last executing test programs:

6.348344452s ago: executing program 4 (id=3046):
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080))
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=<r2=>r1], 0x20}}, 0x0) (async, rerun: 64)
r3 = socket(0x2b, 0x1, 0x1) (rerun: 64)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) (async)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r5 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x54}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async, rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000009000000850000008200000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async, rerun: 32)
socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x100, 0xfdfffc80, 0x0, 0x6, 0x8, 0x0, 0x73a, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0xfeffffff, 0x0, 0x1ff, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0xfffffff7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400004, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10000, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffefe, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10000000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0xffffffff, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x71280dd2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0)

5.948230263s ago: executing program 4 (id=3049):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000300)=0x5, 0x4)
unshare(0x20000400)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601"], 0x1c}}, 0x0)
recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x7, 0x4, 0x101, 0x80, 0x9, 0x2, 0x8}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r6, &(0x7f0000000d00)=[{{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x1, 0x4000)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x1, 0x6}, &(0x7f0000000500)=0x90)

5.852226508s ago: executing program 3 (id=3050):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYRES64=r0], 0x58}, 0x1, 0x0, 0x0, 0x4005}, 0x4804)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1e8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001880}, 0xc080)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "91"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9}, {0x2, 0x3, 0x6}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048084}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), <r5=>0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80003}, 0x10, r5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@generic={0x3, 0xf, 0x1, 0x800, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0xe43, 0x23, &(0x7f0000000240)=""/35, 0x41000, 0x24, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, 0x0, 0x7, &(0x7f0000000340)=[r6, r7], &(0x7f0000000380)=[{0x2, 0x3, 0x5, 0xa}, {0x5, 0x4, 0x5, 0x9}, {0x2, 0x4, 0xe, 0xc}, {0x4, 0x3, 0x10, 0xc}, {0x4, 0x5, 0x3, 0xb}, {0x5, 0x4, 0x6, 0x6}, {0x1, 0x5, 0xf, 0xc}], 0x10, 0x7}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYRES64=r0], 0x58}, 0x1, 0x0, 0x0, 0x4005}, 0x4804) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1e8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001880}, 0xc080) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "91"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9}, {0x2, 0x3, 0x6}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80003}, 0x10, r5}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@generic={0x3, 0xf, 0x1, 0x800, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0xe43, 0x23, &(0x7f0000000240)=""/35, 0x41000, 0x24, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, 0x0, 0x7, &(0x7f0000000340)=[r6, r7], &(0x7f0000000380)=[{0x2, 0x3, 0x5, 0xa}, {0x5, 0x4, 0x5, 0x9}, {0x2, 0x4, 0xe, 0xc}, {0x4, 0x3, 0x10, 0xc}, {0x4, 0x5, 0x3, 0xb}, {0x5, 0x4, 0x6, 0x6}, {0x1, 0x5, 0xf, 0xc}], 0x10, 0x7}, 0x94) (async)

5.525944978s ago: executing program 4 (id=3053):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0x1a, 0x0, &(0x7f00000001c0)=0x2)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000008c0))

5.468271613s ago: executing program 3 (id=3055):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x7, [{0xa, 0x3}]}]}}, 0x0, 0x32}, 0x28)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
splice(r4, 0x0, r3, 0x0, 0x81, 0x6)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220a2403}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x140c, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x0)

5.322495766s ago: executing program 4 (id=3057):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x200, 0x9, 0x8000, 0xffff58ca, 0x8001, 0x9, 0x0, 0x1, r4}, &(0x7f0000000080)=0x20)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e20, 0x906d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x8001, 0xe5cf}, &(0x7f0000000540)=0x90)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000180)=0x1, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000340)=@framed={{}, [@exit, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xf6, &(0x7f0000000440)=""/246}, 0x94)

4.316074589s ago: executing program 0 (id=3061):
unshare(0x6a040000)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
sendmsg(r1, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x0, @private1, 0x3000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d5500897cd5556770418b1b34525a7becaa1a13b103508a04d5cd215b761cd584cddde2539d4d465745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566f259c4f224d9098cbd4b94b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f779786606674fa7c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f2f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f31", 0x22}], 0x3}, 0x40010)
mmap(&(0x7f00006c1000/0x2000)=nil, 0x2000, 0x3, 0x8031, r0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f00000003c0)="971f58b0e6daa1770bde2476b1de2bca307eb2a8263dd54fe85f983f1e3ce70e14643bd11177dc8c24caaa275ef3a98ac8d059de1467465588e2fecebdc91c9de1b6b0248fa7119a9508938e12ed75699e4f9b62612609e70e8ea2deb762030b029886f253b692625c7d2087874215bec8b123a0bbb33bf224d883f169a86eab66f149fe1bc76c87079c0e09bb2c0686c77c43ee24bd10aa612f93ad7f261aa9799debfac87f737bcda11b82b5f9fe83129ee67f61f848bb7fd93930ef", &(0x7f0000000480)=""/29}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d)
write$cgroup_int(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
unshare(0x6a040000) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r1, &(0x7f0000000040), 0x10) (async)
sendmsg(r1, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x0, @private1, 0x3000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d5500897cd5556770418b1b34525a7becaa1a13b103508a04d5cd215b761cd584cddde2539d4d465745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566f259c4f224d9098cbd4b94b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f779786606674fa7c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f2f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f31", 0x22}], 0x3}, 0x40010) (async)
mmap(&(0x7f00006c1000/0x2000)=nil, 0x2000, 0x3, 0x8031, r0, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f00000003c0)="971f58b0e6daa1770bde2476b1de2bca307eb2a8263dd54fe85f983f1e3ce70e14643bd11177dc8c24caaa275ef3a98ac8d059de1467465588e2fecebdc91c9de1b6b0248fa7119a9508938e12ed75699e4f9b62612609e70e8ea2deb762030b029886f253b692625c7d2087874215bec8b123a0bbb33bf224d883f169a86eab66f149fe1bc76c87079c0e09bb2c0686c77c43ee24bd10aa612f93ad7f261aa9799debfac87f737bcda11b82b5f9fe83129ee67f61f848bb7fd93930ef", &(0x7f0000000480)=""/29}, 0x20) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) (async)
write$cgroup_int(r3, 0x0, 0x0) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
socket$kcm(0x2, 0x3, 0x84) (async)
sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async)

4.249657307s ago: executing program 4 (id=3062):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b40)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r4, @ANYBLOB="00022bbd7000fddbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000010003000100000060000b000900000006001600030000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d616373656300001400028005000f0000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x40000d0)

3.916024737s ago: executing program 4 (id=3064):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000200000001a0000010000000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r1=>0xffffffffffffffff}, 0x4) (async)
socket$phonet(0x23, 0x2, 0x1) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x79118b3ee5622451}, 0x28)
r3 = socket(0x10, 0x80003, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a8", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000b000b0b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000afffffff18230000", @ANYRES32=r1, @ANYBLOB="0905000000000000b7050001080000006a000000a5080008a6"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) (async)
r7 = socket$netlink(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x388, 0xffffffff, 0x0, 0xe8, 0xe8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'wg0\x00', {0xff}, {0xff}, 0x3b, 0xff, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {0x3b000000}, [@common=@unspec=@connmark={{0x30}, {0x3, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xff, 0x0, 0xff000000], 'wlan1\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x9, 0x7, 0x10}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0x4, 0xb5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r7)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a00)={'gre0\x00', <r13=>r6, 0x80, 0x7800, 0x6, 0x6, {{0x2a, 0x4, 0x1, 0x28, 0xa8, 0x66, 0x0, 0x4, 0x4, 0x0, @local, @multicast2, {[@cipso={0x86, 0x23, 0xffffffffffffffff, [{0x6, 0x10, "ba0f6c17518d4cf9831cb20e8002"}, {0x6, 0xd, "2376e316af9d956a647941"}]}, @timestamp_prespec={0x44, 0x14, 0x20, 0x3, 0xb, [{@multicast1, 0x2}, {@multicast1, 0x5f}]}, @generic={0x82, 0x3, '\r'}, @rr={0x7, 0x7, 0x79, [@private=0xa010102]}, @timestamp={0x44, 0x14, 0xb4, 0x0, 0x6, [0x5, 0x9, 0x2, 0x7fffffff]}, @lsrr={0x83, 0x1b, 0x3d, [@rand_addr=0x64010102, @empty, @remote, @multicast2, @loopback, @local]}, @timestamp_prespec={0x44, 0x24, 0xab, 0x3, 0x3, [{@broadcast, 0x4}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xa}]}]}}}}}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) (async)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, r15, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x482d, 0x4, 0x486f, 0x8, 0x5, 0x30, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x40, r15, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0xd1) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'ip6tnl0\x00', <r17=>r6, 0x29, 0x7, 0x0, 0x1, 0x20, @mcast1, @private1, 0x1, 0x1, 0x2, 0x6}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f0000000e80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000820}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x19c, r12, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x19c}}, 0x20000000) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r8, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x42}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x24040045}, 0x11)

3.367911163s ago: executing program 2 (id=3067):
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x85, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0xb, 0x28}}, @fast_bss_trans={0x37, 0x69, {0x2a, 0x1, "e2415a64c2e0ac5a27a5a6b8dfdd6215", "3b136a583933428534aaeea55b8af264bfd7b59a2cd5bcb6c81eb99c6743d0ef", "895fcbb438b563f6ce9295b27b825f7d3a33fce5c497444cb04a7498150d48d7", [{0x4, 0x15, "08085552dfc023889860d45bde478bf29a66cc9256"}]}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x20}}, @supported_rates={0x1, 0x2, [{0xc}, {0x1b}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000010}, 0x44850) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40404b1) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf8, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x44804}, 0x20000010) (async, rerun: 64)
r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (rerun: 64)
r6 = gettid()
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/time_for_children\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x114, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0xc090) (async)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/62, 0x3e}], 0x1, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}, @rights={{0x18, 0x1, 0x1, [<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/142, 0x8e}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/246, 0xf6}, {&(0x7f0000002b00)=""/248, 0xf8}, {&(0x7f0000002c00)=""/224, 0xe0}], 0x7}}, {{&(0x7f0000002d80)=@abs, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000002e00)=""/253, 0xfd}, {&(0x7f0000002f00)=""/44, 0x2c}, {&(0x7f0000002f40)=""/105, 0x69}, {&(0x7f0000002fc0)=""/42, 0x2a}, {&(0x7f0000003000)=""/193, 0xc1}, {&(0x7f0000003100)=""/116, 0x74}, {&(0x7f0000003180)=""/131, 0x83}, {&(0x7f0000003240)=""/84, 0x54}], 0x8, &(0x7f0000003340)=[@rights={{0x18, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000003380)=@abs, 0x6e, &(0x7f0000004580)=[{&(0x7f0000003400)=""/121, 0x79}, {&(0x7f0000003480)=""/5, 0x5}, {&(0x7f00000034c0)=""/72, 0x48}, {&(0x7f0000003540)=""/18, 0x12}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x5, &(0x7f0000004600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r14=>0x0}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000004680), 0x6e, &(0x7f0000005700)=[{&(0x7f0000004700)=""/4096, 0x1000}], 0x1}}], 0x5, 0x10020, &(0x7f0000005880)={0x77359400})
r15 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005bc0)={r10, 0xe0, &(0x7f0000005ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000005900)=[0x0, 0x0], ""/16, <r16=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000005940)=[0x0, 0x0, 0x0], &(0x7f0000005980)=[0x0], 0x0, 0x2f, &(0x7f00000059c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000005a00), &(0x7f0000005a40), 0x8, 0xde, 0x8, 0x8, &(0x7f0000005a80)}}, 0x10) (rerun: 64)
sendmsg$nl_xfrm(r15, &(0x7f0000005f00)={&(0x7f00000058c0), 0xc, &(0x7f0000005ec0)={&(0x7f0000005c00)=@acquire={0x298, 0x17, 0x300, 0x70bd2b, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x4d4, 0x33}, @in=@remote, {@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4e24, 0x0, 0x4e20, 0x200, 0xa, 0x0, 0x20, 0x1, 0x0, r14}, {{@in=@dev={0xac, 0x14, 0x14, 0x36}, @in=@private=0xa010101, 0x4e24, 0x3, 0x4e23, 0x401, 0x2, 0x80, 0x60, 0x21, r16, r8}, {0x7fff, 0x9, 0x0, 0x8, 0x4, 0x0, 0x2, 0x3}, {0x352, 0x2, 0x3, 0x5}, 0x8, 0x6e6bbc, 0x1, 0x0, 0x4, 0x1}, 0x9, 0x10001, 0x9, 0x70bd2a}, [@user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}}, @lifetime_val={0x24, 0x9, {0xf, 0xfffffffffffffff9, 0x96}}, @policy_type={0xa}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@rand_addr=0x64010101, 0x4e23, 0x8, 0x4e24, 0xf, 0x2, 0x80, 0x80, 0x6, 0x0, r14}, {@in6=@empty, 0x4d6, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x3ff, 0x0, 0x4, 0x100000001, 0x6, 0x1, 0x2, 0x617e}, {0x3ff80000000, 0xa, 0x6}, {0x6, 0x9, 0x7fff}, 0x70bd25, 0x3504, 0xa, 0x2, 0x8, 0x10}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd25, 0x70bd2d, 0x70bd29, 0x70bd26, 0x0, [0x3, 0x0, 0x5]}}, @tfcpad={0x8, 0x16, 0x1}]}, 0x298}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) (async)
r17 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000005f40), r17) (async, rerun: 32)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000005f80)={'pim6reg1', 0x32, 0x38}, 0xb) (async, rerun: 32)
listen(r0, 0x1) (async)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006000), r10) (rerun: 64)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r13, &(0x7f00000060c0)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x1c, r18, 0x600, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x8000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000006140)={'wlan0\x00', <r19=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000006200)={&(0x7f0000006100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006180)={0x34, r18, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000006300)={&(0x7f0000006240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000062c0)={&(0x7f0000006280)=@getqdisc={0x30, 0x26, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0x4, 0xffe0}, {0x1, 0xfff3}, {0xfff3, 0xfff1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4000800)
syz_genetlink_get_family_id$ipvs(&(0x7f0000006340), r9)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r12, 0x80489439, &(0x7f0000006380)) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000006400)={0x1b, 0x0, 0x0, 0xc, 0x0, r11, 0x7, '\x00', r16, r13, 0x3}, 0x50)

