last executing test programs:

20.827784596s ago: executing program 0 (id=5712):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x9a, 0x3, 0x1200, 0x1, 0x8, '\x00', 0x0, r0, 0x2, 0x3, 0x3}, 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={<r2=>r0, &(0x7f0000000080)='\x00', 0x2, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0xa4]}, {0xf, 0x4360, 0x1, 0x81}}, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x79})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@arena={0x21, 0x0, 0x0, 0x11, 0x400, r1, 0x8, '\x00', 0x0, r2, 0x0, 0x1, 0x4}, 0x50)
sendmsg$AUDIT_USER(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe8, 0x3ed, 0x10, 0x70bd27, 0x25dfdbfe, "f6d985775b3057c38b53ab96da13f0f4464db9ad5c8458237822c2147ee4d0c841aee3a5c1b344bd725cdb07e1b99fb686ef65b122268486c7b3506f0b1524e3092790068c08c5358d6a7d075a6d662fb47ffb336f65d8687a9131e2327e2c0c53e68e8af317d107c8eebb7cfc917a6319d3bb5b44d35077c1f3d960cb1bf947dcfd90e6effb8e1e1525f2af2523088fa0369cb8dd0d0452761084d64cb830481786a83fa32f1c7a00a2f715c71ab7afe4592474441fc03e8f5322d3bff8a811a71c4509d6b1b32e752ac36307bcf536f5fd72bd7da2217e", ["", "", "", ""]}, 0xe8}, 0x1, 0x0, 0x0, 0x400048c0}, 0x200040c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x20004840)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000740)={&(0x7f0000000580), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb4, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5446}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xb4}}, 0x8091)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4)
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200d5}, 0x20000001)
r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r2)
sendmsg$FOU_CMD_GET(r4, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r11, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x200448c0}, 0x4000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r2)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r2)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x5136ca26e33194db, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f80000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r10, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000cc0)={{r9}, "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"})
ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000001cc0)=0xa1)
getsockname$packet(r2, 0xfffffffffffffffc, &(0x7f0000001d00))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{r3, <r13=>0xffffffffffffffff}, &(0x7f0000001d40), &(0x7f0000001d80)=r2}, 0x20)
ioctl$VFAT_IOCTL_READDIR_SHORT(r9, 0x82307202, &(0x7f0000001e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_GETFSSYSFSPATH(r13, 0x80811501, &(0x7f0000002040)={0x80})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002200)={@map=r1, 0x36, 0x1, 0x10, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000021c0)=[0x0], <r14=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002540)={r2, 0xe0, &(0x7f0000002440)={0x0, <r15=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r16=>0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000022c0)=[0x0, 0x0, 0x0], &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000002340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002380), &(0x7f00000023c0), 0x8, 0x70, 0x8, 0x8, &(0x7f0000002400)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002240)={@fallback=r2, r2, 0x3a, 0x34, 0x0, @void, @void, @void, @value=r15, r14}, 0x20)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x6c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4)

20.422267344s ago: executing program 0 (id=5717):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004800018006000100020000000600040050000000080005000400000007000600727200000800080064000000140003007f0000010000000000000000000000000800050003000000"], 0x5c}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x800) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x5, 0x4)
ioctl$int_in(r3, 0x5452, &(0x7f0000000540)=0x3)
r5 = socket(0x10, 0x802, 0x0)
write(r5, &(0x7f0000000280)="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", 0xfc)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3)

19.405842668s ago: executing program 0 (id=5724):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x31, 0x9, 0x70bd2a, 0x0, {0x24}, [@nested={0xd, 0x1a, 0x0, 0x1, [@generic="e7", @typed={0x8, 0xfc, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x3, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x31, 0x9, 0x70bd2a, 0x0, {0x24}, [@nested={0xd, 0x1a, 0x0, 0x1, [@generic="e7", @typed={0x8, 0xfc, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async)

19.248307934s ago: executing program 0 (id=5725):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000d40), 0x8}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpid()
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d40100002d00070127bd700000000000017c00000c000280cbd30d11251c9a26ac01078008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000001400cd0000000000000000000000ffffe000000208000100", @ANYRES32=r3], 0x1d4}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@loopback}}, &(0x7f00000007c0)=0xe8)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000800)=<r5=>0x0)
r6 = getpid()
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002840)={&(0x7f00000015c0)={0x125c, 0x13, 0xa, 0x3, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x5}, [@nested={0xfc, 0xf0, 0x0, 0x1, [@generic="5ca3317d58e29fe9d26699", @typed={0x8, 0x13f, 0x0, 0x0, @pid=r3}, @generic="180abbcfea062c187cf4dcecb10facc2b4f953778212fa6e3b31f41ffd4a3bcfa9e5b0192c4bc9c6d1858ffc3cbcb17885b93597e2322987219dffcbb719895a0054904afb0f90128d7afd406271ce9665dc62c63efa44a44cdab7987cccad5e4a35939ece439212ee5de4162cf6cb2314cda399c8986eb4f7dcb8adfffc9438c1f47d48e1e7cad8ea958ef7ea77230327f4b537e8d601d7809a4b548c6277de688aaa6aa472ebdfe3b5c1961f922a054c4d9f4429383212fb28dd85b4b5279913f7d09240f465a4673ca4654d2a87", @generic="c7d21cf790379a67db4f", @nested={0x4, 0x94}, @typed={0x8, 0x9a, 0x0, 0x0, @fd=r1}]}, @nested={0x129, 0x115, 0x0, 0x1, [@generic="0cfaa20c850a8bff6acd147d246d501972b9b7181cc80956ba40847ed59f05a3053cd72100e056b4b7da1bfa0019334775fadd26def061b1b998afda6deeb48735b7a63eab8f3e70f042622ace7b8491a12dd45493f957ecc0bd8c7803f458aea9360fddddc79e8892d7813ffc5c3edc6e544ab0a41870461d611446a53b7d44c7a4a1d87642b820611bbb0d45072d2009a34afa8f3156c1779be49a2a6fbbef270ff547dc7c5d6f05573eafc43a90a926bb2fd2921c64883f4f48dd24d68a117b48c9d03d34e17fd15520043c4c8d26f9870f0d937fb2470f1b869eed18f67472fc0e6a86f2f712b0b66e708348f9601c5a820a3b7d033d6c", @typed={0x8, 0xa5, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x2c}, @typed={0x8, 0x64, 0x0, 0x0, @uid=r4}, @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x144}]}, @nested={0x1020, 0xf0, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xbe}, @typed={0x5, 0xc3, 0x0, 0x0, @str='\x00'}, @generic="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", @typed={0x8, 0x15e, 0x0, 0x0, @pid=r6}]}]}, 0x125c}, 0x1, 0x0, 0x0, 0x5d0b34b50a3af1ed}, 0x408c0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000010000000000000000000000711292000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94)

19.00824595s ago: executing program 0 (id=5726):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000060000000000000700000000020000000000001201000000002e5f00000030dc30"], 0x0, 0x3a}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xf, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18000000, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x2, 0x8, 0xc}], 0x10, 0x10001}, 0x94)

18.928812528s ago: executing program 0 (id=5729):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x40)
close(0x3)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x44, r4, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x8480)

12.591147263s ago: executing program 4 (id=5764):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', <r2=>0x0, 0x29, 0x8, 0x5, 0x4, 0x10, @remote, @remote, 0x7, 0x80, 0x6, 0xfffffff3}})
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x7, 0xffff, 0x3d, 0x500, 0x9, 0x18c0012, r2})
getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'dummy0\x00', @ifru_hwaddr=@multicast})

12.020385104s ago: executing program 4 (id=5767):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000006c0)="170000000a0001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'ip6gretap0\x00'}) (async)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'ip6gretap0\x00'})
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
close(r3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x64, 0x30, 0x300, 0x0, 0x35dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xe106, 0x5, 0x2, 0x9, 0xb3}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000001000011000000009500"/25], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000001000011000000009500"/25], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x24}, 0x94)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x200}) (async)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x200})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r6 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', <r7=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000480)={'veth1_to_hsr\x00', 0x800}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000480)={'veth1_to_hsr\x00', 0x800})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write(r5, &(0x7f0000000780), 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x83, &(0x7f00000007c0)={0x0, 0x8}, 0x8)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000800)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="4a0000001100766ef3e8245f05bf8d4d037ad763e42c01", 0x17}], 0x1}, 0x0)

11.381447372s ago: executing program 1 (id=5768):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000000400001"], 0x48)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f00000001c0)="335705d63fca", 0x0, 0x0, 0x0, 0xa, r1}, 0x38)
sendmsg$inet6(r0, &(0x7f00000023c0)={&(0x7f0000002400)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18}, 0x14040cd4)
socket$l2tp6(0xa, 0x2, 0x73) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000000400001"], 0x48) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f00000001c0)="335705d63fca", 0x0, 0x0, 0x0, 0xa, r1}, 0x38) (async)
sendmsg$inet6(r0, &(0x7f00000023c0)={&(0x7f0000002400)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18}, 0x14040cd4) (async)

10.93356199s ago: executing program 2 (id=5770):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'bbc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000009c0)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', 0x1})
sendmsg$kcm(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="89baa9997e725f0d61e9fd3ae64533b57981979fd4de81d14a539382a77ee3e794902c42bc7cc0dd54800cc1ae9a33046dd30937e92285a11f08de45e7b4f4e4557772602cc66a7f013897a9f35aabc01e7ca9b60e0f75566e2eb98b764101767e5f6262", 0x64}], 0x1}, 0x80)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000bc0)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x10040)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000c00)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028fffe0000950690786c010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1000ca90781000"], 0x0)
write$tun(r1, &(0x7f0000000b40)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffe45}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r6, &(0x7f0000000100)=[{{&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @loopback}}}], 0x20}}], 0x400000000000328, 0x20044000)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000440)={'TPROXY\x00'}, &(0x7f0000000480)=0x1e)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="7b06f8ff00000000850000008a00000079a1f8ff0000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.747639114s ago: executing program 1 (id=5771):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000001e00)={'icmp6\x00'}, &(0x7f0000001e40)=0x1e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00b150", @ANYRES16=r2, @ANYBLOB="000426bd7000fedbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040080)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001dc0)=@generic={&(0x7f0000001d80)='./file0\x00'}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000075000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x9, 0x1, 0x0, 0x5, 0x1, 0x3, [{0x0, 0x4}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000940)=""/224, 0x37, 0xe0, 0x1}, 0x28)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012801000000000000006176655f30000008f90300ac1414bb1400060070696d367265670000000000000000001400060076657468305f746f5f62617461647600"/82], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x80)
syz_emit_ethernet(0xbe, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d5786b4f843d8ff2885266d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0xe40, 0xe40, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073790400000000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000a80)={{0x6, @loopback, 0x15, 0x0, 'dh\x00', 0x12, 0x0, 0x76}, {@loopback, 0x15, 0x2, 0x1, 0x8}}, 0x44)
setsockopt(r10, 0x0, 0x489, &(0x7f0000000b00)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f0000010015000000000000000100"/68, 0x44)
getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=0x1000)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="3c00238005001d000100000008001c0006000000060002001a000000060018006a0000000600100002000000d1ce54e70000000005000e0004000000"], 0x58}}, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001e80), 0x4)

9.6237991s ago: executing program 1 (id=5772):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'sit0\x00', <r2=>0x0})
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004804) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x8, &(0x7f00000005c0)=r3, 0x4) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000640), 0x4) (async)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={@loopback={0xfec0ffffffffffff, 0x3fc}, 0x0, r2}) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_delneigh={0x3c, 0x1d, 0x1, 0x7ff, 0x25dfdbfe, {0x1c, 0x0, 0x0, r2, 0x20, 0xa0, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x3c}}, 0x20000040) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000200)=0xc72, 0x4) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r4) (async)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000380)={r4, r5, 0x4, 0x57, &(0x7f00000004c0)="f0a9ed3c8d909751f10867452c2cfdddd1865fdb9fe3053a848b347c5aab254701d29cfba704cac48ad6ea718749638ecf7a62d05461752875eee5efb1e56e1cbb6df19d4ff0885b5cd48819b8803911109e16ca4fc488", 0x6, 0x0, 0xfffd, 0x6, 0x7, 0x1, 0x6, 'syz0\x00'}) (async)
bind$unix(r4, &(0x7f0000000280)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000540)={'virt_wifi0\x00', @random="0100"}) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000100))

9.4899181s ago: executing program 3 (id=5773):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5)
sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="b4080000181500"/20, @ANYRES8=r0, @ANYBLOB="0000000000000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x40001, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)

9.373461575s ago: executing program 3 (id=5774):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x40241, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000b40), 0x171}}], 0x400000000000172, 0x4000000)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000001080)={'erspan0\x00', <r2=>0x0, 0x0, 0x700, 0x46, 0x81, {{0x16, 0x4, 0x0, 0x7, 0x58, 0x67, 0x0, 0x48, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x35, 0x3, 0x9, [{@broadcast, 0x9}, {@remote, 0x9}, {@local, 0x7}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xbd, 0x3, 0x4, [{@multicast1, 0x7fff}, {@multicast1, 0x4}, {@loopback, 0x1000}, {@remote, 0x766}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001100)={'syztnl1\x00', &(0x7f0000001140)={'syztnl0\x00', <r3=>0x0, 0x0, 0x9, 0x1, 0x7fff, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8000, 0x700, 0x9, 0x87e4}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf251100000028000180140002007663616e30000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="3800018008000300030000000800030003000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r2, @ANYBLOB="1406020067656e65766530000000000e35180cc935000000000008000100e14b59afec63a8ca46ae05d1c6af760311d3", @ANYRES32=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4049005}, 0x4000880)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001340), 0x0, 0x84001)
pipe(&(0x7f0000001380)={<r4=>0xffffffffffffffff})
write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000502010800020062f60100038109e0a9171e92b11851fc527383a54fd5820ea3079401ae67dfdaf2ef5afa338efc242ad8c081433c821cb5e4ceace7f279a5d19ba0d134d04abefa8972f6b0488fa1df58bd57adeafbf4cfe8419fc4e37026123b78e35e18b1daae5caf488690cd7734ee2702dbe27bad649ab514af29a5832723b4de7193ec35e7e0c9df494cdc7fe82eca13bb614d08bbddc548db638bc06509f0c377a5fb79a13b612151797c71b16f02e862eeb9a38f4b53d69f72048ac1cf9691b1e467fb9a3177466586fe52ab5e1d1551ca1af35d07227327c796d7fc7297840dba34a843"], 0x26)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r6, &(0x7f0000001440), 0x0, 0x8001, 0x80)
sendfile(r6, r5, 0x0, 0xf03a0005)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x16, 0x14, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x19, 0x0, 0x0, &(0x7f0000001640)='GPL\x00', 0xf, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@multicast2, @in6=@private2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xf, 0xc, &(0x7f00000018c0)=ANY=[@ANYRESDEC], &(0x7f0000001900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.791059044s ago: executing program 3 (id=5775):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000680)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014f194e20"], 0x9e)

3.720620687s ago: executing program 4 (id=5776):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x19, 0xe, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xc}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x800}, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}, "3e19f47348000000"}}}, 0x3c)

3.719733649s ago: executing program 1 (id=5777):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r5, &(0x7f0000000b80)={&(0x7f0000000740)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/159, 0x9f}, {&(0x7f0000000940)=""/130, 0x82}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x4, &(0x7f0000000b40)=""/59, 0x3b}, 0x40000162)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r8)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c001000", @ANYRES16=r9, @ANYBLOB="01002cbd700003dcdf25040000001400060000000000000000000000000000000001140005000000000000000000000000000000000008000400030000000800020003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076746268000000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x8000)
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd000012000000000000000000000000000000452700dc0068000006029078ffffffffe0004e1387ee9078e0000002a00c81342911"], 0xf2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x13, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000109500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000f80)='GPL\x00', 0x2, 0xde, &(0x7f0000000fc0)=""/222}, 0x94)

3.536338323s ago: executing program 2 (id=5778):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="11980400419804001800128008000100736974000c00028008000100283a15de62f18c855d40f80ea4", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6b, r2})

3.382745219s ago: executing program 3 (id=5779):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00'}, 0x48)

3.091690765s ago: executing program 3 (id=5780):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0xfffffffd)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x2, 0x5, 0x927, 0x18eaa72d}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008084}, 0x0)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000140)=0xfffffffa)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x42}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000001)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000180)={0x1, &(0x7f0000010080)=[{0x6, 0x0, 0xff, 0x8}]})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000200)={'wg1\x00', <r4=>0x0})
setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000240)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, r4}, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x40, r6, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0xffffffffffffffed, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0)
close(0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0xfffffffd) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x2, 0x5, 0x927, 0x18eaa72d}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008084}, 0x0) (async)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000140)=0xfffffffa) (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x42}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000001) (async)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000180)={0x1, &(0x7f0000010080)=[{0x6, 0x0, 0xff, 0x8}]}) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000200)={'wg1\x00'}) (async)
setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000240)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, r4}, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x40, r6, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0xffffffffffffffed, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) (async)
close(0x3) (async)

