last executing test programs:

3m18.178755303s ago: executing program 1 (id=6962):
r0 = socket$inet(0x2, 0x3, 0x2) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x50) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
getsockopt$inet_buf(r1, 0x118, 0x1, 0x0, &(0x7f00000003c0)) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@local, @local, @remote}, 0xc) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) (async)
close(0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x400000, 0x200}, 0x48) (async)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000000), 0x4) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x4, 0x0, &(0x7f0000000040)) (async)
unshare(0x6020400) (async)
r7 = socket(0x1a, 0x80007, 0x0)
connect$netlink(r7, &(0x7f00000014c0)=@proc, 0xa) (async)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), r9)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fedbdf2502000000090001007b"], 0x34}, 0x1, 0x0, 0x0, 0x850c081d989709a5}, 0x40000) (async)
getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4)

3m17.901531084s ago: executing program 1 (id=6967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000040000701fefeffff00000000017c000008001a00", @ANYRES32=r0, @ANYBLOB="14000180efff0500804a0047cf3655000000008000000000000000006ea8f551c2f7e9725eebd1b4e38b6a1b4a5903414d64b09edd218e5db48983bca61567f89cf5a1"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
unshare(0x40600)
tee(r2, r2, 0x66f, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="bec145116657edebf04dffc24f5d9b977f5d969101596267f6e83ff1cd8a8ae7250741f39a911daee4a7b079776db5c5faddbd694aff770649471a3451894e395d3320000a1f80e09a8462e56ee2e6554f678233137dfa49aba3e57c3db1ab288e76bc32d21bf1a2eb3d91ba0954287e84b8ab3d37a65cf50dcd795b56f9690f7227cdf0e46a17dd416b614f44aa5fe25d6b0872b56531ccd126ffec3c258ef259d5011af17742c3b42404b59a4a7bf5cb128814532ee961d451060badd4024d18991c1cb061a61dd5ef3dd271c7e18978caf3740937a73e509431c7ccfab17e74ef84a46b62e2b4a9b7a1ca94a07a88eaa5e3f8f76eaf0ffff873f120ec9f15a76e301390c03b2a636959807b642269f3b0a7e900df4b34ea4b2c6b28e6640d7f8323d37d69fc8c495f6bc37da4715b70602bb7cc63fd826a8c6b7dd528b51674ca3c11b2149062712263a1a34123666077717e5bf68e72994ddbde8d3a22e23207b45471c44f80da26b6b8194d6919f7650dc26eb67f2588ecca06b2905eb1e76fe8c55854b6c3c45229284df7183dfdc17e7c1122837abf911913b6af2243c6db0394c4b1dc6ae3e7b0993689968c7d06ebd3ee4d3ca86d7562463444d95a6acd22b9065a1b45e4864bed2f09b6bf522619a9fdea7272267fc53aa23ac2eece6e4dc33d52e82f2755c33456c210c51d05c795f643c9922ef0d5020d4f40c741fb09f53e93d95c1b7eff7277b45e22901de5964961bef29d742ea72953bfb86cef42fd892a7de3b0b02c", 0xfffffffb, r7}, 0x23)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r7}, 0x38)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2c, r8, 0x15, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r12=>0x0})
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fddbdf251b00000008000300", @ANYRES32=r12, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x4008044)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r8, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x30}}, 0x8040)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x24, r5, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)={0x1c4, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeff}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1859}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e6ebe4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1945}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15fff0df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf37}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1734}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcf2521b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc80d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7894c881}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ae0ac2c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecb8d97}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54eae2a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a828ce8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1998e342}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1911bb7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x351300c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x531ec2da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2401c81d}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8800}, 0x4841)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3)
socketpair(0x25, 0x804, 0x7ff, &(0x7f0000000000))
r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x8, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x2, 0x4, 0xf, 0x80000000, [0x4006, 0x6]}})
sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r14, @ANYBLOB="090a29bd7000fddb00000000000001ff0676063800010000000142f0c230f715cec414dd8e932eaf4058de74e469f6aac07dadf2cae46baf56e94cd5a19f5b9de3b785a6151cce9a1235b9794f3da87cb8a18b0af3d614c08cb7b00e826f9a46ad490e6073ce0997737a28286984e3b143fea437c4b5b4909f8737979f"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20008010)

3m17.193662907s ago: executing program 1 (id=6975):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010400000200000000000000000009715fecd6a875f62b6085378841d641b848e1c772c60fec0c6828dfb0adf7f0abe7597f36b119f0b08555cb16e6ded8f41b80c13640e7f9de1aafb24324a4cb336388db1871b02dd0c49814444966c6f8", @ANYRES32=0x0, @ANYBLOB="03800000000000002000128008000100767469001400028008000500ffffffff08000100", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0)

3m16.934316869s ago: executing program 1 (id=6979):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x20000010)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000100)=0xfffffffffffffdde)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', <r6=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@remote, 0x4e20, 0x0, 0x4e24, 0x21, 0x2, 0x180, 0x20, 0x2b, r6, r7}, {0xb, 0xffffffff, 0x9, 0x7e92, 0x100, 0x8fc, 0xe5, 0x6}, {0x7, 0xfffffffffffffffb, 0x90, 0x8}, 0x9, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in6=@private1, 0x4d5, 0x3c}, 0x0, @in=@empty, 0x0, 0x2, 0x3, 0x7, 0x5, 0x7ff, 0xb}}, 0xe8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES8=r8, @ANYRESOCT=r2], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x1d7f628cf4132822)

3m16.597039646s ago: executing program 1 (id=6984):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async, rerun: 64)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x80}]}}]}, 0x4c}}, 0x800) (async, rerun: 32)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) (async)
recvmsg$qrtr(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000002c0)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100)

3m16.449759062s ago: executing program 1 (id=6985):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7331c94b}]}}]}, 0x38}}, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r10, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x18}}], 0x2, 0x20004086)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r11=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000000c0)={r11, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r11, 0x101, 0x4, [0x68, 0x1, 0xe5e4, 0x9]}, 0x10)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

3m1.00360961s ago: executing program 32 (id=6985):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7331c94b}]}}]}, 0x38}}, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r10, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x18}}], 0x2, 0x20004086)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r11=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000000c0)={r11, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r11, 0x101, 0x4, [0x68, 0x1, 0xe5e4, 0x9]}, 0x10)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

1m33.947120166s ago: executing program 0 (id=8005):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000022c0)=""/4096, 0x1a, 0x1000, 0x1, 0xbc78}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200, 0x9377b5336e15b955}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
close(r5)
recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000022c0)=""/4096, 0x1a, 0x1000, 0x1, 0xbc78}, 0x28) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200, 0x9377b5336e15b955}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) (async)
sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async)
close(r5) (async)
recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) (async)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async)

1m33.330786462s ago: executing program 0 (id=8016):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
connect$caif(r0, &(0x7f0000001780)=@util={0x25, "8c3778e2a2253b827d46e5f207b62408"}, 0xa)
socket(0x23, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x800442d2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wg2\x00'})
socket$kcm(0x29, 0x5, 0x0)
r3 = accept4(r2, &(0x7f0000000280)=@generic, &(0x7f0000000000)=0x80, 0x80000)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0xfffffffb, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8010)