3.088673221s ago: executing program 2 (id=3070):
r0 = epoll_create(0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r2=>0x0, 0x2f, 0x8, 0x40, 0xf, 0x51, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x700, 0x8, 0x1}})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="2e000000010002", 0x7)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000001c0))
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000005a80)={'syztnl2\x00', &(0x7f0000005a00)={'ip6tnl0\x00', <r6=>r2, 0x29, 0x81, 0x1, 0x6, 0x10, @dev={0xfe, 0x80, '\x00', 0x11}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x700, 0x27449601, 0x7}})
sendmmsg$inet6(r5, &(0x7f0000005b40)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x2401, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000380)="efca998d64e8f04b51475784bf42492914ec52060bf328b7aa68ce7976f78b7c852d6a694b20e52438532d856ec0ef421dec88b210a7ef53148b4a86d533198f7462926dcb12458f7db750489beb5530ed67b2a7aedbcb4911aea16d91a7ec6ed93e6f9e81964d5e9dda7d04ab2a3dc8125f1703fbf89481fa551b9faeec92bfbfdc258052219eefc7053500763ee84f7c2f2cba", 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)="f91af3a7f2831ad4f03dcbae7f2d722e57c3c211e2196604c0e0c6369335918e8882840873575b7ad8975ee1", 0x2c}, {&(0x7f00000004c0)="764ede98d26f50e27423df416477b139fa3c99aaac11e5658a3b1839b9e1d37945d47c1add23c4621df0994886de56a63ee177ed5909be752126f87eb842d4e60b6eee40982f553c79d2c68107e18b7bd8c1c02487ca04393f38f3a5dad94e937329a1dd5afaf69d8fda22f5100164443f6f5e8d4612507c53d21a4c90250f77de2f1e124ddb1781c1ae53a697dde8c846873c6b2e053d7f9cfad98b2a96cf98771eed42243d33db47ff6b1e6558540a2aa08a4a91fa72e1cb4cb9b706aa078935410f975d0054530f7eac69a19ad849aae929abfa69dd747d2063c013b5f441a44dc7", 0xe3}, {&(0x7f00000005c0)="c5737f36450df4b5989b2f4739c111d9048c2c1e", 0x14}], 0x3, &(0x7f0000000740)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @broadcast}, r2}}}, @rthdr={{0x68, 0x29, 0x39, {0x67, 0xa, 0x0, 0x81, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xe95da5c}}], 0xa8}}, {{&(0x7f0000000800)={0xa, 0x4e22, 0x8, @empty, 0x3}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="601f0471f1cc4a3a809b6ff842ea5f1dc37bc3e53048e4c41917cb3f080bd00a548c700bc661618837093fe368", 0x2d}, {&(0x7f0000000880)="00625032a63ca5b00e269744f2e9243f4d05ca869543f18f86a7ed0142d5ff9d12ee1578bfa96a9e45932050439dac829099617a8daee6fa94dc", 0x3a}, {&(0x7f00000008c0)="1a3652100b742926d162e6", 0xb}, {&(0x7f0000000900)="f1f91f51289146d47edce7d08f1c2bfc2e09256396af35f5b4b08a52351200cd936c9190159fdb71778924381c90281774d54b5f584d579efd8cccdbc53fccda58c0f7018e7f08deaa08ca71e6cc481d36d96fa2243d58bde1c7a27b590acfaee8d6329a9af01c0c2b90044d70f3dcde580b6c04aa59bd906b88f08bd50853bdb110d90de8fbd1d11b9c028dfdd581bf", 0x90}, {&(0x7f00000009c0)="c44869facab082d632d47699d428da1564a4f24096a108f5ab02b4b260511e5fb20febcb79c91584d683ae2f88f7263d25f6a9efa3e862fb791f83d5a79e257e65fd010d2a5151997d31c7794cc8db916872c6b3cb7072b547fa7867893052a8e1ebf1ee27a78cdd2b3accae2983ce1a9115822e1dc2053d532495158128cfe2e898afceb1038319676c89f6b727c4d8bddab59c781af2e46599357d1f32ebc09cbbb629250271fb05046849e01d1fddd494995deffcfde020eb44eb357c", 0xbe}, {&(0x7f0000000a80)="ac78a8b3d814e63fee072f0831ebceb14672059b6ef58d16fa9050dda29e6fcdc9e12ade1e0594907a8fd32f3062481bae5cc48a9e6b28af048ec225eead6958", 0x40}, {&(0x7f0000000ac0)="8a1f5e55149b03e0a65957a4020212a2cfe91108f0c4b8b0f0d95046afbeee0cee82887328a71bd72b97c53a31ed1b4de012f870b592e27e06c72097ea172ef21c5593ebae1c9de40ab42973abc51c057e1b1d9bd4fdcc36728fb23aae2cee8a98fbb9577a601243a7923c22b2357761f9ed08ee6563440b9291c2b9559277d260c3ffaaee624a2c597312f421359d7954474775a8ed1477f8f9fcc376cfc8cb1437c45c82ab2c55ce63d097422c5517a3b3b158f599e15cf2ec38562fe4", 0xbe}, {&(0x7f0000000b80)="15cd60c7e2c5d5dd2f9c44c0d2f24c278fc0e5755c1a035e12564f64607c68b94bf948c228fb5ee349342f856da453a267433db120a2a648047bc1a06806fac2166a46eeeed0691be6e6aff8d7a7666893ead03ce1e4211780c9f9c9405bcf83968c8c62fa946699c60ceae1a0dbfb377e86d5e41c83fa303704c9e48babacb969028345bee69f", 0x87}], 0x8, &(0x7f0000000cc0)=[@rthdr={{0x58, 0x29, 0x39, {0x11, 0x8, 0x2, 0x6, 0x0, [@mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xc}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x32, 0x4, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xef}, @pad1, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xb}}, @hopopts={{0x20, 0x29, 0x36, {0x67, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}}}], 0x118}}, {{&(0x7f0000000e00)={0xa, 0x4e23, 0x5, @empty, 0x9}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000e40)="3090dd92c2480ae0c006c96bb213bdd08c5321855cf746feac1185dc70a0a450aba82751ff53d22b22eb132a1afdf482ab305fe2f8a61a90cf0ad1ea3b97ca56146349421a6a83c367e150563ac5f5f6c0f68a3233d906e60e7f275b70805b3f7d7929bf4311ec52034e7a403c45f63e7924a287f34b71093736dab4c3cab91a3c13175074f0b32a927f1f784050364a2491b188d3810c8ddd80f9cc08a4741f6d0e6cbcec6345b6005b76f0cdb88ed0c709e11428fb867baf9354d5cead", 0xbe}, {&(0x7f0000000f00)="14190c75073e095a0022db4debe203247f2872539299942350b9ffdef29d6f4fae6c95675641a6f5f29d3c0d29c2e3e941b5c173a6d9f0f20e3a9225c81c90f4de676b693fb948c143bee7fa95156ac61ef641d6cddb9ca2795c5ce3847380d0364283cf8951ba10a033bb7ae9f5eb9720511466774bcc28e662e3f3e5112b4608b20a0f4d747d61674cfe3f523b7d086c59e323765c6ffbbe1134f6484c0bc420be6df708b735835240f94dbda7eaff62ef86", 0xb3}, {&(0x7f0000000fc0)="ffa852b3dabca4ff4237c1e7cb82512eba3d67bb4759166d215e7ac438f21a38b7a65420877e3b124cb56b809f583d9cf2748d78d0746e0c07093d4b4ea10d7bc57ffa24b74b9d3c255c546cdca88f944d889a74f5b0cae4da8e89f9358f6f37750e24e4ae86f9a44b05a7c5e658f3", 0x6f}, {&(0x7f0000001040)="51d09fe8de0056c77097f033c3fff81ae3aeb2fcf4dfc3d539b200581506259509eedbffaaf3bd815937977edcd47f39af755ce9eb", 0x35}], 0x4, &(0x7f00000010c0)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x5c, 0x0, '\x00', [@ra={0x5, 0x2, 0xfff}, @enc_lim={0x4, 0x1, 0x59}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xc4}}], 0x38}}, {{&(0x7f0000001100)={0xa, 0x4e23, 0xffa, @local, 0x1}, 0x1c, &(0x7f0000004200)=[{&(0x7f0000001140)="ea8019bc116b0ee6ff1b2c2d571c76c529c3", 0x12}, {&(0x7f0000001180)="d95fe6a51a643e066446082fb099f20d529327b4efd9ac7292", 0x19}, {&(0x7f0000003200)="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", 0x1000}], 0x3}}, {{&(0x7f0000004240)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000044c0)=[{&(0x7f0000004280)="b6dd8375886092da78e479d549ebc7426ef3c75f9a9af0b34561c08ddd42dfda21359b6d968cba7be9db23222e39c8de09910001f456b85914e4cb9ed80140a36882f3fcdae82eb0e3bce89a9d04c7308afca1f83b27a5867cc18e95286c3b8901169f8fd8a7e731765ff0947f758e67a7cfd019db60dad15c0aa7b484370e2476d0e4a242548325cdd17f876e964b6b3d4f026b859bb0314edcde48dbd81e24f2236effe338c103998d4234662faf9c356bf48f8a6876de0fca28ea54cb62cde035bcc1f495d46cddbffaa1ac9096e96be08f264f7919feab0f971164bdefa1", 0xe0}, {&(0x7f0000004380)="2e5a322992acf53f3e5c8e77b510ca4ea23b526b5b3d035b8066f736076788ac2bd127567f4447da262288fb5a3adc9086cefcdb86f7bc26bec23d985457bc54f5cd23080bb6acf08a79c9378946b728c328c5c31a7752c155c6650e9062524f9532d9f4e490637cae3f13492f4d73645c98e0d5", 0x74}, {&(0x7f0000004400)="95c184532f69e8cae069e65fa083ff8d90ba55c43957579a1398513b7b45faed047eaeeaf36fc07f2ec0d2d57b59a0d43c33c1d17de28b670e431562d95d45025ba435cb0ced515eea53b1aedf826750f15d893a0ad473249be0c8cca093a959365a84", 0x63}, {&(0x7f0000004480)="ef2d6958aee4048be812bb0cf17ff50cb922f93d79f2195f4c446c57ca60d00273217e23bedacbdb924eb85b54f4fd0e1e5396dfaa6c69ba706b6396ce57", 0x3e}], 0x4, &(0x7f0000004500)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}}}, @rthdrdstopts={{0x170, 0x29, 0x37, {0x3b, 0x2a, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0xc8, 0xfff9, [0xcd00, 0x0, 0x200, 0x4, 0x7fff, 0x5, 0xc00000000, 0x4]}}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x2}, @pad1, @generic={0x6, 0xe9, "f4ff0cd1e9ecbd2abb4eb8cc39dead4b969e5cb0297b04d613e6e4bf1a6efd359f5a8df207a9250cb764201d1032b876c9fd00c18122178b2f903e6c7215340274e6647f63e92c4413bc192e9cf9a9fcfb97e9f356257a56345c43f6e61ac9c4c40cea12b47487b0fe16f299edb5d013c8e60dc04745b989b560968fc74043ffa46cdd9ec43c91fc17e631ccccdbee16cc0d51768d04bf6f0b1ab7719794337319f0318d5379186b6f0248b2a0c9c57df3cc6c56a9a80da8a388c5336e403d362d8aeaaad69cbafeb9e1cdd267a70a07d7e3f3ea48bf2adbe479708f26b5178a7ff171b4450c23e76d"}, @enc_lim={0x4, 0x1, 0xfd}]}}}, @rthdrdstopts={{0x108, 0x29, 0x37, {0x3a, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn, @pad1, @generic={0x0, 0xcf, "a635de40361d39afc3432fdb9d57b7e898b1b20ade8bfc1c45a0ed5ab1a5f69e0ce1c992d54a933734bee511b5b6306fe8262eb6e273d698c6072b4f4f56b3fc0c70c0f4ba1ab2287e31c259c9dbfbca02176620afef214dd865e461ca5c3d851bd934e9d4b13cde031b1ba7feaa05af02f5f804f6179ba0c48288653b81191b35e25635d2c38911c1e22fd4ece1da9f6b5a5ce88d7101a6fb031e6b3cc93eb29ff1736aa9cf20cf3e478c15cd6e1b46b8fe195b7f0d242a04bce3fad6ae588d11348c9a813f5fbf3243e7ade3e850"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x2f, 0x12, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1a}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, @loopback]}}}], 0x348}}, {{&(0x7f0000004880)={0xa, 0x4e23, 0x3, @local, 0x7f}, 0x1c, &(0x7f00000059c0)=[{&(0x7f00000048c0)="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", 0xfc}, {&(0x7f00000049c0)="306839ee124eb15a8a7f944918c54940efe3aa014be2086fa2aa3af653366d84feee87f2e521bfc0dc1f4cadfdc74d9f754603d5448fa4df4c59dbebfa9e30d8375badbe55aae20ed1d0733980e36df56194943f977ae32f646e5ec5df17b838951df889ebc2971a9510d2a09a5ba5150bbadadd5a1076bd4801108b33a010361847237aa7d3f26486f3b76dffe65f6f1ce4091b8da29c00aff33049cff1f8c03dd3e7cae5d5a1bb7b5006255b389dc49aa89ddfebd3444193730e674cbfe5a702a31c44f5bc144bf254988bd1296d68197a18b9808c5d364f1b9899b3c8655a02ec699e2f3e64c338abe02fdaf4a9e8b405d3d5b771bff13f7d44fa91c2abdd4ddbbb0a3de994a14b0f3b97a1a46cabfaf9912469bc634af9ce8729389252eb1e592c458bacc7a5997b69c402d718fae7e85fd7691066362747b7692e8a9a02ac1981b2646bb67a7e9da5280498552982ffb7e5e43043efeed5dd159c53d46a9ca8d528ac3e5fee8481032aa10db022e1e5387e883248c66debceca4704f1aae1c3c5bbbff62df3fbdc44c6235a2560064ba1b21715b769261a7efcce137e612e10e84ccafe20f9a9bda2d819e0585fd653e8119af73f623ec53764be008363e45d5085d77659ec8943abe4756a710d1b8d28a25ef35ea6380416facf6610689e83cbdc52651fa968ede4da8f7e0d344bb5359e7b67304f8dddedfc98bb371bb3d167945816d55f13c4ee6574de68656d20ced02285be7cfd0ca2b164184a7c1ae4594e43587f6914256609d5937be3d5af6440a4920178af1afdd05bb6ff834c7d401063176836973989eb41aed14f838c25636cfa6ac1430737b0a0f91b8691bcedca34958bce6e831ff6dbe593c34d46aa200ab5ad0299be7757600f92ae1069d81da047f325e5b999cb9295a367f1e4980a4a64d5794dd6c83f6554335cbbb40af75df923893a9a54ffe03b09e0f5c2507fc7ad2e8468078282f0d119ee7dcfdcd3d33112d4731166d2c064158e1ebf3baa964d34a2ed99cedf8485a18a543f08d0765157e49aef7216e12fd62c4da79f597eee66cf9c9936b4cb883f4a08337f1a741d22aca093034934357fd1c350b052679d5869d3212c3a245a866b088964c38d37d1b1d0969773dbd28163f6339ddadaa18ece84adbf19d23bed7ecf3f4e937e09553a248f4ad7c4059fb4891f53f7822309a7b4dc331baeed8c1e2a3f96634d019cb5d17e9ed9540da5167f23e1578698df849df6ac57882ed0b21d798c35ccd15b477d02837a2f790979976f40422d067e1b6c9d23c7562c9850807297fc7501df5317f2ffccd8bb7eb55b739aee27a0e9115f17aff052b4a6a589caeafcbe269bb3066c32248fa1f3fad3b54d64061cf87fbf41dbaed6b20ff752e37bfaa0c4412f7e3260f239a9e6a8d6f6f11fe52eba7eff19ec412a6090043d35f469579fe80f8c3e72509424e8169ef0441a12b3806071d8f8c149b799642f13d588c9c189e1ac7e05a1a59667a1f8312cc3b6ebdd09b5e79067daeb3a1fe7c20ff040fa4af6bc69874e98df6f393305decafaaf58e318128ce393fc205285f0b4ab0e57821c6ca241a8fa1652f93ff910b9e90b7d9ac2733003f19e89bffbd97124af0602f4a9030082eb0411a66281ba30c7ce4a0a627ad2df312ffd56f7d780a459953d1554f6896476277c1cdca6d604f7e0c2225b4ea29fc6f3411072493ece83b36f58947e0d8bd5e577f3ec33eaf5b26c2834727ec3933321500463acd2edacf941de39580d6e447a1900dceaeec55f763e8f064671c6476c06a25ce0ed4e1908b8f4185318cc7d344086c68db5bb16862451170fc06221ad1265e57ac3184c2487f371d8aab8265f46b7246abe6cd6fe63767b7a5d89274721bce00102a3140ecf78f927fe7296b01887c7861b8edfa6c9e68ff31e53d7d82a776cb32053e71d5bf8771b5bc11813cee4a236431c4867c1563d99dd660280815b83a3bc9df0babd4e305ae70bd5730280f399b34cc53ed586a1681dd2bdd982e1e6b014393a1d096f9aad5296e4d0e386764acf02c7633df1f2881137510345a65b730a2305939694a1f927f7ad6b0ac13353a0c46663370c4e40d695b9a698956c7868b7c70db4a636f5f8f30c3d9be774a4ee00f42b14ae7b5c20639adcca997373e663c73eca558206134981c5226216f6cf15ef0219170cc8436b8023d9ca50b18a74e2b13a2abe4934500415a8e61a33dfc93544a447354d86816a3556999b9f655f30182de1a8dc6d97330deff7b2d220e7d1cf8ccf92e56828d227b456bdbcef732ec8b656250143b377bfeec868b1ce3206687dcdd06fdca578b277fdf878bf0dddd1496dd4423a83fc69217a8db0677388cec37235c1c2c1f71093e9420289f4470f3491f029b7b6b12d12b6e6c57a0fe8920121812690e692042269772af5dd5a4a7faa9433300b4da4fc849f6c2cf32f832d5907d1fd1996362a059ba4784fca6857e1104ec3c199ca4dfa1627a930861118162109d429220a9392bff4484895324168a404c1978b16f8a7404978de448a6125a325a6d93dc3d594ab54c552c85e5aae9619531951f816c6fd3ba63ce00ae6aca882dc687154190c92ed208cc37622dda043bbcafb843632838965c5d56ea734281aa2b40339af4cd89f213aef8ac4a423aab2e65c13ad7be4727705fa5219cd66e66465618a24d3432bc91a578e5cefa57b280304bf699b67b6e4960b4048c4e832cc61cb1d25027b8f537b825847bd9a333359720f975a6f5e91699a10f6c4840e7c8e8edba47e690618622c448a783cdde7a9f961e9c4a0bb473e451ba0bd437299338bcf0080285c091daeecd15eb4efdcd28c98b71e9e4ff13d8da0eff94a2d20809a1cac34aa2a60e34e8f81b2c4739fb9f906900add8ef710abd32433f1b53b139ad0bd541a4b6d7d71db1e021eca1c5344488508e84c182bb6006ba9ef6caf0cc0e98d833f66f26d4a94b11da2a175e9a50c3b8eb081ed15b8d7259e39c1a756a7c61ea9a66aed2c039fc32a3a3c642479269cc543a7b4113d09a1d06d6616330936ddfe2c6ee75ab7347dd8179a36687a09703f0622f5ff5ffbd6923d2cfc93385b59053bcd1615ae3922f1a155caff6fbb15d8d49c77254b0e28d9a3035c0680276655165ed1bf3150671cc6c8c1f44d7ca40c2f37391fcaaa115be81982605b705ee13d60c824108e8875ff7ef6969dac498d308fcf92eb725f072076b1d4e21f82fa202843384dc231e02202e3d2adacd292f9243949764fb003d8545932bd1b700834d36c515b2b7db96721c189b797555dc0463e9c009f3426d41be4b38a6f4e20ad609be3940de27bf8b22d48d70ee3a3aae996797f62abd22677ca97f4399ffb83f9c98348f940caa3fa58326da06d5ef21e4831b665c4674fe015a2e74ebb471908fa7d7097b838eac080672b1ffdda39d3abc7659de1265af402a8bd9416032c27afb87582d976d5f9f7f8176e8edc8ea092ec83566d4b0b430acd391f07ed77f5d667af0fb34b8455e9b8192ea24ac88e63cb114b1ecd022b2d227e7250e738f95290ad279ab7d6101c8620c50cc69822f6d365585371a8cce0c1b3c3afc51d840b51eb322ff93b54cf23e37a7af158b191dd494487b6ef9e9172ae522b3b991287668e01c7ede0c0fe5293a7e010c37b11b16cfce8c12b00554c58b7177eb9ca63ed89d2fee815b1ee704b418dec6f9e9e298384062ca91933c86583428dce0bcde50801156f45c630c49d84437c897a0a75566c2d3180de0ef2032af587a95f9cba0cd567e3326b335aea6c57a3933234b07ddb41a7a499cc4150b9a23c412c41f65b16bb83c7cfdda8b5f922c7841a3d688f9b2012377c4f9ebe351734477bcd958c4780a887706783f4d5e44b952c06137051e020b29a88f2eef62ccfb9afe81bff8f2336683994a82cefb1570a2df8b18c83b9d7e3d3a455e279ca4793ae37a40d8849f4c772cb4f7dc99b836194a95760130cd2fd975a504a4acf914f2971c32eb0604e7eb193deef525f5b73d2315210a05cb006622059c3f2881e718ba0213ff571e83f2196f3f9a145480e895c4f5fe9d91f5fc685d090cd3bae15b2d7ebecb564282f8debe17537163cb208554334b904edc49ff8eee00d8d784ff6cc65a0d42594534168c58a5988b5cee8fc9d5941fb3cff161ebeca388d05042f16c9be5f56395ad2e1a44f345d4d25d8a5c15907e8e1fb9166d1e155f4a5c14e9e8561d065c40d90afbd3f2b940a538fad84fb50aecf899d124fd2af1dfe538fa976ab2989cae13201b412ebd166a265764db9e1b57d2a6ae2513c43f2de7fb9e66e3465fa8ed0daccbbc3705658e8259abbfb7bd35538d140056e84b7137938fb5967145e9028e750737fed94971fb3f4830e4d7e6279acd311513f3a9755c563de79aa5733c022e9401ed0b82040675f067a93671ab41fe34ab6a86763cc1adb47828ee215732eea694b0bbf9360a790202f746b54c7c0ff9a33a173af4e3a6fe344fca6e4aec2f28c95c11e50f461a7396189965194a98ec07da1d7417f32d5866f582a10eded876aff5825fca4a2599a4dc48c00528e9b472792c22c58f2bdaec26e762ea72c56045625d17e20cbc3f4f28f02e6a31b83b2e834b33d6aef4aba596334e03bbdf8fcbc2a53b131883f2752edd02d63ad74526db4281292e45cd26474657c4c0812974a5f0a77f9bd21760a5578310b20798af1dba59dd4b6bb26027b235bc5a05434da53cf4c40804c6caa4734102ab0d93f6aabbc4e4608cef4123283e69c0e540001039744c54e77ef6232823b076477cbbae9184bce780c6c8ec3872e8c806f6013522cc9f875713b5b8e61e0acce7f34b31a9c0ebdd16abfd090c2ea055a9feeed93fce681808c7f83a1acac46ce1bb57e1edf8fdb9582e72fd371d6732b9c8862c3eae6cbdc81346f497789d772be18383b063baf7b8e4650b2edbb8d3e6f107e3dcf7534ae36f267c65c3acda01a3611e39d2174ed3064c9172355270be10d0b70e98126678ca4fb549f33f6597bc235492f57e14851fd87a9272b004552c486cb014eea38a5b5d94c55600eb3daf4ec3e05cbc597428346701985c2baddb8b685e6f82d823ab677b14aadf9d7f027e4f85223dbe9f7f896341215432c65ec2b3b125fb4bd5687d6c7afad507e5f9143f4e117fdabbdac545cc15315d3203b3b10410070693307e76218c000cc86dde5cb65a501f3ced850b91f89c7fd42fe2248b1bbc2b255790c4ef33c97d96cf02e272b52ace45e052adbd46dcf300f3a85373e20f73b9bfd7b96ee26f656755231c926b600a62403c3525eebb8c1db0923f7ce67e23f9bbdbabc06b57b8dd9a3b1f1ed1eafa3917aef0dab0afdbf2cb0f72f3491821c2692ee6068b8feb6cb5fafe3b169b3fcedfcfc26648c207ec47b1a5b46d3fa3be39ec214a979b99b8c7a5749f75a41a7e66724507afc8c64b73119bebd2696898c34124856bca1456cc6ec69c350e8773c9319ab92856af2d4ac5137a984ab1b1149e6676176c3b87fd3a0534da543108fbafb3b44fcb66316aaf04e6bdbd41f21c701cd8ecc738f5d1117e0ad16b62b9036820bbede6155016031b517a5254e60792085ca4a3aa13cacaade96f8c490a667ac8f348f4aebd96ef3c66bf0a024d4c038ac16dcd247fbca239d820d9803a72ac003c57aa765b789a45d921e2c72e27f9224320bb938f68e23bf068c394dfe6c4e7da60b101a7bc636aed86e9e3b23151b9cbaf1d91975abced7bf10", 0x1000}], 0x2, &(0x7f0000005ac0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r6}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x58}}], 0x7, 0x20000000) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4) (async)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r10, 0x0, 0x40) (async)
close(0x3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