3.064412585s ago: executing program 2 (id=5781):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delnexthop={0x30, 0x69, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delnexthop={0x30, 0x69, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24040004)
recvmmsg(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000001600)=[{&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001480)=""/182, 0xb6}, {&(0x7f0000001540)=""/157, 0x9d}], 0x6, &(0x7f0000001680)=""/73, 0x49}, 0x20004000}, {{&(0x7f0000001700)=@can, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001780)=""/11, 0xb}], 0x1, &(0x7f0000001800)=""/70, 0x46}, 0xd1}, {{&(0x7f0000001880)=@qipcrtr, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)=""/128, 0x80}, {&(0x7f0000001980)=""/195, 0xc3}, {&(0x7f0000001a80)=""/70, 0x46}, {&(0x7f0000001b00)=""/160, 0xa0}, {&(0x7f0000001bc0)=""/193, 0xc1}, {&(0x7f0000001cc0)=""/41, 0x29}], 0x6, &(0x7f0000001d80)=""/188, 0xbc}, 0x2}, {{&(0x7f0000001e40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001ec0)=""/11, 0xb}, {&(0x7f0000001f00)=""/64, 0x40}, {&(0x7f0000001f40)=""/84, 0x54}, {&(0x7f0000001fc0)=""/18, 0x12}, {&(0x7f0000002000)=""/104, 0x68}, {&(0x7f0000002080)=""/82, 0x52}], 0x6, &(0x7f0000002180)=""/238, 0xee}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002280)=""/89, 0x59}, {&(0x7f0000002300)=""/199, 0xc7}, {&(0x7f0000002400)=""/56, 0x38}, {&(0x7f0000002440)=""/61, 0x3d}, {&(0x7f0000002480)=""/217, 0xd9}, {&(0x7f0000002580)=""/115, 0x73}], 0x6, &(0x7f0000002680)=""/194, 0xc2}, 0x54}, {{&(0x7f0000002780)=@generic, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/214, 0xd6}, {&(0x7f0000002900)=""/124, 0x7c}, {&(0x7f0000002980)=""/72, 0x48}], 0x3, &(0x7f0000002a40)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003a40)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003ac0)=""/126, 0x7e}, {&(0x7f0000003b40)=""/21, 0x15}, {&(0x7f0000003b80)=""/235, 0xeb}], 0x3, &(0x7f0000003cc0)=""/4096, 0x1000}}], 0x7, 0x100, &(0x7f0000004e80)={0x77359400})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004f00), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000004f40)={'wpan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000004f80)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000004f80)={'wpan0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000004fc0)={'wpan1\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000005080)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005040)={&(0x7f0000005000)={0x2c, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x2c}}, 0x4) (async)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000005080)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005040)={&(0x7f0000005000)={0x2c, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x2c}}, 0x4)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005100), r1)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000051c0)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005180)={&(0x7f0000005140)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4000854)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000005240), r0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000005340)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005300)={&(0x7f0000005280)={0x4c, r9, 0x14, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x8010) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000005340)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005300)={&(0x7f0000005280)={0x4c, r9, 0x14, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x8010)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000005440)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005400)={&(0x7f00000053c0)={0x20, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000054c0), r3)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000055c0)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005580)={&(0x7f0000005500)={0x5c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000005640)={'wpan1\x00', <r11=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000005740)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005700)={&(0x7f0000005680)={0x78, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) (async)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000005740)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005700)={&(0x7f0000005680)={0x78, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000020}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000005840)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x3c, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000005840)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x3c, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000005880)='\\$\\}@\x00', 0x6) (async)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000005880)='\\$\\}@\x00', 0x6)
ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f00000058c0)="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")
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000005a00)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000005a00)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000005b00)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005ac0)={&(0x7f0000005a40)={0x44, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x1)
getsockopt$vsock(r0, 0x28, 0x1, &(0x7f0000005b40), &(0x7f0000005b80)=0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005bc0), r3)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000005cc0)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005c80)={&(0x7f0000005c40)={0x40, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008046}, 0x840) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000005cc0)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005c80)={&(0x7f0000005c40)={0x40, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008046}, 0x840)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000005dc0)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005d80)={&(0x7f0000005d40)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20008001)

2.895247652s ago: executing program 4 (id=5782):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
unshare(0x22020600)
syz_emit_ethernet(0x92, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5c, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x18}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x2}]}], "bd33a7ae"}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f00000002c0)={0x488, 0x3b, 0x300, 0x70bd2c, 0x25dfdbff, {0x16}, [@nested={0x4, 0x107}, @nested={0x1a4, 0xa8, 0x0, 0x1, [@generic="b18cd01dfaae44dea8ecdaa631c2e166d1ace23af8143e068ce467fd689bbe3211e14e99216e708874e1d70c423a38de4f85fc3b7430d4b47f8f38a75ed88ed1bbb189c5e44894b4c9913ce7d445c05ac2ac58306db2", @generic="5d241994e2346e973e58d1ab88483d99f7471690c41ce131255a430db76c264d568ef7500960683e2bd22f0241410f5c6a8e11bf3782fb1fb4121ccd66b206994ae2e0b625238bed641a529317c768b45c04ee2b648f17fc70ef26b34825c155991d20d84e6e99581da8b4fbc6d5c12ed23af8849cf8ee05dac24ea6397da82f49a8945bb3b5d040f5bea4a601ff17f3a308b5", @generic="8b8a52a61abff12d4a6109e77ca1493a9d13cf1fce8211c3c40e2c8c42108ff4199076a8c0558727ab979961d8b5e6be1cb9ecb19ef4da97a5d152251ae1a97326a41292d668d836953bcf36c90ea98ea314562154ef43bdf78baf14c4f646a5ceaa4b0118a47b4490ccee0bd3ed3279ba4d7302578dfc87fb93b0e175ee7dca10d3380b2683293a92649211d86546e48130c680997a652171bba158", @generic="8b5cdf8eb066d33be86ea5", @nested={0x4, 0x168}, @typed={0x5, 0x155, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x4c}]}, @nested={0x2c9, 0x140, 0x0, 0x1, [@generic="9007707286a436b6d5f64b117e344c6a0727aacd0c055d4345cf5317e2f08854748a62c92a1cd3c3b3c874a418269485273f916aa8f05799d29d9f392b5617dbf66ba2066115c1987dfca98c83a0a8458deff1c1df86adc646afe4cbd8d0984096efe5507832a92ea70cc982f91d2a8a87fe820a88f1ce664be961439ed47218be15899ab3d2341cf5c8845a14b39c575b7a68fbc6e85aec7da6943c95cf994b662fadfb6bcb0314e0faae4910acafdbf121d12d95f4b1ae733c9e53129d2534062d01f5c94e1aa000f448b608a0dc460d685395ae67efb200e2b3be237649a3ecb310be4f2d55c519529a65220beb6391d08291943929", @generic="a1bbd1be979fcd5716b5eec7609a80bd84ab34af1d2922623673b4c8b3932163070a49002f6b1e19447733be0cf68d27b00a3d057c76b98eddf5e0f184871fb8b79f08a83e91f6176644b2cdb2ad33f0be778799f070f99f209dcc37d6ef6bb8f42e287b8fae1f4f3d98fa5c2edd10ef44407e8da0d83554948b52784a9cd1afc16ffe95a9b5dd2e1841fcb53b2f703265028cd97286e8dee40cab77964349810a95e909cd2dcd033bbd83ed94f185de7f", @nested={0x4, 0x11b}, @generic="8ff284d253ee84f83905cc89ec7daa05adfda14139", @generic="f1388646a55015b83ffcad6e86910f81f711f3f8bba00bb5a1f19d309616ef0a9dbbd629e875fbc788e2ed1cbe9b9cf706bacfcc8e94648a0602b640c8654df0901b0f381c3bd8ed95b7c00cfcb7d3c909ae9d36595e0b41bdf92a418a4b70b65a0d657a3a775e6887860958f4279f9bcee2494cee124ac55955764f3b649e4ec2", @nested={0x4, 0xc3}, @generic="6a11a64202eeabe5b6ca726275e596d5ca1c499d57a074ac6307263107e21563981ebea7253bfd654654da96931bd0f46e98c032544f0ecd0f6b9059a4b569f18ae446226c0f1440f20e8e35914e5a1cbec41b4430b4daa169aa571abb9482421d6846d47e3119e130880fad1d0f5a52708f802ad332d5", @nested={0x4, 0x97}, @nested={0x4, 0x5}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x6009, 0x4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000880)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0500330003000000080032"], 0x44}}, 0x80) (async)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0500330003000000080032"], 0x44}}, 0x80)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1c}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44011}, 0x400c001) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1c}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44011}, 0x400c001)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.events\x00', 0x275a, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000001380)=""/4057, &(0x7f0000002380)=0xfd9)
write$cgroup_subtree(r7, &(0x7f00000023c0)=ANY=[], 0x2adc1) (async)
write$cgroup_subtree(r7, &(0x7f00000023c0)=ANY=[], 0x2adc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x9, &(0x7f0000002400)=0x1000, 0x4) (async)
setsockopt$inet6_tcp_int(r8, 0x6, 0x9, &(0x7f0000002400)=0x1000, 0x4)
getsockopt$inet6_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000002440))
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r11, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r11, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.08795328s ago: executing program 2 (id=5783):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2}, 0x4)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3, r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@mpls_delroute={0xa0, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x101}, {0xff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1}, {0x86d, 0x0, 0x1}, {0xc}, {0x7}, {0xa}, {0xffffb}, {0x7}, {0x5}, {0x4}, {0xc1f56, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xb8, 0x0, 0x1}, {0xca29, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xd}, {0x2}, {0xa, 0x0, 0x1}, {0x81ae}, {0x4}, {0x0, 0x0, 0x1}, {0x4}, {0xa, 0x0, 0x1}, {0x9}, {0xafe4}, {0x0, 0x0, 0x1}, {0x9}, {0x7}, {0x6, 0x0, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2}, 0x4) (async)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3, r1}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@mpls_delroute={0xa0, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x101}, {0xff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1}, {0x86d, 0x0, 0x1}, {0xc}, {0x7}, {0xa}, {0xffffb}, {0x7}, {0x5}, {0x4}, {0xc1f56, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xb8, 0x0, 0x1}, {0xca29, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xd}, {0x2}, {0xa, 0x0, 0x1}, {0x81ae}, {0x4}, {0x0, 0x0, 0x1}, {0x4}, {0xa, 0x0, 0x1}, {0x9}, {0xafe4}, {0x0, 0x0, 0x1}, {0x9}, {0x7}, {0x6, 0x0, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)

1.964171992s ago: executing program 4 (id=5784):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004040) (async, rerun: 64)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000090603417c17da00000000000a000000340007800c000180080001407f0000010c00148008000140ac1e01010600044050000000060005406b640000050007000600000005000100060000000900020073797a310000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (rerun: 64)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x6b0, 0x0, 0x490, 0xfeffffff, 0x368, 0x490, 0x618, 0x618, 0xffffffff, 0x618, 0x618, 0x5, 0x0, {[{{@uncond, 0x0, 0x308, 0x368, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x4, 0x5, 0x4, 0x5, 0x4], 0x6, 0x2}, {0x1, [0x5, 0x5, 0x3, 0x5, 0x1, 0x4], 0x3}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x5, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x710)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000540)=0x4f1d, 0x4)
sendmmsg$inet(r3, &(0x7f0000000580)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1ac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x184, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x14c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x13c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x114, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x110, 0x1, "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"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x220}}, 0x0) (async)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x89, &(0x7f00000005c0), &(0x7f0000000600)=0x4)

1.799841406s ago: executing program 2 (id=5785):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@gettaction={0x44, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x4048801) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x1, 0xffe0}, {0xb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000004c0), 0x40000000000009f, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800fff6000000000000000000000000611940000000000095000000000000005a0ce2b89ded6217d7a2fee8f73542924bd5ac0a6f06297d1ba4a9aab7d4123eaa6c74df90c2fc278268f8b636b2cdbe48495f60eef40b0aba0b22df604949746f097824b10521f4a2abf6bc7458f0cf7206"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000140)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) (async)
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000980)=""/3, 0x3}], 0x1, 0x9, 0x0)

1.716079257s ago: executing program 3 (id=5786):
pselect6(0x81, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x73}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c"], 0xb4}}, 0x0)
unshare(0x20000400)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x9a)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164001d000280080003400000002d0800024000000001080004400000000008000140000000130800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000)
shutdown(r0, 0x1)
shutdown(r0, 0x1)

1.715394645s ago: executing program 1 (id=5787):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_delroute={0x24, 0x19, 0x1, 0x71bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x1, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x40, 0x4, 0x7, 0x7f, 0x1, 0x9f, 0xc0, 0x72, 0x6, 0x5, 0x31, 0x10, 0x5, 0xb5, 0x0, [0x2, 0x2]}})
syz_emit_ethernet(0x82, &(0x7f0000000600)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x16, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x17, 0x0, 0x0, [0x3, 0x6, 0x3, 0x1, 0x9, 0x9]}, @noop, @rr={0x7, 0x23, 0x4e, [@local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010101, @rand_addr=0x64010101, @loopback, @local]}, @noop]}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_delroute={0x24, 0x19, 0x1, 0x71bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x1, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x40, 0x4, 0x7, 0x7f, 0x1, 0x9f, 0xc0, 0x72, 0x6, 0x5, 0x31, 0x10, 0x5, 0xb5, 0x0, [0x2, 0x2]}}) (async)
syz_emit_ethernet(0x82, &(0x7f0000000600)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x16, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x17, 0x0, 0x0, [0x3, 0x6, 0x3, 0x1, 0x9, 0x9]}, @noop, @rr={0x7, 0x23, 0x4e, [@local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010101, @rand_addr=0x64010101, @loopback, @local]}, @noop]}}}}}}}, 0x0) (async)

1.499822656s ago: executing program 4 (id=5788):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x6044040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000104010200000000000000000000002a89638f920508000440000000ff0500010001000000"], 0x24}}, 0x80)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

1.376388485s ago: executing program 2 (id=5789):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000280)="34000000070014000000000003", 0xd)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x2, 0x3, 0x3ff})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000000301010100000000000020000500000714000f80080002400000000108000140000000824800068030000500fe88000000000000000000000000010108000100ac1e010114000500fe8000000000000000000000000000aa14000400fe8800000000000000000000000001012400108008000340000000a508000340000000000800024000007fff080003400000000118001640000000050000028a000000010000000400000304"], 0xac}}, 0x20000001)

0s ago: executing program 1 (id=5790):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0x13, &(0x7f0000000f00)=ANY=[@ANYRESOCT=r0], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r2, 0x0, 0x10, 0x10, &(0x7f0000001100)="0000ffffffffa000", &(0x7f0000001140)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

kernel console output (not intermixed with test programs):