1m33.161883514s ago: executing program 0 (id=8019):
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x8, 0x0, 0x0, @local, @local, {[@srh={0x32}]}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfffffff2, 0xfff, 0x5, 0x10000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x1}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x8, 0x7, 0x101, 0xb00, r0, 0xffff, '\x00', r3, 0xffffffffffffffff, 0x5, 0x3}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840)

1m32.949443164s ago: executing program 0 (id=8022):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0xf1700, 0x6})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a08000640000000010800044000000002140000001100010000000000000000000000000a72dcd551611c08c6cd48a0bc2492e5f2de"], 0x94}}, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x13e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 32)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) (async, rerun: 32)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000100008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000005e82000000fb97b6109595bd6883000000bf090000000000005509010000000000950000001c17acccc1bc6eaf0616ca2038066fb99557fb9af8389b979d7bf555478a1ccac61f4e020a2ac2d9e622b935335ef3e5", @ANYRES32, @ANYBLOB="0000000000000000b70800002a648b5d7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x26, &(0x7f0000000300)=""/38, 0x100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xd, 0x6, 0x81}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x1, 0x1, 0x8, 0x8}, {0x5, 0x4, 0xb, 0xb}, {0x1, 0x4, 0x9, 0x9}], 0x10, 0x1156}, 0x94)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r5, 0xfff) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0)=@int=0x5470, 0x4) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000500)={0xffffffffffffffff, r4}) (rerun: 64)

1m31.962024039s ago: executing program 0 (id=8037):
syz_emit_ethernet(0x33, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="0b80d010da6a6a3cd6"}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x912, 0xf6)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080), 0x4)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000380)=0x1, &(0x7f00000003c0)=0x1)
sendmmsg(r1, &(0x7f0000002080)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)}}], 0x1, 0x24044015)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffdfffe, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
r4 = getpid()
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getlink={0x40, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8a00, 0x1000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008480}, 0x405)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
sendto$inet6(r0, &(0x7f0000000140)="8e8242e2d33fe94db2e4454e11ccd47f340c633c6efefa46773ea8c30c4e949c71942fd4ed3a07d8aef1c7338b333059ad56d7543dfc556b151728cef79b48d91cd108e2f84c4ffb636e4f9a55d2af65f73a744cd7afac5cfd49f8ec5e463d9ce1337105e5b8274bc049b7ff3db5ed089368f123f0a789a0dcac583856b83b2f70b8cd0fae69e4548760861141d7253087da601f7918467a64d32408427c2a6ddf32f4cabd86603919eb91919e1df5fa55637fb6ce1d5da3df965220765d16693bd4c0fde1863acc914a1e28d7a8b47ce41456c0a9e405659da40917fe9597a52b260101d47b98", 0xe7, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @local, 0x98f}, 0x1c)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r1, r5})

1m31.720261181s ago: executing program 0 (id=8042):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b402000000400000611178000000000085000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="230f15390000000000000a00000008000280040004"], 0x1c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r3=>0x0, 0x4, 0xe, 0x2, 0x31, 0x16, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x700, 0x882, 0xc}})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=@newchain={0x130, 0x64, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xf, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bridge\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @filter_kind_options=@f_fw={{0x7}, {0xcc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x10}}, @TCA_FW_POLICE={0x64, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xba34}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa0000000, 0x5, 0x517, 0x5, 0xb, {0x8, 0x2, 0x4, 0x2, 0x9, 0x821}, {0x1, 0x3, 0x3, 0x4, 0x7, 0x8}, 0x7, 0x1, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}]}, @TCA_FW_MASK={0x8, 0x5, 0xfffff008}, @TCA_FW_POLICE={0x4c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6a2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9e7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_FW_MASK={0x8, 0x5, 0xaef}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r7, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x18, 0x240488d1}, 0x488c4)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x80}, &(0x7f0000000140)=0x8)

1m16.652330651s ago: executing program 33 (id=8042):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b402000000400000611178000000000085000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="230f15390000000000000a00000008000280040004"], 0x1c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r3=>0x0, 0x4, 0xe, 0x2, 0x31, 0x16, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x700, 0x882, 0xc}})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=@newchain={0x130, 0x64, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xf, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bridge\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @filter_kind_options=@f_fw={{0x7}, {0xcc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x10}}, @TCA_FW_POLICE={0x64, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xba34}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa0000000, 0x5, 0x517, 0x5, 0xb, {0x8, 0x2, 0x4, 0x2, 0x9, 0x821}, {0x1, 0x3, 0x3, 0x4, 0x7, 0x8}, 0x7, 0x1, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}]}, @TCA_FW_MASK={0x8, 0x5, 0xfffff008}, @TCA_FW_POLICE={0x4c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6a2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9e7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_FW_MASK={0x8, 0x5, 0xaef}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r7, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x18, 0x240488d1}, 0x488c4)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x80}, &(0x7f0000000140)=0x8)

17.418674475s ago: executing program 5 (id=8995):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40400a1) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
listen(0xffffffffffffffff, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000002280)={@private0={0xfc, 0x0, '\x00', 0x10}, 0x4, 0x0, 0x2, 0x3, 0x0, 0xfff5}, 0x20) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0x2}, {0xd}, {0x3, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x40}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) (async)
ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000100)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44})
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x10, &(0x7f0000000040), 0x4) (async)
sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc6ae09f10000000000000002a0000000000000000000000004a6d008a53e87153a3e383ea3e87ab14280e304d684ac28dfe00bb5e43281a3ef5899a7b461680d31eb03dd9278606398f5b78b3ba1ab59018c7cf5fa093d552510b235b431b1d68db64254f0373e802f2fb6db4dd80c82a3d2b2fb1fe533df71ee7be01f46a7ee22d0bdb30ceece0bfc09d25272ad9d0b247798be26e02d3de266f1dfdf131c904d48050d9bce24e150af7acc57f414950fd35ad22e0021fb12fafbb84c9fe2a80748201639ff6ce54e693bda0b9a85a2966c2b72585d1fa1444408575eff6141ac3203c48"], 0x14}}, 0x0)

17.240756677s ago: executing program 5 (id=8998):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0)

17.07762838s ago: executing program 4 (id=9000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000fe090a0300000000000000000001001a76405376a1d37bde21cb00040900010073797a30d3d6e4b9a42489cd0000000090b791a7e23c8ad86a9f1d74c0153e0b5417bb5b7559286acde9217f0da15fd4e04dd8031d6834b599b456a3403152ad325b1087782cd2", @ANYRES64, @ANYBLOB="82eb45fa333c7f5c98d265e41a720f29f5fb68a055edb47cc672a5bfd4de19a2bbcf352206a92cf80904894bd2d267712c22c6c43a11ba9bdd7d12e38a9a22619e60bbd9e5a89da6d8e4b38b04012009ae"], 0x20}, 0x1, 0x0, 0x0, 0x40004840}, 0x20004810)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000fe090a0300000000000000000001001a76405376a1d37bde21cb00040900010073797a30d3d6e4b9a42489cd0000000090b791a7e23c8ad86a9f1d74c0153e0b5417bb5b7559286acde9217f0da15fd4e04dd8031d6834b599b456a3403152ad325b1087782cd2", @ANYRES64, @ANYBLOB="82eb45fa333c7f5c98d265e41a720f29f5fb68a055edb47cc672a5bfd4de19a2bbcf352206a92cf80904894bd2d267712c22c6c43a11ba9bdd7d12e38a9a22619e60bbd9e5a89da6d8e4b38b04012009ae"], 0x20}, 0x1, 0x0, 0x0, 0x40004840}, 0x20004810) (async)