2.935707685s ago: executing program 2 (id=3071):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='devices.list\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r4, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040100020a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)

2.485116358s ago: executing program 2 (id=3073):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[], 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000510000028"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES16, @ANYRES64=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1, r0}, 0xc)
socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x4040)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0)
recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)
unshare(0x6020400)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r5, 0x0, 0x0, 0x100, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6], 0x34}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0x18, 0x30, 0x216822a75a8bd129, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00'})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

2.320457356s ago: executing program 1 (id=3074):
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000003fc0)}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100fff60000000000000500000a48000000060a010400000000000000000a0000040900010073797a31000000001c0004801800018008000100647570000c00028008000140000000150900020073797a3200000000140000001100010000000000000000000200000a"], 0x70}, 0x1, 0x0, 0x0, 0x28000095}, 0x24000800)
r5 = socket$kcm(0x21, 0x2, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=@deltaction={0x170, 0x31, 0x1, 0x70bd2a, 0x25dfdafc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f0000000c80)=""/74, 0x4a}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000001840)=""/4109, 0x100d}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r9=>r2, 0x2, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESOCT=r9, @ANYRESHEX=r9, @ANYRES16=r9, @ANYBLOB="b8bef960e08c6a02aab51b6c822b590f6d87b70ecb1dbe18a410d17afc09dc270e64e98fab856e5fdb7352594e9b63998b59cc2cba63d4757c0c6da4f5115ae75294771a5f77d1cf0267303c36b2a4e7b916f3a92060ad55668d31d8e7d266371504a07fa94ac75701d7f1d5ec41323322731058dbb1137edb27f1b539406880804ffe1d82604db92301190d8cc5cf227d6ccc43bb8fe34817e2bc342699300b5eb7c148e0d4e6610139178d9eadaeea41ec8a4b427c3a2f49b92796b9756c097936890a28282214d6768607d017d44a43e7"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="5000000000000000000000000700000094040100890f070a"], 0x50}, 0x840)
socket$inet_udp(0x2, 0x2, 0x0)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000475c522254de9422f400040001002874957f86e0b75f511e20da51dd84d053c6bca4fb37b585e930992a7cc1e6bdedcd1110895813285434a2b2e74000000098b6ba21d1d30a3f809f8ac8a24dffa652cf02e5c3593acd8c93639c043e913537e03bedccf8ba64de5f8ebd115f29a379234f4b934a28eb351781c042b05b2628b981a998b4e034bf48cbaf36861640b2c459c7373ecac2693c4ed4a2af0152b58654482dfefebd8351ecc6070ba78645774afe1f4e6872df178d117500fb7be1fe878609d5df36e48e1bf3dbed027e3261c858bd5b24b1f0267a"], 0x10}, 0x4000004)

2.27284153s ago: executing program 3 (id=3075):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x1f)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
syz_open_procfs$namespace(0x0, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x1f) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async)

1.620135083s ago: executing program 3 (id=3076):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000065940d58000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000ffffffffffffffff0000"], &(0x7f0000000180)='syzkaller\x00', 0xe, 0xff6, &(0x7f0000001cc0)=""/4086, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1.474752422s ago: executing program 3 (id=3077):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111bc000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c000280050007004000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={<r2=>0x0, 0x800}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x2, 0x9, 0x353}, 0x10)

1.462144825s ago: executing program 0 (id=3078):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.247086267s ago: executing program 1 (id=3079):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x0, @private=0xa010100, 0x4e21, 0x4, 'lc\x00', 0x5, 0x8, 0x74}, {@multicast2, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x4c, 0x3fb, 0x200, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x20048014)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080)

1.019939137s ago: executing program 3 (id=3080):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x7}, {0x5}, {0x6, 0x0, 0x0, 0x3fe2}]}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100010026bd0000ffdbdf0500000000b0f1d7fc13e5b22fad50e732017b72e3f487", @ANYRES32=0x0, @ANYBLOB="23de000000000400140035007866726d3000"/28], 0x34}, 0x1, 0x200000000000000, 0x0, 0x4000002}, 0x0)

964.449348ms ago: executing program 1 (id=3081):
syz_emit_ethernet(0x42, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan0\x00', <r3=>0x0}) (rerun: 32)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110228bd7000fddbdf250800000008000300", @ANYRES32=r3, @ANYBLOB="0a0004007770616e30000000"], 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x44000) (async)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20044014)
r4 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="6ec77572efb474326dc361335d5a5879fcc787e9754b33b105adcb9b965348878174809911d414afde5c620acbca3b24c4832ef373a6ed9c118456d83353835c212e5c8f3be15ce37ea757eaac9d1198a70d06b1a8c92de827a3a44972d161dce8ee8d6c7ea4cd8e", 0xffffffba}], 0x1, 0x0, 0x0, 0x1f000000}, 0x20040644) (rerun: 64)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NLBL_MGMT_C_VERSION(r5, 0x0, 0x5) (async, rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async, rerun: 32)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0x2000000000000321, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r10, 0x25, 0x0, @val=@tracing={0x0, 0x5a7}}, 0x20)
syz_emit_ethernet(0xd81, &(0x7f0000001b00)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x61663a2cbc13e3eb}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0x0, "9b", "afe7e9", 0x88f8, "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"}}}}}, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082)
ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) (async)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004540), r5)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r12, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000840)=ANY=[@ANYBLOB="80000000", @ANYRES16=r11, @ANYBLOB="99c12abd7000475f00002e00000005002e00000000000a0001007770616e3400000005002b00030000000c0005000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40881}, 0x4040050)

865.868454ms ago: executing program 0 (id=3082):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}, {&(0x7f00000001c0)='f', 0x1}], 0x2}], 0x1, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8848}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0)

682.837759ms ago: executing program 2 (id=3083):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
accept(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000730ae8ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r7 = accept4(r6, 0x0, 0x0, 0x80800)
sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r1)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="19022bbd7000fedbdf25200000000c00050000000000000000020a0001007770616e3100000009001f007068793100000000c058abd2932028d7adf2df9ef27e585467613f7eec7ddcc5de31d07040324263941ff595265f78cfd5eb955b1aa940e167ce88515bd549cd1da08a6c289d77ab804b37182baaa0bdc2d3cc"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4080)

625.250477ms ago: executing program 1 (id=3084):
syz_emit_ethernet(0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001a1d81c45165e3d55eca5"], 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000100000001000000000000000000e5c724de1ccce9a74d8c7ed072a811a9c1bc30e3dfbe3211d7cda8df3719990d20053345037339baaa1a23689ed8c980f1aace0ca65567155addfd303183872d544a059c15b8d7fe299504512d8f33134c05a109ffff4a8e7b063ce8d75b283c4e7e7bba51ef8fd369db2202f954dabc6793d30115feba1b530f3e1a98c09a7c27684b205b3b7e49e0ce18d90998824b3c1d0e9e662156626273"], 0x0, 0x32}, 0x28)
r1 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080))
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001280)={&(0x7f0000000280)=""/4096, 0x304000, 0x1800, 0x5, 0x3}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xf4}}, 0x10)

604.610053ms ago: executing program 0 (id=3085):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

493.264471ms ago: executing program 1 (id=3086):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats={0x11, 0x3, [0x5, 0x6, 0x3]}})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3, 0x4014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xff}]}}}]}, 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x5, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats={0x11, 0x3, [0x5, 0x6, 0x3]}}) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3, 0x4014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xff}]}}}]}, 0x44}}, 0x0) (async)

345.077686ms ago: executing program 0 (id=3087):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x34, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x26, 0x67, 0x4000, 0x0, 0x2f, 0x0, @remote, @broadcast}, {0x0, 0x883e, 0x12, 0x0, @opaque="231aefa27aa5952b4956"}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@mpls_getroute={0x30, 0x1a, 0x400, 0x70bd2b, 0x25dfdbfe, {0x1c, 0x10, 0x0, 0x5, 0xfd, 0x3, 0xff, 0x0, 0xf00}, [@RTA_VIA={0x14, 0x12, {0x28, "f1ec650d1fb4f68e199c9a60dbea"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

84.491978ms ago: executing program 0 (id=3088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x70, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x6, "39220e5c7784"}, {0xdd, 0x6, "84db2b9060bc"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x12cdc7d8d09740c7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x70}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

67.488313ms ago: executing program 2 (id=3089):
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x80010)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002000"], 0x1c}}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r1}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007800c"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80)

0s ago: executing program 1 (id=3090):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x8, 0xf, 0x0, 0x1, 0xb69}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000000c0), 0x4)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x89, &(0x7f0000000280), &(0x7f0000000600)=0x4)

kernel console output (not intermixed with test programs):

