][T17007]  ? __pfx___mutex_lock+0x10/0x10
[  797.640583][T17007]  ? __pfx_vfs_read+0x10/0x10
[  797.640604][T17007]  ? __fget_files+0x2a/0x420
[  797.640635][T17007]  ? __fget_files+0x3a0/0x420
[  797.640669][T17007]  ? __fget_files+0x2a/0x420
[  797.640704][T17007]  ksys_read+0x150/0x270
[  797.640726][T17007]  ? __pfx_ksys_read+0x10/0x10
[  797.640757][T17007]  do_syscall_64+0x14d/0xf80
[  797.640781][T17007]  ? trace_irq_disable+0x3b/0x150
[  797.640806][T17007]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.640825][T17007]  ? clear_bhb_loop+0x40/0x90
[  797.640848][T17007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.640866][T17007] RIP: 0033:0x7fb2d2b5cfce
[  797.640885][T17007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  797.640900][T17007] RSP: 002b:00007fb2d0df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  797.640921][T17007] RAX: ffffffffffffffda RBX: 00007fb2d0df66c0 RCX: 00007fb2d2b5cfce
[  797.640934][T17007] RDX: 000000000000000f RSI: 00007fb2d0df60a0 RDI: 0000000000000004
[  797.640946][T17007] RBP: 00007fb2d0df6090 R08: 0000000000000000 R09: 0000000000000000
[  797.640957][T17007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  797.640968][T17007] R13: 00007fb2d2e16038 R14: 00007fb2d2e15fa0 R15: 00007ffc95120a28
[  797.640999][T17007]  </TASK>
[  797.991555][T16928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  798.018838][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  798.069211][T16928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  798.128274][T17013] team0: Port device geneve0 added
[  798.201070][T12943] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  798.211137][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  798.249641][T12943] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  798.386241][T12943] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  798.401454][ T7409] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  798.438889][T12943] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  798.448792][T17016] lo speed is unknown, defaulting to 1000
[  798.561721][T16928] hsr_slave_0: entered promiscuous mode
[  798.606396][T16928] hsr_slave_1: entered promiscuous mode
[  798.620424][   T31] INFO: task syz.5.1282:11111 blocked for more than 143 seconds.
[  798.622676][T16928] debugfs: 'hsr0' already exists in 'hsr'
[  798.628197][   T31]       Not tainted syzkaller #0
[  798.628211][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  798.628223][   T31] task:syz.5.1282      state:D stack:25352 pid:11111 tgid:11109 ppid:7374   task_flags:0x400140 flags:0x00080002
[  798.650109][T16928] Cannot create hsr debugfs directory
[  798.667763][   T31] Call Trace:
[  798.671803][   T31]  <TASK>
[  798.675237][   T31]  __schedule+0x15dd/0x52d0
[  798.699975][   T31]  ? __pfx___schedule+0x10/0x10
[  798.704991][   T31]  ? schedule+0x90/0x360
[  798.709287][   T31]  schedule+0x164/0x360
[  798.729943][   T31]  schedule_preempt_disabled+0x13/0x30
[  798.740084][   T31]  __mutex_lock+0x7fe/0x1300
[  798.744763][   T31]  ? __mutex_lock+0x5ac/0x1300
[  798.749594][   T31]  ? nfsd_nl_listener_get_doit+0x10a/0x5e0
[  798.770051][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  798.775262][   T31]  ? __nlmsg_put+0xef/0x1b0
[  798.779818][   T31]  ? genlmsg_put+0x137/0x2e0
[  798.802292][   T31]  nfsd_nl_listener_get_doit+0x10a/0x5e0
[  798.811355][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  798.830178][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  798.838789][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  798.877087][   T31]  ? __asan_memcpy+0x40/0x70
[  798.907470][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  798.916168][   T31]  ? __dev_queue_xmit+0x28b/0x3870
[  798.921710][   T31]  genl_rcv_msg+0x61c/0x7a0
[  798.926329][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  798.932174][   T31]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  798.938400][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  798.943946][   T31]  netlink_rcv_skb+0x232/0x4b0
[  798.948806][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  798.954386][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  798.959754][   T31]  ? down_read+0x272/0x2e0
[  798.964729][   T31]  ? genl_rcv+0xd/0x40
[  798.966913][T17049] netlink: 'syz.4.2825': attribute type 9 has an invalid length.