d length.
[  631.226198][T25151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4455'.
[  631.269509][T25153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4456'.
[  631.325819][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4458'.
[  631.326050][T25157] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4458'.
[  631.326079][T25157] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4458'.
[  631.407439][T25162] pim6reg: entered allmulticast mode
[  631.438993][T25165] sit0: entered promiscuous mode
[  631.487894][T25165] netlink: 'syz.2.4457': attribute type 1 has an invalid length.
[  631.487918][T25165] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4457'.
[  631.488438][T25163] pim6reg: left allmulticast mode
[  631.582392][T25177] bond7: option resend_igmp: invalid value (2878)
[  631.582409][T25177] bond7: option resend_igmp: allowed values 0 - 255
[  631.583817][T25177] bond7 (unregistering): Released all slaves
[  632.110958][T25211] IPv6: NLM_F_CREATE should be specified when creating new route
[  632.339614][T25229] sit1: entered promiscuous mode
[  632.367842][T25232] atomic_op ffff88804767e9e0 conn xmit_atomic 0000000000000000
[  632.368004][T25232] atomic_op ffff88807ae411e0 conn xmit_atomic 0000000000000000
[  633.184014][T25247] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  633.353898][T25258] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  633.555058][   T30] audit: type=1800 audit(1794156587.478:51): pid=25271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4484" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1256 res=0 errno=-22
[  634.791534][T25315] lo: entered promiscuous mode
[  635.614664][T25315] bond5: (slave lo): Releasing backup interface
[  635.624384][T25315] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  635.679903][T25318] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  635.990308][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055ee1400: Timeout. Failed to send simple message.
[  636.125515][T25357] __nla_validate_parse: 4 callbacks suppressed
[  636.125545][T25357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4503'.
[  636.314057][T25363] x_tables: duplicate underflow at hook 1
[  636.569202][T25378] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4508'.
[  636.569221][T25378] netlink: 'syz.1.4508': attribute type 1 has an invalid length.
[  636.934743][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4511'.
[  636.976721][T25389] lo: entered allmulticast mode
[  636.991899][T25389] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4512'.
[  636.991923][T25389] tipc: Enabling of bearer <uUp:s> rejected, media not registered
[  637.000451][T25392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4511'.
[  637.000507][T25392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4511'.
[  637.033337][T25387] lo: left allmulticast mode
[  637.181049][T25390] x_tables: duplicate underflow at hook 1
[  637.306724][T25407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4513'.
[  637.322809][T25394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4511'.
[  637.340090][T25392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4511'.
[  637.340161][T25392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4511'.
[  637.804535][T25431] batadv_slave_1: entered promiscuous mode
[  637.980821][T25433] batadv_slave_1 (unregistering): left promiscuous mode
[  638.147053][T25454] tipc: Enabled bearer <eth:macvtap0>, priority 7
[  638.191517][T25458] x_tables: duplicate underflow at hook 2
[  638.234681][T25456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  638.234731][T25456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.403438][T25456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  638.403474][T25456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.497190][T25456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  638.497238][T25456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.647571][T25456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  638.647608][T25456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.909445][T25479] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  638.957166][ T7812] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  638.957193][ T7812] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.145472][T23342] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  639.145504][T23342] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.223096][T25482] netlink: 'syz.0.4532': attribute type 1 has an invalid length.
[  639.346162][ T7812] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  639.346196][ T7812] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.346234][ T7812] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  639.346255][ T7812] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.668419][T25501] netlink: 'syz.2.4535': attribute type 6 has an invalid length.
[  640.101315][T25510] netlink: 'syz.3.4540': attribute type 1 has an invalid length.
[  642.236659][T25530] __nla_validate_parse: 76 callbacks suppressed
[  642.236680][T25530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4542'.
[  642.278438][T25535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4548'.
[  642.338666][T25539] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  642.493950][T25546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4552'.
[  642.536794][T25546] 8021q: adding VLAN 0 to HW filter on device bond7
[  642.557889][T25546] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  642.600219][T25546] bond7 (unregistering): (slave geneve3): Releasing backup interface
[  642.603935][T25546] bond7 (unregistering): Released all slaves
[  642.691107][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.691214][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.691313][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.691401][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.691491][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.691575][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.691660][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.691743][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.691830][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.691914][T25555] netlink: 'syz.3.4554': attribute type 7 has an invalid length.
[  642.950603][T25567] tipc: New replicast peer: 255.255.255.255
[  642.951458][T25567] tipc: Enabled bearer <udp:syz2>, priority 10
[  642.952835][T25568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4555'.
[  643.079465][T25571] x_tables: duplicate underflow at hook 1
[  643.151349][T25571] 8021q: adding VLAN 0 to HW filter on device bond6
[  643.166265][T25578] bond6: (slave gretap1): making interface the new active one
[  643.167725][T25578] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  643.216110][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4558'.
[  643.216135][T25577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4558'.
[  643.216148][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4558'.
[  643.324070][T25585] ip_tables: iptables: counters copy to user failed while replacing table
[  643.380328][T25591] netlink: 9192 bytes leftover after parsing attributes in process `syz.4.4562'.
[  643.637632][T25608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4568'.
[  643.639915][T25607] xt_TPROXY: Can be used only with -p tcp or -p udp
[  643.690377][T25606] 8021q: adding VLAN 0 to HW filter on device bond7
[  643.744407][T25606] bond7: (slave geneve3): making interface the new active one
[  643.753261][T25606] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  643.854107][T25618] can: request_module (can-proto-0) failed.
[  644.329427][T25647] nbd: nbd978 already in use
[  644.329686][T25647] nbd: nbd978 already in use
[  644.329858][T25647] nbd: nbd978 already in use
[  644.330088][T25647] nbd: nbd978 already in use
[  644.330237][T25647] nbd: nbd978 already in use
[  644.330385][T25647] nbd: nbd978 already in use
[  644.330533][T25647] nbd: nbd978 already in use
[  644.330681][T25647] nbd: nbd978 already in use
[  644.330844][T25647] nbd: nbd978 already in use
[  644.346949][T25647] nbd: nbd978 already in use
[  644.347158][T25647] nbd: nbd978 already in use
[  644.347358][T25647] nbd: nbd978 already in use
[  644.347649][T25647] nbd: nbd978 already in use
[  644.347855][T25647] nbd: nbd978 already in use
[  644.348044][T25647] nbd: nbd978 already in use
[  644.348241][T25647] nbd: nbd978 already in use
[  644.368923][T25647] nbd: nbd978 already in use
[  644.369141][T25647] nbd: nbd978 already in use
[  644.369336][T25647] nbd: nbd978 already in use
[  644.369567][T25647] nbd: nbd978 already in use
[  644.369755][T25647] nbd: nbd978 already in use
[  644.372904][T25647] nbd: nbd978 already in use
[  644.388895][T25647] nbd: nbd978 already in use
[  644.389112][T25647] nbd: nbd978 already in use
[  644.389356][T25647] nbd: nbd978 already in use
[  644.389547][T25647] nbd: nbd978 already in use
[  644.390615][T25647] nbd: nbd978 already in use
[  644.390832][T25647] nbd: nbd978 already in use
[  644.400284][T25647] nbd: nbd978 already in use
[  644.400502][T25647] nbd: nbd978 already in use
[  644.400700][T25647] nbd: nbd978 already in use
[  644.400995][T25647] nbd: nbd978 already in use
[  644.402540][T25647] nbd: nbd978 already in use
[  644.402759][T25647] nbd: nbd978 already in use
[  644.446152][T25647] nbd: nbd978 already in use
[  644.446448][T25647] nbd: nbd978 already in use
[  644.446650][T25647] nbd: nbd978 already in use
[  644.446845][T25647] nbd: nbd978 already in use
[  644.447039][T25647] nbd: nbd978 already in use
[  644.447798][T25647] nbd: nbd978 already in use
[  644.447999][T25647] nbd: nbd978 already in use
[  644.448213][T25647] nbd: nbd978 already in use
[  644.453088][T25647] nbd: nbd978 already in use
[  644.453343][T25647] nbd: nbd978 already in use
[  644.453539][T25647] nbd: nbd978 already in use
[  644.453742][T25647] nbd: nbd978 already in use
[  644.460066][T25647] nbd: nbd978 already in use
[  644.463926][T25647] nbd: nbd978 already in use
[  644.464199][T25647] nbd: nbd978 already in use
[  644.464534][T25647] nbd: nbd978 already in use
[  644.464729][T25647] nbd: nbd978 already in use
[  644.464921][T25647] nbd: nbd978 already in use
[  644.465161][T25647] nbd: nbd978 already in use
[  644.561965][T25662] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16)
[  644.866499][T25674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4582'.
[  644.877149][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  645.043086][T25684] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  645.082655][T25684] syzkaller0: entered promiscuous mode
[  645.082679][T25684] syzkaller0: entered allmulticast mode
[  645.330277][T25695] unsupported nlmsg_type 40
[  645.481677][T25708] xt_hashlimit: size too large, truncated to 1048576
[  645.517193][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  645.517899][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  645.520353][    C0] bridge0: port 3(team0) entered learning state
[  645.863869][T25727] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  646.217273][T25740] IPVS: dh: FWM 3 0x00000003 - no destination available
[  647.089281][T25765] bond8: up delay (205) is not a multiple of miimon (100), value rounded to 200 ms
[  647.096439][T25765] bond8 (unregistering): Released all slaves
[  647.390389][T25789] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  647.393885][T25779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  647.396522][T25783] __nla_validate_parse: 8 callbacks suppressed
[  647.396539][T25783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4615'.
[  647.471929][T25794] vlan0: entered allmulticast mode
[  647.471950][T25794] veth0_to_bond: entered allmulticast mode
[  647.738459][T25811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4625'.
[  647.894247][T25821] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  647.930639][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4629'.
[  647.936404][T25821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4629'.
[  648.001791][T25822] 8021q: adding VLAN 0 to HW filter on device bond7
[  648.027218][T25827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4630'.
[  648.027252][T25827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4630'.
[  648.088906][T25829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4630'.
[  648.088943][T25829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4630'.
[  648.096468][T25821] 8021q: adding VLAN 0 to HW filter on device bond8
[  648.226767][T25837] validate_nla: 60 callbacks suppressed
[  648.226786][T25837] netlink: 'syz.1.4633': attribute type 1 has an invalid length.
[  648.532263][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4636'.
[  648.586114][T25854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4636'.
[  648.882933][T25858] xfrm0: entered promiscuous mode
[  648.882957][T25858] xfrm0: entered allmulticast mode
[  649.696059][T25901] sctp: [Deprecated]: syz.4.4650 (pid 25901) Use of struct sctp_assoc_value in delayed_ack socket option.
[  649.696059][T25901] Use struct sctp_sack_info instead
[  649.938179][T25927] netlink: zone id is out of range
[  649.958257][T25930] netlink: zone id is out of range
[  651.389958][T25977] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  652.126211][T26023] netlink: 'syz.3.4686': attribute type 10 has an invalid length.
[  652.463281][T26037] __nla_validate_parse: 21 callbacks suppressed
[  652.463311][T26037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4690'.
[  652.511444][T26031] netlink: 'syz.0.4689': attribute type 1 has an invalid length.
[  652.705643][T26031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4689'.
[  652.738077][T26038] bond7: (slave gretap1): making interface the new active one
[  652.738597][T26038] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  652.744302][T26031] 8021q: adding VLAN 0 to HW filter on device bond7
[  652.928921][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4694'.
[  653.188348][T26080] openvswitch: netlink: ct_state flags ffffffff unsupported
[  653.338580][T26092] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4701'.
[  653.621966][T26102] syzkaller0: entered promiscuous mode
[  653.621990][T26102] syzkaller0: entered allmulticast mode
[  653.676343][T26108] ip_tables: iptables: counters copy to user failed while replacing table
[  654.409755][T26142] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4713'.
[  654.411643][T26142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4713'.
[  654.991764][   T30] audit: type=1804 audit(1794156608.918:52): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4717" name="/newroot/306/cgroup.controllers" dev="tmpfs" ino=1591 res=1 errno=0
[  654.992054][   T30] audit: type=1800 audit(1794156608.918:53): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4717" name="cgroup.controllers" dev="tmpfs" ino=1591 res=0 errno=-22
[  655.013385][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4717'.
[  655.093176][T26163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4718'.
[  655.117074][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  655.521569][T26185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4726'.
[  655.542570][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d263000: rx timeout, send abort
[  655.690969][T26201] bond0: (slave syz_tun): Releasing backup interface
[  655.788379][T26201] bond0: (slave bond_slave_0): Releasing backup interface
[  655.819091][T26201] bond0: (slave bond_slave_1): Releasing backup interface
[  655.873621][T26201] team0: Port device team_slave_1 removed
[  655.884462][T26201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  655.968992][T26213] netlink: 'syz.2.4731': attribute type 1 has an invalid length.
[  655.998592][T26213] bond9: entered promiscuous mode
[  655.999170][T26213] 8021q: adding VLAN 0 to HW filter on device bond9
[  656.002828][T26213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4731'.
[  656.042635][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d263000: abort rx timeout. Force session deactivation
[  656.042907][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d262c00: rx timeout, send abort
[  656.125022][T26220] netlink: 'syz.0.4733': attribute type 1 has an invalid length.
[  656.195006][T26220] lo: left promiscuous mode
[  656.437583][T26229] netlink: 'syz.2.4735': attribute type 12 has an invalid length.
[  656.489604][T26220] bridge2: port 1(erspan0) entered disabled state
[  656.542972][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d262c00: abort rx timeout. Force session deactivation
[  656.680170][T26220] bridge0: port 3(team0) entered disabled state
[  656.681002][T26220] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.681514][T26220] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.764583][T26220] tipc: Resetting bearer <eth:batadv0>
[  657.053510][T26220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  657.384908][T26220] tipc: Resetting bearer <eth:macvtap0>
[  657.592036][T26220] bond1: left promiscuous mode
[  657.648824][T26220] gre1: left allmulticast mode
[  657.689595][T26220] bond4: left promiscuous mode
[  657.886573][ T6061] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  657.886607][ T6061] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  657.906378][ T6061] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  657.906409][ T6061] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  657.906489][ T6061] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  657.906511][ T6061] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  657.906541][ T6061] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  657.906562][ T6061] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  658.226873][T26269] __nla_validate_parse: 4 callbacks suppressed
[  658.226893][T26269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4744'.
[  658.490166][T26288] netlink: 'syz.2.4748': attribute type 10 has an invalid length.
[  658.490189][T26288] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4748'.
[  658.883852][T26278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4746'.
[  658.986634][T26299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4750'.
[  659.012228][T26302] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  659.023963][T26302] netlink: 'syz.2.4751': attribute type 1 has an invalid length.
[  659.023987][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4751'.
[  659.038014][T26302] netlink: 'syz.2.4751': attribute type 11 has an invalid length.
[  659.091051][T26311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4751'.
[  659.356053][T26319] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:21
[  659.433714][T26326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4755'.
[  659.617726][T26332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4756'.
[  659.628958][T26334] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  660.214879][T26367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4764'.
[  660.460109][T26380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4767'.
[  660.762936][T26399] openvswitch: netlink: Key type 390 is out of range max 32
[  660.996856][T26410] netlink: 'syz.0.4774': attribute type 6 has an invalid length.
[  660.996879][T26410] netlink: 'syz.0.4774': attribute type 5 has an invalid length.
[  661.518606][T26432] tbf_change: 56 callbacks suppressed
[  661.518630][T26432] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  661.680986][T26434] netlink: 'syz.3.4782': attribute type 1 has an invalid length.
[  661.685211][T26435] netlink: 'syz.3.4782': attribute type 1 has an invalid length.
[  661.754255][T26434] 8021q: adding VLAN 0 to HW filter on device bond8
[  661.894827][T26444] syzkaller0: entered promiscuous mode
[  661.894850][T26444] syzkaller0: entered allmulticast mode
[  661.927961][T26444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  662.010653][T26441] tipc: Resetting bearer <eth:syzkaller0>
[  662.049040][T26441] tipc: Disabling bearer <eth:syzkaller0>
[  662.120907][T26450] syzkaller1: entered promiscuous mode
[  662.120929][T26450] syzkaller1: entered allmulticast mode
[  663.100971][T26493] No such timeout policy "syz1"
[  663.343684][T26508] __nla_validate_parse: 10 callbacks suppressed
[  663.343706][T26508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4800'.
[  663.343731][T26508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4800'.
[  663.381345][T26508] ip6gretap0: entered promiscuous mode
[  663.383587][T26508] syz_tun: entered promiscuous mode
[  663.397475][T26508] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  663.403843][T26505] netlink: 'syz.2.4800': attribute type 1 has an invalid length.
[  663.446452][T26505] bond10: option mode: invalid value (8)
[  663.448105][T26505] bond10 (unregistering): Released all slaves
[  663.730031][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4803'.