719]  _copy_to_user+0x31/0xb0
[  435.320984][T13719]  simple_read_from_buffer+0xe1/0x170
[  435.321006][T13719]  proc_fail_nth_read+0x1bb/0x230
[  435.321063][T13719]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  435.321082][T13719]  ? rw_verify_area+0x24a/0x4c0
[  435.321101][T13719]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  435.321116][T13719]  vfs_read+0x213/0xa80
[  435.321155][T13719]  ? __pfx___mutex_lock+0x10/0x10
[  435.321218][T13719]  ? __pfx_vfs_read+0x10/0x10
[  435.321237][T13719]  ? __fget_files+0x2a/0x420
[  435.321256][T13719]  ? __fget_files+0x3a2/0x420
[  435.321270][T13719]  ? __fget_files+0x2a/0x420
[  435.321292][T13719]  ksys_read+0x150/0x270
[  435.321312][T13719]  ? __pfx_ksys_read+0x10/0x10
[  435.321337][T13719]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.321354][T13719]  do_syscall_64+0x174/0x580
[  435.321368][T13719]  ? trace_irq_disable+0x3b/0x140
[  435.321382][T13719]  ? clear_bhb_loop+0x40/0x90
[  435.321402][T13719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.321418][T13719] RIP: 0033:0x7fdd0e55d68e
[  435.321433][T13719] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  435.321446][T13719] RSP: 002b:00007fdd0f514fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  435.321463][T13719] RAX: ffffffffffffffda RBX: 00007fdd0f5156c0 RCX: 00007fdd0e55d68e
[  435.321474][T13719] RDX: 000000000000000f RSI: 00007fdd0f5150a0 RDI: 0000000000000004
[  435.321484][T13719] RBP: 00007fdd0f515090 R08: 0000000000000000 R09: 0000000000000000
[  435.321493][T13719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.321502][T13719] R13: 00007fdd0e816038 R14: 00007fdd0e815fa0 R15: 00007ffe7f36a6a8
[  435.321527][T13719]  </TASK>
[  437.670055][T13733] FAULT_INJECTION: forcing a failure.
[  437.670055][T13733] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  437.704090][T13733] CPU: 0 UID: 0 PID: 13733 Comm: syz.2.1864 Not tainted syzkaller #0 PREEMPT(full) 
[  437.704120][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  437.704134][T13733] Call Trace:
[  437.704142][T13733]  <TASK>
[  437.704152][T13733]  dump_stack_lvl+0xe8/0x150
[  437.704185][T13733]  should_fail_ex+0x40c/0x560
[  437.704222][T13733]  _copy_to_user+0x31/0xb0
[  437.704247][T13733]  bpf_prog_test_run_raw_tp+0x5f0/0x7e0
[  437.704284][T13733]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  437.704312][T13733]  ? __fget_files+0x2a/0x420
[  437.704340][T13733]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  437.704366][T13733]  bpf_prog_test_run+0x2c5/0x340
[  437.704395][T13733]  __sys_bpf+0xa22/0xd90
[  437.704445][T13733]  ? __pfx___sys_bpf+0x10/0x10
[  437.704480][T13733]  ? __fget_files+0x2a/0x420
[  437.704522][T13733]  ? ksys_write+0x242/0x270
[  437.704551][T13733]  ? __pfx_ksys_write+0x10/0x10
[  437.704583][T13733]  __x64_sys_bpf+0xba/0xd0
[  437.704615][T13733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.704640][T13733]  do_syscall_64+0x174/0x580
[  437.704660][T13733]  ? trace_irq_disable+0x3b/0x140
[  437.704681][T13733]  ? clear_bhb_loop+0x40/0x90
[  437.704709][T13733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.704731][T13733] RIP: 0033:0x7fd0a039ce59
[  437.704751][T13733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.704770][T13733] RSP: 002b:00007fd0a1195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  437.704793][T13733] RAX: ffffffffffffffda RBX: 00007fd0a0615fa0 RCX: 00007fd0a039ce59
[  437.704809][T13733] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a
[  437.704823][T13733] RBP: 00007fd0a1195090 R08: 0000000000000000 R09: 0000000000000000
[  437.704837][T13733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.704850][T13733] R13: 00007fd0a0616038 R14: 00007fd0a0615fa0 R15: 00007ffe5d435ee8
[  437.704886][T13733]  </TASK>
[  438.061895][  T808] IPVS: starting estimator thread 0...
[  438.110573][T13744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.118236][T13744] syzkaller0: entered promiscuous mode
[  438.123776][T13744] syzkaller0: entered allmulticast mode
[  438.248363][T13746] IPVS: using max 27 ests per chain, 64800 per kthread
[  438.272231][T13744] tipc: Resetting bearer <eth:syzkaller0>
[  438.347625][T13743] tipc: Resetting bearer <eth:syzkaller0>
[  438.461208][T13743] tipc: Disabling bearer <eth:syzkaller0>
[  438.480169][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1875'.
[  438.490422][T13761] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1875'.
[  438.670346][T13771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1873'.
[  438.670719][T13765] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  438.790516][T13778] FAULT_INJECTION: forcing a failure.
[  438.790516][T13778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.805593][T13778] CPU: 1 UID: 0 PID: 13778 Comm: syz.3.1879 Not tainted syzkaller #0 PREEMPT(full) 
[  438.805623][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  438.805635][T13778] Call Trace:
[  438.805644][T13778]  <TASK>
[  438.805652][T13778]  dump_stack_lvl+0xe8/0x150
[  438.805685][T13778]  should_fail_ex+0x40c/0x560
[  438.805720][T13778]  _copy_to_user+0x31/0xb0
[  438.805746][T13778]  simple_read_from_buffer+0xe1/0x170
[  438.805774][T13778]  proc_fail_nth_read+0x1bb/0x230
[  438.805799][T13778]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  438.805825][T13778]  ? rw_verify_area+0x24a/0x4c0
[  438.805852][T13778]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  438.805873][T13778]  vfs_read+0x213/0xa80
[  438.805909][T13778]  ? __pfx___mutex_lock+0x10/0x10
[  438.805931][T13778]  ? __pfx_vfs_read+0x10/0x10
[  438.805958][T13778]  ? __fget_files+0x2a/0x420
[  438.805985][T13778]  ? __fget_files+0x3a2/0x420
[  438.806005][T13778]  ? __fget_files+0x2a/0x420
[  438.806036][T13778]  ksys_read+0x150/0x270
[  438.806065][T13778]  ? __pfx_ksys_read+0x10/0x10
[  438.806100][T13778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.806124][T13778]  do_syscall_64+0x174/0x580
[  438.806144][T13778]  ? trace_irq_disable+0x3b/0x140
[  438.806165][T13778]  ? clear_bhb_loop+0x40/0x90
[  438.806192][T13778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.806213][T13778] RIP: 0033:0x7f345175d68e
[  438.806233][T13778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  438.806252][T13778] RSP: 002b:00007f3452604fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  438.806275][T13778] RAX: ffffffffffffffda RBX: 00007f34526056c0 RCX: 00007f345175d68e
[  438.806290][T13778] RDX: 000000000000000f RSI: 00007f34526050a0 RDI: 0000000000000005
[  438.806304][T13778] RBP: 00007f3452605090 R08: 0000000000000000 R09: 0000000000000000
[  438.806318][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.806331][T13778] R13: 00007f3451a16038 R14: 00007f3451a15fa0 R15: 00007ffefac303c8
[  438.806377][T13778]  </TASK>
[  439.169313][T13773] nbd2: detected capacity change from 0 to 63
[  439.182175][T13781] block nbd2: NBD_DISCONNECT
[  439.220341][T13781] block nbd2: Disconnected due to user request.
[  439.239334][ T1654] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.252976][ T1654] Buffer I/O error on dev nbd2, logical block 0, async page read
[  439.264747][T13781] block nbd2: shutting down sockets
[  439.266125][ T1654] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.282617][ T1654] Buffer I/O error on dev nbd2, logical block 1, async page read
[  439.295699][T13728] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[  439.305369][T13728] Buffer I/O error on dev nbd2, logical block 2, async page read
[  439.313184][T13728] Buffer I/O error on dev nbd2, logical block 3, async page read
[  439.324282][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.333516][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read
[  439.341567][T13728] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  439.368072][T13728] Buffer I/O error on dev nbd2, logical block 1, async page read
[  439.377587][ T1654] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[  439.386875][ T1654] Buffer I/O error on dev nbd2, logical block 2, async page read
[  439.395326][ T1654] Buffer I/O error on dev nbd2, logical block 3, async page read
[  439.403860][ T1654] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  439.415885][ T1654] Buffer I/O error on dev nbd2, logical block 0, async page read
[  439.424875][ T1654] Buffer I/O error on dev nbd2, logical block 1, async page read
[  439.433483][ T1654] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  439.445076][ T1654] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  439.456070][ T1654] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  439.471973][T12969] ldm_validate_partition_table(): Disk read failed.
[  439.489239][T12969] Dev nbd2: unable to read RDB block 0
[  439.499479][T12969]  nbd2: unable to read partition table
[  439.521516][T12969] ldm_validate_partition_table(): Disk read failed.
[  439.531100][T12969] Dev nbd2: unable to read RDB block 0
[  439.546987][T12969]  nbd2: unable to read partition table
[  439.554869][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'.
[  439.715591][T13767] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.737180][T13767] 8021q: adding VLAN 0 to HW filter on device team0
[  439.761645][T13767] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.918786][T13767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  439.929669][T13767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  439.949063][T13767] veth1_vlan: left promiscuous mode
[  439.959076][T13767] veth0_vlan: left promiscuous mode
[  439.967258][T13767] veth0_vlan: entered promiscuous mode
[  439.977036][T13767] veth1_vlan: entered promiscuous mode
[  439.991334][T13767] veth1_macvtap: left promiscuous mode
[  439.999238][T13767] veth0_macvtap: left promiscuous mode
[  440.005965][T13767] veth0_macvtap: entered promiscuous mode
[  440.014053][T13767] veth1_macvtap: entered promiscuous mode
[  440.025919][T13767] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  440.034845][T13767] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  440.044614][T13767] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  440.060885][T13767] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  440.086756][T13811] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1884'.
[  440.095239][T13767] 8021q: adding VLAN 0 to HW filter on device bond1
[  440.103238][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'.
[  440.115646][T13767] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  440.125345][T13767] bond2: left promiscuous mode
[  440.130542][T13767] 8021q: adding VLAN 0 to HW filter on device bond2
[  440.140059][T13767] 8021q: adding VLAN 0 to HW filter on device batadv1
[  440.147717][T13767] bond3: left promiscuous mode
[  440.152894][T13767] 8021q: adding VLAN 0 to HW filter on device bond3
[  440.177623][T13767] vxcan2: left promiscuous mode
[  440.190809][T13767] 8021q: adding VLAN 0 to HW filter on device bond4
[  440.205834][T13767] 8021q: adding VLAN 0 to HW filter on device bond5
[  440.214536][T13767] geneve3: left promiscuous mode
[  440.219534][T13767] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  440.285438][   T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.321009][   T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.415798][T13795] xfrm0 speed is unknown, defaulting to 1000
[  440.463085][   T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.487333][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.680904][T13825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1888'.
[  440.974873][T13802] xfrm0 speed is unknown, defaulting to 1000
[  441.103447][T13843] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:256
[  441.118595][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'.
[  441.140340][T13845] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1892'.
[  441.283690][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'.
[  441.301289][T13843] 8021q: adding VLAN 0 to HW filter on device bond3
[  441.416683][T13849] batadv0: entered promiscuous mode
[  441.425468][T13849] 8021q: adding VLAN 0 to HW filter on device macsec1
[  441.433615][T13849] batadv0: left promiscuous mode
[  441.476132][T13843] bond3 (unregistering): Released all slaves
[  442.327755][T13867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  442.692785][T13870] team0: Port device team_slave_0 removed
[  442.729960][T13874] syzkaller1: entered promiscuous mode
[  442.887138][T13874] syzkaller1: entered allmulticast mode
[  442.984693][T13886] xt_hashlimit: size too large, truncated to 1048576
[  444.800644][T13941] __nla_validate_parse: 6 callbacks suppressed
[  444.800665][T13941] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1916'.
[  445.231749][T13957] geneve2: entered promiscuous mode
[  445.246854][   T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.255762][   T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.264520][   T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.308225][   T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.901986][T13989] veth6: entered allmulticast mode
[  446.490819][T14004] netlink: 'syz.2.1931': attribute type 1 has an invalid length.
[  446.615378][T14004] 8021q: adding VLAN 0 to HW filter on device bond8
[  446.632089][T14010] xt_TPROXY: Can be used only with -p tcp or -p udp
[  446.865214][T14005] bond8: (slave veth7): Enslaving as an active interface with a down link
[  446.934064][T14022] netlink: 'syz.4.1936': attribute type 23 has an invalid length.
[  447.673805][T14052] dvmrp8: entered allmulticast mode
[  448.330889][T14067] netlink: 'syz.4.1949': attribute type 1 has an invalid length.
[  448.425826][T14067] 8021q: adding VLAN 0 to HW filter on device bond3
[  448.484465][T14069] vlan2: entered promiscuous mode
[  448.489766][T14069] bond3: entered promiscuous mode
[  448.495190][T14069] vlan2: entered allmulticast mode
[  448.501882][T14069] bond3: entered allmulticast mode
[  448.782334][T14071] syzkaller0: entered promiscuous mode
[  448.788077][T14071] syzkaller0: entered allmulticast mode
[  448.817276][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'.
[  449.010407][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'.
[  449.276057][T14096] xt_hashlimit: size too large, truncated to 1048576
[  449.283364][T14097] xt_hashlimit: size too large, truncated to 1048576
[  449.292975][T14096] xt_hashlimit: max too large, truncated to 1048576
[  449.300328][T14097] xt_hashlimit: max too large, truncated to 1048576
[  449.599938][T14105] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  452.026105][T14094] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  452.228280][T14118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1959'.
[  452.324038][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'.
[  452.349686][T14128] bond0: option arp_all_targets: invalid value (8)
[  453.247514][T14161] netlink: zone id is out of range
[  453.252724][T14161] netlink: zone id is out of range
[  453.258220][T14161] netlink: zone id is out of range
[  453.263378][T14161] netlink: zone id is out of range
[  453.268557][T14161] netlink: zone id is out of range
[  453.336985][T14173] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  453.365531][T14161] netlink: zone id is out of range
[  453.370757][T14161] netlink: zone id is out of range
[  453.375925][T14161] netlink: zone id is out of range
[  453.381203][T14161] netlink: zone id is out of range
[  453.386939][T14161] netlink: zone id is out of range
[  454.227030][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'.
[  454.237327][T14197] bridge: RTM_NEWNEIGH with invalid state 0x0
[  454.366078][T14211] xfrm0 speed is unknown, defaulting to 1000
[  454.632806][T14225] netlink: 'syz.0.1991': attribute type 3 has an invalid length.
[  455.015491][T14238] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1994'.
[  455.233767][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'.
[  455.384499][T14243] 8021q: adding VLAN 0 to HW filter on device bond7
[  456.598741][T14299] SET target dimension over the limit!
[  456.766464][T14306] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2007'.
[  456.881953][T14316] netlink: 'syz.3.2008': attribute type 1 has an invalid length.
[  457.144326][ T7074] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  457.185570][ T7074] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.207696][ T7074] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  457.236198][ T7074] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.273999][ T7074] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  457.298368][ T7074] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.327822][ T7074] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  457.344798][ T7074] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.496656][T14346] netlink: 'syz.1.2011': attribute type 1 has an invalid length.
[  457.523562][T14337] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2013'.
[  457.534944][T14337] xt_TCPMSS: Only works on TCP SYN packets
[  457.589367][T14346] bond9: entered promiscuous mode
[  457.595283][T14346] 8021q: adding VLAN 0 to HW filter on device bond9
[  457.730112][T14329] 8021q: adding VLAN 0 to HW filter on device bond9
[  457.737374][T14329] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  457.763591][T14329] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  457.790961][T14329] bond9: (slave ip6gre2): making interface the new active one
[  457.817101][T14329] ip6gre2: entered promiscuous mode
[  457.825109][T14341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2011'.
[  457.838341][T14329] bond9: (slave ip6gre2): Enslaving as an active interface with an up link
[  457.952021][T14341] veth11: entered allmulticast mode
[  457.958540][T14355] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2017'.
[  457.981590][T14357] geneve4: entered promiscuous mode
[  458.388005][T14376] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2023'.
[  458.410000][T14376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2023'.
[  458.420974][T14377] netlink: 'syz.0.2022': attribute type 1 has an invalid length.
[  458.614509][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'.
[  458.651461][T14388] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2027'.
[  458.687912][T14394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2028'.
[  458.767389][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'.
[  458.780675][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'.
[  458.841127][T14399] vlan0: entered promiscuous mode
[  459.093595][T14417] netlink: 'syz.4.2036': attribute type 13 has an invalid length.
[  459.119433][T14417] netlink: 'syz.4.2036': attribute type 17 has an invalid length.
[  459.259134][T14417] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.291609][T14417] 8021q: adding VLAN 0 to HW filter on device team0
[  459.320039][T14417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.331646][T14417] tipc: Resetting bearer <eth:batadv0>
[  459.347963][T14417] tipc: Resetting bearer <eth:batadv0>
[  459.397187][T14431] xt_hashlimit: size too large, truncated to 1048576
[  459.542524][T14417] veth1_vlan: left promiscuous mode
[  459.610536][T14417] veth0_vlan: left promiscuous mode
[  459.619875][T14417] veth0_vlan: entered promiscuous mode
[  459.628878][T14417] veth1_vlan: entered promiscuous mode
[  459.650660][T14417] veth1_macvtap: left promiscuous mode
[  459.659563][T14417] veth0_macvtap: left promiscuous mode
[  459.666995][T14417] veth0_macvtap: entered promiscuous mode
[  459.674676][T14417] veth1_macvtap: entered promiscuous mode
[  459.689777][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  459.699108][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  459.709242][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  459.718326][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  459.726710][T14417] net_ratelimit: 414 callbacks suppressed
[  459.726728][T14417] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  459.893602][ T1084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.991399][ T1084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.000243][ T1084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.279656][T14456] sctp: [Deprecated]: syz.0.2045 (pid 14456) Use of struct sctp_assoc_value in delayed_ack socket option.
[  460.279656][T14456] Use struct sctp_sack_info instead
[  460.956999][T14481] xfrm0 speed is unknown, defaulting to 1000
[  461.732899][T14515] netlink: 'syz.1.2056': attribute type 2 has an invalid length.
[  462.953963][T14554] __nla_validate_parse: 11 callbacks suppressed
[  462.953983][T14554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2065'.
[  464.145061][T14606] FAULT_INJECTION: forcing a failure.
[  464.145061][T14606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.158181][T14606] CPU: 0 UID: 0 PID: 14606 Comm: syz.1.2077 Not tainted syzkaller #0 PREEMPT(full) 
[  464.158211][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  464.158224][T14606] Call Trace:
[  464.158233][T14606]  <TASK>
[  464.158241][T14606]  dump_stack_lvl+0xe8/0x150
[  464.158275][T14606]  should_fail_ex+0x40c/0x560
[  464.158311][T14606]  _copy_from_user+0x2d/0xb0
[  464.158336][T14606]  ___sys_recvmsg+0x173/0x5a0
[  464.158369][T14606]  ? __pfx____sys_recvmsg+0x10/0x10
[  464.158400][T14606]  ? __fget_files+0x2a/0x420
[  464.158457][T14606]  do_recvmmsg+0x31a/0x7f0
[  464.158492][T14606]  ? __pfx_do_recvmmsg+0x10/0x10
[  464.158531][T14606]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  464.158637][T14606]  ? __fget_files+0x3a2/0x420
[  464.158670][T14606]  __x64_sys_recvmmsg+0x198/0x250
[  464.158700][T14606]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  464.158736][T14606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.158767][T14606]  do_syscall_64+0x174/0x580
[  464.158787][T14606]  ? trace_irq_disable+0x3b/0x140
[  464.158807][T14606]  ? clear_bhb_loop+0x40/0x90
[  464.158834][T14606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.158856][T14606] RIP: 0033:0x7fc8ae19ce59
[  464.158876][T14606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.158895][T14606] RSP: 002b:00007fc8af083028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  464.158919][T14606] RAX: ffffffffffffffda RBX: 00007fc8ae415fa0 RCX: 00007fc8ae19ce59
[  464.158935][T14606] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003
[  464.158950][T14606] RBP: 00007fc8af083090 R08: 0000000000000000 R09: 0000000000000000
[  464.158963][T14606] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002
[  464.158977][T14606] R13: 00007fc8ae416038 R14: 00007fc8ae415fa0 R15: 00007ffc72b755a8
[  464.159013][T14606]  </TASK>
[  464.434642][T14612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2079'.
[  464.960337][T14647] sctp: [Deprecated]: syz.3.2086 (pid 14647) Use of int in maxseg socket option.
[  464.960337][T14647] Use struct sctp_assoc_value instead
[  465.062507][T14653] netlink: 'syz.2.2089': attribute type 39 has an invalid length.
[  465.716525][T14664] xfrm0 speed is unknown, defaulting to 1000
[  465.780040][T14674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  465.787294][T14674] IPv6: NLM_F_CREATE should be set when creating new route
[  465.800850][T14674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  465.882027][T14675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2096'.
[  467.563706][T14620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  467.813299][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2099'.
[  467.981151][T14693] netlink: 'syz.0.2100': attribute type 23 has an invalid length.
[  468.014895][T14693] netlink: 'syz.0.2100': attribute type 23 has an invalid length.
[  468.025161][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'.
[  468.360070][T14715] netlink: 'syz.4.2103': attribute type 39 has an invalid length.
[  468.558555][T14716] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2102'.
[  468.592766][T14719] syzkaller0: entered promiscuous mode
[  468.598387][T14719] syzkaller0: entered allmulticast mode
[  468.836948][T14728] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  468.879724][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'.
[  468.905415][T14731] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  468.913943][T11999] team_slave_1: entered promiscuous mode