17.077347374s ago: executing program 5 (id=9001):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c)

16.909118024s ago: executing program 5 (id=9006):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x10000, 0x25dfdc00, {0x0, 0x0, 0x0, r4, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x2, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41)

16.686295208s ago: executing program 6 (id=9010):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000001010000002000128008000108006974001400028008000300ac1414bb08000201ac14142d"], 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x4008040)

16.636151611s ago: executing program 3 (id=9011):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0)
close(r0) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r3 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (rerun: 32)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) (async, rerun: 64)
close(r3) (async, rerun: 64)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

16.566161737s ago: executing program 6 (id=9013):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1000, 0x2}, 0x90) (async)
syz_emit_ethernet(0xffffffffffffff13, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x30, 0x33, 0x1, @private1, @mcast2, {[@hopopts={0x2f, 0x4, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x2, 0x2}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}}}}}, 0x0)

16.516132331s ago: executing program 4 (id=9014):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0xffffffffffffffd7, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x4, {}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0xf0}]}]}, 0x24}}, 0x0)
r5 = socket(0x8000000010, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000010116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, <r9=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x108, 0x33, 0x100, 0x70bd28, 0x25dfdbfd, {0x7}, [@typed={0xc, 0xa0, 0x0, 0x0, @u64}, @nested={0x96, 0x108, 0x0, 0x1, [@nested={0x4, 0x118}, @generic="1bda191b289cc7df006af8bb2747f34329e6b4", @generic="6d6542e2cb4f25037a955cac2e83a7512cb8127ab7f041a225d33c5c389e478ffa2723c3d37d569110895e6711f1a01ed32856822a98ea08979d8c6a3816c1db07db2c5f37a6fc4a0375ea5d23dce480f371b85157f28a2a44ffa26a13bacfad9e8c0a5cf7672633c53222c1b11d898ce28ad7ebac1145", @typed={0x4, 0xee}]}, @nested={0x39, 0x8c, 0x0, 0x1, [@nested={0x4, 0x106}, @nested={0x4, 0x59}, @generic="631455b0b3e17fb528feaac5d497889e3fbf41b31a", @typed={0x4, 0x102}, @nested={0x4, 0x106}, @typed={0x8, 0xc5, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x5c, 0x0, 0x0, @str='GPL\x00'}]}, @typed={0x14, 0x15c, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x804}, 0x20000800)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x7, 0x4)
write(r5, &(0x7f00000002c0)="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", 0xfc)
recvfrom$rxrpc(r5, &(0x7f0000000000)=""/103, 0x67, 0x2022, 0x0, 0x0)

16.373509932s ago: executing program 4 (id=9015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xca9, 0x68}}}}, ["", ""]}, 0x28}}, 0x20000000) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd4}]}, 0x28}}, 0x8055)
writev(r0, &(0x7f0000001580)=[{&(0x7f0000000280)="f314e24ff67547b2600ecc23101b7c746865771f1bce4afe487ea22392668d446ffee31f3cb008bef661b43886bbe39366f0da3377315f15f9ef6202b51d9ad77a38d05b4496482d92e0bd8c148f6c146150e07a06f7efb345d851b44b5174814e102d278b7cd36ee5ecf100c459542fd11329df855b7e52b0d05e03830ede09795ad477bec5106347e30b5e730d66d2e04bbced91ade1c2333a1d430c2ecb71537fa3c88038fce45fb26ad4d7b41db0ac0acb80690d5b4226f359e3221a9413186524965cdec013321f4df8c22756f59515f6d6934e95efe4c85028f074f17c2a2b92e4ab532281", 0xe8}, {&(0x7f0000000380)="930ffde17408c9675b94f454f06477ef091f3f55a3349717361619683435ea1d6870deea2796311bfbc72f202585821b740b59c99234a9836f7f20eeb7fd67c27fb1aa31653772b07959db0b40942e92bd1984b47f14d5415cc5d1919c90bb20f4bbad003201444f13b87372fb30e92458c6f070c54a97286a182edba51ac91101", 0x81}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="cecb80ad8bc717ba084b4e01477ba1d1e1efceec9c82079c7c7081b2141cf708fb49", 0x22}, {&(0x7f0000001480)="b93c9ce264a4d1ccdcd6e578a0ec461bd1733d35e4f7f38ef68d5998c0af74222f90366816d8b0fedf", 0x29}, {&(0x7f00000014c0)="5143fc4400f21347d9de7f892513fbeb6eb8f898922b8ff110a5e601f8869e66824b62ca0213091ae9004557cebc97ea07c5b4e17f491fc1bc17e21ee053476618e1a0403b33fc96cb3ec4951d82f27ccb6dcd051182ba4b594274452bcd45fc64810708872859ed18411819fac51b682c51b9fcc55a0d50c2c79cdb0393e70d056f4d65e83a2f5725f5a7207c3c", 0x8e}], 0x6) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x70, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x58}, 0x80) (async)
r4 = accept(r3, &(0x7f0000001740)=@can={0x1d, <r5=>0x0}, &(0x7f00000017c0)=0x80) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xa4, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcba5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x41) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000019c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001b80), 0x8) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001cc0)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000001c40), &(0x7f0000001c80)='%pS    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001dc0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f00)={0x18, 0x9, &(0x7f0000001a40)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r7}, @exit, @ldst={0x0, 0x1, 0x2, 0x9, 0x9, 0x100}, @jmp={0x5, 0x1, 0x9, 0x6, 0xa, 0x80, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8d}], &(0x7f0000001ac0)='GPL\x00', 0x7, 0x53, &(0x7f0000001b00)=""/83, 0x41100, 0x18, '\x00', r5, 0x0, r8, 0x8, &(0x7f0000001bc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001c00)={0x1, 0x9, 0x363c}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001e00)=[r9, r10, r11, 0x1], &(0x7f0000001e40)=[{0x4, 0x1, 0xb, 0x8}, {0x0, 0x5, 0x8, 0xc}, {0x2, 0x2, 0x8, 0x5}, {0x1, 0x2, 0x4, 0x2}, {0x4, 0x5, 0xd, 0x4}, {0x2, 0x1, 0x4, 0x7}, {0x3, 0x2, 0x10, 0x1}, {0x2, 0x4, 0x4, 0xc}, {0x4, 0x2, 0x10, 0x1}, {0x3, 0x3, 0x4, 0x4}], 0x10, 0x3}, 0x94) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001fc0)={0x401, <r12=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002000)=r12, 0x4) (async)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002080), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x58, r13, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x240000000000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x47}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004840}, 0x80c0) (async)
readv(r7, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/30, 0x1e}], 0x1) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000002240)={'netpci0\x00', 0x57d3}) (async)
ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000002280)) (async)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x28}}, 0x200008c1) (async)
syz_emit_ethernet(0x22, &(0x7f00000023c0)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "1c17f55789cdab38"}}}}, &(0x7f0000002400)={0x0, 0x1, [0x474, 0x447, 0x7ff, 0xc8e]}) (async)
pselect6(0x40, &(0x7f0000002440)={0x7, 0x8, 0x8, 0xfffffffffffffe01, 0x2, 0x4, 0x7fffffff, 0x3}, &(0x7f0000002480)={0x3, 0x63, 0xaca9, 0x10000, 0x6, 0x5, 0x7, 0x101}, &(0x7f00000024c0)={0x6, 0x958, 0x9, 0xcfd5, 0x1000, 0xe, 0xa}, &(0x7f0000002500)={0x77359400}, &(0x7f0000002580)={&(0x7f0000002540)={[0x2]}, 0x8}) (async)
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002600), r8)
sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x68, r14, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) (async)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000002740)={0x1, 0x1, 0x3e, r5, 0x9}, 0xc)