[  663.730052][T26529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4803'.
[  663.731236][T26522] bridge0: Device is already in use.
[  663.759488][T26529] netlink: 'syz.4.4803': attribute type 14 has an invalid length.
[  665.358459][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  703.229297][T26557] syzkaller0: MTU not usable for tipc bearer
[  703.229339][T26557] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  703.579188][T26588] syzkaller0: left promiscuous mode
[  703.579211][T26588] syzkaller0: left allmulticast mode
[  703.725715][T26583] netlink: 'syz.0.4816': attribute type 29 has an invalid length.
[  703.779101][T26583] netlink: 'syz.0.4816': attribute type 29 has an invalid length.
[  704.287928][T26622] ip_tables: iptables: counters copy to user failed while replacing table
[  704.494986][T26634] syzkaller1: entered promiscuous mode
[  704.495008][T26634] syzkaller1: entered allmulticast mode
[  704.510990][T26634] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  704.604033][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4829'.
[  704.730305][T26644] netlink: 'syz.0.4831': attribute type 1 has an invalid length.
[  704.730326][T26644] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4831'.
[  704.951235][T26669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4833'.
[  704.951281][T26669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4833'.
[  705.334623][T26690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4839'.
[  705.613857][T26709] netlink: 'syz.0.4845': attribute type 1 has an invalid length.
[  705.637599][T26709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4845'.
[  705.740486][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4847'.
[  705.740506][T26717] vxlan: RTM_NEWNEIGH with invalid state 0x9
[  705.874843][T26735] x_tables: duplicate underflow at hook 2
[  706.044807][T26743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4852'.
[  706.048686][T26743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4852'.
[  706.473788][T26752] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4854'.
[  706.742840][T26780] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20000
[  707.103927][T26798] veth1_macvtap: entered allmulticast mode
[  707.482721][T26822] netlink: 'syz.1.4871': attribute type 24 has an invalid length.
[  707.505221][T26822] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  707.510899][T26827] Cannot find del_set index 4 as target
[  707.883470][T26850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  707.887931][T26850] netlink: 'syz.1.4877': attribute type 21 has an invalid length.
[  707.947686][T26857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  707.959495][T26856] netlink: 'syz.1.4877': attribute type 21 has an invalid length.
[  708.231529][T26867] tipc: Invalid UDP bearer configuration
[  708.231578][T26867] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  708.234694][T26868] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  709.206872][T26916] sctp: [Deprecated]: syz.0.4893 (pid 26916) Use of int in max_burst socket option deprecated.
[  709.206872][T26916] Use struct sctp_assoc_value instead
[  709.478322][T26930] ip_tables: iptables: counters copy to user failed while replacing table
[  709.654482][T26949] syzkaller0: entered promiscuous mode
[  709.654505][T26949] syzkaller0: entered allmulticast mode
[  709.659707][T26952] __nla_validate_parse: 10 callbacks suppressed
[  709.659725][T26952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4901'.
[  709.687227][T26952] 8021q: adding VLAN 0 to HW filter on device bond17
[  709.694178][T26952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4901'.
[  709.722932][T26952] netlink: 'syz.4.4901': attribute type 10 has an invalid length.
[  709.722951][T26952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4901'.
[  709.750469][T26955] erspan0: left promiscuous mode
[  709.770320][T26955] bridge0: left promiscuous mode
[  709.771948][T26955] 8021q: adding VLAN 0 to HW filter on device bond0
[  709.772840][T26955] 8021q: adding VLAN 0 to HW filter on device team0
[  709.778282][T26955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  709.814857][T26955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  709.823928][T26955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  709.832135][T26955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  709.832156][T26955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  709.834725][T26955] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  709.888246][ T5733] s`z1: Port: 1 Link ACTIVE
[  709.891665][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.891726][ T7798] bridge0: port 1(bridge_slave_0) entered forwarding state
[  709.906790][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.906913][ T7798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.981739][T26961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4903'.
[  710.208343][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4903'.
[  710.229483][T26961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4903'.
[  710.392381][T26984] xt_TPROXY: Can be used only with -p tcp or -p udp
[  710.669882][T27000] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4915'.
[  710.669909][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4915'.
[  710.754560][T27003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4914'.
[  710.754778][T27004] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  710.774551][T27004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4916'.
[  710.813814][T27004] bond9: (slave bond_slave_0): Device is not bonding slave
[  710.814329][T27004] bond9: option active_slave: invalid value (bond_slave_0)
[  710.818015][T27004] bond9 (unregistering): Released all slaves
[  711.106320][T27026] syzkaller1: tun_chr_ioctl cmd 3229636669
[  711.106508][T27026] syzkaller1: tun_chr_ioctl cmd 1074812118
[  711.666521][T27072] netlink: 'syz.4.4931': attribute type 3 has an invalid length.
[  712.038646][T27079] syzkaller1: tun_chr_ioctl cmd 1074812118
[  712.348359][T27096] 8021q: adding VLAN 0 to HW filter on device bond18
[  712.490275][T27105] ip6t_rt: unknown flags 1F
[  712.504839][T27110] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  712.506265][T27110] netlink: ct family unspecified
[  712.532129][T27113] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  712.547624][T27113] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  712.781834][T27129] sit2: entered allmulticast mode
[  713.188260][T27149] block nbd7: server does not support multiple connections per device.
[  713.188806][T27149] block nbd7: shutting down sockets
[  713.382192][T27154] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  713.668641][T27160] 8021q: adding VLAN 0 to HW filter on device bond6
[  713.669178][T27160] bridge0: port 3(bond6) entered blocking state
[  713.669307][T27160] bridge0: port 3(bond6) entered disabled state
[  713.669413][T27160] bond6: entered allmulticast mode
[  713.671567][T27160] bond6: entered promiscuous mode
[  713.672287][T27160] bridge0: port 3(bond6) entered blocking state
[  713.672391][T27160] bridge0: port 3(bond6) entered forwarding state
[  713.748983][T26730] bridge0: port 3(bond6) entered disabled state
[  713.901458][T27176] bridge8: entered promiscuous mode
[  713.907805][T27176] bridge8: entered allmulticast mode
[  713.911803][T27176] team0: Port device bridge8 added
[  713.931905][T27176] bridge9: entered promiscuous mode
[  713.931927][T27176] bridge9: entered allmulticast mode
[  713.960079][T27176] team0: Port device bridge9 added
[  713.987439][T27176] bridge10: entered promiscuous mode
[  713.987455][T27176] bridge10: entered allmulticast mode
[  713.991677][T27176] team0: Port device bridge10 added
[  714.022798][T27176] bridge11: entered promiscuous mode
[  714.022813][T27176] bridge11: entered allmulticast mode
[  714.040212][T27176] bridge12: entered promiscuous mode
[  714.040234][T27176] bridge12: entered allmulticast mode
[  714.057076][T27176] bridge13: entered promiscuous mode
[  714.057122][T27176] bridge13: entered allmulticast mode
[  714.068814][T27176] bridge14: entered promiscuous mode
[  714.068836][T27176] bridge14: entered allmulticast mode
[  714.084978][T27176] bridge15: entered promiscuous mode
[  714.084993][T27176] bridge15: entered allmulticast mode
[  714.113311][T27176] bridge16: entered promiscuous mode
[  714.113326][T27176] bridge16: entered allmulticast mode
[  714.134605][T27176] bridge17: entered promiscuous mode
[  714.134627][T27176] bridge17: entered allmulticast mode
[  714.153772][T27176] bridge18: entered promiscuous mode
[  714.153795][T27176] bridge18: entered allmulticast mode
[  714.173633][T27176] bridge19: entered promiscuous mode
[  714.173654][T27176] bridge19: entered allmulticast mode
[  714.198599][T27176] bridge20: entered promiscuous mode
[  714.198620][T27176] bridge20: entered allmulticast mode
[  714.223032][T27186] netlink: 'syz.3.4960': attribute type 1 has an invalid length.
[  714.224674][T27176] bridge21: entered promiscuous mode
[  714.224694][T27176] bridge21: entered allmulticast mode
[  714.262407][T27186] bond9: entered promiscuous mode
[  714.262903][T27186] 8021q: adding VLAN 0 to HW filter on device bond9
[  714.273728][T27176] bridge22: entered promiscuous mode
[  714.273748][T27176] bridge22: entered allmulticast mode
[  714.284250][T27176] bridge23: entered promiscuous mode
[  714.284268][T27176] bridge23: entered allmulticast mode
[  714.294197][T27176] bridge24: entered promiscuous mode
[  714.294248][T27176] bridge24: entered allmulticast mode
[  714.304309][T27176] bridge25: entered promiscuous mode
[  714.304329][T27176] bridge25: entered allmulticast mode
[  714.319801][T27176] bridge26: entered promiscuous mode
[  714.319824][T27176] bridge26: entered allmulticast mode
[  714.334659][T27176] bridge27: entered promiscuous mode
[  714.334681][T27176] bridge27: entered allmulticast mode
[  714.351573][T27176] bridge28: entered promiscuous mode
[  714.351593][T27176] bridge28: entered allmulticast mode
[  714.362690][T27176] bridge29: entered promiscuous mode
[  714.362798][T27176] bridge29: entered allmulticast mode
[  714.384962][T27176] bridge30: entered promiscuous mode
[  714.384985][T27176] bridge30: entered allmulticast mode
[  714.425299][T27176] bridge31: entered promiscuous mode
[  714.430463][T27176] bridge31: entered allmulticast mode
[  714.462691][T27176] bridge32: entered promiscuous mode
[  714.462714][T27176] bridge32: entered allmulticast mode
[  714.489530][T27176] bridge33: entered promiscuous mode
[  714.489553][T27176] bridge33: entered allmulticast mode
[  714.519156][T27176] bridge34: entered promiscuous mode
[  714.519179][T27176] bridge34: entered allmulticast mode
[  714.570701][T27176] bridge35: entered promiscuous mode
[  714.570724][T27176] bridge35: entered allmulticast mode
[  714.632727][T27176] bridge36: entered promiscuous mode
[  714.632751][T27176] bridge36: entered allmulticast mode
[  714.688155][T27176] bridge37: entered promiscuous mode
[  714.688170][T27176] bridge37: entered allmulticast mode
[  714.692565][T27176] __nla_validate_parse: 92 callbacks suppressed
[  714.692580][T27176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'.
[  714.692594][T27176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'.
[  714.741491][T27176] bridge38: entered promiscuous mode
[  714.741507][T27176] bridge38: entered allmulticast mode
[  715.111306][T27235] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4972'.
[  715.114727][T27235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4972'.
[  715.198575][T27241] bridge4: entered allmulticast mode
[  715.201641][T27241] bond19: (slave bridge4): Enslaving as an active interface with an up link
[  715.955694][T27245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4975'.
[  718.001949][T27249] openvswitch: netlink: IP tunnel TTL not specified.
[  718.181404][T27261] x_tables: duplicate underflow at hook 1
[  718.435236][T27273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4982'.
[  721.085238][T27265] rdma_rxe: rxe_newlink: failed to add wg0
[  721.521986][T27309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'.
[  721.522021][T27309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'.
[  721.652402][T27316] netlink: 'syz.3.4992': attribute type 11 has an invalid length.
[  721.778683][T27320] netlink: 'syz.3.4992': attribute type 1 has an invalid length.
[  721.778706][T27320] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4992'.
[  721.825026][T27320] pimreg1: tun_chr_ioctl cmd 1074025677
[  721.825164][T27320] pimreg1: linktype set to 6
[  722.068780][T27331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4994'.
[  722.131011][T27334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4994'.
[  722.131033][T27334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4994'.
[  722.987170][T27370] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5002'.
[  723.163548][T27381] netlink: 'syz.3.5003': attribute type 12 has an invalid length.
[  723.438585][T27390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5007'.
[  723.438670][T27390] bond6: left allmulticast mode
[  723.438914][T27390] bond6: left promiscuous mode
[  723.441503][T27390] bridge0: port 3(bond6) entered disabled state
[  723.473953][T27390] bridge_slave_1: left allmulticast mode
[  723.473981][T27390] bridge_slave_1: left promiscuous mode
[  723.474241][T27390] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.507471][T27390] bridge_slave_0: left allmulticast mode
[  723.507496][T27390] bridge_slave_0: left promiscuous mode
[  723.507770][T27390] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.513266][T27391] ip_tables: iptables: counters copy to user failed while replacing table
[  723.733756][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5009'.
[  723.987728][T27406] tun0: tun_chr_ioctl cmd 1074025677
[  723.987834][T27406] tun0: linktype set to 778
[  724.080919][T27413] syzkaller0: entered promiscuous mode
[  724.080943][T27413] syzkaller0: entered allmulticast mode
[  724.138963][T27413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  724.171861][T27413] tipc: Resetting bearer <eth:syzkaller0>
[  724.212671][T27413] tipc: Disabling bearer <eth:syzkaller0>
[  724.245693][T27422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5017'.
[  724.358309][T27429] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  724.414215][T27433] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  724.611311][T27442] xt_hashlimit: max too large, truncated to 1048576
[  724.611786][T27442] Cannot find del_set index 4 as target
[  725.021865][T27462] bridge14: entered allmulticast mode
[  725.364312][T27484] SET target dimension over the limit!
[  725.587005][T27497] 8021q: VLANs not supported on syzkaller0
[  725.587347][T27497] syzkaller0: left promiscuous mode
[  725.587363][T27497] syzkaller0: left allmulticast mode
[  726.040096][T27524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.042888][T27525] ip_tables: iptables: counters copy to user failed while replacing table
[  726.154561][T27504] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  726.177506][T27512] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  726.213908][T27537] netlink: 'syz.0.5048': attribute type 4 has an invalid length.
[  726.239656][T27537] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.244989][T27537] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  726.819303][T27565] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  726.875275][T27565] bond10 (unregistering): Released all slaves
[  727.048050][T27583] netlink: 'syz.0.5061': attribute type 1 has an invalid length.
[  727.072720][T27583] __nla_validate_parse: 7 callbacks suppressed
[  727.072741][T27583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5061'.
[  727.102864][T27588] FAULT_INJECTION: forcing a failure.
[  727.102864][T27588] name failslab, interval 1, probability 0, space 0, times 0
[  727.102917][T27588] CPU: 1 UID: 0 PID: 27588 Comm: syz.1.5062 Not tainted syzkaller #0 PREEMPT(full) 
[  727.102937][T27588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  727.102955][T27588] Call Trace:
[  727.102962][T27588]  <TASK>
[  727.102971][T27588]  dump_stack_lvl+0xe8/0x150
[  727.103006][T27588]  should_fail_ex+0x3eb/0x540
[  727.103030][T27588]  should_failslab+0xa8/0x100
[  727.103048][T27588]  ? skb_ext_add+0x148/0x8e0
[  727.103066][T27588]  kmem_cache_alloc_noprof+0x9c/0x600
[  727.103091][T27588]  ? skb_ext_add+0x148/0x8e0
[  727.103115][T27588]  skb_ext_add+0x148/0x8e0
[  727.103136][T27588]  ? dev_get_by_index+0x22/0x2d0
[  727.103168][T27588]  raw_sendmsg+0x36e/0x10e0
[  727.103187][T27588]  ? __lock_acquire+0x747/0x2de0
[  727.103215][T27588]  ? __pfx_raw_sendmsg+0x10/0x10
[  727.103236][T27588]  ? aa_sock_msg_perm+0x144/0x210
[  727.103258][T27588]  ? apparmor_socket_sendmsg+0x98/0x360
[  727.103284][T27588]  ? __pfx_raw_sendmsg+0x10/0x10
[  727.103301][T27588]  sock_sendmsg_nosec+0x14e/0x190
[  727.103327][T27588]  ____sys_sendmsg+0x54e/0x850
[  727.103353][T27588]  ? __pfx_____sys_sendmsg+0x10/0x10
[  727.103381][T27588]  ? import_iovec+0x73/0xa0
[  727.103405][T27588]  ___sys_sendmsg+0x2a5/0x360
[  727.103421][T27588]  ? __lock_acquire+0x747/0x2de0
[  727.103447][T27588]  ? __pfx____sys_sendmsg+0x10/0x10
[  727.103500][T27588]  ? __fget_files+0x3a2/0x420
[  727.103522][T27588]  ? __fget_files+0x2a/0x420
[  727.103552][T27588]  __x64_sys_sendmsg+0x1b1/0x290
[  727.103574][T27588]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  727.103615][T27588]  do_syscall_64+0x166/0x520
[  727.103637][T27588]  ? trace_irq_disable+0x3b/0x140
[  727.103659][T27588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.103678][T27588]  ? clear_bhb_loop+0x70/0xc0
[  727.103700][T27588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.103731][T27588] RIP: 0033:0x7f6e4e19fb19
[  727.103749][T27588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  727.103765][T27588] RSP: 002b:00007f6e4c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  727.103789][T27588] RAX: ffffffffffffffda RBX: 00007f6e4e425fa0 RCX: 00007f6e4e19fb19
[  727.103803][T27588] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  727.103815][T27588] RBP: 00007f6e4c3f6090 R08: 0000000000000000 R09: 0000000000000000
[  727.103827][T27588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  727.103838][T27588] R13: 00007f6e4e426038 R14: 00007f6e4e425fa0 R15: 00007fff3b123ca8
[  727.103869][T27588]  </TASK>
[  727.424815][T27597] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  727.552187][T27610] xt_time: invalid argument - start or stop time greater than 23:59:59
[  727.797973][T27628] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5073'.
[  727.856978][T27632] sctp: [Deprecated]: syz.1.5073 (pid 27632) Use of struct sctp_assoc_value in delayed_ack socket option.
[  727.856978][T27632] Use struct sctp_sack_info instead
[  727.858797][T27632] sctp: [Deprecated]: syz.1.5073 (pid 27632) Use of struct sctp_assoc_value in delayed_ack socket option.
[  727.858797][T27632] Use struct sctp_sack_info instead
[  728.008693][T27637] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5075'.
[  728.012003][T27639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5075'.
[  728.081007][T27642] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5077'.
[  728.313831][T27649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5079'.
[  728.416487][T27655] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  729.024891][T27687] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  729.033904][T27687] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5087'.
[  729.033925][T27687] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5087'.
[  729.647000][T27714] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5092'.
[  729.752078][T27719] ip6tnl1: entered allmulticast mode
[  729.956381][T27721] xt_CT: You must specify a L4 protocol and not use inversions on it
[  730.108771][T27723] netlink: 'syz.2.5095': attribute type 21 has an invalid length.
[  730.108872][T27723] netlink: 'syz.2.5095': attribute type 1 has an invalid length.
[  730.108885][T27723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5095'.
[  730.772131][T27747] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  730.804888][T27747] batman_adv: batadv0: Adding interface: syzkaller0
[  730.804905][T27747] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  730.804934][T27747] batman_adv: batadv0: Interface activated: syzkaller0
[  731.347205][T27769] syzkaller1: entered promiscuous mode
[  731.347228][T27769] syzkaller1: entered allmulticast mode
[  731.352595][T27769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  731.408542][T27772] atomic_op ffff8880351971e0 conn xmit_atomic 0000000000000000
[  731.602978][T27748] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  731.621228][T27746] batman_adv: batadv0: Interface deactivated: syzkaller0