[  469.067360][T14728] ip6tnl2: entered allmulticast mode
[  469.079014][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  469.139547][T14739] xfrm0 speed is unknown, defaulting to 1000
[  469.147260][T14737] ip6_vti0: Master is either lo or non-ether device
[  469.191457][T14742] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2112'.
[  469.209321][T14742] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2112'.
[  469.231869][T14742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2112'.
[  469.418490][T14751] veth1_to_hsr: entered allmulticast mode
[  470.358372][T14802] bond0: (slave bond_slave_1): Releasing backup interface
[  470.503358][T14806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2120'.
[  470.667570][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'.
[  471.028737][T14822] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2124'.
[  471.123243][T14827] syzkaller1: entered promiscuous mode
[  471.134842][T14827] syzkaller1: entered allmulticast mode
[  471.251041][T14826] syzkaller0: entered promiscuous mode
[  471.266358][T14826] syzkaller0: entered allmulticast mode
[  471.344217][T14830] netlink: 'syz.3.2126': attribute type 1 has an invalid length.
[  471.399504][T14830] bond9: entered promiscuous mode
[  471.405120][T14830] 8021q: adding VLAN 0 to HW filter on device bond9
[  471.422426][T14833] gre1: entered allmulticast mode
[  471.468598][T14830] 8021q: adding VLAN 0 to HW filter on device bond9
[  471.486287][T14830] bond9: (slave gre1): The slave device specified does not support setting the MAC address
[  471.508954][T14830] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  471.537372][T14830] bond9: (slave gre1): making interface the new active one
[  471.564868][T14830] gre1: entered promiscuous mode
[  471.581628][T14830] bond9: (slave gre1): Enslaving as an active interface with an up link
[  471.596931][T14837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2129'.
[  471.735299][T14838] C: renamed from veth1_to_team
[  471.753625][T14838] netlink: 'syz.1.2128': attribute type 2 has an invalid length.
[  471.764047][T14838] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  471.799418][T14848] FAULT_INJECTION: forcing a failure.
[  471.799418][T14848] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.815205][T14848] CPU: 0 UID: 0 PID: 14848 Comm: syz.3.2132 Not tainted syzkaller #0 PREEMPT(full) 
[  471.815237][T14848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  471.815250][T14848] Call Trace:
[  471.815258][T14848]  <TASK>
[  471.815267][T14848]  dump_stack_lvl+0xe8/0x150
[  471.815299][T14848]  should_fail_ex+0x40c/0x560
[  471.815335][T14848]  _copy_from_user+0x2d/0xb0
[  471.815360][T14848]  ___sys_recvmsg+0x173/0x5a0
[  471.815393][T14848]  ? __pfx____sys_recvmsg+0x10/0x10
[  471.815420][T14848]  ? __fget_files+0x2a/0x420
[  471.815476][T14848]  do_recvmmsg+0x31a/0x7f0
[  471.815512][T14848]  ? __pfx_do_recvmmsg+0x10/0x10
[  471.815549][T14848]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  471.815586][T14848]  ? __fget_files+0x3a2/0x420
[  471.815617][T14848]  __x64_sys_recvmmsg+0x198/0x250
[  471.815644][T14848]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  471.815679][T14848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.815703][T14848]  do_syscall_64+0x174/0x580
[  471.815722][T14848]  ? trace_irq_disable+0x3b/0x140
[  471.815750][T14848]  ? clear_bhb_loop+0x40/0x90
[  471.815781][T14848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.815803][T14848] RIP: 0033:0x7f345179ce59
[  471.815822][T14848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.815838][T14848] RSP: 002b:00007f3452605028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  471.815858][T14848] RAX: ffffffffffffffda RBX: 00007f3451a15fa0 RCX: 00007f345179ce59
[  471.815876][T14848] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003
[  471.815890][T14848] RBP: 00007f3452605090 R08: 0000000000000000 R09: 0000000000000000
[  471.815901][T14848] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002
[  471.815911][T14848] R13: 00007f3451a16038 R14: 00007f3451a15fa0 R15: 00007ffefac303c8
[  471.815939][T14848]  </TASK>
[  472.712246][T14889] FAULT_INJECTION: forcing a failure.
[  472.712246][T14889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.737123][T14889] CPU: 1 UID: 0 PID: 14889 Comm: syz.1.2143 Not tainted syzkaller #0 PREEMPT(full) 
[  472.737155][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  472.737168][T14889] Call Trace:
[  472.737177][T14889]  <TASK>
[  472.737186][T14889]  dump_stack_lvl+0xe8/0x150
[  472.737219][T14889]  should_fail_ex+0x40c/0x560
[  472.737256][T14889]  _copy_from_user+0x2d/0xb0
[  472.737287][T14889]  ___sys_recvmsg+0x173/0x5a0
[  472.737324][T14889]  ? __pfx____sys_recvmsg+0x10/0x10
[  472.737355][T14889]  ? __fget_files+0x2a/0x420
[  472.737420][T14889]  do_recvmmsg+0x31a/0x7f0
[  472.737455][T14889]  ? __pfx_do_recvmmsg+0x10/0x10
[  472.737494][T14889]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  472.737531][T14889]  ? __fget_files+0x3a2/0x420
[  472.737565][T14889]  __x64_sys_recvmmsg+0x198/0x250
[  472.737595][T14889]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  472.737631][T14889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.737656][T14889]  do_syscall_64+0x174/0x580
[  472.737675][T14889]  ? trace_irq_disable+0x3b/0x140
[  472.737696][T14889]  ? clear_bhb_loop+0x40/0x90
[  472.737724][T14889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.737745][T14889] RIP: 0033:0x7fc8ae19ce59
[  472.737766][T14889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.737784][T14889] RSP: 002b:00007fc8af083028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  472.737808][T14889] RAX: ffffffffffffffda RBX: 00007fc8ae415fa0 RCX: 00007fc8ae19ce59
[  472.737825][T14889] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003
[  472.737839][T14889] RBP: 00007fc8af083090 R08: 0000000000000000 R09: 0000000000000000
[  472.737852][T14889] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002
[  472.737865][T14889] R13: 00007fc8ae416038 R14: 00007fc8ae415fa0 R15: 00007ffc72b755a8
[  472.737901][T14889]  </TASK>
[  472.967980][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  473.039129][T14895] netlink: 'syz.1.2144': attribute type 2 has an invalid length.
[  473.047223][T14895] __nla_validate_parse: 8 callbacks suppressed
[  473.047242][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'.
[  473.076940][T14894] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2145'.
[  473.086157][T14894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2145'.
[  473.095315][T14894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2145'.
[  473.107075][T14862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  473.138362][T14868] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2137'.
[  473.267288][T14899] batadv_slave_1: entered promiscuous mode
[  473.927089][T14927] FAULT_INJECTION: forcing a failure.
[  473.927089][T14927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.940390][T14927] CPU: 0 UID: 0 PID: 14927 Comm: syz.1.2154 Not tainted syzkaller #0 PREEMPT(full) 
[  473.940426][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  473.940440][T14927] Call Trace:
[  473.940450][T14927]  <TASK>
[  473.940461][T14927]  dump_stack_lvl+0xe8/0x150
[  473.940495][T14927]  should_fail_ex+0x40c/0x560
[  473.940532][T14927]  _copy_from_user+0x2d/0xb0
[  473.940558][T14927]  ___sys_recvmsg+0x173/0x5a0
[  473.940591][T14927]  ? __pfx____sys_recvmsg+0x10/0x10
[  473.940621][T14927]  ? __fget_files+0x2a/0x420
[  473.940680][T14927]  do_recvmmsg+0x31a/0x7f0
[  473.940715][T14927]  ? __pfx_do_recvmmsg+0x10/0x10
[  473.940753][T14927]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  473.940790][T14927]  ? __fget_files+0x3a2/0x420
[  473.940821][T14927]  __x64_sys_recvmmsg+0x198/0x250
[  473.940850][T14927]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  473.940886][T14927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.940911][T14927]  do_syscall_64+0x174/0x580
[  473.940930][T14927]  ? trace_irq_disable+0x3b/0x140
[  473.940951][T14927]  ? clear_bhb_loop+0x40/0x90
[  473.940978][T14927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.941000][T14927] RIP: 0033:0x7fc8ae19ce59
[  473.941021][T14927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.941040][T14927] RSP: 002b:00007fc8af083028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  473.941064][T14927] RAX: ffffffffffffffda RBX: 00007fc8ae415fa0 RCX: 00007fc8ae19ce59
[  473.941081][T14927] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003
[  473.941095][T14927] RBP: 00007fc8af083090 R08: 0000000000000000 R09: 0000000000000000
[  473.941108][T14927] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002
[  473.941121][T14927] R13: 00007fc8ae416038 R14: 00007fc8ae415fa0 R15: 00007ffc72b755a8
[  473.941156][T14927]  </TASK>
[  474.138632][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2156'.
[  474.231615][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'.
[  474.242814][T14935] netlink: 'syz.1.2156': attribute type 2 has an invalid length.
[  474.282710][T14934] 8021q: adding VLAN 0 to HW filter on device bond10
[  474.291979][T14898] batadv_slave_1: left promiscuous mode
[  474.418116][T14942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2157'.
[  474.522005][T14941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.531415][T14940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.585813][T14953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2159'.
[  474.602138][T14953] ip6gre3: entered promiscuous mode
[  474.607431][T14953] ip6gre3: entered allmulticast mode
[  474.768380][T14957] gretap3: entered promiscuous mode
[  474.920046][T14962] netlink: 'syz.3.2163': attribute type 3 has an invalid length.
[  475.034644][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'.
[  475.318021][T14961] tipc: Failed to remove unknown binding: 66,0,0/1054357918:593123370/593123372
[  475.327169][T14961] tipc: Failed to remove unknown binding: 66,0,0/1054357918:593123370/593123371
[  475.411504][T14961] tipc: Failed to remove unknown binding: 66,0,0/1054357918:593123370/593123372
[  475.420983][T14961] tipc: Failed to remove unknown binding: 66,0,0/1054357918:593123370/593123371
[  475.504248][T14970] bond10: entered promiscuous mode
[  475.518309][T14970] bond10: entered allmulticast mode
[  475.531105][T14970] 8021q: adding VLAN 0 to HW filter on device bond10
[  476.179481][T15007] xfrm0 speed is unknown, defaulting to 1000
[  477.078150][T15033] netlink: 'syz.3.2185': attribute type 13 has an invalid length.
[  477.086067][T15033] netlink: 'syz.3.2185': attribute type 17 has an invalid length.
[  477.279478][T15039] tipc: Failed to remove unknown binding: 66,0,0/1054357918:3202262759/3202262761
[  477.289440][T15039] tipc: Failed to remove unknown binding: 66,0,0/1054357918:3202262759/3202262760
[  477.299437][T15039] tipc: Failed to remove unknown binding: 66,0,0/1054357918:3202262759/3202262761
[  477.309004][T15039] tipc: Failed to remove unknown binding: 66,0,0/1054357918:3202262759/3202262760
[  477.551134][T15044] vlan3: entered promiscuous mode
[  477.750542][T15026] xfrm0 speed is unknown, defaulting to 1000
[  478.076867][T15053] __nla_validate_parse: 5 callbacks suppressed
[  478.076890][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'.
[  478.292074][T15053] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  478.299973][T15053] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  479.961347][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'.
[  480.235927][T15089] 8021q: adding VLAN 0 to HW filter on device bond11
[  480.326992][T15104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2199'.
[  480.373975][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'.
[  480.402534][T15098] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  480.426366][T15106] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  480.435316][T15106] tipc: Enabled bearer <udp:syz0>, priority 10
[  480.508087][T15110] netlink: 5688 bytes leftover after parsing attributes in process `syz.1.2204'.
[  480.700031][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'.
[  480.709861][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'.
[  480.805770][ T7074] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  480.866599][ T7074] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  480.875409][ T7074] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  481.238241][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  481.564775][T15155] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2218'.
[  481.574866][T15153] netlink: 'syz.2.2217': attribute type 1 has an invalid length.
[  481.587096][T15157] syzkaller0: entered promiscuous mode
[  481.593506][T15153] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2217'.
[  481.602858][T15157] syzkaller0: entered allmulticast mode
[  481.623458][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'.
[  481.632994][T15157] netlink: 'syz.1.2216': attribute type 1 has an invalid length.
[  481.646370][T15157] v: renamed from gre0
[  481.658224][T15158] netlink: 'syz.3.2219': attribute type 10 has an invalid length.
[  481.672872][T15158] netlink: 'syz.3.2219': attribute type 12 has an invalid length.
[  481.684383][T15157] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check.
[  482.911796][T15198] tipc: Resetting bearer <eth:batadv0>
[  483.068898][T15198] geneve3: left promiscuous mode
[  483.074465][T15198] bridge0: left allmulticast mode
[  483.079703][T15198] gtp1: left promiscuous mode
[  483.084431][T15198] gtp1: left allmulticast mode
[  483.111708][T15198] vlan2: left promiscuous mode
[  483.116582][T15198] bond3: left promiscuous mode
[  483.121634][T15198] vlan2: left allmulticast mode
[  483.126619][T15198] bond3: left allmulticast mode
[  483.141400][T15190] xfrm0 speed is unknown, defaulting to 1000
[  483.147680][ T9839] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.156613][ T9839] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.165686][ T9839] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.174683][ T9839] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.183959][ T9839] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.197858][ T9839] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.404538][T15216] __nla_validate_parse: 7 callbacks suppressed
[  483.404557][T15216] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2234'.
[  483.455329][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'.
[  483.483638][T15221] netlink: 'syz.3.2235': attribute type 1 has an invalid length.
[  483.504297][T15221] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2235'.
[  483.529339][T15221] netlink: 'syz.3.2235': attribute type 1 has an invalid length.
[  483.574798][T15216] tipc: Started in network mode
[  483.596489][T15216] tipc: Node identity 5ef786e2ec18, cluster identity 4711
[  483.629942][T15216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.834686][T15216] syzkaller0: entered promiscuous mode
[  483.840260][T15216] syzkaller0: entered allmulticast mode
[  483.846482][T15216] tipc: Resetting bearer <eth:syzkaller0>
[  484.078718][T15214] tipc: Resetting bearer <eth:syzkaller0>
[  484.223284][T15240] xt_hashlimit: size too large, truncated to 1048576
[  484.730365][T15248] netlink: 'syz.3.2241': attribute type 1 has an invalid length.
[  487.869948][T15214] tipc: Disabling bearer <eth:syzkaller0>
[  487.881183][ T6260] tipc: Node number set to 3002042082
[  487.890048][T15248] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  488.178032][T15267] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2245'.
[  488.200941][T15267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2245'.
[  488.405431][T15270] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2246'.
[  488.561859][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.608349][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.620288][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.641075][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.666349][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.685528][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.694648][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.731857][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.741455][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.758869][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2250'.
[  488.887355][T15288] netlink: 'syz.3.2253': attribute type 1 has an invalid length.
[  489.487050][T15289] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  489.519106][T15289] gretap1: entered allmulticast mode
[  489.544912][T15303] netlink: 'syz.2.2256': attribute type 4 has an invalid length.
[  489.563506][T15302] netlink: 'syz.0.2255': attribute type 1 has an invalid length.
[  489.578654][T15303] netlink: 'syz.2.2256': attribute type 8 has an invalid length.
[  489.745691][T15306] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  489.781721][T15302] veth9: entered promiscuous mode
[  489.790847][T15302] bond3: (slave veth9): Enslaving as a backup interface with a down link
[  489.855631][T15302] 8021q: adding VLAN 0 to HW filter on device bond3
[  489.863476][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  490.008448][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  490.682262][T15352] xfrm0 speed is unknown, defaulting to 1000
[  490.867899][T15363] IPVS: Error connecting to the multicast addr
[  491.273882][T15363] xfrm0 speed is unknown, defaulting to 1000
[  491.730126][T15390] bond0: (slave ip6tnl0): refused to change device type
[  492.316654][T15401] netlink: 'syz.3.2286': attribute type 5 has an invalid length.
[  492.710289][T15307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  493.323206][T15428] netlink: 'syz.4.2295': attribute type 1 has an invalid length.
[  493.374513][T15428] 8021q: adding VLAN 0 to HW filter on device bond4
[  493.452259][T15428] vlan3: entered promiscuous mode
[  493.465080][T15428] bond4: entered promiscuous mode
[  493.472595][T15428] vlan3: entered allmulticast mode
[  493.480455][T15428] bond4: entered allmulticast mode
[  493.560905][T15431] bond4: (slave bridge4): making interface the new active one
[  493.570858][T15431] bridge4: entered promiscuous mode
[  493.576428][T15431] bridge4: entered allmulticast mode
[  493.585702][T15431] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  494.364783][T15461] xfrm0 speed is unknown, defaulting to 1000
[  495.228004][T15476] __nla_validate_parse: 189 callbacks suppressed
[  495.228029][T15476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2303'.
[  495.607260][T15486] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  496.113501][T15418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  496.360237][T15513] netlink: 'syz.1.2315': attribute type 1 has an invalid length.
[  497.877992][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  499.255040][T15502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  499.443759][T15535] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  499.504719][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2321'.
[  499.536905][T15544] netlink: 'syz.2.2323': attribute type 3 has an invalid length.
[  499.708292][T15556] netlink: 'syz.0.2326': attribute type 32 has an invalid length.
[  499.716685][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'.
[  499.767940][T15556] bond4: Setting coupled_control to off (0)
[  502.501099][T15544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  502.515988][T15567] netlink: 'syz.0.2328': attribute type 1 has an invalid length.
[  502.743578][T15578] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  502.967137][T15592] FAULT_INJECTION: forcing a failure.
[  502.967137][T15592] name failslab, interval 1, probability 0, space 0, times 0
[  503.004893][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'.
[  503.025294][T15592] CPU: 1 UID: 0 PID: 15592 Comm: syz.2.2336 Not tainted syzkaller #0 PREEMPT(full) 
[  503.025324][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  503.025338][T15592] Call Trace:
[  503.025346][T15592]  <TASK>
[  503.025356][T15592]  dump_stack_lvl+0xe8/0x150
[  503.025390][T15592]  should_fail_ex+0x40c/0x560
[  503.025427][T15592]  should_failslab+0xa8/0x100
[  503.025454][T15592]  __kmalloc_cache_noprof+0xa8/0x660
[  503.025491][T15592]  ? pfkey_dump+0x232/0x680
[  503.025629][T15592]  ? pfkey_dump+0x232/0x680
[  503.025651][T15592]  ? pfkey_broadcast+0x3c1/0x3e0
[  503.025687][T15592]  pfkey_dump+0x232/0x680
[  503.025721][T15592]  pfkey_sendmsg+0xceb/0x11d0
[  503.025770][T15592]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  503.025836][T15592]  ? __pfx_aa_sk_perm+0x10/0x10
[  503.025905][T15592]  ? aa_sock_msg_perm+0xf1/0x1b0
[  503.025939][T15592]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  503.025977][T15592]  sock_sendmsg_nosec+0x13a/0x180
[  503.026013][T15592]  ____sys_sendmsg+0x54e/0x850
[  503.026045][T15592]  ? __pfx_____sys_sendmsg+0x10/0x10
[  503.026080][T15592]  ? import_iovec+0x73/0xa0
[  503.026109][T15592]  ___sys_sendmsg+0x2a5/0x360
[  503.026131][T15592]  ? __lock_acquire+0x683/0x2cf0
[  503.026160][T15592]  ? __pfx____sys_sendmsg+0x10/0x10
[  503.026238][T15592]  ? __fget_files+0x2a/0x420
[  503.026259][T15592]  ? __fget_files+0x3a2/0x420
[  503.026291][T15592]  __x64_sys_sendmsg+0x1b1/0x290
[  503.026319][T15592]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  503.026364][T15592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.026390][T15592]  do_syscall_64+0x174/0x580
[  503.026412][T15592]  ? trace_irq_disable+0x3b/0x140
[  503.026434][T15592]  ? clear_bhb_loop+0x40/0x90
[  503.026460][T15592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.026481][T15592] RIP: 0033:0x7fd0a039ce59
[  503.026502][T15592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.026519][T15592] RSP: 002b:00007fd0a1195028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  503.026542][T15592] RAX: ffffffffffffffda RBX: 00007fd0a0615fa0 RCX: 00007fd0a039ce59
[  503.026558][T15592] RDX: 00000000040408c0 RSI: 0000200000000440 RDI: 0000000000000006
[  503.026572][T15592] RBP: 00007fd0a1195090 R08: 0000000000000000 R09: 0000000000000000
[  503.026584][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  503.026597][T15592] R13: 00007fd0a0616038 R14: 00007fd0a0615fa0 R15: 00007ffe5d435ee8
[  503.026631][T15592]  </TASK>
[  503.284315][   T30] audit: type=1800 audit(1782862475.971:13): pid=15602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2335" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2172 res=0 errno=0
[  503.292644][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'.
[  503.367212][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'.
[  503.421123][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'.
[  503.556745][T15607] xfrm0 speed is unknown, defaulting to 1000
[  503.974107][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2345'.
[  504.040202][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'.
[  504.098953][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2339'.
[  504.123945][T15612] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  504.140255][T15628] vlan3: entered promiscuous mode
[  505.291670][T15665] bridge7: entered promiscuous mode
[  505.297245][T15665] bridge7: entered allmulticast mode
[  505.306867][T15665] team0: Port device bridge7 added
[  505.314053][T15666] bridge0: port 1(team0) entered blocking state
[  505.322575][T15666] bridge0: port 1(team0) entered disabled state
[  505.359270][T15666] team0: entered allmulticast mode
[  505.382830][T15666] team0: entered promiscuous mode
[  505.408305][T15666] bond2: entered promiscuous mode
[  505.794899][T15689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2361'.
[  505.852475][T15689] netlink: 'syz.3.2361': attribute type 6 has an invalid length.
[  505.964576][T15695] netlink: 'syz.1.2364': attribute type 1 has an invalid length.
[  505.980128][T15691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2362'.
[  506.042637][T15695] 8021q: adding VLAN 0 to HW filter on device bond11
[  506.073167][T15698] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.085856][T15698] bond11: (slave bond0): Enslaving as an active interface with an up link