16.372635994s ago: executing program 2 (id=9016):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff2, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a8}]}}]}, 0x44}}, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
close(r7) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff2, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a8}]}}]}, 0x44}}, 0x2) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, 0x0) (async)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x80) (async)

16.372488166s ago: executing program 3 (id=9017):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010)
recvmsg$unix(r2, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)="ca5662310d9759dd9fc623bf9c1cbc4165b6010bd455de87007a29b9b7c35f9550f6c64676b768f112818870192e056d9feb1149e06776939cc10d298c0b69b597216b17cedb70053cf2c6c4a9fb61caf46f56c6608d6be2be59f12b85d74f3a82acd16c813d6155140e3bd978239ab81fdd875d7979988e29abab1513e9a326", &(0x7f0000000580)="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", 0x6, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES64], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000040), 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

16.351403562s ago: executing program 6 (id=9018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x148, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x132, 0x80, [@dsss={0x3, 0x1, 0xaf}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xd, 0xe}}, @channel_switch={0x25, 0x3, {0x1, 0x68, 0x1}}, @measure_req={0x26, 0xf9, {0x1, 0x86, 0x7, "8ac93f11e70b193a56fafcc9aefa25b7689e403d24ed9d26f8d15da91994fb64f7d96b524c7c6b32308a9417eed9c04b70880a9dbe9a471980c86bad085ed85ade7f42133802c60efe7162442333d0a454dc30fa50ea11bf0cad179e49fdfbf20fae338029bc458a1bf0f911f9f1715c87b5f25c2f18c971fb8a5d1ca10002ae4b0320a72e8b1ce7d6ce5de22e8830926d78979d4a7b8d2289802f562df117f394c47596c35ee48317b70078d7b10716bb8b786b7d7eb2796d5e1c9cf88ad41dc91cec6ff4918bf6219423cd80c5961a4a7b565120292aaff7a09320e233a4be0ef6dbcbe741d74071c9a63f5049550d9d4896f7e6d4"}}, @ht={0x2d, 0x1a, {0x482, 0x1, 0x4, 0x0, {0xfe, 0x6d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x0, 0x10}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x2d, 0x8}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0)

16.270651873s ago: executing program 4 (id=9019):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0)

16.145749351s ago: executing program 5 (id=9020):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x8084)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="38002f80"], 0x54}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x8084) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="38002f80"], 0x54}}, 0x0) (async)

16.143691275s ago: executing program 6 (id=9021):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x1f6a, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8}, 0x1c)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x140f, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0xa4b74703cd8c1ff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

16.091798043s ago: executing program 3 (id=9022):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="e1c8b3fb58fc682f840ac64dcc3682263e445c5461b9179e7ef48ac07dd9109007be7b75a1035040e658958c8343131916be7ef8af0e84cf5e41d253c3466208a21d922d329a00d34bf005fd5469d27c1f6a791d0483ef7593943b5db6ab95382a25fbcc909dd9c0e73c9c2d1a8a130f4872bc9f94f003d545fe22785220f3d2b2e4f8f203f90af2d692", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000600120104000000"], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x8008)
r3 = socket(0x22, 0x2, 0x2)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4002, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90)

16.016532887s ago: executing program 6 (id=9023):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4)

15.942456143s ago: executing program 2 (id=9024):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x1e0, 0x0, 0x1e0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791038000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

15.895237615s ago: executing program 4 (id=9025):
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5394, 0x3, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x20050840)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffff0a0}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x810)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@mcast1, @private0, [0xffffff00, 0xffffffff, 0xc857c5818f5778f1, 0xffffff00], [0x0, 0xffffff00, 0xff000000], 'vlan0\x00', 'veth0_macvtap\x00', {0x80}, {}, 0x8, 0xc3, 0x2, 0x18}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xff000000, 0x0, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'nicvf0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x9, 0x1, 0x53}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x5e, 0xc, 0x3, 0x1, 0xd, 0xae7, 0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x3, 0x8}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x0, 0x9, 0xc7, 0x81, @remote, @mcast1, @mcast1, [0x0, 0xff, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x35eefa1f59861411, 0xff, 0xffffff00], 0x1800, 0x20f0}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460)

15.893475984s ago: executing program 3 (id=9026):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000008000000000000000000000000000007000000000000000000000080ffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000100000000000000000044010500ac1414bb000000000000000000000000000000086c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001009500fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000003200000002000000ac141400000000000000000000000000fffffffff0"], 0x1fc}}, 0x0)

15.775857552s ago: executing program 2 (id=9027):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000105000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0)

15.665953134s ago: executing program 3 (id=9028):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x16c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@generic="ba00a89c7e3d4a25e13412837f5b42776e4d9e52c33b6010f12025b0522af2585a50c3d73fd788dfe91737c4bf39e57a3d0cfb01cfca574a21761d8afa0f3764a5d92edc3bca8af8af2abb84129fe320de7c1319a1649194f882f5d8", @generic="7ab89e514a47a5fa5c7ff9be40bd35142cfc17c7c65e2b35f00236f96a12efbfaa875c5b382e815614069f782115daf116375af0ffdbcd198b4c188eaae7a9a6404b4076e0cd659108f00e023a75f8cc52d0f6e5ab367364ddf8e691e9421b464a7c69d142eb3f175fb1d7324edaad9e94e6c706d1eb6b7ce16e28ea50d951f4e801a003b947ecb12fb2850259e70edf1396f31e53de9e36b0dc0dca61c069114657bf7d0e35df7fd068f170875f", @generic="fe294146a23ee0abb388d554db6ec76ceda18216a5aca21a5955aff676962c1e6136ec24b5741c7abe826f20fc2f36f464158817a50fd39921c5064a941f6e39", @typed={0xc, 0x2b, 0x0, 0x0, @u64=0x5}]}, 0x16c}}, 0x0)