[  731.672217][T27746] batman_adv: batadv0: Removing interface: syzkaller0
[  732.506547][T27809] nbd2: detected capacity change from 0 to 126
[  732.512003][ T2543] block nbd2: Dead connection, failed to find a fallback
[  732.723014][T27815] netlink: 'syz.4.5118': attribute type 2 has an invalid length.
[  733.096229][T27826] __nla_validate_parse: 1 callbacks suppressed
[  733.096283][T27826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5121'.
[  733.096301][T27826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5121'.
[  733.096314][T27826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5121'.
[  733.182682][T27826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5121'.
[  733.183734][T27826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5121'.
[  733.443533][T27829] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5122'.
[  733.512990][T27838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5125'.
[  733.515177][T27838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5125'.
[  733.587417][T27840] vlan1: entered promiscuous mode
[  733.587438][T27840] bond0: entered promiscuous mode
[  733.660872][T27849] vlan1: entered promiscuous mode
[  734.047554][T27860] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  734.069592][T27860] syzkaller0: entered promiscuous mode
[  734.069616][T27860] syzkaller0: entered allmulticast mode
[  734.101483][T27860] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  734.106171][T26730] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  734.106210][T26730] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  734.106240][T26730] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  734.106268][T26730] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  734.184465][T27864] netlink: 'syz.4.5129': attribute type 1 has an invalid length.
[  734.184487][T27864] netlink: 'syz.4.5129': attribute type 2 has an invalid length.
[  734.184499][T27864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5129'.
[  734.212866][T27864] netlink: 'syz.4.5129': attribute type 1 has an invalid length.
[  734.303900][T27873] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5129'.
[  735.481229][T27910] bond1: entered allmulticast mode
[  735.500131][T27909] bond1: left allmulticast mode
[  735.602385][T27917] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  735.615289][T27917] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  735.651063][T27921] FAULT_INJECTION: forcing a failure.
[  735.651063][T27921] name failslab, interval 1, probability 0, space 0, times 0
[  735.651092][T27921] CPU: 0 UID: 0 PID: 27921 Comm: syz.0.5145 Not tainted syzkaller #0 PREEMPT(full) 
[  735.651113][T27921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  735.651124][T27921] Call Trace:
[  735.651131][T27921]  <TASK>
[  735.651140][T27921]  dump_stack_lvl+0xe8/0x150
[  735.651174][T27921]  should_fail_ex+0x3eb/0x540
[  735.651202][T27921]  should_failslab+0xa8/0x100
[  735.651221][T27921]  __kmalloc_cache_noprof+0x9e/0x600
[  735.651245][T27921]  ? bpf_prog_stream_init+0x9f/0x4a0
[  735.651268][T27921]  ? bpf_prog_stream_init+0x9f/0x4a0
[  735.651297][T27921]  bpf_prog_stream_init+0x9f/0x4a0
[  735.651326][T27921]  bpf_prog_load+0xcb8/0x1c60
[  735.651367][T27921]  ? __pfx_bpf_prog_load+0x10/0x10
[  735.651401][T27921]  ? __might_fault+0xaf/0x130
[  735.651427][T27921]  __sys_bpf+0xd86/0xe00
[  735.651453][T27921]  ? __pfx___sys_bpf+0x10/0x10
[  735.651484][T27921]  ? __fget_files+0x2a/0x420
[  735.651524][T27921]  ? ksys_write+0x242/0x270
[  735.651549][T27921]  ? __pfx_ksys_write+0x10/0x10
[  735.651578][T27921]  __x64_sys_bpf+0xba/0xd0
[  735.651605][T27921]  do_syscall_64+0x166/0x520
[  735.651626][T27921]  ? trace_irq_disable+0x3b/0x140
[  735.651649][T27921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.651667][T27921]  ? clear_bhb_loop+0x70/0xc0
[  735.651690][T27921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.651707][T27921] RIP: 0033:0x7f057879fb19
[  735.651724][T27921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  735.651739][T27921] RSP: 002b:00007f0579698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  735.651758][T27921] RAX: ffffffffffffffda RBX: 00007f0578a25fa0 RCX: 00007f057879fb19
[  735.651771][T27921] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[  735.651783][T27921] RBP: 00007f0579698090 R08: 0000000000000000 R09: 0000000000000000
[  735.651794][T27921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  735.651805][T27921] R13: 00007f0578a26038 R14: 00007f0578a25fa0 R15: 00007ffd27e70668
[  735.651836][T27921]  </TASK>
[  736.139538][T27944] ip_tables: iptables: counters copy to user failed while replacing table
[  736.309431][T27949] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  736.617907][T27962] vxcan1: entered allmulticast mode
[  736.847768][T27980] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  737.242659][T27991] netlink: 'syz.2.5158': attribute type 1 has an invalid length.
[  737.469170][T28020] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20265
[  737.470600][T28020] IPVS: dh: FWM 3 0x00000003 - no destination available
[  737.770625][T28022] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2226603464/2226603466
[  738.197790][T28060] FAULT_INJECTION: forcing a failure.
[  738.197790][T28060] name failslab, interval 1, probability 0, space 0, times 0
[  738.197819][T28060] CPU: 1 UID: 0 PID: 28060 Comm: syz.2.5180 Not tainted syzkaller #0 PREEMPT(full) 
[  738.197839][T28060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  738.197849][T28060] Call Trace:
[  738.197856][T28060]  <TASK>
[  738.197864][T28060]  dump_stack_lvl+0xe8/0x150
[  738.197894][T28060]  should_fail_ex+0x3eb/0x540
[  738.197919][T28060]  should_failslab+0xa8/0x100
[  738.197937][T28060]  __kmalloc_cache_node_noprof+0xa5/0x620
[  738.197999][T28060]  ? __get_vm_area_node+0x155/0x2f0
[  738.198016][T28060]  ? __get_vm_area_node+0x155/0x2f0
[  738.198041][T28060]  __get_vm_area_node+0x155/0x2f0
[  738.198067][T28060]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  738.198089][T28060]  ? bpf_check+0x14ae/0x34e0
[  738.198115][T28060]  ? lock_acquire+0x115/0x350
[  738.198141][T28060]  ? hook_capable+0x1c3/0x5e0
[  738.198167][T28060]  ? __pfx_hook_capable+0x10/0x10
[  738.198188][T28060]  ? rcu_is_watching+0x16/0xb0
[  738.198219][T28060]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  738.198241][T28060]  ? apparmor_capable+0x126/0x170
[  738.198265][T28060]  ? bpf_lsm_capable+0x9/0x20
[  738.198282][T28060]  ? security_capable+0x7e/0x2c0
[  738.198310][T28060]  ? bpf_check+0x14ae/0x34e0
[  738.198327][T28060]  __vmalloc_noprof+0xd2/0x120
[  738.198347][T28060]  ? bpf_check+0x14ae/0x34e0
[  738.198369][T28060]  bpf_check+0x14ae/0x34e0
[  738.198400][T28060]  ? ktime_get_with_offset+0x93/0x2d0
[  738.198424][T28060]  ? ktime_get_with_offset+0x93/0x2d0
[  738.198450][T28060]  ? __pfx_bpf_check+0x10/0x10
[  738.198473][T28060]  ? bpf_obj_name_cpy+0x194/0x1e0
[  738.198497][T28060]  bpf_prog_load+0x14da/0x1c60
[  738.198529][T28060]  ? __pfx_bpf_prog_load+0x10/0x10
[  738.198562][T28060]  ? __might_fault+0xaf/0x130
[  738.198588][T28060]  __sys_bpf+0xd86/0xe00
[  738.198612][T28060]  ? __pfx___sys_bpf+0x10/0x10
[  738.198641][T28060]  ? __fget_files+0x2a/0x420
[  738.198683][T28060]  ? ksys_write+0x242/0x270
[  738.198710][T28060]  ? __pfx_ksys_write+0x10/0x10
[  738.198740][T28060]  __x64_sys_bpf+0xba/0xd0
[  738.198768][T28060]  do_syscall_64+0x166/0x520
[  738.198791][T28060]  ? trace_irq_disable+0x3b/0x140
[  738.198814][T28060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.198832][T28060]  ? clear_bhb_loop+0x70/0xc0
[  738.198855][T28060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.198873][T28060] RIP: 0033:0x7f068ff9fb19
[  738.198890][T28060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.198905][T28060] RSP: 002b:00007f0690e9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  738.198925][T28060] RAX: ffffffffffffffda RBX: 00007f0690225fa0 RCX: 00007f068ff9fb19
[  738.198938][T28060] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[  738.198957][T28060] RBP: 00007f0690e9b090 R08: 0000000000000000 R09: 0000000000000000
[  738.198968][T28060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  738.198979][T28060] R13: 00007f0690226038 R14: 00007f0690225fa0 R15: 00007ffc90774098
[  738.199010][T28060]  </TASK>
[  738.203326][T28060] syz.2.5180: vmalloc error: size 3000, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  738.203425][T28060] CPU: 0 UID: 0 PID: 28060 Comm: syz.2.5180 Not tainted syzkaller #0 PREEMPT(full) 
[  738.203453][T28060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  738.203464][T28060] Call Trace:
[  738.203471][T28060]  <TASK>
[  738.203480][T28060]  dump_stack_lvl+0xe8/0x150
[  738.203513][T28060]  warn_alloc+0x24d/0x270
[  738.203537][T28060]  ? __kasan_kmalloc+0x22/0xb0
[  738.203566][T28060]  ? __pfx_warn_alloc+0x10/0x10
[  738.203588][T28060]  ? __get_vm_area_node+0x155/0x2f0
[  738.203615][T28060]  ? __get_vm_area_node+0x2a9/0x2f0
[  738.203643][T28060]  __vmalloc_node_range_noprof+0x396/0x16f0
[  738.203670][T28060]  ? lock_acquire+0x115/0x350
[  738.203697][T28060]  ? hook_capable+0x1c3/0x5e0
[  738.203722][T28060]  ? __pfx_hook_capable+0x10/0x10
[  738.203744][T28060]  ? rcu_is_watching+0x16/0xb0
[  738.203774][T28060]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  738.203797][T28060]  ? apparmor_capable+0x126/0x170
[  738.203828][T28060]  ? bpf_lsm_capable+0x9/0x20
[  738.203846][T28060]  ? security_capable+0x7e/0x2c0
[  738.203872][T28060]  ? bpf_check+0x14ae/0x34e0
[  738.203890][T28060]  __vmalloc_noprof+0xd2/0x120
[  738.203911][T28060]  ? bpf_check+0x14ae/0x34e0
[  738.203933][T28060]  bpf_check+0x14ae/0x34e0
[  738.203964][T28060]  ? ktime_get_with_offset+0x93/0x2d0
[  738.203989][T28060]  ? ktime_get_with_offset+0x93/0x2d0
[  738.204014][T28060]  ? __pfx_bpf_check+0x10/0x10
[  738.204036][T28060]  ? bpf_obj_name_cpy+0x194/0x1e0
[  738.204066][T28060]  bpf_prog_load+0x14da/0x1c60
[  738.204098][T28060]  ? __pfx_bpf_prog_load+0x10/0x10
[  738.204132][T28060]  ? __might_fault+0xaf/0x130
[  738.204158][T28060]  __sys_bpf+0xd86/0xe00
[  738.204185][T28060]  ? __pfx___sys_bpf+0x10/0x10
[  738.204214][T28060]  ? __fget_files+0x2a/0x420
[  738.204254][T28060]  ? ksys_write+0x242/0x270
[  738.204279][T28060]  ? __pfx_ksys_write+0x10/0x10
[  738.204309][T28060]  __x64_sys_bpf+0xba/0xd0
[  738.204338][T28060]  do_syscall_64+0x166/0x520
[  738.204360][T28060]  ? trace_irq_disable+0x3b/0x140
[  738.204383][T28060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.204401][T28060]  ? clear_bhb_loop+0x70/0xc0
[  738.204423][T28060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.204442][T28060] RIP: 0033:0x7f068ff9fb19
[  738.204465][T28060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.204480][T28060] RSP: 002b:00007f0690e9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  738.204498][T28060] RAX: ffffffffffffffda RBX: 00007f0690225fa0 RCX: 00007f068ff9fb19
[  738.204512][T28060] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[  738.204524][T28060] RBP: 00007f0690e9b090 R08: 0000000000000000 R09: 0000000000000000
[  738.204536][T28060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  738.204548][T28060] R13: 00007f0690226038 R14: 00007f0690225fa0 R15: 00007ffc90774098
[  738.204579][T28060]  </TASK>
[  738.204660][T28060] Mem-Info:
[  738.204669][T28060] active_anon:13934 inactive_anon:2 isolated_anon:0
[  738.204669][T28060]  active_file:1 inactive_file:43643 isolated_file:0
[  738.204669][T28060]  unevictable:1 dirty:61 writeback:0
[  738.204669][T28060]  slab_reclaimable:13664 slab_unreclaimable:134276
[  738.204669][T28060]  mapped:29364 shmem:562 pagetables:3844
[  738.204669][T28060]  sec_pagetables:0 bounce:0
[  738.204669][T28060]  kernel_misc_reclaimable:0
[  738.204669][T28060]  free:1194098 free_pcp:24024 free_cma:0
[  738.204718][T28060] Node 0 active_anon:55736kB inactive_anon:8kB active_file:4kB inactive_file:174368kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:101072kB dirty:240kB writeback:0kB shmem:2248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18532kB pagetables:14832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  738.204765][T28060] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  738.204811][T28060] Node 0 DMA free:11116kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:144kB local_pcp:20kB free_cma:0kB
[  738.204861][T28060] lowmem_reserve[]: 0 2463 2465 2465 2465
[  738.204891][T28060] Node 0 DMA32 free:957940kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:55736kB inactive_anon:8kB active_file:4kB inactive_file:174368kB unevictable:4kB writepending:240kB zspages:0kB present:3129332kB managed:2522828kB mlocked:4kB bounce:0kB free_pcp:72720kB local_pcp:42360kB free_cma:0kB
[  738.204942][T28060] lowmem_reserve[]: 0 0 1 1 1
[  738.204969][T28060] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB
[  738.205017][T28060] lowmem_reserve[]: 0 0 0 0 0
[  738.205045][T28060] Node 1 Normal free:3807328kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:23216kB local_pcp:23216kB free_cma:0kB
[  738.205094][T28060] lowmem_reserve[]: 0 0 0 0 0
[  738.205122][T28060] Node 0 DMA: 1*4kB (U) 5*8kB (U) 2*16kB (U) 3*32kB (U) 3*64kB (U) 2*128kB (U) 3*256kB (U) 3*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 11116kB
[  738.205250][T28060] Node 0 DMA32: 2167*4kB (UM) 763*8kB (UME) 1424*16kB (UME) 151*32kB (UME) 1254*64kB (UME) 1024*128kB (UME) 605*256kB (UME) 251*512kB (UME) 375*1024kB (UM) 14*2048kB (UME) 2*4096kB (UM) = 957972kB
[  738.205993][T28060] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  738.206079][T28060] Node 1 Normal: 96*4kB (UME) 100*8kB (UE) 110*16kB (UE) 109*32kB (UE) 105*64kB (UE) 100*128kB (UME) 99*256kB (UME) 88*512kB (UME) 76*1024kB (UE) 8*2048kB (UME) 883*4096kB (UM) = 3807328kB
[  738.206238][T28060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  738.206253][T28060] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  738.206266][T28060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  738.206280][T28060] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  738.206294][T28060] 44202 total pagecache pages
[  738.206308][T28060] 0 pages in swap cache
[  738.206315][T28060] Free swap  = 124996kB
[  738.206321][T28060] Total swap = 124996kB
[  738.206329][T28060] 2097051 pages RAM
[  738.206335][T28060] 0 pages HighMem/MovableOnly
[  738.206341][T28060] 434380 pages reserved
[  738.206348][T28060] 0 pages cma reserved
[  738.761326][T28077] __nla_validate_parse: 10 callbacks suppressed
[  738.761344][T28077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5182'.
[  739.319875][T28094] openvswitch: netlink: Unknown nsh attribute 0
[  739.333724][T28094] netlink: 'syz.2.5186': attribute type 1 has an invalid length.
[  739.349660][T28094] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  739.603425][T28110] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5190'.
[  739.702664][T28116] FAULT_INJECTION: forcing a failure.
[  739.702664][T28116] name failslab, interval 1, probability 0, space 0, times 0
[  739.702695][T28116] CPU: 1 UID: 0 PID: 28116 Comm: syz.2.5191 Not tainted syzkaller #0 PREEMPT(full) 
[  739.702714][T28116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  739.702725][T28116] Call Trace:
[  739.702732][T28116]  <TASK>
[  739.702740][T28116]  dump_stack_lvl+0xe8/0x150
[  739.702773][T28116]  should_fail_ex+0x3eb/0x540
[  739.702801][T28116]  should_failslab+0xa8/0x100
[  739.702829][T28116]  __kmalloc_cache_node_noprof+0xa5/0x620
[  739.702857][T28116]  ? __get_vm_area_node+0x155/0x2f0
[  739.702875][T28116]  ? __get_vm_area_node+0x155/0x2f0
[  739.702901][T28116]  __get_vm_area_node+0x155/0x2f0
[  739.702925][T28116]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  739.702946][T28116]  ? bpf_check+0x14ae/0x34e0
[  739.702972][T28116]  ? lock_acquire+0x115/0x350
[  739.702996][T28116]  ? hook_capable+0x1c3/0x5e0
[  739.703020][T28116]  ? __pfx_hook_capable+0x10/0x10
[  739.703040][T28116]  ? rcu_is_watching+0x16/0xb0
[  739.703069][T28116]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  739.703091][T28116]  ? apparmor_capable+0x126/0x170
[  739.703113][T28116]  ? bpf_lsm_capable+0x9/0x20
[  739.703128][T28116]  ? security_capable+0x7e/0x2c0
[  739.703152][T28116]  ? bpf_check+0x14ae/0x34e0
[  739.703167][T28116]  __vmalloc_noprof+0xd2/0x120
[  739.703188][T28116]  ? bpf_check+0x14ae/0x34e0
[  739.703209][T28116]  bpf_check+0x14ae/0x34e0
[  739.703239][T28116]  ? ktime_get_with_offset+0x93/0x2d0
[  739.703264][T28116]  ? ktime_get_with_offset+0x93/0x2d0
[  739.703288][T28116]  ? __pfx_bpf_check+0x10/0x10
[  739.703311][T28116]  ? bpf_obj_name_cpy+0x194/0x1e0
[  739.703337][T28116]  bpf_prog_load+0x14da/0x1c60
[  739.703368][T28116]  ? __pfx_bpf_prog_load+0x10/0x10
[  739.703403][T28116]  ? __might_fault+0xaf/0x130
[  739.703430][T28116]  __sys_bpf+0xd86/0xe00
[  739.703457][T28116]  ? __pfx___sys_bpf+0x10/0x10
[  739.703487][T28116]  ? __fget_files+0x2a/0x420
[  739.703526][T28116]  ? ksys_write+0x242/0x270
[  739.703553][T28116]  ? __pfx_ksys_write+0x10/0x10
[  739.703583][T28116]  __x64_sys_bpf+0xba/0xd0
[  739.703611][T28116]  do_syscall_64+0x166/0x520
[  739.703634][T28116]  ? trace_irq_disable+0x3b/0x140
[  739.703656][T28116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.703674][T28116]  ? clear_bhb_loop+0x70/0xc0
[  739.703700][T28116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.703717][T28116] RIP: 0033:0x7f068ff9fb19
[  739.703735][T28116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.703751][T28116] RSP: 002b:00007f0690e9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  739.703771][T28116] RAX: ffffffffffffffda RBX: 00007f0690225fa0 RCX: 00007f068ff9fb19
[  739.703784][T28116] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[  739.703796][T28116] RBP: 00007f0690e9b090 R08: 0000000000000000 R09: 0000000000000000
[  739.703807][T28116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  739.703824][T28116] R13: 00007f0690226038 R14: 00007f0690225fa0 R15: 00007ffc90774098
[  739.703855][T28116]  </TASK>
[  739.812721][T28117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5192'.
[  739.846363][T28118] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  740.121297][T28126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5193'.
[  740.487536][T28117] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  740.488940][T28136] batadv_slave_1: entered promiscuous mode
[  740.492581][T28130] batadv_slave_1: left promiscuous mode
[  741.439529][T28168] FAULT_INJECTION: forcing a failure.
[  741.439529][T28168] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  741.439561][T28168] CPU: 1 UID: 0 PID: 28168 Comm: syz.3.5203 Not tainted syzkaller #0 PREEMPT(full) 
[  741.439582][T28168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  741.439593][T28168] Call Trace:
[  741.439601][T28168]  <TASK>
[  741.439609][T28168]  dump_stack_lvl+0xe8/0x150
[  741.439642][T28168]  should_fail_ex+0x3eb/0x540
[  741.439669][T28168]  prepare_alloc_pages+0x21e/0x5f0
[  741.439701][T28168]  __alloc_frozen_pages_noprof+0x17c/0x410
[  741.439730][T28168]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  741.439754][T28168]  ? __alloc_frozen_pages_noprof+0x24c/0x410
[  741.439781][T28168]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  741.439809][T28168]  ? __kmalloc_cache_node_noprof+0x3cc/0x620
[  741.439831][T28168]  ? __get_vm_area_node+0x155/0x2f0
[  741.439851][T28168]  __alloc_pages_noprof+0x10/0x100
[  741.439877][T28168]  alloc_pages_bulk_noprof+0x67a/0x8a0
[  741.439911][T28168]  ? alloc_pages_noprof+0x140/0x2b0
[  741.439935][T28168]  __kasan_populate_vmalloc+0xb7/0x1c0
[  741.439966][T28168]  alloc_vmap_area+0xd10/0x1410
[  741.440001][T28168]  ? __pfx_alloc_vmap_area+0x10/0x10
[  741.440017][T28168]  ? __kmalloc_cache_node_noprof+0x3cc/0x620
[  741.440041][T28168]  ? __kmalloc_cache_node_noprof+0x1f2/0x620
[  741.440064][T28168]  ? __get_vm_area_node+0x155/0x2f0
[  741.440089][T28168]  __get_vm_area_node+0x200/0x2f0
[  741.440116][T28168]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  741.440137][T28168]  ? bpf_check+0x14ae/0x34e0
[  741.440163][T28168]  ? lock_acquire+0x115/0x350
[  741.440189][T28168]  ? hook_capable+0x1c3/0x5e0
[  741.440214][T28168]  ? __pfx_hook_capable+0x10/0x10
[  741.440235][T28168]  ? rcu_is_watching+0x16/0xb0
[  741.440265][T28168]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  741.440288][T28168]  ? apparmor_capable+0x126/0x170
[  741.440319][T28168]  ? bpf_lsm_capable+0x9/0x20
[  741.440336][T28168]  ? security_capable+0x7e/0x2c0
[  741.440363][T28168]  ? bpf_check+0x14ae/0x34e0
[  741.440380][T28168]  __vmalloc_noprof+0xd2/0x120
[  741.440401][T28168]  ? bpf_check+0x14ae/0x34e0
[  741.440425][T28168]  bpf_check+0x14ae/0x34e0
[  741.440456][T28168]  ? ktime_get_with_offset+0x93/0x2d0
[  741.440480][T28168]  ? ktime_get_with_offset+0x93/0x2d0
[  741.440504][T28168]  ? __pfx_bpf_check+0x10/0x10
[  741.440525][T28168]  ? bpf_obj_name_cpy+0x194/0x1e0