[  506.114221][T15695] bond11: entered promiscuous mode
[  506.119680][T15695] bond0: entered promiscuous mode
[  506.124845][T15695] bond_slave_0: entered promiscuous mode
[  506.131174][T15695] 
@0Ù: entered promiscuous mode
[  506.136611][T15695] bond11: entered allmulticast mode
[  506.143237][T15695] bond0: entered allmulticast mode
[  506.148834][T15695] bond_slave_0: entered allmulticast mode
[  506.154648][T15695] 
@0Ù: entered allmulticast mode
[  506.485452][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'.
[  506.627542][T15718] xt_NFQUEUE: number of total queues is 0
[  506.636771][T15719] xt_NFQUEUE: number of total queues is 0
[  506.719189][T15723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  506.872194][T15723] netlink: 'syz.4.2372': attribute type 1 has an invalid length.
[  506.890744][T15732] bridge0: left allmulticast mode
[  506.931957][T15732] bridge0: port 1(vlan3) entered blocking state
[  506.948710][T15732] bridge0: port 1(vlan3) entered disabled state
[  506.971502][T15732] vlan3: entered allmulticast mode
[  506.999287][T15732] geneve0: entered allmulticast mode
[  507.060644][T15732] vlan3: entered promiscuous mode
[  507.065776][T15732] geneve0: entered promiscuous mode
[  507.122567][T15743] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20002
[  507.176004][T15739] erspan0: entered allmulticast mode
[  507.341970][T15747] syzkaller0: entered promiscuous mode
[  508.489242][T15760] __nla_validate_parse: 4 callbacks suppressed
[  508.489265][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'.
[  509.224379][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2392'.
[  509.301385][T15793] syzkaller0: entered promiscuous mode
[  509.322575][T15793] syzkaller0: entered allmulticast mode
[  510.142953][T15833] syzkaller0: entered promiscuous mode
[  510.154720][T15833] syzkaller0: entered allmulticast mode
[  510.319626][T15837] xt_connbytes: Forcing CT accounting to be enabled
[  510.368139][T15837] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  510.493997][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'.
[  510.511552][T15848] hsr_slave_0: left promiscuous mode
[  510.519060][T15848] hsr_slave_1: left promiscuous mode
[  510.780735][T15860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2406'.
[  511.557335][T15887] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  511.693573][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'.
[  511.716021][T15896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2416'.
[  511.811751][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'.
[  512.108895][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2420'.
[  512.463432][ T6283] IPVS: starting estimator thread 0...
[  512.483154][T15917] xt_time: invalid argument - start or stop time greater than 23:59:59
[  512.577840][T15919] IPVS: using max 29 ests per chain, 69600 per kthread
[  512.798810][T15726] Set syz1 is full, maxelem 65536 reached
[  513.122290][T15949] xt_ecn: cannot match TCP bits for non-tcp packets
[  513.304351][T15958] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  513.383190][T15966] xt_hashlimit: size too large, truncated to 1048576
[  513.443424][T15974] batadv_slave_1: entered promiscuous mode
[  513.641349][T15982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  514.041625][T15998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2444'.
[  514.126963][T15998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2444'.
[  514.203220][T16006] nbd: nbd1 already in use
[  514.228287][T16006] block nbd1: NBD_DISCONNECT
[  514.253955][T16006] block nbd1: Send disconnect failed -32
[  514.273458][T16006] block nbd1: shutting down sockets
[  514.392886][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'.
[  514.427978][T16015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2449'.
[  514.604766][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2452'.
[  515.029691][T16030] xfrm0 speed is unknown, defaulting to 1000
[  515.122698][T16046] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2459'.
[  515.140141][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2459'.
[  515.421061][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'.
[  515.441637][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2462'.
[  515.454751][T16056] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2463'.
[  516.177370][T16087] tipc: Failed to remove unknown binding: 66,0,0/0:1378600725/1378600727
[  516.198609][T16087] tipc: Failed to remove unknown binding: 66,0,0/0:1378600725/1378600726
[  516.218933][T16087] tipc: Failed to remove unknown binding: 66,0,0/0:1378600725/1378600727
[  516.235753][T16087] tipc: Failed to remove unknown binding: 66,0,0/0:1378600725/1378600726
[  516.249586][T16089] netlink: 'syz.4.2473': attribute type 15 has an invalid length.
[  516.311035][ T9839] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  516.324418][T16089] netlink: 'syz.4.2473': attribute type 15 has an invalid length.
[  516.334056][ T9839] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  516.354764][ T9839] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  516.585564][T16106] netlink: 'syz.3.2475': attribute type 1 has an invalid length.
[  516.878622][T16109] sctp: [Deprecated]: syz.0.2477 (pid 16109) Use of struct sctp_assoc_value in delayed_ack socket option.
[  516.878622][T16109] Use struct sctp_sack_info instead
[  517.683280][T16109] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  517.824093][T16121] veth0: entered promiscuous mode
[  518.162548][T16132] xfrm0 speed is unknown, defaulting to 1000
[  518.979419][T16173] netlink: 'syz.1.2494': attribute type 10 has an invalid length.
[  519.061103][T16176] batman_adv: batadv0: Adding interface: macvtap1
[  519.074012][T16176] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.140514][T16176] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  519.380125][T16194] __nla_validate_parse: 9 callbacks suppressed
[  519.380145][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2498'.
[  519.858885][ T9837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.867518][ T9837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.491463][T16224] netlink: 'syz.0.2507': attribute type 2 has an invalid length.
[  520.499851][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'.
[  521.249109][T16243] veth1_macvtap: left allmulticast mode
[  521.264489][T16243] veth0_macvtap: left allmulticast mode
[  521.279997][T16243] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  521.300531][T16243] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  521.334373][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e536400: rx timeout, send abort
[  521.418664][T16243] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  521.436932][T16243] mac80211_hwsim hwsim9 wlan0: left allmulticast mode
[  521.509416][T16243] veth2: left allmulticast mode
[  521.525014][T16243] veth3: left allmulticast mode
[  521.541465][T16243] veth5: left promiscuous mode
[  521.547613][T16243] bond7: left promiscuous mode
[  521.560906][T16243] bond7: left allmulticast mode
[  521.566243][T16243] bond8: left promiscuous mode
[  521.571572][T16243] bond8: left allmulticast mode
[  521.576768][T16243] macvlan2: left allmulticast mode
[  521.620536][T16243] bridge0: left promiscuous mode
[  521.634071][T16243] vlan3: left promiscuous mode
[  521.647461][T16243] geneve0: left promiscuous mode
[  521.689870][T16243] bond9: left promiscuous mode
[  521.702094][T16243] ip6gre2: left promiscuous mode
[  521.741891][T16243] veth11: left allmulticast mode
[  521.755614][T16243] bond11: left promiscuous mode
[  521.766480][T16243] bond0: left promiscuous mode
[  521.771588][T16243] bond_slave_0: left promiscuous mode
[  521.777346][T16243] 
@0Ù: left promiscuous mode
[  521.782777][T16243] bond11: left allmulticast mode
[  521.788061][T16243] bond0: left allmulticast mode
[  521.793104][T16243] bond_slave_0: left allmulticast mode
[  521.801233][T16243] 
@0Ù: left allmulticast mode
[  521.821932][   T48] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.845341][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e536400: abort rx timeout. Force session deactivation
[  521.858659][   T48] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.897250][   T48] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.942560][   T48] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.026230][T16268] netlink: 'syz.4.2519': attribute type 1 has an invalid length.
[  522.143129][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2519'.
[  522.225938][T16274] vlan5: entered promiscuous mode
[  522.231409][T16274] bridge0: entered promiscuous mode
[  522.260715][T16269] bond5: (slave geneve4): making interface the new active one
[  522.297999][T16269] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  522.336505][ T9837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  522.398726][ T9842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  522.418089][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'.
[  522.427201][ T9842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  522.470066][T16286] netlink: 'syz.0.2522': attribute type 1 has an invalid length.
[  522.500080][T16286] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2522'.
[  522.873231][T16321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2532'.
[  522.935004][T16310] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  522.961705][T16310] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  523.266046][T16346] bond10: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  523.290316][T16346] bond10 (unregistering): Released all slaves
[  523.495548][T16357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2540'.
[  523.815858][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'.
[  523.874376][T16372] erspan0: left allmulticast mode
[  524.199548][T16372] team_slave_1: left promiscuous mode
[  524.567137][T16372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.584958][T16372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.625986][T16372] bridge0: port 2(veth0_virt_wifi) entered disabled state
[  524.642456][T16372] vlan0: left promiscuous mode
[  524.754486][T16372] bridge0: port 1(vlan2) entered disabled state
[  524.842921][T16372] ip6tnl2: left allmulticast mode
[  524.851703][T16372] bond9: left promiscuous mode
[  524.856577][T16372] gre1: left promiscuous mode
[  524.889399][T16372] vlan5: left promiscuous mode
[  524.894721][T16372] bridge0: left promiscuous mode
[  524.988433][ T1179] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  525.007911][ T1179] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.027494][ T1179] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  525.055732][ T1179] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.081000][ T1179] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  525.116774][ T1179] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.176127][T16414] erspan0: left promiscuous mode
[  525.228223][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'.
[  525.276206][T16414] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.298471][T16414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.327019][T16414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.338520][T16414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  525.354808][T16414] 1·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  525.367888][ T1179] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  525.390859][ T1179] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.722306][T16442] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2552'.
[  525.980945][T16459] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2557'.
[  526.284627][T16480] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2561'.
[  527.321702][T16513] 8021q: adding VLAN 0 to HW filter on device bond10
[  527.501027][T16513] 8021q: adding VLAN 0 to HW filter on device bond11
[  527.642698][T16529] netlink: 'syz.1.2572': attribute type 1 has an invalid length.
[  527.660319][T16513] 8021q: adding VLAN 0 to HW filter on device bond12
[  527.705734][T16532] netlink: 'syz.1.2572': attribute type 1 has an invalid length.
[  527.744277][T16513] 8021q: adding VLAN 0 to HW filter on device bond13
[  527.761397][T16532] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  527.763659][T16529] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  527.824017][T16513] 8021q: adding VLAN 0 to HW filter on device bond14
[  527.851976][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2573'.
[  527.883098][T16540] netlink: 'syz.2.2573': attribute type 29 has an invalid length.
[  527.893633][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2573'.
[  527.920773][T16513] 8021q: adding VLAN 0 to HW filter on device bond15
[  528.017095][T16513] 8021q: adding VLAN 0 to HW filter on device bond16
[  528.055699][T16513] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  528.865726][T16574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2582'.
[  528.936125][T16574] openvswitch: netlink: Flow key attr not present in new flow.
[  529.051824][T16580] netlink: 'syz.1.2585': attribute type 30 has an invalid length.
[  529.061396][T16582] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  529.077486][T16580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2585'.
[  529.084020][T16582] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  529.133989][T16583] tun0: tun_chr_ioctl cmd 1074025673
[  529.149875][T16582] netlink: 'syz.0.2584': attribute type 6 has an invalid length.
[  529.169881][T16580] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  529.175341][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'.
[  529.219781][T16583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  529.768553][T16613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2591'.
[  529.794244][T16615] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  530.011405][T16628] tc_dump_action: action bad kind
[  530.529088][T16638] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  530.573953][T16649] veth4: entered allmulticast mode
[  530.886638][T16674] netlink: 'syz.4.2606': attribute type 1 has an invalid length.
[  531.199953][T16687] __nla_validate_parse: 5 callbacks suppressed
[  531.199975][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'.
[  531.224949][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2609'.
[  531.246215][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'.
[  531.287367][T16684] bridge0: entered promiscuous mode
[  531.304006][T16684] bridge0: entered allmulticast mode
[  531.358380][T16696] netlink: 'syz.0.2611': attribute type 1 has an invalid length.
[  531.393569][T16689] macvtap2: entered promiscuous mode
[  531.413618][T16696] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  531.490457][T16705] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  531.513026][T16702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2612'.
[  531.539238][T16709] netlink: 'syz.4.2614': attribute type 39 has an invalid length.
[  531.548845][T16706] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  531.585698][T16703] xfrm0 speed is unknown, defaulting to 1000
[  531.618869][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'.
[  531.653384][T16717] netlink: 'syz.0.2615': attribute type 1 has an invalid length.
[  531.695388][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'.
[  532.172679][T16718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2616'.
[  532.315196][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2625'.
[  532.597554][T16764] netlink: 'syz.2.2630': attribute type 13 has an invalid length.
[  532.610223][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'.
[  532.648197][T16770] netlink: 'syz.4.2628': attribute type 13 has an invalid length.
[  532.659647][T16771] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  532.665476][T16770] netlink: 'syz.4.2628': attribute type 17 has an invalid length.
[  532.774128][ T9837] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  532.792635][ T9837] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  532.816408][ T9837] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  532.829006][ T9837] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  532.864631][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2632'.
[  532.883896][T16770] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.893287][T16770] 8021q: adding VLAN 0 to HW filter on device team0
[  532.905328][T16770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  532.913239][T16770] tipc: Resetting bearer <eth:batadv0>
[  532.925851][T16770] tipc: Resetting bearer <eth:batadv0>
[  533.043275][T16770] veth1_vlan: left promiscuous mode
[  533.050133][T16770] veth0_vlan: left promiscuous mode
[  533.059116][T16770] veth0_vlan: entered promiscuous mode
[  533.073787][T16770] veth1_vlan: entered promiscuous mode
[  533.093452][T16770] veth1_macvtap: left promiscuous mode
[  533.100814][T16770] veth0_macvtap: left promiscuous mode
[  533.107746][T16770] veth0_macvtap: entered promiscuous mode
[  533.115630][T16770] veth1_macvtap: entered promiscuous mode
[  533.128566][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  533.137530][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  533.148646][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  533.157488][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  533.196695][T16770] 8021q: adding VLAN 0 to HW filter on device batadv1
[  533.225804][T16770] hsr1: Slave A (veth0_to_team) is not up; please bring it up to get a fully working HSR network
[  533.237500][T16770] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  533.257831][T16770] 8021q: adding VLAN 0 to HW filter on device bond1
[  533.272986][T16770] 8021q: adding VLAN 0 to HW filter on device bond2
[  533.317178][T16770] 8021q: adding VLAN 0 to HW filter on device bond3
[  533.408933][T16808] netlink: 'syz.0.2638': attribute type 6 has an invalid length.
[  533.443791][T16807] netlink: 'syz.3.2637': attribute type 50 has an invalid length.
[  533.454994][T16770] 8021q: adding VLAN 0 to HW filter on device bond4
[  533.465462][T16770] vlan3: left promiscuous mode
[  533.474267][T16770] bond4: left promiscuous mode
[  533.480066][T16770] bridge4: left promiscuous mode
[  533.485520][T16770] vlan3: left allmulticast mode
[  533.496936][T16770] bond4: left allmulticast mode
[  533.503605][T16770] bridge4: left allmulticast mode
[  533.525352][T16770] 8021q: adding VLAN 0 to HW filter on device bond5
[  533.538816][ T9837] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  533.558381][ T9837] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  533.587911][ T9837] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  533.607796][ T9837] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  533.631379][ T9837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.671302][ T9837] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  533.821458][ T9837] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  533.839721][ T9842] bond3: (slave ip6gretap1): link status up again after 0 ms
[  533.859478][ T9837] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  533.868641][ T9837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.889683][ T9837] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  533.901344][T16818] netlink: 'syz.3.2641': attribute type 8 has an invalid length.
[  533.965309][ T9842] bond3: (slave ip6gretap1): link status up again after 0 ms
[  533.992452][   T14] bond3: (slave ip6gretap1): link status up again after 0 ms
[  534.051248][ T9839] bond3: (slave ip6gretap1): link status up again after 0 ms
[  534.090776][ T9839] bond3: (slave ip6gretap1): link status up again after 0 ms
[  534.148881][ T9839] bond3: (slave ip6gretap1): link status up again after 0 ms
[  534.180349][ T9837] bond3: (slave ip6gretap1): link status up again after 0 ms
[  534.217828][ T9837] bond3: (slave ip6gretap1): link status up again after 0 ms
[  534.269266][   T14] bond3: (slave ip6gretap1): link status up again after 0 ms
[  534.296615][T16832] macvlan0: entered promiscuous mode
[  534.302205][   T48] bond3: (slave ip6gretap1): link status up again after 0 ms
[  534.319019][ T9837] bond3: (slave ip6gretap1): link status up again after 0 ms
[  534.736576][T16849] netlink: 'syz.3.2648': attribute type 3 has an invalid length.
[  535.067001][T16860] xfrm0 speed is unknown, defaulting to 1000
[  535.173378][T16871] netlink: 'syz.4.2651': attribute type 3 has an invalid length.
[  535.415863][T16876] netlink: 'syz.0.2655': attribute type 2 has an invalid length.
[  536.011757][T16885] netlink: 'syz.3.2658': attribute type 1 has an invalid length.
[  536.304468][T16889] bond17: (slave veth1): Enslaving as an active interface with a down link
[  536.378500][T16892] bond17: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  536.632939][T16903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  536.669432][T16903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  536.742828][T16917] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  536.804823][T16922] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  537.041443][T16928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  537.116848][T16928] tipc: Resetting bearer <eth:syzkaller0>
[  537.187207][T16931] bridge3: port 1(wlan0) entered disabled state
[  537.229520][T16934] syzkaller1: entered promiscuous mode
[  537.243592][T16934] syzkaller1: entered allmulticast mode
[  537.307389][T16936] netlink: 'syz.4.2668': attribute type 1 has an invalid length.
[  537.554182][T16951] __nla_validate_parse: 7 callbacks suppressed
[  537.554202][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'.
[  537.614347][T16936] 8021q: adding VLAN 0 to HW filter on device bond6
[  537.648790][T16942] bond0: (slave veth0_to_bond): Releasing backup interface
[  537.666070][T16955] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2673'.
[  537.681097][T16942] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  537.726601][T16956] ksmbd: Unknown IPC event: 10, ignore.
[  537.980727][T16960] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  538.000407][T16960] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  538.828647][T16998] netlink: 'syz.0.2685': attribute type 1 has an invalid length.
[  538.894097][T16994] netlink: 'syz.4.2684': attribute type 1 has an invalid length.
[  538.903355][T16994] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2684'.
[  539.120427][ T7074] net_ratelimit: 27 callbacks suppressed
[  539.120449][ T7074] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  539.288200][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  539.437862][   T48] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  539.455717][T17020] tun0: tun_chr_ioctl cmd 1074025680
[  539.473915][T17021] tun0: tun_chr_ioctl cmd 1074025680
[  539.563799][ T9839] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  539.851528][T17042] can: request_module (can-proto-0) failed.
[  540.015118][T17049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'.
[  540.192595][T17061] sctp: [Deprecated]: syz.2.2697 (pid 17061) Use of int in maxseg socket option.
[  540.192595][T17061] Use struct sctp_assoc_value instead
[  540.363899][T17067] FAULT_INJECTION: forcing a failure.
[  540.363899][T17067] name failslab, interval 1, probability 0, space 0, times 0
[  540.383755][T17067] CPU: 0 UID: 0 PID: 17067 Comm: syz.1.2700 Not tainted syzkaller #0 PREEMPT(full) 
[  540.383784][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  540.383797][T17067] Call Trace:
[  540.383806][T17067]  <TASK>
[  540.383815][T17067]  dump_stack_lvl+0xe8/0x150
[  540.383847][T17067]  should_fail_ex+0x40c/0x560
[  540.383880][T17067]  should_failslab+0xa8/0x100
[  540.383906][T17067]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  540.383936][T17067]  ? local_lock_release+0x9c/0x160
[  540.383972][T17067]  ? __alloc_skb+0x1d7/0x7a0
[  540.383989][T17067]  ? __alloc_skb+0x1d7/0x7a0
[  540.384016][T17067]  __alloc_skb+0x1d7/0x7a0
[  540.384041][T17067]  netlink_dump+0x1e7/0xee0
[  540.384070][T17067]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  540.384117][T17067]  ? __pfx_netlink_dump+0x10/0x10