15.607743313s ago: executing program 6 (id=9029):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '*!\'!\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000800)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'vlan1\x00'})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000)
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)=ANY=[@ANYBLOB="20001f8458bce0f18f76647fda53ff0ae200", @ANYRES16=r8, @ANYBLOB="cf0400000000ffffffff130000000a0006000802110000010000"], 0x20}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x210, r8, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdc, 0x3, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd2, 0x2, "d20df4539b61c5d69d8b6607f71733f7385ceb1b5941b02aa1d4731a77a2a7c94ff57204616397ae4a36b18658383993159b76640e8900a5c9f26e3c81345f3b21aa7232baa033478340cadcff0900e7c9a473a6a1b1de5741928e234b7bb0f87459ada8b44d7df4f314141211b54dcc4edc907d7977ba8a9730f125beae0e8eeff7eb9b9c5788e3256c7f7ab303d9e2edce4a3e6c1b15af7dfbbc84a51592e2605606f4910c21661a6cd10d82318b7ac0ae434b55413d797c0f112e7d7084af3fd3c41fbde5abbdfbc4e2f37387"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x800}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000001}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x35}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xec, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe2, 0x2, "7aafae67c821bebd3690ca23a9b34370f01126c0e292048b79543a37e4a338c2351e2bb119b949ac6670dda00eab972559c6e1ee4a201f6ba09d73939fa230130556f5bc04e980685572d00c80f2168ea911bb99cbd8bcd863e440e93f9aefd317cb64eb99c62a52bbba41b6fa4c5209a53c59e147d91a9f655fc0e810742a14be4fdeefa68cb021a73b8b298b423fa6f4db0558eca2bceccc969d819c2445a13c9525811be99c0de1510f505a7074f1d9864bf300eca6547fa23dcca2e885b03e359a08b30c2f2e2371e7699f0f83be85f0ff01bb0dfb1fefec07c7e82f"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x210}, 0x1, 0x0, 0x0, 0x880}, 0x20000004)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7b9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8040)

15.538923959s ago: executing program 4 (id=9030):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x14, r3, 0x100}, 0x14}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x156811, r0, 0xf0fde000)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_mtu(r6, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd=r7}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)

15.486441632s ago: executing program 3 (id=9031):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
syz_emit_ethernet(0x7e, &(0x7f0000002140)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1c62acdfad905d2b4f6f2255ad1b963029028df42bc19c77", "4b2efecb22f91768539b1bf983c8123155f58650f790b44486a262078a7de578"}}}}}}}, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]})
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee0f409}]}]}]}, 0x38}}, 0x0)

15.457240201s ago: executing program 2 (id=9032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x51, 0x3e]}}, 0x0, 0x38}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r4, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000200ffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140))
r7 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r7, &(0x7f0000000180)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c)
setsockopt$inet6_udp_int(r7, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c040000100004000000a331000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c0416809400018014000b0006deea580000000006000000000000007c000c801400010008000000640f0000ff0000008100000014000100ff0000002a0b000000040000810000001400010006000000bf0400000200000088a8000014000100010000005a0900000900000081000000140001000a000000310a0000018000008100000014000100ff0f0000d90800001000000081000000100001800c00050000800000040000009400018028000100eb310000ffffffffffff00000000000000000000000000000000000000000000000000002c000c8014000100080000006e0200000f00000088a800001400010000000000910d00000000000088a8000014000a00ff0f00000000000001040000000000002800010000040000aaaaaaaaaa300000000000000000000000000000000000000000000000000000b00001800c0005000000000008000000280001000e000000daf8d6df269400000000000000000000000000000000000000000000000000000c000900010000008000000040000c8014000100010000006709000004000000810000001400010005000000ff0000000000000081000000140001005ef9ffffd70700000700000088a8000014000a00ff0100000000000008000000000000000c00090001000000090000000c000300c300000008000000840001801000020006000000dd0b0000060000000c000500020000000000fe0018000c8014000100070000005f02000008000000810000000c00070003000000070000000c0004006c1f458b0900000028000100000000000180c200000300000000000000000000000000000000000000000000000000000c00040004000000e5ffffff100001800c000500000000000b000000100001800c0004000800000007000000580001800c00050003000000090000000c00090003000000f6ffffff18000c80140001000200000082070000ff000000810000000c0003007b040000060000000c0009008f000000060000000c00070007000000f7ffffffdc000180cc000c801400010003000000fb0c0000cb0d0000810000001400010077000000c40100000600000088a8000014000100fdffffff5f0f0000ff00000088a800001400010008000000f60e00001200000088a800001400010008000000050000000100000088a800001400010007000000010e000055dce55a8100000014000100810000003a030000e60e000088a8000014000100000000788b090000680b00005598000014000100060000001f0400007f000000810000001400010000000000c600000003000000810000000c0009007fffffff01000000480001800c000900ab8300007cd5f8391000020057000000b5040000030000002800010051430000aaaaaaaaaa1100"/1044], 0x42c}, 0x1, 0x0, 0x0, 0x4000c044}, 0x0)

15.35984121s ago: executing program 2 (id=9033):
r0 = socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x1, 0x9, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x66, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @empty}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x11, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) (async)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r6], 0x38}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd70c8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce971e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb6365742402", 0x80}, {&(0x7f0000000200)="49ca212b4ee03b192d1048f96cc5eae838645dd5da7cc767a7fa4a8b", 0x1c}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) (async)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) (async)
close(r9)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r10=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r11, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)

15.253495927s ago: executing program 5 (id=9034):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0xb, 0x1, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
close(0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e22, @multicast2}], 0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
socket$igmp(0x2, 0x3, 0x2)

15.2283969s ago: executing program 2 (id=9035):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x3000000, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x105}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xf, 0xa1, 0xd0}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb2, 0x60}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffe9f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x0)

206.28495ms ago: executing program 34 (id=9029):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '*!\'!\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000800)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'vlan1\x00'})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000)
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)=ANY=[@ANYBLOB="20001f8458bce0f18f76647fda53ff0ae200", @ANYRES16=r8, @ANYBLOB="cf0400000000ffffffff130000000a0006000802110000010000"], 0x20}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x210, r8, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdc, 0x3, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd2, 0x2, "d20df4539b61c5d69d8b6607f71733f7385ceb1b5941b02aa1d4731a77a2a7c94ff57204616397ae4a36b18658383993159b76640e8900a5c9f26e3c81345f3b21aa7232baa033478340cadcff0900e7c9a473a6a1b1de5741928e234b7bb0f87459ada8b44d7df4f314141211b54dcc4edc907d7977ba8a9730f125beae0e8eeff7eb9b9c5788e3256c7f7ab303d9e2edce4a3e6c1b15af7dfbbc84a51592e2605606f4910c21661a6cd10d82318b7ac0ae434b55413d797c0f112e7d7084af3fd3c41fbde5abbdfbc4e2f37387"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x800}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000001}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x35}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xec, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe2, 0x2, "7aafae67c821bebd3690ca23a9b34370f01126c0e292048b79543a37e4a338c2351e2bb119b949ac6670dda00eab972559c6e1ee4a201f6ba09d73939fa230130556f5bc04e980685572d00c80f2168ea911bb99cbd8bcd863e440e93f9aefd317cb64eb99c62a52bbba41b6fa4c5209a53c59e147d91a9f655fc0e810742a14be4fdeefa68cb021a73b8b298b423fa6f4db0558eca2bceccc969d819c2445a13c9525811be99c0de1510f505a7074f1d9864bf300eca6547fa23dcca2e885b03e359a08b30c2f2e2371e7699f0f83be85f0ff01bb0dfb1fefec07c7e82f"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x210}, 0x1, 0x0, 0x0, 0x880}, 0x20000004)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7b9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8040)

175.508832ms ago: executing program 35 (id=9034):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0xb, 0x1, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
close(0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e22, @multicast2}], 0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
socket$igmp(0x2, 0x3, 0x2)