[  741.440552][T28168]  bpf_prog_load+0x14da/0x1c60
[  741.440583][T28168]  ? __pfx_bpf_prog_load+0x10/0x10
[  741.440618][T28168]  ? __might_fault+0xaf/0x130
[  741.440644][T28168]  __sys_bpf+0xd86/0xe00
[  741.440670][T28168]  ? __pfx___sys_bpf+0x10/0x10
[  741.440700][T28168]  ? __fget_files+0x2a/0x420
[  741.440740][T28168]  ? ksys_write+0x242/0x270
[  741.440767][T28168]  ? __pfx_ksys_write+0x10/0x10
[  741.440796][T28168]  __x64_sys_bpf+0xba/0xd0
[  741.440825][T28168]  do_syscall_64+0x166/0x520
[  741.440847][T28168]  ? trace_irq_disable+0x3b/0x140
[  741.440870][T28168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.440888][T28168]  ? clear_bhb_loop+0x70/0xc0
[  741.440910][T28168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.440928][T28168] RIP: 0033:0x7f9ba3b9fb19
[  741.440945][T28168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  741.440961][T28168] RSP: 002b:00007f9ba4a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  741.440980][T28168] RAX: ffffffffffffffda RBX: 00007f9ba3e25fa0 RCX: 00007f9ba3b9fb19
[  741.440993][T28168] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[  741.441005][T28168] RBP: 00007f9ba4a89090 R08: 0000000000000000 R09: 0000000000000000
[  741.441016][T28168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  741.441027][T28168] R13: 00007f9ba3e26038 R14: 00007f9ba3e25fa0 R15: 00007ffdcf02b898
[  741.441058][T28168]  </TASK>
[  741.866558][ T5639] block nbd7: Receive control failed (result -32)
[  741.867233][ T5634] block nbd7: Receive control failed (result -32)
[  742.101848][T28200] dvmrp1: left allmulticast mode
[  742.508019][T28210] FAULT_INJECTION: forcing a failure.
[  742.508019][T28210] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  742.508047][T28210] CPU: 0 UID: 0 PID: 28210 Comm: syz.3.5216 Not tainted syzkaller #0 PREEMPT(full) 
[  742.508065][T28210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  742.508074][T28210] Call Trace:
[  742.508082][T28210]  <TASK>
[  742.508089][T28210]  dump_stack_lvl+0xe8/0x150
[  742.508119][T28210]  should_fail_ex+0x3eb/0x540
[  742.508143][T28210]  prepare_alloc_pages+0x21e/0x5f0
[  742.508171][T28210]  __alloc_frozen_pages_noprof+0x17c/0x410
[  742.508197][T28210]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  742.508220][T28210]  ? __alloc_frozen_pages_noprof+0x24c/0x410
[  742.508244][T28210]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  742.508271][T28210]  ? __kmalloc_cache_node_noprof+0x3cc/0x620
[  742.508292][T28210]  ? __get_vm_area_node+0x155/0x2f0
[  742.508314][T28210]  __alloc_pages_noprof+0x10/0x100
[  742.508337][T28210]  alloc_pages_bulk_noprof+0x67a/0x8a0
[  742.508370][T28210]  ? alloc_pages_noprof+0x140/0x2b0
[  742.508392][T28210]  __kasan_populate_vmalloc+0xb7/0x1c0
[  742.508420][T28210]  alloc_vmap_area+0xd10/0x1410
[  742.508454][T28210]  ? __pfx_alloc_vmap_area+0x10/0x10
[  742.508469][T28210]  ? __kmalloc_cache_node_noprof+0x3cc/0x620
[  742.508492][T28210]  ? __kmalloc_cache_node_noprof+0x1f2/0x620
[  742.508517][T28210]  ? __get_vm_area_node+0x155/0x2f0
[  742.508541][T28210]  __get_vm_area_node+0x200/0x2f0
[  742.508567][T28210]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  742.508588][T28210]  ? bpf_check+0x14ae/0x34e0
[  742.508613][T28210]  ? lock_acquire+0x115/0x350
[  742.508640][T28210]  ? hook_capable+0x1c3/0x5e0
[  742.508665][T28210]  ? __pfx_hook_capable+0x10/0x10
[  742.508686][T28210]  ? rcu_is_watching+0x16/0xb0
[  742.508716][T28210]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  742.508747][T28210]  ? apparmor_capable+0x126/0x170
[  742.508771][T28210]  ? bpf_lsm_capable+0x9/0x20
[  742.508787][T28210]  ? security_capable+0x7e/0x2c0
[  742.508814][T28210]  ? bpf_check+0x14ae/0x34e0
[  742.508830][T28210]  __vmalloc_noprof+0xd2/0x120
[  742.508849][T28210]  ? bpf_check+0x14ae/0x34e0
[  742.508871][T28210]  bpf_check+0x14ae/0x34e0
[  742.508900][T28210]  ? ktime_get_with_offset+0x93/0x2d0
[  742.508922][T28210]  ? ktime_get_with_offset+0x93/0x2d0
[  742.508944][T28210]  ? __pfx_bpf_check+0x10/0x10
[  742.508965][T28210]  ? bpf_obj_name_cpy+0x194/0x1e0
[  742.508992][T28210]  bpf_prog_load+0x14da/0x1c60
[  742.509023][T28210]  ? __pfx_bpf_prog_load+0x10/0x10
[  742.509057][T28210]  ? __might_fault+0xaf/0x130
[  742.509084][T28210]  __sys_bpf+0xd86/0xe00
[  742.509110][T28210]  ? __pfx___sys_bpf+0x10/0x10
[  742.509140][T28210]  ? __fget_files+0x2a/0x420
[  742.509180][T28210]  ? ksys_write+0x242/0x270
[  742.509206][T28210]  ? __pfx_ksys_write+0x10/0x10
[  742.509235][T28210]  __x64_sys_bpf+0xba/0xd0
[  742.509264][T28210]  do_syscall_64+0x166/0x520
[  742.509285][T28210]  ? trace_irq_disable+0x3b/0x140
[  742.509308][T28210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.509326][T28210]  ? clear_bhb_loop+0x70/0xc0
[  742.509348][T28210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.509366][T28210] RIP: 0033:0x7f9ba3b9fb19
[  742.509384][T28210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  742.509398][T28210] RSP: 002b:00007f9ba4a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  742.509418][T28210] RAX: ffffffffffffffda RBX: 00007f9ba3e25fa0 RCX: 00007f9ba3b9fb19
[  742.509431][T28210] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[  742.509443][T28210] RBP: 00007f9ba4a89090 R08: 0000000000000000 R09: 0000000000000000
[  742.509453][T28210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  742.509464][T28210] R13: 00007f9ba3e26038 R14: 00007f9ba3e25fa0 R15: 00007ffdcf02b898
[  742.509496][T28210]  </TASK>
[  743.008789][   T30] audit: type=1107 audit(1794156696.938:54): pid=28219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Á`ŽK¹Åò'
[  743.136505][T28223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5218'.
[  743.150318][ T5634] block nbd8: Receive control failed (result -1)
[  743.308286][T28229] netlink: 'syz.0.5221': attribute type 8 has an invalid length.
[  743.339214][T28232] netlink: 'syz.4.5222': attribute type 1 has an invalid length.
[  743.373681][T28232] 8021q: adding VLAN 0 to HW filter on device bond21
[  743.406776][T28232] bond21: (slave veth7): Enslaving as an active interface with a down link
[  743.425198][T28232] bond5: (slave wlan1): Releasing active interface
[  743.434295][T28232] bond21: (slave wlan1): Opening slave failed
[  743.454670][T28236] netlink: 'syz.0.5221': attribute type 8 has an invalid length.
[  744.421895][T28364] ip_tables: iptables: counters copy to user failed while replacing table
[  744.462790][T28305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5233'.
[  744.464351][T28305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5233'.
[  744.491638][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5236'.
[  744.536739][T26730] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  744.536781][T26730] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  744.536809][T26730] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  744.536838][T26730] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  744.563391][T28381] pim6reg1: entered promiscuous mode
[  744.563424][T28381] pim6reg1: entered allmulticast mode
[  745.272202][T28412] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5242'.
[  745.774508][T28427] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5246'.
[  745.889697][T28434] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  746.230706][T28447] netlink: 'syz.1.5254': attribute type 3 has an invalid length.
[  746.230729][T28447] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5254'.
[  746.233350][T28447] netlink: 'syz.1.5254': attribute type 1 has an invalid length.
[  746.287703][T28443] ipt_REJECT: TCP_RESET invalid for non-tcp
[  746.318825][T28436] sock: sock_timestamping_bind_phc: sock not bind to device
[  746.648230][T28462] x_tables: duplicate underflow at hook 1
[  746.653119][T28462] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5256'.
[  746.653486][T28462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5256'.
[  746.709391][T28470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5257'.
[  746.752610][T28462] bond10: option primary_reselect: invalid value (133)
[  746.763073][T28462] bond10 (unregistering): Released all slaves
[  746.829784][T28477] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:0
[  746.870799][T28469] bridge0: port 4(veth0) entered blocking state
[  746.870983][T28469] bridge0: port 4(veth0) entered disabled state
[  746.871145][T28469] veth0: entered allmulticast mode
[  746.873386][T28469] veth0: entered promiscuous mode
[  746.874162][T28469] bridge0: port 4(veth0) entered blocking state
[  746.874273][T28469] bridge0: port 4(veth0) entered forwarding state
[  747.128210][T28486] xt_hashlimit: size too large, truncated to 1048576
[  747.163740][T28490] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  747.234024][T28481] bridge0: port 4(veth0) entered disabled state
[  747.234174][T28481] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.234497][T28481] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.276610][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  747.504398][T28496] SET target dimension over the limit!
[  747.791931][T28504] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  747.866250][T28504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5265'.
[  748.314448][T24935] wg2 speed is unknown, defaulting to 1000
[  748.314486][T24935] syz2: Port: 1 Link DOWN
[  748.361152][ T7798] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  748.361186][ T7798] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  748.361208][ T7798] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  748.361242][ T7798] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  748.361264][ T7798] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  748.361285][ T7798] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  748.361315][ T7798] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  748.361336][ T7798] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  748.361358][ T7798] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  748.361387][ T7798] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  748.361409][ T7798] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  748.361430][ T7798] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  749.542723][T28595] __nla_validate_parse: 3 callbacks suppressed
[  749.542743][T28595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5279'.
[  749.852435][T28605] bond7: entered allmulticast mode
[  749.852843][T28605] 8021q: adding VLAN 0 to HW filter on device bond7
[  749.993717][T28605] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  750.028075][T28605] macvlan4: entered allmulticast mode
[  750.028099][T28605] bond0: entered allmulticast mode
[  750.028112][T28605] bond_slave_0: entered allmulticast mode
[  750.028129][T28605] bond_slave_1: entered allmulticast mode
[  750.028195][T28605] bond_slave_0: entered promiscuous mode
[  750.028240][T28605] bond_slave_1: entered promiscuous mode
[  750.048328][T28605] bond7: (slave macvlan4): Enslaving as a backup interface with an up link
[  750.178492][T28614] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5281'.
[  750.184724][T28605] ip6gretap3: entered allmulticast mode
[  750.189784][T28605] bond7: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  750.210189][T28614] bond_slave_0: left promiscuous mode
[  750.210219][T28614] bond_slave_1: left promiscuous mode
[  750.287658][T28614] bond0 (unregistering): left allmulticast mode
[  750.287681][T28614] bond_slave_0: left allmulticast mode
[  750.287699][T28614] bond_slave_1: left allmulticast mode
[  750.417847][T28614] bond7: (slave macvlan4): Removing an active aggregator
[  750.417885][T28614] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  750.418312][T28614] bond7: (slave macvlan4): Releasing backup interface
[  750.418328][T28614] bond7: (slave macvlan4): the permanent HWaddr of slave - ca:59:e4:54:b5:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  750.436678][T28614] macvlan4 (unregistering): left allmulticast mode
[  751.190378][T28614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  751.429013][T28614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  751.568654][T28614] bond0 (unregistering): Released all slaves
[  751.765285][T28665] netlink: 'syz.0.5287': attribute type 1 has an invalid length.
[  752.008641][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.008755][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.008840][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.008920][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.008994][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009067][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009148][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009226][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009307][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009384][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009466][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009545][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009625][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009711][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009793][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009872][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.009953][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.010030][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.011638][T28690] tun0: tun_chr_ioctl cmd 1074025681
[  752.013799][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.013885][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.013966][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014043][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014133][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014212][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014291][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014392][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014471][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014550][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014630][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014713][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014790][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014867][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.014947][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.015024][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.015101][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.015176][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.025567][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.025665][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.025747][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.025820][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.025893][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.025970][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.026042][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.026114][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.027398][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.027477][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.027551][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.027625][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.027707][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.027784][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.027857][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.027930][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.028003][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.028082][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.030340][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.030429][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.030506][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.030583][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.030656][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.030759][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.030836][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.030909][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.030983][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.031055][T28689] tun0: tun_chr_ioctl cmd 1074025673
[  752.191994][T28694] tc_dump_action: action bad kind
[  752.202396][T28694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5293'.
[  752.435812][T28697] openvswitch: netlink: IP tunnel dst address not specified
[  752.657258][T28708] batman_adv: batadv0: Adding interface: veth0
[  752.657276][T28708] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  752.657303][T28708] batman_adv: batadv0: Interface activated: veth0
[  752.941425][T28715] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5297'.
[  752.941447][T28715] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5297'.
[  753.748172][T28736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5301'.
[  753.748325][T28737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5301'.
[  753.869034][T28738] netlink: 'syz.4.5301': attribute type 2 has an invalid length.
[  753.869055][T28738] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5301'.
[  754.001789][T28741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5302'.
[  754.154624][T28751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5304'.
[  754.222754][T28751] 8021q: adding VLAN 0 to HW filter on device bond22
[  754.466329][T28771] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  754.611649][T28776] __nla_validate_parse: 5 callbacks suppressed
[  754.611668][T28776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5312'.
[  754.682540][T28774] netlink: 'syz.2.5310': attribute type 3 has an invalid length.
[  754.682562][T28774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5310'.
[  755.212464][T28814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5320'.
[  755.318198][T28835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5325'.
[  755.423840][T28843] FAULT_INJECTION: forcing a failure.
[  755.423840][T28843] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  755.423869][T28843] CPU: 1 UID: 0 PID: 28843 Comm: syz.4.5327 Not tainted syzkaller #0 PREEMPT(full) 
[  755.423889][T28843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  755.423899][T28843] Call Trace:
[  755.423907][T28843]  <TASK>
[  755.423915][T28843]  dump_stack_lvl+0xe8/0x150
[  755.423951][T28843]  should_fail_ex+0x3eb/0x540
[  755.423978][T28843]  _copy_to_user+0x31/0xb0
[  755.424004][T28843]  bpf_log_attr_finalize+0x124/0x1e0
[  755.424027][T28843]  ? __pfx_bpf_log_attr_finalize+0x10/0x10
[  755.424050][T28843]  ? print_verification_stats+0x730/0x8f0
[  755.424074][T28843]  ? ktime_get+0x1f5/0x220
[  755.424099][T28843]  bpf_check+0x20a7/0x34e0
[  755.424131][T28843]  ? ktime_get_with_offset+0x93/0x2d0
[  755.424154][T28843]  ? ktime_get_with_offset+0x93/0x2d0
[  755.424179][T28843]  ? __pfx_bpf_check+0x10/0x10
[  755.424201][T28843]  ? bpf_obj_name_cpy+0x194/0x1e0
[  755.424228][T28843]  bpf_prog_load+0x14da/0x1c60
[  755.424259][T28843]  ? __pfx_bpf_prog_load+0x10/0x10
[  755.424302][T28843]  ? __might_fault+0xaf/0x130
[  755.424329][T28843]  __sys_bpf+0xd86/0xe00
[  755.424356][T28843]  ? __pfx___sys_bpf+0x10/0x10
[  755.424386][T28843]  ? __fget_files+0x2a/0x420
[  755.424426][T28843]  ? ksys_write+0x242/0x270
[  755.424453][T28843]  ? __pfx_ksys_write+0x10/0x10
[  755.424476][T28843]  ? handle_softirqs+0x6d0/0x8d0
[  755.424504][T28843]  __x64_sys_bpf+0xba/0xd0
[  755.424532][T28843]  do_syscall_64+0x166/0x520
[  755.424555][T28843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.424572][T28843]  ? clear_bhb_loop+0x70/0xc0
[  755.424594][T28843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.424611][T28843] RIP: 0033:0x7f1098f9fb19
[  755.424627][T28843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  755.424641][T28843] RSP: 002b:00007f1099f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  755.424660][T28843] RAX: ffffffffffffffda RBX: 00007f1099225fa0 RCX: 00007f1098f9fb19
[  755.424673][T28843] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[  755.424684][T28843] RBP: 00007f1099f06090 R08: 0000000000000000 R09: 0000000000000000
[  755.424694][T28843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  755.424704][T28843] R13: 00007f1099226038 R14: 00007f1099225fa0 R15: 00007ffcbce83eb8
[  755.424734][T28843]  </TASK>
[  755.546176][T28845] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5328'.
[  755.777703][T28849] syzkaller0: left promiscuous mode
[  755.781452][T28849] bridge11: left promiscuous mode
[  755.781585][T28849] bridge12: left promiscuous mode
[  755.781706][T28849] bridge13: left promiscuous mode
[  755.781838][T28849] bridge14: left promiscuous mode
[  755.781958][T28849] bridge15: left promiscuous mode
[  755.782076][T28849] bridge16: left promiscuous mode
[  755.782194][T28849] bridge17: left promiscuous mode