[  540.384156][T17067]  ? genl_start+0x57e/0x6d0
[  540.384195][T17067]  __netlink_dump_start+0x589/0x7b0
[  540.384228][T17067]  genl_family_rcv_msg_dumpit+0x213/0x310
[  540.384264][T17067]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  540.384293][T17067]  ? genl_get_cmd+0x82f/0x960
[  540.384330][T17067]  ? __pfx_genl_start+0x10/0x10
[  540.384357][T17067]  ? __pfx_genl_dumpit+0x10/0x10
[  540.384384][T17067]  ? __pfx_genl_done+0x10/0x10
[  540.384416][T17067]  ? __lock_acquire+0x683/0x2cf0
[  540.384456][T17067]  genl_rcv_msg+0x5e1/0x7a0
[  540.384495][T17067]  ? __pfx_genl_rcv_msg+0x10/0x10
[  540.384525][T17067]  ? __pfx_ila_xlat_nl_dump_start+0x10/0x10
[  540.384655][T17067]  ? __pfx_ila_xlat_nl_dump+0x10/0x10
[  540.384677][T17067]  ? __pfx_ila_xlat_nl_dump_done+0x10/0x10
[  540.384719][T17067]  netlink_rcv_skb+0x226/0x4a0
[  540.384745][T17067]  ? __pfx_genl_rcv_msg+0x10/0x10
[  540.384778][T17067]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  540.384819][T17067]  ? down_read+0x2be/0x330
[  540.384846][T17067]  genl_rcv+0x28/0x40
[  540.384872][T17067]  netlink_unicast+0x7bb/0x940
[  540.384907][T17067]  netlink_sendmsg+0x813/0xb40
[  540.384943][T17067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.384974][T17067]  ? aa_sock_msg_perm+0xf1/0x1b0
[  540.385007][T17067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.385031][T17067]  sock_sendmsg_nosec+0x13a/0x180
[  540.385070][T17067]  ____sys_sendmsg+0x54e/0x850
[  540.385102][T17067]  ? __pfx_____sys_sendmsg+0x10/0x10
[  540.385137][T17067]  ? import_iovec+0x73/0xa0
[  540.385171][T17067]  ___sys_sendmsg+0x2a5/0x360
[  540.385194][T17067]  ? __lock_acquire+0x683/0x2cf0
[  540.385224][T17067]  ? __pfx____sys_sendmsg+0x10/0x10
[  540.385289][T17067]  ? __fget_files+0x2a/0x420
[  540.385311][T17067]  ? __fget_files+0x3a2/0x420
[  540.385345][T17067]  __x64_sys_sendmsg+0x1b1/0x290
[  540.385373][T17067]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  540.385424][T17067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.385448][T17067]  do_syscall_64+0x174/0x580
[  540.385468][T17067]  ? trace_irq_disable+0x3b/0x140
[  540.385488][T17067]  ? clear_bhb_loop+0x40/0x90
[  540.385515][T17067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.385537][T17067] RIP: 0033:0x7fc8ae19ce59
[  540.385558][T17067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.385577][T17067] RSP: 002b:00007fc8af083028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  540.385601][T17067] RAX: ffffffffffffffda RBX: 00007fc8ae415fa0 RCX: 00007fc8ae19ce59
[  540.385616][T17067] RDX: 0000000004000004 RSI: 0000200000000180 RDI: 0000000000000003
[  540.385630][T17067] RBP: 00007fc8af083090 R08: 0000000000000000 R09: 0000000000000000
[  540.385651][T17067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  540.385665][T17067] R13: 00007fc8ae416038 R14: 00007fc8ae415fa0 R15: 00007ffc72b755a8
[  540.385702][T17067]  </TASK>
[  540.882557][T17074] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2701'.
[  541.149798][T17081] openvswitch: netlink: VXLAN extension 123 out of range max 1
[  541.187232][T17034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  541.288001][T17034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  541.565986][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'.
[  541.602399][T17060] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  541.929146][T17113] netlink: 'syz.1.2707': attribute type 4 has an invalid length.
[  541.956520][T17115] netlink: 'syz.1.2707': attribute type 4 has an invalid length.
[  542.021402][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2709'.
[  542.140440][T17123] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  542.164899][T17125] vlan0: entered promiscuous mode
[  542.211870][T17123] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2710'.
[  542.336159][T17141] openvswitch: netlink: Tunnel attr 91 out of range max 16
[  542.597294][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2719'.
[  542.631925][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2719'.
[  542.957212][T17175] netlink: 'syz.1.2722': attribute type 3 has an invalid length.
[  543.033134][T17173] syzkaller1: entered promiscuous mode
[  543.057141][T17173] syzkaller1: entered allmulticast mode
[  543.208299][T17173] xfrm0 speed is unknown, defaulting to 1000
[  543.864551][T17208] syzkaller0: left promiscuous mode
[  543.882428][T17208] syzkaller0: left allmulticast mode
[  544.398689][T17226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2735'.
[  544.465624][T17229] vti0: entered allmulticast mode
[  544.523729][T17238] syz.2.2735: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  544.564296][T17238] CPU: 0 UID: 0 PID: 17238 Comm: syz.2.2735 Not tainted syzkaller #0 PREEMPT(full) 
[  544.564329][T17238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  544.564343][T17238] Call Trace:
[  544.564352][T17238]  <TASK>
[  544.564362][T17238]  dump_stack_lvl+0xe8/0x150
[  544.564395][T17238]  warn_alloc+0x24c/0x270
[  544.564433][T17238]  ? stack_depot_save_flags+0x33/0x800
[  544.564569][T17238]  ? __pfx_warn_alloc+0x10/0x10
[  544.564608][T17238]  ? kasan_save_track+0x3e/0x80
[  544.564629][T17238]  ? __kasan_kmalloc+0x93/0xb0
[  544.564651][T17238]  ? xsk_setsockopt+0x52a/0x960
[  544.564748][T17238]  ? do_sock_setsockopt+0x17c/0x1b0
[  544.564770][T17238]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  544.564791][T17238]  ? do_syscall_64+0x174/0x580
[  544.564811][T17238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.564845][T17238]  __vmalloc_node_range_noprof+0x12c/0x1730
[  544.564914][T17238]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  544.564952][T17238]  ? __kasan_kmalloc+0x93/0xb0
[  544.564977][T17238]  ? __kmalloc_cache_noprof+0x32d/0x660
[  544.565009][T17238]  ? __kmalloc_cache_noprof+0x150/0x660
[  544.565047][T17238]  vmalloc_user_noprof+0xad/0xe0
[  544.565082][T17238]  ? xskq_create+0xbf/0x170
[  544.565116][T17238]  xskq_create+0xbf/0x170
[  544.565156][T17238]  xsk_init_queue+0x8a/0xe0
[  544.565191][T17238]  xsk_setsockopt+0x52a/0x960
[  544.565225][T17238]  ? __pfx_xsk_setsockopt+0x10/0x10
[  544.565256][T17238]  ? __pfx_aa_sk_perm+0x10/0x10
[  544.565299][T17238]  ? aa_sock_opt_perm+0xff/0x1a0
[  544.565332][T17238]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  544.565387][T17238]  ? __pfx_xsk_setsockopt+0x10/0x10
[  544.565419][T17238]  do_sock_setsockopt+0x17c/0x1b0
[  544.565449][T17238]  __x64_sys_setsockopt+0x13d/0x1b0
[  544.565476][T17238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.565500][T17238]  do_syscall_64+0x174/0x580
[  544.565519][T17238]  ? trace_irq_disable+0x3b/0x140
[  544.565545][T17238]  ? clear_bhb_loop+0x40/0x90
[  544.565577][T17238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.565600][T17238] RIP: 0033:0x7fd0a039ce59
[  544.565622][T17238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.565641][T17238] RSP: 002b:00007fd09e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  544.565665][T17238] RAX: ffffffffffffffda RBX: 00007fd0a0616180 RCX: 00007fd0a039ce59
[  544.565687][T17238] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d
[  544.565700][T17238] RBP: 00007fd0a0432e6f R08: 0000000000000004 R09: 0000000000000000
[  544.565713][T17238] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  544.565734][T17238] R13: 00007fd0a0616218 R14: 00007fd0a0616180 R15: 00007ffe5d435ee8
[  544.565771][T17238]  </TASK>
[  544.566230][T17238] Mem-Info:
[  544.851116][T17238] active_anon:6679 inactive_anon:0 isolated_anon:0
[  544.851116][T17238]  active_file:0 inactive_file:43404 isolated_file:0
[  544.851116][T17238]  unevictable:768 dirty:114 writeback:0
[  544.851116][T17238]  slab_reclaimable:11259 slab_unreclaimable:198519
[  544.851116][T17238]  mapped:31697 shmem:1438 pagetables:1338
[  544.851116][T17238]  sec_pagetables:0 bounce:0
[  544.851116][T17238]  kernel_misc_reclaimable:0
[  544.851116][T17238]  free:1226032 free_pcp:8933 free_cma:0
[  544.900472][T17238] Node 0 active_anon:26916kB inactive_anon:0kB active_file:0kB inactive_file:173408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126788kB dirty:452kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14544kB pagetables:5224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  544.941137][T17238] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  544.974402][T17226] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2735'.
[  544.983994][T17238] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  545.018831][T17238] lowmem_reserve[]: 0 2491 2492 2492 2492
[  545.025174][T17238] Node 0 DMA32 free:959828kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26316kB inactive_anon:0kB active_file:0kB inactive_file:173408kB unevictable:1536kB writepending:452kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:35832kB local_pcp:16608kB free_cma:0kB
[  545.059349][T17238] lowmem_reserve[]: 0 0 0 0 0
[  545.064952][T17238] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:20kB free_cma:0kB
[  545.127838][T17238] lowmem_reserve[]: 0 0 0 0 0
[  545.136577][T17238] Node 1 Normal free:3929324kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB
[  545.169820][T17238] lowmem_reserve[]: 0 0 0 0 0
[  545.177404][T17222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  545.220390][T17238] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  545.279735][T17238] Node 0 DMA32: 2*4kB (UE) 249*8kB (UME) 296*16kB (UME) 289*32kB (UME) 147*64kB (UM) 73*128kB (UM) 17*256kB (UM) 7*512kB (UM) 4*1024kB (UME) 5*2048kB (UME) 220*4096kB (UM) = 958128kB
[  545.359260][T17238] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  545.415790][T17238] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 957*4096kB (M) = 3929324kB
[  545.512322][T17238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  545.562871][T17238] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  545.577812][T17238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  545.589884][T17238] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  545.610407][T17238] 47663 total pagecache pages
[  545.620921][T17238] 0 pages in swap cache
[  545.629765][T17238] Free swap  = 124996kB
[  545.637658][T17238] Total swap = 124996kB
[  545.643633][T17238] 2097051 pages RAM
[  545.648277][T17238] 0 pages HighMem/MovableOnly
[  545.653171][T17238] 427419 pages reserved
[  545.657500][T17238] 0 pages cma reserved
[  545.882478][T17258] netdevsim netdevsim2 
€Â: renamed from netdevsim0
[  545.907060][T17258] netlink: 'syz.2.2740': attribute type 2 has an invalid length.
[  546.126635][T17258] : entered promiscuous mode
[  546.136677][T17261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2741'.
[  546.405152][T17281] netlink: 'syz.1.2744': attribute type 1 has an invalid length.
[  546.440118][T17279] netlink: 'syz.3.2745': attribute type 29 has an invalid length.
[  546.443822][T17280] netlink: 'syz.1.2744': attribute type 1 has an invalid length.
[  546.472730][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'.
[  546.604866][T17281] 8021q: adding VLAN 0 to HW filter on device bond12
[  546.838213][T17303] team0: left allmulticast mode
[  546.858195][T17303] team0: left promiscuous mode
[  546.863305][T17303] bond2: left promiscuous mode
[  546.869557][T17303] bridge0: port 1(team0) entered disabled state
[  546.894997][T17306] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  546.962768][T17303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  547.051729][T17306] team0: Device xfrm0 is of different type
[  547.075095][T17303] tipc: Enabled bearer <eth:team0>, priority 0
[  547.105930][T17310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  547.129521][T17310] tipc: Resetting bearer <eth:syzkaller0>
[  547.343418][T17317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2757'.
[  547.376486][T17317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  547.398601][T17317] syzkaller0: entered promiscuous mode
[  547.416150][T17317] syzkaller0: entered allmulticast mode
[  547.463550][T17332] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2760'.
[  547.558675][T17317] tipc: Resetting bearer <eth:syzkaller0>
[  547.669142][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2762'.
[  547.773091][T17316] tipc: Resetting bearer <eth:syzkaller0>
[  547.842481][T17316] tipc: Disabling bearer <eth:syzkaller0>
[  547.868298][T17350] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  547.889548][T17350] netlink: 'syz.0.2763': attribute type 13 has an invalid length.
[  547.910726][T17350] netlink: 'syz.0.2763': attribute type 17 has an invalid length.
[  547.955608][T17354] xt_limit: Overflow, try lower: 324382443/0
[  548.060004][T17350] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.069762][T17350] 8021q: adding VLAN 0 to HW filter on device team0
[  548.170221][T17370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2767'.
[  548.185841][T17350] batadv_slave_1: left promiscuous mode
[  548.204982][T17350] veth1_vlan: left promiscuous mode
[  548.212256][T17350] veth0_vlan: left promiscuous mode
[  548.219840][T17350] veth0_vlan: entered promiscuous mode
[  548.235026][T17350] veth1_vlan: entered promiscuous mode
[  548.247523][T17350] veth0_macvtap: left promiscuous mode
[  548.266622][T17350] veth0_macvtap: entered promiscuous mode
[  548.289491][T17350] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  548.302996][T17350] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  548.316221][T17350] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  548.330322][T17350] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  548.344612][T17350] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  548.368542][T17360] 8021q: VLANs not supported on vcan0
[  548.424038][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.431449][   T14] bridge0: port 1(bridge_slave_0) entered listening state
[  548.464824][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.472203][   T14] bridge0: port 2(bridge_slave_1) entered listening state
[  548.520398][T11999] tipc: Node number set to 2339473579
[  548.544520][ T6286] xfrm0 speed is unknown, defaulting to 1000
[  548.544552][ T7074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.550754][ T6286] syz0: Port: 1 Link ACTIVE
[  548.564418][ T7074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.612822][ T7074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.622283][ T6285] xfrm0 speed is unknown, defaulting to 1000
[  548.629532][ T7074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.072782][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'.
[  549.100668][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'.
[  549.138353][T17397] x_tables: ip6_tables: mh match: only valid for protocol 135
[  549.264974][T17406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2778'.
[  549.472368][T17418] netlink: 'syz.1.2782': attribute type 1 has an invalid length.
[  549.505842][T17418] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2782'.
[  549.517436][T17411] bond9 (unregistering): Released all slaves
[  549.914524][T17427] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2785'.
[  551.315640][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'.
[  551.581282][T17487] xfrm0 speed is unknown, defaulting to 1000
[  551.763846][T17505] xt_hashlimit: size too large, truncated to 1048576
[  551.860688][T17508] syzkaller0: entered promiscuous mode
[  551.872353][T17508] syzkaller0: entered allmulticast mode
[  551.903827][T17506] syzkaller1: entered allmulticast mode
[  552.049528][T17513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2803'.
[  552.075924][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2802'.
[  552.326388][T17520] syzkaller0: entered promiscuous mode
[  552.332871][T17520] syzkaller0: entered allmulticast mode
[  552.737052][T17536] __nla_validate_parse: 3 callbacks suppressed
[  552.737079][T17536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2808'.
[  552.805780][T17536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2808'.
[  553.331281][T17564] netlink: 524 bytes leftover after parsing attributes in process `syz.2.2816'.
[  553.390966][T17570] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002
[  553.503744][T17570] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.511498][T17570] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.598118][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2822'.
[  553.836151][T17582] 8021q: adding VLAN 0 to HW filter on device bond9
[  553.851970][T17586] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2821'.
[  553.900337][ T6264] xfrm0 speed is unknown, defaulting to 1000
[  553.911808][ T9837] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.936867][ T9837] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.949386][ T6264] syz0: Port: 1 Link DOWN
[  553.987443][T17584] syzkaller1: entered promiscuous mode
[  554.018474][T17584] syzkaller1: entered allmulticast mode
[  554.042579][ T9837] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.074453][ T9837] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.111707][ T6286] xfrm0 speed is unknown, defaulting to 1000
[  554.396304][T17617] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2828'.
[  554.438074][T17617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2828'.
[  554.566161][T17631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2832'.
[  554.942237][T17643] netlink: 'syz.0.2834': attribute type 1 has an invalid length.
[  554.967190][T17642] netlink: 'syz.0.2834': attribute type 1 has an invalid length.
[  555.007523][T17643] 8021q: adding VLAN 0 to HW filter on device bond6
[  555.017028][T17643] 8021q: VLANs not supported on ip6_vti0
[  555.029292][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'.
[  555.029603][T17647] 8021q: VLANs not supported on ip6_vti0
[  555.203183][T17657] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2837'.
[  555.381538][T17661] tipc: Resetting bearer <eth:batadv0>
[  555.581705][T17661] vlan0: left promiscuous mode
[  555.995451][T17682] netlink: 'syz.0.2843': attribute type 1 has an invalid length.
[  556.510604][T17688] netlink: 'syz.1.2845': attribute type 1 has an invalid length.
[  556.551315][T17661] vti0: left allmulticast mode
[  556.594801][ T9842] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  556.626382][ T9842] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0
[  556.657159][ T9842] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.669024][ T9842] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  556.706044][ T9842] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  556.728959][ T9842] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0
[  556.766392][ T9842] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.808275][ T9842] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  556.916740][T17688] bond13: entered promiscuous mode
[  556.922369][T17688] bond13: entered allmulticast mode
[  556.928555][T17688] 8021q: adding VLAN 0 to HW filter on device bond13
[  556.937235][ T9842] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  556.948186][ T9842] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0
[  556.957351][ T9842] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  556.966846][ T9842] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  557.622921][T17717] netlink: 'syz.0.2851': attribute type 33 has an invalid length.
[  557.673634][T17723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  557.942243][T17725] syzkaller0: entered promiscuous mode
[  557.948985][T17725] syzkaller0: entered allmulticast mode
[  558.193453][T17738] __nla_validate_parse: 5 callbacks suppressed
[  558.193472][T17738] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2857'.
[  558.211537][T17738] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2857'.
[  558.792241][T17771] netlink: 'syz.2.2866': attribute type 13 has an invalid length.
[  558.875281][T17785] SET target dimension over the limit!
[  558.895976][T17785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2866'.
[  559.958097][T17729] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  561.726671][T17785] bond_slave_0: entered promiscuous mode
[  561.737195][T17785] bond_slave_0: entered allmulticast mode
[  561.751636][T17772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  562.292135][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2877'.
[  562.321175][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2877'.
[  562.362967][T17814] netlink: 'syz.2.2876': attribute type 5 has an invalid length.
[  562.399777][T17814] netlink: 'syz.2.2876': attribute type 9 has an invalid length.
[  562.428779][T17814] netlink: 'syz.2.2876': attribute type 7 has an invalid length.
[  562.475537][T17812] xfrm0 speed is unknown, defaulting to 1000
[  563.650634][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  563.664489][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  563.675169][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  563.683551][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  563.695483][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  563.763406][T17866] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2885'.
[  563.819639][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'.
[  563.848612][T17813] xfrm0 speed is unknown, defaulting to 1000
[  565.208257][T17864] xfrm0 speed is unknown, defaulting to 1000
[  565.392713][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'.
[  565.460009][T17921] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2893'.
[  565.706388][T17863] xfrm0 speed is unknown, defaulting to 1000
[  565.720318][ T5636] Bluetooth: hci5: command tx timeout
[  566.062997][T17918] xfrm0 speed is unknown, defaulting to 1000
[  566.165016][T17939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2897'.
[  567.716758][T17863] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.724521][T17863] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.732469][T17863] bridge_slave_0: entered allmulticast mode
[  567.740891][T17863] bridge_slave_0: entered promiscuous mode
[  567.768334][T17863] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.779262][T17863] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.804348][ T5636] Bluetooth: hci5: command tx timeout
[  567.812640][T17863] bridge_slave_1: entered allmulticast mode
[  567.830748][T17863] bridge_slave_1: entered promiscuous mode
[  567.910376][T17863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.941834][T17863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.134514][T17863] team0: Port device team_slave_0 added
[  568.143786][T17863] team0: Port device team_slave_1 added
[  568.187047][T17863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.194564][T17863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.221392][T17863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.235923][T17863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.243161][T17863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.285615][T17863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.409150][T17863] hsr_slave_0: entered promiscuous mode
[  568.416228][T17863] hsr_slave_1: entered promiscuous mode
[  569.234556][T17863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  569.266922][T17863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.431154][T18003] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2908'.
[  569.521920][T17863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  569.533189][T17863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.791480][T18021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2911'.
[  569.815979][T17863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  569.839385][T17863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.878095][ T5636] Bluetooth: hci5: command tx timeout
[  569.985882][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'.
[  570.022348][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2917'.
[  570.093409][T17863] netdevsim netdevsim2 
€Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.119400][T17863] netdevsim netdevsim2 
€Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.153576][T18034] tipc: Disabling bearer <eth:batadv0>
[  570.185462][T18042] ip6tnl0: entered promiscuous mode