120.625211ms ago: executing program 36 (id=9035):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x3000000, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x105}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xf, 0xa1, 0xd0}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb2, 0x60}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffe9f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x0)

59.840842ms ago: executing program 37 (id=9031):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
syz_emit_ethernet(0x7e, &(0x7f0000002140)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1c62acdfad905d2b4f6f2255ad1b963029028df42bc19c77", "4b2efecb22f91768539b1bf983c8123155f58650f790b44486a262078a7de578"}}}}}}}, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]})
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee0f409}]}]}]}, 0x38}}, 0x0)

0s ago: executing program 38 (id=9030):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x14, r3, 0x100}, 0x14}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x156811, r0, 0xf0fde000)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_mtu(r6, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd=r7}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)

kernel console output (not intermixed with test programs):

5/0x360
[  791.486134][ T1007]  ? __lock_acquire+0x6b5/0x2cf0
[  791.486165][ T1007]  ? __pfx____sys_sendmsg+0x10/0x10
[  791.486228][ T1007]  ? __fget_files+0x2a/0x420
[  791.486249][ T1007]  ? __fget_files+0x3a0/0x420
[  791.486282][ T1007]  __x64_sys_sendmsg+0x1bd/0x2a0
[  791.486311][ T1007]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  791.486348][ T1007]  ? __pfx_ksys_write+0x10/0x10
[  791.486389][ T1007]  do_syscall_64+0xe2/0xf80
[  791.486419][ T1007]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.486438][ T1007]  ? trace_irq_disable+0x37/0x100
[  791.486457][ T1007]  ? clear_bhb_loop+0x60/0xb0
[  791.486479][ T1007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.486498][ T1007] RIP: 0033:0x7f1ed799aeb9
[  791.486518][ T1007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.486536][ T1007] RSP: 002b:00007f1ed884d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  791.486556][ T1007] RAX: ffffffffffffffda RBX: 00007f1ed7c15fa0 RCX: 00007f1ed799aeb9
[  791.486571][ T1007] RDX: 0000000000040080 RSI: 0000200000000440 RDI: 0000000000000004
[  791.486584][ T1007] RBP: 00007f1ed884d090 R08: 0000000000000000 R09: 0000000000000000
[  791.486596][ T1007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.486608][ T1007] R13: 00007f1ed7c16038 R14: 00007f1ed7c15fa0 R15: 00007ffe17cb1318
[  791.486642][ T1007]  </TASK>
[  791.879153][ T1022] netlink: 'syz.0.7623': attribute type 2 has an invalid length.
[  791.914987][ T1022] netlink: 'syz.0.7623': attribute type 11 has an invalid length.
[  792.509293][ T1061] __nla_validate_parse: 17 callbacks suppressed
[  792.509313][ T1061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7632'.
[  792.541821][ T1061] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7632'.
[  792.642292][ T1075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7632'.
[  792.673751][ T1068] bond1: Removing last arp target with arp_interval on
[  792.792435][ T5945] net_ratelimit: 3 callbacks suppressed
[  792.792458][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.174757][ T1108] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7644'.
[  793.200912][ T1108] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7644'.
[  793.241650][ T1114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7645'.
[  793.383959][ T1122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7647'.
[  793.445475][ T1123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7648'.
[  793.527728][ T1125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7649'.
[  793.834022][T27427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.842261][T27427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.034953][ T1161] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20001
[  794.050330][ T1158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7659'.
[  794.214982][ T1172] FAULT_INJECTION: forcing a failure.
[  794.214982][ T1172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  794.231389][ T1172] CPU: 0 UID: 0 PID: 1172 Comm: syz.2.7663 Not tainted syzkaller #0 PREEMPT(full) 
[  794.231420][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  794.231432][ T1172] Call Trace:
[  794.231441][ T1172]  <TASK>
[  794.231449][ T1172]  dump_stack_lvl+0xe8/0x150
[  794.231482][ T1172]  should_fail_ex+0x412/0x560
[  794.231512][ T1172]  _copy_from_user+0x2d/0xb0
[  794.231539][ T1172]  kstrtouint_from_user+0xd6/0x180
[  794.231567][ T1172]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  794.231607][ T1172]  proc_fail_nth_write+0x8e/0x210
[  794.231636][ T1172]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  794.231667][ T1172]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  794.231696][ T1172]  vfs_write+0x29a/0xb90
[  794.231734][ T1172]  ? __pfx_vfs_write+0x10/0x10
[  794.231764][ T1172]  ? __fget_files+0x2a/0x420
[  794.231788][ T1172]  ? __fget_files+0x3a0/0x420
[  794.231807][ T1172]  ? __fget_files+0x2a/0x420
[  794.231844][ T1172]  ksys_write+0x150/0x270
[  794.231872][ T1172]  ? __pfx_ksys_write+0x10/0x10
[  794.231911][ T1172]  do_syscall_64+0xe2/0xf80
[  794.231932][ T1172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.231950][ T1172]  ? trace_irq_disable+0x37/0x100
[  794.231967][ T1172]  ? clear_bhb_loop+0x60/0xb0
[  794.231992][ T1172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.232010][ T1172] RIP: 0033:0x7f6f11b5b78e
[  794.232029][ T1172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  794.232046][ T1172] RSP: 002b:00007f6f12b3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  794.232068][ T1172] RAX: ffffffffffffffda RBX: 00007f6f12b3c6c0 RCX: 00007f6f11b5b78e
[  794.232083][ T1172] RDX: 0000000000000001 RSI: 00007f6f12b3c0a0 RDI: 0000000000000005
[  794.232095][ T1172] RBP: 00007f6f12b3c090 R08: 0000000000000000 R09: 0000000000000000
[  794.232108][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.232119][ T1172] R13: 00007f6f11e16038 R14: 00007f6f11e15fa0 R15: 00007ffe415b9838
[  794.232153][ T1172]  </TASK>
[  794.873328][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.910933][T17497] tipc: Subscription rejected, illegal request
[  795.284780][ T1220] nbd: couldn't find a device at index 0
[  795.919404][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.984824][ T1251] netlink: 'syz.0.7681': attribute type 1 has an invalid length.
[  796.131049][ T1251] 8021q: adding VLAN 0 to HW filter on device bond6
[  796.354860][ T1255] bond6: (slave veth13): Enslaving as an active interface with a down link
[  796.436008][ T1262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  796.455737][ T1262] bond6: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  796.813865][ T1297] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  796.873868][T27430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.954762][  T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.065557][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  797.114676][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_0
[  797.135282][ T1315] x_tables: duplicate underflow at hook 3
[  797.428973][ T1328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  797.464059][ T1330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  797.464620][ T1327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  797.725993][ T1338] netlink: 'syz.5.7702': attribute type 1 has an invalid length.
[  797.786179][ T1343] netlink: 'syz.4.7704': attribute type 1 has an invalid length.
[  797.793775][ T1338] 8021q: adding VLAN 0 to HW filter on device bond2
[  797.834725][ T1352] netlink: 'syz.4.7704': attribute type 1 has an invalid length.
[  797.839452][ T1348] netlink: 'syz.3.7705': attribute type 21 has an invalid length.
[  797.856904][ T1338] bond2: (slave veth0_to_bond): making interface the new active one
[  797.905004][ T1338] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  797.929026][ T1348] netlink: 'syz.3.7705': attribute type 6 has an invalid length.
[  797.942352][ T1348] __nla_validate_parse: 10 callbacks suppressed
[  797.942372][ T1348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7705'.
[  797.994439][T18955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.025055][ T1359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7707'.
[  798.057700][ T1347] 8021q: adding VLAN 0 to HW filter on device bond3
[  798.087218][ T1347] bond2: (slave bond3): Enslaving as an active interface with a down link