[  755.784029][T28849] bridge18: left promiscuous mode
[  755.784156][T28849] bridge19: left promiscuous mode
[  755.784277][T28849] bridge20: left promiscuous mode
[  755.784416][T28849] bridge21: left promiscuous mode
[  755.784537][T28849] bridge22: left promiscuous mode
[  755.784655][T28849] bridge23: left promiscuous mode
[  755.784786][T28849] bridge24: left promiscuous mode
[  755.784905][T28849] bridge25: left promiscuous mode
[  755.785024][T28849] bridge26: left promiscuous mode
[  755.785142][T28849] bridge27: left promiscuous mode
[  755.785262][T28849] bridge28: left promiscuous mode
[  755.857541][T28849] bridge29: left promiscuous mode
[  755.857682][T28849] bridge30: left promiscuous mode
[  755.857798][T28849] bridge31: left promiscuous mode
[  755.857911][T28849] bridge32: left promiscuous mode
[  755.858028][T28849] bridge33: left promiscuous mode
[  755.858140][T28849] bridge34: left promiscuous mode
[  755.858259][T28849] bridge35: left promiscuous mode
[  755.858374][T28849] bridge36: left promiscuous mode
[  755.858551][T28849] bridge37: left promiscuous mode
[  755.858665][T28849] bridge38: left promiscuous mode
[  756.083668][T28865] xt_nfacct: accounting object `' does not exist
[  756.663380][T28906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5344'.
[  756.703945][T28908] syzkaller0: entered promiscuous mode
[  756.703969][T28908] syzkaller0: entered allmulticast mode
[  756.844987][T28906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5344'.
[  757.504682][T28953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5353'.
[  757.504704][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5353'.
[  757.548797][T28958] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5355'.
[  758.280934][T28985] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  758.517801][T28994] netlink: 'syz.0.5363': attribute type 1 has an invalid length.
[  759.638179][T29041] ip_tables: iptables: counters copy to user failed while replacing table
[  759.691386][T29046] __nla_validate_parse: 4 callbacks suppressed
[  759.691417][T29046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5378'.
[  759.733394][T29041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5376'.
[  759.771158][T29041] netlink: 'syz.4.5376': attribute type 16 has an invalid length.
[  759.771182][T29041] netlink: 'syz.4.5376': attribute type 17 has an invalid length.
[  759.906158][T29041] 8021q: adding VLAN 0 to HW filter on device bond0
[  759.913795][T29041] 8021q: adding VLAN 0 to HW filter on device team0
[  759.931828][T29041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  760.049582][T29041] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  760.439909][T29082] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5389'.
[  760.444902][T29082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5389'.
[  760.448855][T29079] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  760.608710][T29091] netlink: 'syz.1.5393': attribute type 1 has an invalid length.
[  760.608732][T29091] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5393'.
[  760.645762][T29093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5390'.
[  761.144979][T29119] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5396'.
[  761.145006][T29119] tipc: Enabling of bearer <uUp:s> rejected, media not registered
[  761.415581][T29135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5402'.
[  761.540477][T29139] sch_tbf: peakrate 8 is lower than or equals to rate 1025 !
[  761.617541][T29143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5404'.
[  761.636735][T29143] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  761.891511][T29155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5407'.
[  762.019904][T29153] netlink: 'syz.3.5406': attribute type 21 has an invalid length.
[  762.019989][T29153] netlink: 'syz.3.5406': attribute type 4 has an invalid length.
[  762.020003][T29153] netlink: 'syz.3.5406': attribute type 5 has an invalid length.
[  762.148847][T29168] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  762.356285][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  762.356535][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  762.356609][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  762.375073][ T7802] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  762.449837][T29197] tipc: Started in network mode
[  762.449867][T29197] tipc: Node identity 02232f9bee36, cluster identity 4711
[  762.450009][T29197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  762.450570][T29197] syzkaller0: entered promiscuous mode
[  762.450586][T29197] syzkaller0: entered allmulticast mode
[  762.484820][T29197] tipc: Resetting bearer <eth:syzkaller0>
[  762.501231][T29196] tipc: Resetting bearer <eth:syzkaller0>
[  762.526258][T29196] tipc: Disabling bearer <eth:syzkaller0>
[  763.001395][T29216] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  763.106469][T29224] netlink: 'syz.0.5425': attribute type 1 has an invalid length.
[  763.321724][T29216] bond10 (unregistering): Released all slaves
[  763.392734][T29226] xt_connbytes: Forcing CT accounting to be enabled
[  763.922071][T29256] netlink: 'syz.0.5433': attribute type 30 has an invalid length.
[  763.923478][T29259] netlink: 'syz.0.5433': attribute type 30 has an invalid length.
[  763.986069][T29256] bond9: option arp_missed_max: invalid value (0)
[  763.986101][T29256] bond9: option arp_missed_max: allowed values 1 - 255
[  763.987712][T29256] bond9 (unregistering): Released all slaves
[  764.141699][T29259] bond9: option arp_missed_max: invalid value (0)
[  764.141722][T29259] bond9: option arp_missed_max: allowed values 1 - 255
[  764.161563][T29259] bond9 (unregistering): Released all slaves
[  764.261634][T29256] syzkaller0: entered promiscuous mode
[  764.263190][T29278] bond16: entered allmulticast mode
[  764.263770][T29278] 8021q: adding VLAN 0 to HW filter on device bond16
[  764.351073][T29278] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  764.359515][T29278] macvlan0: entered allmulticast mode
[  764.359537][T29278] bond0: entered allmulticast mode
[  764.359559][T29278] bond_slave_0: entered allmulticast mode
[  764.359622][T29278] bond_slave_0: entered promiscuous mode
[  764.370584][T29278] bond16: (slave macvlan0): Enslaving as an active interface with an up link
[  764.428378][T29278] ip6gretap1: entered allmulticast mode
[  764.428937][T29278] bond16: (slave ip6gretap1): Enslaving as an active interface with an up link
[  764.451873][T29278] bond_slave_0: left promiscuous mode
[  764.487514][T29278] bond0 (unregistering): left allmulticast mode
[  764.487539][T29278] bond_slave_0: left allmulticast mode
[  764.515064][T29278] bond16: (slave macvlan0): Releasing backup interface
[  764.515089][T29278] bond16: (slave macvlan0): the permanent HWaddr of slave - 5e:d9:a1:91:25:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  764.536218][T29278] macvlan0 (unregistering): left allmulticast mode
[  764.584588][T29278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  764.616558][T29278] bond0 (unregistering): Released all slaves
[  764.688426][ T7798] smbdirect: ib_dev[syz1] removed
[  764.732000][T29300] __nla_validate_parse: 9 callbacks suppressed
[  764.732043][T29300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5443'.
[  764.733382][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5443'.
[  764.773320][T13193] infiniband syz1: ib_query_port failed (-19)
[  765.156626][T29316] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5446'.
[  765.244070][T29335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5450'.
[  765.940584][T29357] syz.3.5455 (29357) used obsolete PPPIOCDETACH ioctl
[  766.015135][T29359] netlink: 'syz.0.5456': attribute type 2 has an invalid length.
[  766.042827][T29359] !;: entered promiscuous mode
[  766.300681][T29370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5459'.
[  766.419561][T29377] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  766.660261][T29382] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  766.742291][T29387] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5467'.
[  766.742313][T29387] tc_dump_action: action bad kind
[  766.935501][T29396] nbd: must specify a size in bytes for the device
[  766.936250][T29395] syzkaller0: entered promiscuous mode
[  766.936263][T29395] syzkaller0: entered allmulticast mode
[  766.981011][T29399] netlink: 'syz.4.5470': attribute type 8 has an invalid length.
[  767.123582][T29403] netlink: 'syz.1.5472': attribute type 6 has an invalid length.
[  767.549478][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5479'.
[  767.830901][T29436] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  767.855115][T29443] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  767.880183][T29436] netlink: 'syz.4.5484': attribute type 1 has an invalid length.
[  767.880205][T29436] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5484'.
[  768.069957][T29452] tipc: Failed to remove unknown binding: 66,0,2/16966:817758425/817758426
[  768.072095][T29451] tipc: Failed to remove unknown binding: 66,0,2/16966:817758425/817758426
[  768.729436][T29481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5499'.
[  768.731216][T29481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5499'.
[  768.848336][T29483] netlink: 'syz.4.5498': attribute type 6 has an invalid length.
[  768.848359][T29483] netlink: 'syz.4.5498': attribute type 5 has an invalid length.
[  769.449052][T29510] netlink: 'syz.0.5506': attribute type 1 has an invalid length.
[  769.569082][T29511] macvlan1: entered promiscuous mode
[  769.569266][T29511] macvlan1: entered allmulticast mode
[  769.877628][T29523] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  769.901405][T29523] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  770.070147][T29530] ipt_REJECT: TCP_RESET invalid for non-tcp
[  770.194545][T29528] __nla_validate_parse: 6 callbacks suppressed
[  770.194577][T29528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5511'.
[  770.238098][T29537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5514'.
[  770.242880][T29528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5511'.
[  770.601537][T29547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5515'.
[  770.661232][T29542] netlink: 'syz.1.5515': attribute type 11 has an invalid length.
[  770.812394][T29556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5518'.
[  771.148440][T29566] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5520'.
[  771.183554][T29570] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  771.213525][T29570] bond9 (unregistering): Released all slaves
[  771.344880][T29576] TC_ACT_REPEAT abuse ?
[  771.448814][T29587] netlink: 'syz.1.5523': attribute type 19 has an invalid length.
[  771.490109][T29585] netlink: 'syz.2.5524': attribute type 1 has an invalid length.
[  771.585988][T29585] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5524'.
[  771.630936][T29585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5524'.
[  772.007310][T29609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5529'.
[  772.007428][T29609] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5529'.
[  776.845816][T29677] netlink: 'syz.3.5548': attribute type 1 has an invalid length.
[  776.845839][T29677] __nla_validate_parse: 1 callbacks suppressed
[  776.845850][T29677] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5548'.
[  776.915124][T29672] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5544'.
[  776.915157][T29672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5544'.
[  777.365034][T29693] xt_hashlimit: size too large, truncated to 1048576
[  777.431942][T29692] ip_tables: iptables: counters copy to user failed while replacing table
[  777.472157][T29706] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5554'.
[  777.495921][T29697] ip_tables: iptables: counters copy to user failed while replacing table
[  777.552358][T29697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5554'.
[  777.851025][T29719] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5558'.
[  777.853974][T29719] netlink: 'syz.1.5558': attribute type 1 has an invalid length.
[  777.952735][T29719] bond8: entered promiscuous mode
[  777.954843][T29719] 8021q: adding VLAN 0 to HW filter on device bond8
[  778.002138][T29720] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  778.002164][T29720] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  778.002178][T29720] bond8: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  778.187784][T29721] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  778.187810][T29721] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  778.489988][T29737] netlink: 'syz.4.5565': attribute type 1 has an invalid length.
[  778.529521][T29739] ip_tables: iptables: counters copy to user failed while replacing table
[  778.773468][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5568'.
[  778.933086][T29760] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5567'.
[  779.185093][T29765] tipc: Enabling of bearer <eth:ipvlan1> rejected, max 3 bearers permitted
[  779.328091][T29770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5573'.
[  779.421999][T29775] netlink: 'syz.2.5573': attribute type 12 has an invalid length.
[  779.568783][   T30] audit: type=1800 audit(1794156733.498:55): pid=29781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5574" name=8001 dev="tmpfs" ino=2913 res=0 errno=-22
[  780.024742][T29794] TC_ACT_REPEAT abuse ?
[  780.536929][T29817] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003
[  780.756945][T29823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5588'.
[  780.769733][T29823] team0: entered promiscuous mode
[  780.769756][T29823] team_slave_0: entered promiscuous mode
[  780.769976][T29823] team_slave_1: entered promiscuous mode
[  780.770151][T29823] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  780.771795][T29823] team0: entered allmulticast mode
[  780.771814][T29823] team_slave_0: entered allmulticast mode
[  780.771828][T29823] team_slave_1: entered allmulticast mode
[  780.771847][T29823] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  780.780815][T29823] 8021q: adding VLAN 0 to HW filter on device team0
[  780.781702][T29823] team0: Cannot enslave team device to itself
[  780.945697][T29823] xfrm0: entered promiscuous mode
[  780.945901][T29823] xfrm0: entered allmulticast mode
[  780.945918][T29823] team0: Device xfrm0 is of different type
[  782.317499][T29886] syzkaller1: entered promiscuous mode
[  782.317685][T29886] syzkaller1: entered allmulticast mode
[  783.359541][T29927] __nla_validate_parse: 1 callbacks suppressed
[  783.359562][T29927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5611'.
[  783.523466][T29932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5610'.
[  783.809518][T29943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5614'.
[  785.740104][T29967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5620'.
[  785.988114][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807884c400: rx timeout, send abort
[  786.488204][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807884c400: abort rx timeout. Force session deactivation
[  786.488454][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807884ec00: rx timeout, send abort
[  786.988493][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807884ec00: abort rx timeout. Force session deactivation
[  787.197820][T29972] netlink: 'syz.1.5622': attribute type 21 has an invalid length.
[  787.197843][T29972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5622'.
[  787.197924][T29972] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5622'.
[  787.398057][T29979] netlink: 'syz.0.5624': attribute type 3 has an invalid length.
[  787.398079][T29979] netlink: 'syz.0.5624': attribute type 1 has an invalid length.
[  787.398091][T29979] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5624'.
[  787.398221][T29979] NCSI netlink: No device for ifindex 0
[  787.849111][T29996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5629'.
[  787.849134][T29996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5629'.
[  788.143973][T30003] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  788.154726][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5628'.
[  788.488475][T30014] netlink: 'syz.1.5635': attribute type 2 has an invalid length.
[  788.488500][T30014] netlink: 'syz.1.5635': attribute type 2 has an invalid length.
[  788.495320][T30018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5636'.
[  788.619763][T30023] netlink: 660 bytes leftover after parsing attributes in process `syz.0.5638'.
[  789.559457][T30055] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5645'.
[  790.444349][T30096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5653'.
[  790.457436][T30097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5654'.
[  790.940930][T30109] syzkaller0: entered promiscuous mode
[  790.940953][T30109] syzkaller0: entered allmulticast mode
[  791.422785][T30091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'.
[  791.911442][T30124] IPVS: nq: FWM 3 0x00000003 - no destination available
[  791.913237][T30124] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5661'.
[  792.032629][T30127] netlink: 'syz.0.5662': attribute type 2 has an invalid length.
[  792.032653][T30127] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5662'.
[  792.037632][T30127] netlink: 'syz.0.5662': attribute type 2 has an invalid length.
[  792.037651][T30127] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5662'.
[  792.468457][T30144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5667'.
[  792.523785][T30143] syzkaller0: entered promiscuous mode
[  792.523809][T30143] syzkaller0: entered allmulticast mode
[  792.755993][T30147] SET target dimension over the limit!
[  793.158646][T30165] vxcan2: entered allmulticast mode
[  793.360232][T30181] ip_tables: iptables: counters copy to user failed while replacing table
[  793.952912][T30191] __nla_validate_parse: 2 callbacks suppressed
[  793.952932][T30191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5677'.
[  794.096616][T30196] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not 
[  794.096616][T30196] 
[  794.354460][T30205] caif0: tun_chr_ioctl cmd 2147767507
[  794.435692][T30210] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5680'.
[  794.883151][T30222] syzkaller0: entered promiscuous mode
[  794.883174][T30222] syzkaller0: entered allmulticast mode
[  795.033494][T30230] netlink: 'syz.1.5686': attribute type 1 has an invalid length.
[  795.241397][T30237] gretap1: entered allmulticast mode
[  795.244369][T30237] bond9: (slave gretap1): making interface the new active one
[  795.245184][T30237] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  795.357485][ T4999] udevd[4999]: worker [27784] /devices/virtual/block/nbd2 is taking a long time
[  795.441944][T30250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5690'.
[  795.474634][T30252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5691'.
[  795.474961][T30252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5691'.
[  795.504728][T30250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5690'.
[  796.033467][T30267] netlink: 47 bytes leftover after parsing attributes in process `syz.3.5694'.
[  796.242253][T30274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5695'.
[  796.600598][T30284] netlink: 'syz.3.5697': attribute type 15 has an invalid length.
[  796.600622][T30284] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5697'.
[  796.629531][T30286] netlink: 'syz.3.5697': attribute type 15 has an invalid length.
[  796.629552][T30286] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5697'.
[  799.231704][T30312] netlink: 'syz.3.5701': attribute type 16 has an invalid length.
[  799.231730][T30312] netlink: 'syz.3.5701': attribute type 17 has an invalid length.
[  799.324903][T30312] 0ªX¹¦Dö»: left allmulticast mode
[  799.542071][T30312] bridge0: left promiscuous mode
[  799.833730][T30312] xfrm0: left promiscuous mode
[  799.833754][T30312] xfrm0: left allmulticast mode
[  799.873896][T30312] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  799.901528][T26732] bridge0: port 4(veth0) entered blocking state
[  799.901637][T26732] bridge0: port 4(veth0) entered forwarding state
[  799.903292][T26732] bridge0: port 1(bridge_slave_0) entered blocking state
[  799.903421][T26732] bridge0: port 1(bridge_slave_0) entered forwarding state
[  799.942148][T26732] bridge0: port 2(bridge_slave_1) entered blocking state
[  799.942272][T26732] bridge0: port 2(bridge_slave_1) entered forwarding state
[  799.978843][T13193] wg2 speed is unknown, defaulting to 1000
[  799.978883][T13193] syz2: Port: 1 Link ACTIVE
[  800.685971][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.685971][T30345] Use struct sctp_assoc_value instead
[  800.686021][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.686021][T30345] Use struct sctp_assoc_value instead