[  798.968840][   T31]  genl_rcv+0x28/0x40
[  798.968871][   T31]  netlink_unicast+0x80f/0x9b0
[  798.986376][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  798.992028][   T31]  ? netlink_sendmsg+0x650/0xb40
[  798.997091][   T31]  ? skb_put+0x11b/0x210
[  799.001524][   T31]  netlink_sendmsg+0x813/0xb40
[  799.006344][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  799.011883][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  799.016961][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  799.022759][   T31]  ____sys_sendmsg+0x972/0x9f0
[  799.027578][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  799.033101][   T31]  ? import_iovec+0x73/0xa0
[  799.037669][   T31]  ___sys_sendmsg+0x2a5/0x360
[  799.042536][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  799.047285][T17052] SET target dimension over the limit!
[  799.047846][   T31]  ? futex_wake+0x4ac/0x580
[  799.057963][   T31]  ? __fget_files+0x2a/0x420
[  799.062745][   T31]  ? __fget_files+0x3a0/0x420
[  799.067476][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  799.072495][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  799.077993][   T31]  ? rcu_is_watching+0x15/0xb0
[  799.082917][   T31]  do_syscall_64+0x14d/0xf80
[  799.087546][   T31]  ? trace_irq_disable+0x3b/0x150
[  799.092816][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  799.098921][   T31]  ? clear_bhb_loop+0x40/0x90
[  799.103859][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  799.109803][   T31] RIP: 0033:0x7f996f39c799
[  799.114300][   T31] RSP: 002b:00007f9970211028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  799.122848][   T31] RAX: ffffffffffffffda RBX: 00007f996f615fa0 RCX: 00007f996f39c799
[  799.130980][   T31] RDX: 0000000004000000 RSI: 0000200000000940 RDI: 0000000000000009
[  799.139004][   T31] RBP: 00007f996f432c99 R08: 0000000000000000 R09: 0000000000000000
[  799.147182][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  799.155446][   T31] R13: 00007f996f616038 R14: 00007f996f615fa0 R15: 00007fffcef5a8e8
[  799.163575][   T31]  </TASK>
[  799.166750][   T31] 
[  799.166750][   T31] Showing all locks held in the system:
[  799.173277][ T5891] Bluetooth: hci7: command tx timeout
[  799.195413][   T31] 1 lock held by khungtaskd/31:
[  799.215100][   T31]  #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  799.227117][   T31] 2 locks held by getty/5580:
[  799.232165][   T31]  #0: ffff8880367000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  799.242014][   T31]  #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  799.252546][ T7409] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  799.260305][   T31] 2 locks held by syz.0.249/6898:
[  799.265357][   T31]  #0: ffffffff8fc35490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  799.273713][   T31]  #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0
[  799.283847][   T31] 2 locks held by syz.5.1282/11111:
[  799.289062][   T31]  #0: ffffffff8fc35490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  799.297707][   T31]  #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0
[  799.308129][   T31] 3 locks held by kworker/u8:11/12943:
[  799.313717][   T31]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  799.325668][   T31]  #1: ffffc90021d2fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  799.336853][   T31]  #2: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  799.345909][   T31] 1 lock held by syz-executor/16928:
[  799.351403][   T31]  #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  799.360813][   T31] 2 locks held by syz.1.2821/17015:
[  799.366029][   T31]  #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  799.375358][   T31]  #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  799.386613][   T31] 2 locks held by syz.1.2821/17016:
[  799.391921][   T31]  #0: ffffffff8fbb8710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  799.401488][   T31]  #1: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60
[  799.410744][   T31] 1 lock held by syz.3.2823/17036:
[  799.415878][   T31]  #0: ffffffff8e764580 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  799.426044][   T31] 2 locks held by syz.4.2825/17049:
[  799.431369][   T31]  #0: ffffffff90116680 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  799.441117][   T31]  #1: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  799.450344][   T31] 2 locks held by syz.4.2825/17055:
[  799.455577][   T31]  #0: ffffffff90133298 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  799.465161][   T31]  #1: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  799.474466][   T31] 
[  799.476841][   T31] =============================================
[  799.476841][   T31] 
[  799.485961][   T31] NMI backtrace for cpu 1
[  799.486034][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  799.486057][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  799.486069][   T31] Call Trace:
[  799.486077][   T31]  <TASK>
[  799.486085][   T31]  dump_stack_lvl+0xe8/0x150
[  799.486118][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  799.486144][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  799.486173][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  799.486199][   T31]  sys_info+0x135/0x170
[  799.486218][   T31]  watchdog+0xfd9/0x1030
[  799.486254][   T31]  ? watchdog+0x21a/0x1030
[  799.486291][   T31]  kthread+0x388/0x470
[  799.486312][   T31]  ? __pfx_watchdog+0x10/0x10
[  799.486338][   T31]  ? __pfx_kthread+0x10/0x10
[  799.486360][   T31]  ret_from_fork+0x51e/0xb90
[  799.486388][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  799.486412][   T31]  ? __switch_to+0xc7d/0x1450
[  799.486440][   T31]  ? __pfx_kthread+0x10/0x10
[  799.486461][   T31]  ret_from_fork_asm+0x1a/0x30
[  799.486511][   T31]  </TASK>
[  799.486518][   T31] Sending NMI from CPU 1 to CPUs 0:
[  799.596331][    C0] NMI backtrace for cpu 0
[  799.596351][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  799.596368][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  799.596379][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  799.596408][    C0] Code: fe 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b2 1a 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  799.596422][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246
[  799.596445][    C0] RAX: 00000000001d75cf RBX: ffffffff819a8c8d RCX: 0000000080000001
[  799.596457][    C0] RDX: 0000000000000001 RSI: ffffffff8df209e8 RDI: ffffffff8c27b500
[  799.596469][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b
[  799.596480][    C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90112cb0
[  799.596492][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[  799.596503][    C0] FS:  0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000
[  799.596517][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  799.596528][    C0] CR2: 00007faaf69e9e80 CR3: 0000000078432000 CR4: 00000000003526f0
[  799.596544][    C0] Call Trace:
[  799.596551][    C0]  <TASK>
[  799.596557][    C0]  default_idle+0x9/0x20
[  799.596573][    C0]  default_idle_call+0x72/0xb0
[  799.596590][    C0]  do_idle+0x1bd/0x500
[  799.596614][    C0]  ? __pfx_do_idle+0x10/0x10
[  799.596639][    C0]  cpu_startup_entry+0x43/0x60
[  799.596660][    C0]  rest_init+0x2de/0x300
[  799.596677][    C0]  start_kernel+0x385/0x3d0
[  799.596705][    C0]  x86_64_start_reservations+0x24/0x30
[  799.596724][    C0]  x86_64_start_kernel+0x143/0x1c0
[  799.596743][    C0]  common_startup_64+0x13e/0x147
[  799.596766][    C0]  </TASK>
[  799.775108][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  799.782013][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  799.791220][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  799.801285][   T31] Call Trace:
[  799.804663][   T31]  <TASK>
[  799.807597][   T31]  vpanic+0x56c/0xa60
[  799.811597][   T31]  ? __pfx___schedule+0x10/0x10
[  799.816462][   T31]  ? __pfx_vpanic+0x10/0x10
[  799.821072][   T31]  ? __pfx_console_unlock+0x10/0x10
[  799.826293][   T31]  panic+0xc5/0xd0
[  799.830118][   T31]  ? __pfx_panic+0x10/0x10
[  799.834546][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  799.839938][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  799.846111][   T31]  watchdog+0x1023/0x1030
[  799.850471][   T31]  ? watchdog+0x21a/0x1030
[  799.854905][   T31]  kthread+0x388/0x470
[  799.858987][   T31]  ? __pfx_watchdog+0x10/0x10
[  799.863681][   T31]  ? __pfx_kthread+0x10/0x10
[  799.868277][   T31]  ret_from_fork+0x51e/0xb90
[  799.872884][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  799.878090][   T31]  ? __switch_to+0xc7d/0x1450
[  799.882775][   T31]  ? __pfx_kthread+0x10/0x10
[  799.887369][   T31]  ret_from_fork_asm+0x1a/0x30
[  799.892163][   T31]  </TASK>
[  799.895470][   T31] Kernel Offset: disabled
[  799.899793][   T31] Rebooting in 86400 seconds..