[  570.202327][T18042] ip6tnl0: entered allmulticast mode
[  570.436332][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'.
[  570.630576][T18060] bridge6: entered promiscuous mode
[  570.649691][T18060] bridge6: entered allmulticast mode
[  570.662826][T18060] team0: Device bridge6 is of different type
[  570.827316][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'.
[  570.846235][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'.
[  570.932131][T18072] bond14: entered allmulticast mode
[  570.948764][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'.
[  570.959445][T17863] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  570.999460][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  571.068217][T17863] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  571.112491][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  571.131043][T17863] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  571.156916][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  571.176466][T17863] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  571.206218][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  571.468808][T17863] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.517036][T17863] 8021q: adding VLAN 0 to HW filter on device team0
[  571.555631][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.562919][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.603794][T18112] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2936'.
[  571.629902][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.637178][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.661191][T18112] team0 (unregistering): Port device gtp1 removed
[  571.959212][ T5636] Bluetooth: hci5: command tx timeout
[  572.652218][T17863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  572.827005][T18174] sctp: [Deprecated]: syz.3.2955 (pid 18174) Use of struct sctp_assoc_value in delayed_ack socket option.
[  572.827005][T18174] Use struct sctp_sack_info instead
[  572.854415][T17863] veth0_vlan: entered promiscuous mode
[  572.864663][T18178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2953'.
[  572.930502][T17863] veth1_vlan: entered promiscuous mode
[  573.120145][T17863] veth0_macvtap: entered promiscuous mode
[  573.220831][T18198] netlink: 'syz.0.2959': attribute type 1 has an invalid length.
[  573.251648][T17863] veth1_macvtap: entered promiscuous mode
[  573.386882][T17863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  573.480177][T18196] vlan0: entered promiscuous mode
[  573.498025][T18196] bond0: entered promiscuous mode
[  573.538292][T17863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  573.616868][T18208] tipc: Enabled bearer <eth:team0>, priority 0
[  573.653668][   T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.664367][   T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.700804][   T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.730216][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.861454][T18223] IPVS: length: 73 != 8
[  573.883136][T18223] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  574.179898][T18226] bond10: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  574.224337][T18226] bond10 (unregistering): Released all slaves
[  574.590390][T18241] __nla_validate_parse: 5 callbacks suppressed
[  574.590413][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'.
[  574.749888][T18244] bond16: Unable to set down delay as MII monitoring is disabled
[  574.790199][T18244] bond16 (unregistering): Released all slaves
[  574.915093][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.945781][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.043830][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  575.068400][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  575.259862][T18263] netlink: 'syz.3.2975': attribute type 1 has an invalid length.
[  575.341328][T18265] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.2977'.
[  575.384713][T18265] netlink: 'syz.1.2977': attribute type 2 has an invalid length.
[  575.415033][T18264] nbd: nbd0 already in use
[  575.458503][T18263] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2975'.
[  575.646227][T18265] lo: entered promiscuous mode
[  575.655279][T18265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  576.160390][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  576.172797][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  576.196373][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  576.211289][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  576.220447][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  576.899464][T18295] xfrm0 speed is unknown, defaulting to 1000
[  577.664761][   T14] vlan3: left allmulticast mode
[  577.670336][   T14] geneve0: left allmulticast mode
[  577.680138][   T14] bridge0: port 1(vlan3) entered disabled state
[  577.783765][   T14] bond9 (unregistering): (slave ip6gre2): Releasing backup interface
[  578.017068][   T14] bond11 (unregistering): (slave bond0): Releasing backup interface
[  578.036465][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  578.052317][   T14] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[  578.062691][   T14] bond0 (unregistering): Released all slaves
[  578.076635][   T14] bond1 (unregistering): Released all slaves
[  578.093406][   T14] bond2 (unregistering): Released all slaves
[  578.112107][   T14] bond3 (unregistering): Released all slaves
[  578.137540][   T14] bond4 (unregistering): (slave veth7): Removing an active aggregator
[  578.149354][   T14] bond4 (unregistering): (slave veth7): Releasing backup interface
[  578.163163][   T14] bond4 (unregistering): Released all slaves
[  578.182253][   T14] bond5 (unregistering): Released all slaves
[  578.206246][   T14] bond6 (unregistering): Released all slaves
[  578.218805][T18264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  578.232678][   T14] bond7 (unregistering): Released all slaves
[  578.264695][   T14] bond8 (unregistering): Released all slaves
[  578.305603][ T5636] Bluetooth: hci4: command tx timeout
[  578.365150][   T14] bond9 (unregistering): Released all slaves
[  578.436605][   T14] bond10 (unregistering): Released all slaves
[  578.504105][   T14] bond11 (unregistering): Released all slaves
[  578.541782][   T14] bond12 (unregistering): Released all slaves
[  578.553905][T18337] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2983'.
[  578.615543][   T14] bond13 (unregistering): Released all slaves
[  578.680101][   T14] bond14 (unregistering): Released all slaves
[  578.705864][   T14] bond15 (unregistering): Released all slaves
[  579.110087][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2989'.
[  579.148841][T18363] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  579.182309][   T14] tipc: Left network mode
[  579.528245][T18376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2992'.
[  579.998389][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2996'.
[  580.358720][ T5636] Bluetooth: hci4: command tx timeout
[  580.410502][T18415] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2999'.
[  580.519903][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[  580.541140][T18295] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.572125][T18295] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.607855][T18295] bridge_slave_0: entered allmulticast mode
[  580.635523][T18295] bridge_slave_0: entered promiscuous mode
[  580.679623][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'.
[  580.722175][T18295] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.738054][T18295] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.753328][T18295] bridge_slave_1: entered allmulticast mode
[  580.782961][T18295] bridge_slave_1: entered promiscuous mode
[  580.844659][T18437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'.
[  581.026683][T18295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.066204][T18295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.413899][T18295] team0: Port device team_slave_0 added
[  581.453606][T18295] team0: Port device team_slave_1 added
[  581.745133][T18295] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.767879][T18295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  581.814870][T18295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.827153][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'.
[  581.944745][   T14] hsr_slave_0: left promiscuous mode
[  581.955427][   T14] hsr_slave_1: left promiscuous mode
[  581.967355][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.999878][   T14] batman_adv: batadv0: Removing interface: dummy0
[  582.007873][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'.
[  582.259418][T18484] netlink: 'syz.3.3011': attribute type 1 has an invalid length.
[  582.313484][T18493] netlink: 'syz.3.3011': attribute type 10 has an invalid length.
[  582.334501][T18491] netlink: 'syz.3.3011': attribute type 10 has an invalid length.
[  582.374312][T18491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3011'.
[  582.377858][T18493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3011'.
[  582.438224][ T5636] Bluetooth: hci4: command tx timeout
[  582.854494][T18295] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.861832][T18295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  582.889049][T18295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  582.923731][T18484] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  582.931054][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2
[  583.106667][T18295] hsr_slave_0: entered promiscuous mode
[  583.143130][T18295] hsr_slave_1: entered promiscuous mode
[  583.168721][T18295] debugfs: 'hsr0' already exists in 'hsr'
[  583.189617][T18295] Cannot create hsr debugfs directory
[  583.901621][   T14] IPVS: stop unused estimator thread 0...
[  584.006488][T18536] netlink: 'syz.4.3020': attribute type 5 has an invalid length.
[  584.325107][T18547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3022'.
[  584.517861][ T5636] Bluetooth: hci4: command tx timeout
[  584.862437][T18572] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  584.881750][T18571] vlan0: entered promiscuous mode
[  584.970498][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'.
[  585.034419][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3028'.
[  585.164329][T18578] vlan1: entered allmulticast mode
[  585.169782][T18578] bridge6: entered allmulticast mode
[  585.184250][T18578] bridge6: port 1(erspan0) entered blocking state
[  585.192392][T18578] bridge6: port 1(erspan0) entered disabled state
[  585.199664][T18578] erspan0: entered allmulticast mode
[  585.207614][T18578] erspan0: entered promiscuous mode
[  585.400637][T18593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3033'.
[  585.515602][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'.
[  585.534772][T18597] netlink: 'syz.4.3034': attribute type 5 has an invalid length.
[  585.544327][T18597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3034'.
[  585.585952][T18603] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3035'.
[  585.617416][T18597] geneve5: entered promiscuous mode
[  585.628639][T18597] geneve5: entered allmulticast mode
[  585.665595][ T1179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 33717 - 0
[  585.699920][ T1179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 33717 - 0
[  585.715995][ T1179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 33717 - 0
[  585.750229][T18295] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  585.773870][T18295] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  585.792397][T18295] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  585.820642][T18295] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  585.829493][T18295] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  585.843807][T18295] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  585.862934][T18295] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  586.019121][T18295] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  586.251185][T18626] netlink: 'syz.0.3038': attribute type 9 has an invalid length.
[  586.555192][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  586.639725][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'.
[  586.705358][T18295] 8021q: adding VLAN 0 to HW filter on device bond0
[  586.800833][T18295] 8021q: adding VLAN 0 to HW filter on device team0
[  586.831867][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.839128][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  586.906994][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.914267][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.965821][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'.
[  588.138898][T18696] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3050'.
[  588.594509][T18295] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.752222][T18295] veth0_vlan: entered promiscuous mode
[  588.811089][T18295] veth1_vlan: entered promiscuous mode
[  588.940145][T18295] veth0_macvtap: entered promiscuous mode
[  588.967554][T18295] veth1_macvtap: entered promiscuous mode
[  589.035484][T18295] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.076935][T18295] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.205882][T18748] bond7 (unregistering): Released all slaves
[  589.237131][T18751] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  589.271679][   T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.299548][   T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  589.331850][ T9837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  589.355827][ T9837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.651294][ T9842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.685646][ T9842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.711346][T18759] xfrm0 speed is unknown, defaulting to 1000
[  589.818779][T18766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3063'.
[  589.859167][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.890496][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.037626][T18776] xt_hashlimit: size too large, truncated to 1048576
[  590.770527][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3069'.
[  590.829090][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'.
[  591.016790][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  591.038483][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  591.061946][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  591.074202][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  591.089063][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  591.403705][T18830] IPVS: rr: FWM 3 0x00000003 - no destination available
[  591.414136][ T6285] IPVS: starting estimator thread 0...
[  591.517866][T18831] IPVS: using max 27 ests per chain, 64800 per kthread
[  591.725103][T18841] netlink: 'syz.3.3075': attribute type 1 has an invalid length.
[  591.995880][T18841] bond20: (slave bridge3): making interface the new active one
[  592.043416][T18841] bond20: (slave bridge3): Enslaving as an active interface with an up link
[  592.332685][T18816] xfrm0 speed is unknown, defaulting to 1000
[  592.642410][T18864] bridge4: entered promiscuous mode
[  592.685831][T18864] bridge4: entered allmulticast mode
[  592.720801][T18870] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  592.840718][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3078'.
[  593.158233][ T5636] Bluetooth: hci2: command tx timeout
[  593.563665][T18900] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  593.605434][T18900] bond1 (unregistering): Released all slaves
[  593.878295][   T31] INFO: task kworker/0:1H:1644 blocked for more than 143 seconds.
[  593.902763][   T31]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  593.923584][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  593.966681][   T31] task:kworker/0:1H    state:D stack:25960 pid:1644  tgid:1644  ppid:2      task_flags:0x4208060 flags:0x00080000
[  594.008896][   T31] Workqueue: kblockd blk_mq_requeue_work
[  594.045849][   T31] Call Trace:
[  594.062000][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3088'.
[  594.074052][   T31]  <TASK>
[  594.086769][   T31]  __schedule+0x17d9/0x56c0
[  594.111461][   T31]  ? __lock_acquire+0x683/0x2cf0
[  594.132003][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  594.163802][   T31]  ? __pfx___schedule+0x10/0x10
[  594.184336][   T31]  ? schedule+0x90/0x2b0
[  594.209083][   T31]  schedule+0x164/0x2b0
[  594.223456][   T31]  schedule_timeout+0x152/0x2c0
[  594.260611][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  594.303980][   T31]  ? __pfx_process_timeout+0x10/0x10
[  594.345251][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  594.389617][   T31]  ? prepare_to_wait_event+0x436/0x480
[  594.420540][   T31]  nbd_queue_rq+0x889/0x1150
[  594.444849][   T31]  ? __pfx_nbd_queue_rq+0x10/0x10
[  594.469976][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  594.497408][   T31]  blk_mq_dispatch_rq_list+0x499/0x1990
[  594.519553][   T31]  ? sbitmap_get+0x229/0x390
[  594.527464][   T31]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  594.548681][   T31]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  594.554681][   T31]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  594.570169][   T31]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  594.589902][   T31]  ? blk_mq_hw_queue_need_run+0x134/0x630
[  594.598773][   T31]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  594.609474][   T31]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  594.630553][   T31]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  594.647997][   T31]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  594.659071][   T31]  blk_mq_run_hw_queue+0x348/0x4f0
[  594.682694][   T31]  blk_mq_run_hw_queues+0x268/0x3f0
[  594.707544][   T31]  blk_mq_requeue_work+0x703/0x760
[  594.726568][   T31]  ? __pfx_blk_mq_requeue_work+0x10/0x10
[  594.747794][   T31]  ? rcu_is_watching+0x15/0xb0
[  594.754163][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  594.767932][   T31]  process_scheduled_works+0xa8e/0x14e0
[  594.778820][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  594.793380][   T31]  ? assign_work+0x3cf/0x5d0
[  594.807247][   T31]  worker_thread+0xa47/0xfb0
[  594.812527][   T31]  ? __kthread_parkme+0x71/0x1f0
[  594.819069][   T31]  kthread+0x388/0x470
[  594.823230][   T31]  ? __pfx_worker_thread+0x10/0x10
[  594.828863][   T31]  ? __pfx_kthread+0x10/0x10
[  594.833545][   T31]  ret_from_fork+0x514/0xb70
[  594.838641][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  594.843875][   T31]  ? __switch_to+0xc89/0x1420
[  594.854520][   T31]  ? __pfx_kthread+0x10/0x10
[  594.865451][   T31]  ret_from_fork_asm+0x1a/0x30
[  594.877526][   T31]  </TASK>
[  594.885017][   T31] 
[  594.885017][   T31] Showing all locks held in the system:
[  594.932520][   T31] 1 lock held by khungtaskd/31:
[  594.965665][   T31]  #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  595.039271][   T31] 4 locks held by kworker/0:1H/1644:
[  595.055653][   T31]  #0: ffff8880206d3940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  595.103420][   T31]  #1: ffffc90006977c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  595.154728][   T31]  #2: ffff888026df4518 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  595.190868][   T31]  #3: ffff888026fee6b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[  595.211442][   T31] 2 locks held by getty/5381:
[  595.226270][   T31]  #0: ffff88803575e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  595.238362][ T5636] Bluetooth: hci2: command tx timeout
[  595.257626][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  595.303716][   T31] 3 locks held by kworker/0:11/6264:
[  595.330947][   T31]  #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  595.387945][   T31]  #1: ffffc900062f7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  595.414942][   T31]  #2: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  595.447743][   T31] 4 locks held by kworker/1:9/6278:
[  595.467852][   T31] 1 lock held by udevd/12626:
[  595.476079][   T31]  #0: ffff888026e74350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  595.497993][   T31] 2 locks held by syz-executor/17863:
[  595.507970][   T31]  #0: ffff8880790d8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  595.537972][   T31]  #1: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  595.559370][   T31] 1 lock held by syz-executor/18816:
[  595.575912][   T31] 
[  595.587327][   T31] =============================================
[  595.587327][   T31] 
[  595.639434][   T31] NMI backtrace for cpu 1
[  595.639457][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  595.639482][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  595.639495][   T31] Call Trace:
[  595.639503][   T31]  <TASK>
[  595.639513][   T31]  dump_stack_lvl+0xe8/0x150
[  595.639546][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  595.639673][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  595.639714][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  595.639748][   T31]  sys_info+0x135/0x170
[  595.639771][   T31]  watchdog+0xfd7/0x1030
[  595.639826][   T31]  ? watchdog+0x1c7/0x1030
[  595.639866][   T31]  kthread+0x388/0x470
[  595.639890][   T31]  ? __pfx_watchdog+0x10/0x10
[  595.639927][   T31]  ? __pfx_kthread+0x10/0x10
[  595.639952][   T31]  ret_from_fork+0x514/0xb70
[  595.639980][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  595.640003][   T31]  ? __switch_to+0xc89/0x1420
[  595.640037][   T31]  ? __pfx_kthread+0x10/0x10
[  595.640062][   T31]  ret_from_fork_asm+0x1a/0x30
[  595.640106][   T31]  </TASK>
[  595.640113][   T31] Sending NMI from CPU 1 to CPUs 0:
[  595.752715][    C0] NMI backtrace for cpu 0
[  595.752734][    C0] CPU: 0 UID: 0 PID: 4974 Comm: syslogd Not tainted syzkaller #0 PREEMPT(full) 
[  595.752756][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  595.752767][    C0] RIP: 0033:0x7ff04b53a408
[  595.752788][    C0] Code: 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 5b <c3> 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff 0f
[  595.752805][    C0] RSP: 002b:00007fff8809a9d8 EFLAGS: 00000202
[  595.752822][    C0] RAX: 0000000000000049 RBX: 00007fff8809ab68 RCX: 00007ff04b53a407
[  595.752835][    C0] RDX: 00000000000000ff RSI: 000056541255f950 RDI: 0000000000000000
[  595.752847][    C0] RBP: 000056541255f910 R08: 0000000000000000 R09: 0000000000000000
[  595.752859][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000056541255f982
[  595.752871][    C0] R13: 0000000000000000 R14: 000056541255f950 R15: 00005653d7f01d98
[  595.752884][    C0] FS:  00007ff04b3eac80 GS:  0000000000000000
[  595.927956][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  595.934991][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  595.944223][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  595.954393][   T31] Call Trace:
[  595.957721][   T31]  <TASK>
[  595.960697][   T31]  vpanic+0x56c/0xa60
[  595.964711][   T31]  ? __pfx___schedule+0x10/0x10
[  595.969610][   T31]  ? __pfx_vpanic+0x10/0x10
[  595.974349][   T31]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  595.981020][   T31]  panic+0xc5/0xd0
[  595.984888][   T31]  ? __pfx_panic+0x10/0x10
[  595.989521][   T31]  ? preempt_schedule_common+0x82/0xd0
[  595.995029][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  596.000769][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  596.006963][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  596.013155][   T31]  watchdog+0x1030/0x1030
[  596.017535][   T31]  ? watchdog+0x1c7/0x1030
[  596.021996][   T31]  kthread+0x388/0x470
[  596.026096][   T31]  ? __pfx_watchdog+0x10/0x10
[  596.030810][   T31]  ? __pfx_kthread+0x10/0x10
[  596.035701][   T31]  ret_from_fork+0x514/0xb70
[  596.040330][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  596.045540][   T31]  ? __switch_to+0xc89/0x1420
[  596.050339][   T31]  ? __pfx_kthread+0x10/0x10
[  596.054959][   T31]  ret_from_fork_asm+0x1a/0x30
[  596.059888][   T31]  </TASK>
[  596.063550][   T31] Kernel Offset: disabled
[  596.068006][   T31] Rebooting in 86400 seconds..