[  800.686059][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.686059][T30345] Use struct sctp_assoc_value instead
[  800.686118][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.686118][T30345] Use struct sctp_assoc_value instead
[  800.686155][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.686155][T30345] Use struct sctp_assoc_value instead
[  800.686218][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.686218][T30345] Use struct sctp_assoc_value instead
[  800.686256][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.686256][T30345] Use struct sctp_assoc_value instead
[  800.686293][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.686293][T30345] Use struct sctp_assoc_value instead
[  800.686331][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.686331][T30345] Use struct sctp_assoc_value instead
[  800.686369][T30345] sctp: [Deprecated]: syz.3.5710 (pid 30345) Use of int in max_burst socket option deprecated.
[  800.686369][T30345] Use struct sctp_assoc_value instead
[  801.383501][T30374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5719'.
[  801.441413][T30375] netlink: 'syz.1.5719': attribute type 3 has an invalid length.
[  801.441434][T30375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5719'.
[  801.739870][T30377] syzkaller1: entered promiscuous mode
[  801.739895][T30377] syzkaller1: entered allmulticast mode
[  802.136582][T30385] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5723'.
[  802.390897][T30399] nbd: socks must be embedded in a SOCK_ITEM attr
[  802.729890][T30407] netlink: 'syz.0.5729': attribute type 4 has an invalid length.
[  802.746632][T30409] netlink: 820 bytes leftover after parsing attributes in process `syz.3.5730'.
[  802.746717][T30409] netlink: 820 bytes leftover after parsing attributes in process `syz.3.5730'.
[  802.751171][T30407] netlink: 'syz.0.5729': attribute type 4 has an invalid length.
[  802.806471][T30410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5728'.
[  802.908736][T30412] bridge6: port 1(erspan0) entered blocking state
[  802.908852][T30412] bridge6: port 1(erspan0) entered disabled state
[  802.909001][T30412] erspan0: entered allmulticast mode
[  802.915201][T30412] erspan0: entered promiscuous mode
[  803.363760][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  803.378954][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  803.389191][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  803.406050][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  803.409277][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  803.496599][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  803.501161][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  803.505257][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  803.535714][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  803.539774][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  804.430230][T30451] syz_tun: left allmulticast mode
[  804.514272][T30453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5741'.
[  804.587034][T30457] netlink: 'syz.3.5742': attribute type 10 has an invalid length.
[  805.199892][T30423] rxe_eth0 speed is unknown, defaulting to 1000
[  805.203566][T30484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5746'.
[  805.599352][ T5634] Bluetooth: hci0: command tx timeout
[  805.705736][T30494] ip6gretap0: entered allmulticast mode
[  805.746256][T30494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5749'.
[  806.207150][   T30] audit: type=1804 audit(1794156760.138:56): pid=30520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5754" name="/newroot/554/cgroup.controllers" dev="tmpfs" ino=2852 res=1 errno=0
[  806.207574][   T30] audit: type=1800 audit(1794156760.138:57): pid=30520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5754" name="cgroup.controllers" dev="tmpfs" ino=2852 res=0 errno=-22
[  806.222788][T30423] lo speed is unknown, defaulting to 1000
[  806.229291][T30423] wg2 speed is unknown, defaulting to 1000
[  806.517074][T30520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5754'.
[  807.675449][ T5634] Bluetooth: hci0: command tx timeout
[  807.688343][T30423] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.689284][T30423] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.689457][T30423] bridge_slave_0: entered allmulticast mode
[  807.691904][T30423] bridge_slave_0: entered promiscuous mode
[  807.702553][T30423] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.702728][T30423] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.702896][T30423] bridge_slave_1: entered allmulticast mode
[  807.704718][T30423] bridge_slave_1: entered promiscuous mode
[  807.739694][T30423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  807.743111][T30423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  807.783121][T30423] team0: Port device team_slave_0 added
[  807.787839][T30423] team0: Port device team_slave_1 added
[  807.830019][T30423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  807.830037][T30423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.830058][T30423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  807.832165][T30423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  807.832182][T30423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.832206][T30423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  807.892066][T30423] hsr_slave_0: entered promiscuous mode
[  807.893119][T30423] hsr_slave_1: entered promiscuous mode
[  808.322712][T30687] netlink: 'syz.1.5759': attribute type 10 has an invalid length.
[  808.762779][T30497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  809.259859][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5762'.
[  809.275020][T30423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  809.390912][T30764] dummy0: mtu less than device minimum
[  809.705812][T30423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  809.757785][ T5634] Bluetooth: hci0: command tx timeout
[  809.968319][T30423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  810.120409][T30775] ip6erspan0: entered allmulticast mode
[  810.347144][T30790] Bluetooth: MGMT ver 1.23
[  810.746608][T30801] ip_tables: iptables: counters copy to user failed while replacing table
[  811.464545][T30810] IPVS: length: 4096 != 8
[  811.845297][ T5634] Bluetooth: hci0: command tx timeout
[  812.361491][T30832] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  817.650559][T30423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  818.158693][T30841] netlink: 'syz.1.5777': attribute type 1 has an invalid length.
[  818.333418][T30844] syzkaller1: entered promiscuous mode
[  818.333456][T30844] syzkaller1: entered allmulticast mode
[  818.909402][T30869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5782'.
[  819.094898][T30888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5780'.
[  819.110379][T30859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5780'.
[  819.748063][T30423] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  819.778782][T30423] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  819.779860][T30423] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  819.809483][T30423] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  819.816420][T30423] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  819.851690][T30423] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  819.869726][T30423] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  819.902347][T30423] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  820.176763][T30907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5786'.
[  820.176794][T30907] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5786'.
[  820.303508][T30924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5788'.
[  820.350442][T30924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5788'.
[  820.374726][T30423] 8021q: adding VLAN 0 to HW filter on device bond0
[  820.419927][T30926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5790'.
[  820.476973][T30423] 8021q: adding VLAN 0 to HW filter on device team0
[  820.532846][T23341] bridge0: port 1(bridge_slave_0) entered blocking state
[  820.532956][T23341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  820.582790][T26732] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.582902][T26732] bridge0: port 2(bridge_slave_1) entered forwarding state
[  820.821585][T30939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5794'.
[  820.897133][T30941] sctp: [Deprecated]: syz.1.5794 (pid 30941) Use of struct sctp_assoc_value in delayed_ack socket option.
[  820.897133][T30941] Use struct sctp_sack_info instead
[  820.904078][T30941] sctp: [Deprecated]: syz.1.5794 (pid 30941) Use of struct sctp_assoc_value in delayed_ack socket option.
[  820.904078][T30941] Use struct sctp_sack_info instead
[  821.028042][T30939] 8021q: adding VLAN 0 to HW filter on device bond10
[  821.629176][T30959] sctp_setsockopt_maxburst: 23 callbacks suppressed
[  821.629197][T30959] sctp: [Deprecated]: syz.2.5798 (pid 30959) Use of int in max_burst socket option deprecated.
[  821.629197][T30959] Use struct sctp_assoc_value instead
[  821.683084][T30959] sctp: [Deprecated]: syz.2.5798 (pid 30959) Use of int in max_burst socket option deprecated.
[  821.683084][T30959] Use struct sctp_assoc_value instead
[  821.901080][T30423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  821.959685][T30423] veth0_vlan: entered promiscuous mode
[  821.971318][T30423] veth1_vlan: entered promiscuous mode
[  822.010508][T30423] veth0_macvtap: entered promiscuous mode
[  822.016746][T30423] veth1_macvtap: entered promiscuous mode
[  822.036581][T30423] batman_adv: batadv0: Interface activated: batadv_slave_0
[  822.047725][T30423] batman_adv: batadv0: Interface activated: batadv_slave_1
[  822.069371][ T7802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  822.069414][ T7802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  822.069446][ T7802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  822.069476][ T7802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  822.241340][ T7806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  822.241362][ T7806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  822.288326][ T7806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  822.288347][ T7806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  839.445953][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  886.156811][   T32] INFO: task kworker/0:1H:2543 blocked for more than 143 seconds.
[  886.156837][   T32]       Not tainted syzkaller #0
[  886.156847][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  886.156855][   T32] task:kworker/0:1H    state:D stack:27016 pid:2543  tgid:2543  ppid:2      task_flags:0x4208060 flags:0x00080000
[  886.156903][   T32] Workqueue: kblockd blk_mq_run_work_fn
[  886.156931][   T32] Call Trace:
[  886.156939][   T32]  <TASK>
[  886.156953][   T32]  __schedule+0x17dd/0x5830
[  886.156993][   T32]  ? __pfx___schedule+0x10/0x10
[  886.157027][   T32]  ? __pfx___schedule+0x10/0x10
[  886.157060][   T32]  ? schedule+0x90/0x2b0
[  886.157086][   T32]  schedule+0x164/0x2b0
[  886.157111][   T32]  schedule_timeout+0x152/0x2c0
[  886.157131][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[  886.157150][   T32]  ? __pfx_process_timeout+0x10/0x10
[  886.157178][   T32]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  886.157200][   T32]  ? prepare_to_wait_event+0x3e4/0x4d0
[  886.157217][   T32]  ? prepare_to_wait_event+0x440/0x4d0
[  886.157254][   T32]  nbd_queue_rq+0x96a/0xff0
[  886.157289][   T32]  ? __pfx_nbd_queue_rq+0x10/0x10
[  886.157311][   T32]  ? __pfx_autoremove_wake_function+0x10/0x10
[  886.157351][   T32]  blk_mq_dispatch_rq_list+0x499/0x1990
[  886.157395][   T32]  ? sbitmap_get+0x229/0x390
[  886.157416][   T32]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  886.157445][   T32]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  886.157481][   T32]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  886.157521][   T32]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  886.157551][   T32]  ? lock_acquire+0x115/0x350
[  886.157579][   T32]  ? process_scheduled_works+0x97a/0x1630
[  886.157610][   T32]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  886.157633][   T32]  ? blk_mq_run_work_fn+0x13f/0x2f0
[  886.157655][   T32]  blk_mq_run_work_fn+0x167/0x2f0
[  886.157678][   T32]  ? process_scheduled_works+0x97a/0x1630
[  886.157705][   T32]  process_scheduled_works+0xc3d/0x1630
[  886.157764][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  886.157799][   T32]  ? assign_work+0x3cf/0x5d0
[  886.157831][   T32]  worker_thread+0xa47/0xfb0
[  886.157873][   T32]  ? __kthread_parkme+0x71/0x1f0
[  886.157903][   T32]  kthread+0x38b/0x480
[  886.157925][   T32]  ? __pfx_worker_thread+0x10/0x10
[  886.157964][   T32]  ? __pfx_kthread+0x10/0x10
[  886.157987][   T32]  ret_from_fork+0x514/0xb70
[  886.158013][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  886.158034][   T32]  ? __switch_to+0xc78/0x1410
[  886.158066][   T32]  ? __pfx_kthread+0x10/0x10
[  886.158089][   T32]  ret_from_fork_asm+0x1a/0x30
[  886.158127][   T32]  </TASK>
[  886.159941][   T32] 
[  886.159941][   T32] Showing all locks held in the system:
[  886.159955][   T32] locks held by ksoftirqd/1/23: 1, last CPU#1:
[  886.159973][   T32]  #0: ffff8880b8328618 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_interrupt+0xfd/0xaa0
[  886.160031][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  886.160044][   T32]  #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  886.160101][   T32] locks held by kworker/0:1H/2543: 4, on CPU#0:
[  886.160115][   T32]  #0: ffff8880216e7948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  886.160165][   T32]  #1: ffffc90008dcfc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  886.160216][   T32]  #2: ffff8880281f2918 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x13f/0x2f0
[  886.160269][   T32]  #3: ffff8880284d51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  886.160322][   T32] locks held by getty/5386: 2, on CPU#0:
[  886.160334][   T32]  #0: ffff888036fa50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  886.160381][   T32]  #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  886.160429][   T32] locks held by kworker/u8:25/7802: 4, last CPU#0:
[  886.160443][   T32]  #0: ffff88802cbc8148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  886.160492][   T32]  #1: ffffc90005137c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  886.160560][   T32]  #2: ffff8880270d01c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0
[  886.160608][   T32]  #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x869/0xfc0
[  886.160721][   T32] locks held by udevd/27784: 1, on CPU#0:
[  886.160734][   T32]  #0: ffff888023718350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  886.160789][   T32] 
[  886.160795][   T32] =============================================
[  886.160795][   T32] 
[  886.160810][   T32] NMI backtrace for cpu 0
[  886.160823][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  886.160843][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  886.160853][   T32] Call Trace:
[  886.160862][   T32]  <TASK>
[  886.160871][   T32]  dump_stack_lvl+0xe8/0x150
[  886.160900][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  886.160922][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  886.160946][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  886.160970][   T32]  sys_info+0x135/0x170
[  886.160986][   T32]  watchdog+0x1073/0x10f0
[  886.161019][   T32]  ? watchdog+0x209/0x10f0
[  886.161051][   T32]  kthread+0x38b/0x480
[  886.161072][   T32]  ? __pfx_watchdog+0x10/0x10
[  886.161094][   T32]  ? __pfx_kthread+0x10/0x10
[  886.161117][   T32]  ret_from_fork+0x514/0xb70
[  886.161140][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  886.161161][   T32]  ? __switch_to+0xc78/0x1410
[  886.161191][   T32]  ? __pfx_kthread+0x10/0x10
[  886.161214][   T32]  ret_from_fork_asm+0x1a/0x30
[  886.161255][   T32]  </TASK>
[  886.161263][   T32] Sending NMI from CPU 0 to CPUs 1:
[  886.161291][    C1] NMI backtrace for cpu 1
[  886.161304][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  886.161324][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  886.161335][    C1] RIP: 0010:__lock_acquire+0x30b/0x2de0
[  886.161361][    C1] Code: 00 0f 85 ad fe ff ff 44 89 3c 24 44 89 6c 24 40 89 6c 24 28 8b bc 24 48 01 00 00 8b ac 24 38 01 00 00 4c 8b 84 24 28 01 00 00 <4c> 8b 7c 24 08 4d 8d af b0 0b 00 00 41 83 fe 31 48 89 74 24 20 0f
[  886.161377][    C1] RSP: 0018:ffffc90000a08c00 EFLAGS: 00000046
[  886.161393][    C1] RAX: 00000000000008b1 RBX: 0000000000000000 RCX: ffffffff95881990
[  886.161407][    C1] RDX: 0000000000000000 RSI: 0000000000000059 RDI: 0000000007b8c18a
[  886.161419][    C1] RBP: 0000000000000000 R08: ffffffff81b62267 R09: 0000000000000001
[  886.161431][    C1] R10: dffffc0000000000 R11: fffffbfff237bf38 R12: 0000000000000000
[  886.161444][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[  886.161456][    C1] FS:  0000000000000000(0000) GS:ffff88812350a000(0000) knlGS:0000000000000000
[  886.161471][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  886.161485][    C1] CR2: 000055daa333c660 CR3: 000000000ff48000 CR4: 00000000003526f0
[  886.161501][    C1] Call Trace:
[  886.161507][    C1]  <IRQ>
[  886.161521][    C1]  ? __lock_acquire+0x747/0x2de0
[  886.161550][    C1]  lock_acquire+0x115/0x350
[  886.161572][    C1]  ? ktime_get_update_offsets_now+0x87/0x3f0
[  886.161604][    C1]  ? ktime_get_update_offsets_now+0x87/0x3f0
[  886.161632][    C1]  ? ktime_get_update_offsets_now+0x87/0x3f0
[  886.161659][    C1]  seqcount_lockdep_reader_access+0x55/0x100
[  886.161683][    C1]  ? ktime_get_update_offsets_now+0x87/0x3f0
[  886.161711][    C1]  ktime_get_update_offsets_now+0x87/0x3f0
[  886.161749][    C1]  hrtimer_interrupt+0x543/0xaa0
[  886.161784][    C1]  __sysvec_apic_timer_interrupt+0x102/0x430
[  886.161810][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  886.161833][    C1]  </IRQ>
[  886.161839][    C1]  <TASK>
[  886.161846][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  886.161866][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  886.161888][    C1] Code: f7 e8 3d 81 9c f5 f7 c3 00 02 00 00 74 05 e8 c0 23 c9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 74 75 8d f5 65 48 8b 05 ac 21 d9 08 48 85 c0 74 18 5b 41 5e c3
[  886.161904][    C1] RSP: 0018:ffffc900001d7cc0 EFLAGS: 00000206
[  886.161919][    C1] RAX: 0000000000000006 RBX: 0000000000000287 RCX: 8000000000000101
[  886.161931][    C1] RDX: 0000000000000000 RSI: ffffffff8e6a8ac6 RDI: 0000000000000001
[  886.161944][    C1] RBP: 8000000000000100 R08: ffffffff91bdf9bf R09: 1ffffffff237bf37
[  886.161958][    C1] R10: dffffc0000000000 R11: fffffbfff237bf38 R12: 0000000000000008
[  886.161971][    C1] R13: 0000000000000009 R14: ffff8880b8328600 R15: 0000000000000001
[  886.161993][    C1]  handle_softirqs+0x265/0x8d0
[  886.162024][    C1]  run_ksoftirqd+0x36/0x60
[  886.162051][    C1]  smpboot_thread_fn+0x5f8/0xb30
[  886.162072][    C1]  ? smpboot_thread_fn+0x4e/0xb30
[  886.162094][    C1]  kthread+0x38b/0x480
[  886.162115][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  886.162132][    C1]  ? __pfx_kthread+0x10/0x10
[  886.162153][    C1]  ret_from_fork+0x514/0xb70
[  886.162175][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  886.162195][    C1]  ? __switch_to+0xc78/0x1410
[  886.162224][    C1]  ? __pfx_kthread+0x10/0x10
[  886.162244][    C1]  ret_from_fork_asm+0x1a/0x30
[  886.162271][    C1]  </TASK>
[  886.162393][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  887.050711][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  887.059822][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  887.069883][   T32] Call Trace:
[  887.073165][   T32]  <TASK>
[  887.076098][   T32]  vpanic+0x26f/0x710
[  887.080084][   T32]  panic+0xc5/0xd0
[  887.083803][   T32]  ? __pfx_panic+0x10/0x10
[  887.088215][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  887.093676][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  887.099063][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  887.105225][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  887.111397][   T32]  watchdog+0x10e7/0x10f0
[  887.115752][   T32]  ? watchdog+0x209/0x10f0
[  887.120184][   T32]  kthread+0x38b/0x480
[  887.124256][   T32]  ? __pfx_watchdog+0x10/0x10
[  887.128941][   T32]  ? __pfx_kthread+0x10/0x10
[  887.133541][   T32]  ret_from_fork+0x514/0xb70
[  887.138136][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  887.143247][   T32]  ? __switch_to+0xc78/0x1410
[  887.147934][   T32]  ? __pfx_kthread+0x10/0x10
[  887.152535][   T32]  ret_from_fork_asm+0x1a/0x30
[  887.157329][   T32]  </TASK>
[  887.160676][   T32] Kernel Offset: disabled
[  887.165002][   T32] Rebooting in 86400 seconds..