[  798.087438][ T1362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  798.382481][ T1373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7710'.
[  798.426276][ T1374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7711'.
[  798.875817][ T1408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7724'.
[  798.950660][ T1408] netlink: 'syz.5.7724': attribute type 7 has an invalid length.
[  798.966043][ T1410] netlink: 'syz.2.7725': attribute type 64 has an invalid length.
[  798.993624][ T1415] netlink: 'syz.2.7725': attribute type 64 has an invalid length.
[  799.038972][ T1419] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7727'.
[  799.048832][T18955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.511958][ T1449] erspan0: entered promiscuous mode
[  799.527647][ T1449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7736'.
[  799.541500][ T1449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7736'.
[  799.569886][ T1449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7736'.
[  799.604868][ T1449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7736'.
[  799.727655][ T1472] netlink: 'syz.3.7739': attribute type 2 has an invalid length.
[  799.741163][ T1472] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  799.789946][ T1469] bond4: Invalid ad_actor_system MAC address.
[  799.837941][ T1469] bond4: option ad_actor_system: invalid value (1)
[  799.882301][ T1469] bond4 (unregistering): Released all slaves
[  799.916371][T27427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.072315][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.664138][ T1524] 8021q: adding VLAN 0 to HW filter on device bond5
[  800.749552][ T1526] 8021q: adding VLAN 0 to HW filter on device bond5
[  800.774045][ T1526] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address
[  800.820066][ T1526] bond5: (slave vxcan7): Error -95 calling set_mac_address
[  801.113924][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.594084][T27430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.645089][ T1577] syzkaller0: entered promiscuous mode
[  801.650634][ T1577] syzkaller0: entered allmulticast mode
[  801.930428][ T1591] validate_nla: 1 callbacks suppressed
[  801.930449][ T1591] netlink: 'syz.5.7773': attribute type 29 has an invalid length.
[  801.987489][ T1595] netlink: 'syz.5.7773': attribute type 29 has an invalid length.
[  802.045313][ T1591] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  802.054485][ T1591] 0ªî{X¹¦: entered allmulticast mode
[  802.060206][ T1591] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  802.166795][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.602467][ T1602] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  803.105741][ T1642] net_ratelimit: 2 callbacks suppressed
[  803.105765][ T1642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  803.196395][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.430569][ T1660] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  803.465131][ T1660] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  803.520564][  T123] block nbd4: Possible stuck request ffff888045ac8000: control (read@0,1024B). Runtime 60 seconds
[  803.532741][  T123] block nbd4: Possible stuck request ffff888045ac8200: control (read@1024,1024B). Runtime 60 seconds
[  803.543901][  T123] block nbd4: Possible stuck request ffff888045ac8400: control (read@2048,1024B). Runtime 60 seconds
[  803.555431][  T123] block nbd4: Possible stuck request ffff888045ac8600: control (read@3072,1024B). Runtime 60 seconds
[  803.609079][ T1670] netlink: 'syz.2.7793': attribute type 11 has an invalid length.
[  803.641909][ T1670] netlink: 'syz.2.7793': attribute type 11 has an invalid length.
[  803.649900][ T1670] __nla_validate_parse: 45 callbacks suppressed
[  803.649922][ T1670] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7793'.
[  803.802165][ T1679] netlink: 'syz.0.7796': attribute type 3 has an invalid length.
[  804.074509][ T1694] netlink: 'syz.2.7801': attribute type 16 has an invalid length.
[  804.096827][ T1694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7801'.
[  804.234574][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.481626][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7806'.
[  804.510660][ T1726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  804.677568][ T1736] !
: renamed from dummy0 (while UP)
[  804.847584][ T1747] tipc: Resetting bearer <eth:syzkaller0>
[  804.907846][ T1747] syzkaller0: left promiscuous mode
[  804.997299][ T1747] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  805.013990][ T1767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7821'.
[  805.138329][ T1774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7822'.
[  805.151308][ T1774] openvswitch: netlink: Unknown nsh attribute 0
[  805.211447][ T1777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7824'.
[  805.279905][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.307249][ T1784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7823'.
[  805.334451][ T1786] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  805.506291][ T1789] netlink: 'syz.2.7828': attribute type 32 has an invalid length.
[  805.514697][ T1789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7828'.
[  805.574274][ T1789] bond6: option coupled_control: invalid value (110)
[  805.596166][ T1789] bond6 (unregistering): Released all slaves
[  805.817567][ T1805] netlink: 'syz.0.7830': attribute type 1 has an invalid length.
[  805.835492][ T1805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7830'.
[  805.853371][ T1808] netlink: 'syz.2.7831': attribute type 4 has an invalid length.
[  805.878666][ T1808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7831'.
[  805.991055][ T1820] tipc: New replicast peer: 255.255.255.255
[  806.000111][ T1820] tipc: Enabled bearer <udp:syz2>, priority 10
[  806.008651][T27430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.095455][ T1824] x_tables: duplicate underflow at hook 4
[  806.208884][   T30] audit: type=1800 audit(1770291075.171:10): pid=1834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7837" name="memory.events" dev="tmpfs" ino=1959 res=0 errno=0
[  806.242091][   T30] audit: type=1804 audit(1770291075.211:11): pid=1834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7837" name="/newroot/382/memory.events" dev="tmpfs" ino=1959 res=1 errno=0
[  806.314741][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.496488][T11439] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb
[  806.774235][ T1856] netlink: 'syz.2.7841': attribute type 1 has an invalid length.
[  807.083764][ T1882] netlink: 'syz.5.7845': attribute type 29 has an invalid length.
[  807.112624][ T1873] delete_channel: no stack
[  807.263883][ T1895] netlink: 'syz.5.7850': attribute type 21 has an invalid length.
[  807.285699][ T1895] netlink: 'syz.5.7850': attribute type 21 has an invalid length.
[  807.303317][ T1895] netlink: 'syz.5.7850': attribute type 21 has an invalid length.
[  807.313680][ T1895] netlink: 'syz.5.7850': attribute type 21 has an invalid length.
[  807.324282][ T1895] netlink: 'syz.5.7850': attribute type 21 has an invalid length.
[  807.718347][ T1938] netlink: 'syz.5.7860': attribute type 1 has an invalid length.
[  808.107904][ T1951] syzkaller1: entered promiscuous mode
[  808.131532][ T1951] syzkaller1: entered allmulticast mode
[  808.411531][ T1463] net_ratelimit: 2 callbacks suppressed
[  808.411552][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.653146][ T1991] __nla_validate_parse: 16 callbacks suppressed
[  808.653167][ T1991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7871'.
[  809.033294][T27430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.231576][ T2020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7878'.
[  809.378498][ T2034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7881'.
[  809.414180][ T2034] netlink: 'syz.0.7881': attribute type 1 has an invalid length.
[  809.432477][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.484657][ T2033] netlink: 'syz.2.7880': attribute type 4 has an invalid length.
[  809.538958][ T2034] 8021q: adding VLAN 0 to HW filter on device bond7
[  809.609526][ T2038] vlan3: entered promiscuous mode
[  809.615138][ T2038] bond7: entered promiscuous mode
[  809.620445][ T2038] vlan3: entered allmulticast mode
[  809.626420][ T2038] bond7: entered allmulticast mode
[  809.658787][ T2044] bond7: (slave bridge5): making interface the new active one
[  809.666676][ T2044] bridge5: entered promiscuous mode
[  809.674006][ T2044] bridge5: entered allmulticast mode
[  809.680716][ T2044] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  809.899737][ T2043] syzkaller1: entered promiscuous mode
[  809.924130][ T2043] syzkaller1: entered allmulticast mode
[  809.930160][ T2062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  809.968911][ T2062] netlink: 'syz.2.7886': attribute type 64 has an invalid length.
[  809.992088][ T2062] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7886'.
[  810.260649][ T2088] sctp: [Deprecated]: syz.2.7892 (pid 2088) Use of int in maxseg socket option.
[  810.260649][ T2088] Use struct sctp_assoc_value instead
[  810.288320][ T2087] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.7890'.
[  810.347460][ T2087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7890'.
[  810.357121][ T2097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7893'.
[  810.400855][ T2101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7890'.
[  810.424622][ T2090] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  810.471735][ T2090] bond8 (unregistering): Released all slaves
[  810.475721][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.488177][T17520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.500681][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.513293][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.562353][ T2105] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 !
[  810.778602][ T2114] xt_hashlimit: size too large, truncated to 1048576
[  810.870079][ T2121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7899'.
[  810.890948][ T2122] x_tables: duplicate underflow at hook 1
[  810.934561][ T1901] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  810.947831][ T2121] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  810.949648][ T2121] block (null): Could not allocate knbd recv work queue.
[  811.025553][ T2121] nbd: failed to add new device
[  811.060964][ T2138] netlink: 371 bytes leftover after parsing attributes in process `syz.4.7900'.
[  811.198323][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.546334][ T2160] bond4: entered promiscuous mode
[  811.576917][ T2160] 8021q: adding VLAN 0 to HW filter on device bond4
[  811.593868][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.703842][ T2165] bond4: (slave bridge3): making interface the new active one
[  811.731315][ T2165] bridge3: entered promiscuous mode
[  811.746035][ T2165] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  812.574420][ T2230] validate_nla: 7 callbacks suppressed
[  812.574441][ T2230] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  812.769262][ T5199] udevd[5199]: worker [31608] /devices/virtual/block/nbd4 is taking a long time
[  813.097757][ T2245] x_tables: duplicate underflow at hook 1
[  813.485720][ T2269] netlink: 'syz.5.7929': attribute type 13 has an invalid length.
[  813.590882][ T2279] x_tables: duplicate underflow at hook 3
[  813.673525][ T1465] net_ratelimit: 5 callbacks suppressed
[  813.673547][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.708778][ T2287] __nla_validate_parse: 9 callbacks suppressed
[  813.708801][ T2287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7929'.
[  814.024289][ T2280] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  814.049907][ T2302] netlink: 175008 bytes leftover after parsing attributes in process `syz.4.7934'.
[  814.255459][ T2312] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7937'.
[  814.270245][ T2312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7937'.
[  814.716403][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.113070][T27427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.753147][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.384563][ T2309] netdevsim netdevsim4: Direct firmware load for .. failed with error -2
[  816.394720][ T2309] netdevsim netdevsim4: Falling back to sysfs fallback for: ..
[  816.403474][ T2312] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7937'.
[  816.606049][ T2341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7941'.
[  816.627954][ T2348] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  816.639377][ T2341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7941'.
[  816.670012][ T2352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7941'.
[  816.680727][ T2352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7941'.
[  816.715561][ T2348] syzkaller0: entered promiscuous mode
[  816.725446][ T2348] tipc: Resetting bearer <eth:syzkaller0>
[  816.767506][ T2348] tipc: Resetting bearer <eth:syzkaller0>
[  816.793068][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.928834][ T2365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7950'.
[  817.130159][ T2380] syzkaller1: entered allmulticast mode
[  817.314088][ T2382] team_slave_0: Caught tx_queue_len zero misconfig
[  817.382456][ T2402] delete_channel: no stack
[  817.400539][ T2402] openvswitch: netlink: Unknown nsh attribute 0
[  817.733821][ T2424] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  817.832367][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.162077][T27430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.879977][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.915998][ T1464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.472437][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.779990][ T2515] __nla_validate_parse: 6 callbacks suppressed
[  820.780011][ T2515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7990'.
[  820.796056][T27427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.953827][ T2519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.962453][ T2519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.970843][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.199259][T27427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.498620][ T2537] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  821.527973][ T2537] bond8 (unregistering): Released all slaves
[  821.898698][ T2578] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  821.999969][ T2586] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8003'.
[  822.014813][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.333497][ T2593] veth15: entered promiscuous mode
[  822.338731][ T2593] veth15: entered allmulticast mode
[  822.527577][ T2625] openvswitch: netlink: Missing key (keys=40, expected=100)
[  822.565514][ T2627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8012'.
[  822.759620][ T2630] netlink: 'syz.4.8013': attribute type 1 has an invalid length.
[  822.972981][ T2646] netlink: 'syz.5.8017': attribute type 6 has an invalid length.
[  822.982534][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8019'.
[  822.992196][ T2644] netlink: 'syz.5.8017': attribute type 6 has an invalid length.
[  823.003393][ T2647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8019'.
[  823.251959][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.251959][ T2663] Use struct sctp_assoc_value instead
[  823.325359][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.325359][ T2663] Use struct sctp_assoc_value instead
[  823.359597][ T2678] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8024'.
[  823.374057][ T2678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8024'.
[  823.376756][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.376756][ T2663] Use struct sctp_assoc_value instead
[  823.403913][ T2678] netlink: 13 bytes leftover after parsing attributes in process `syz.3.8024'.
[  823.441993][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.441993][ T2663] Use struct sctp_assoc_value instead
[  823.469931][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.469931][ T2663] Use struct sctp_assoc_value instead
[  823.486558][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.486558][ T2663] Use struct sctp_assoc_value instead
[  823.562050][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.562050][ T2663] Use struct sctp_assoc_value instead
[  823.595540][ T2678] veth5: entered promiscuous mode
[  823.614193][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.614193][ T2663] Use struct sctp_assoc_value instead
[  823.657491][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.657491][ T2663] Use struct sctp_assoc_value instead
[  823.735070][ T2663] sctp: [Deprecated]: syz.0.8022 (pid 2663) Use of int in max_burst socket option deprecated.
[  823.735070][ T2663] Use struct sctp_assoc_value instead
[  823.775271][ T2710] netlink: 'syz.5.8030': attribute type 1 has an invalid length.
[  823.798201][ T2710] netlink: 'syz.5.8030': attribute type 1 has an invalid length.
[  823.817209][ T2710] netlink: 'syz.5.8030': attribute type 1 has an invalid length.
[  823.833732][ T2710] netlink: 'syz.5.8030': attribute type 1 has an invalid length.
[  823.843693][ T2710] netlink: 'syz.5.8030': attribute type 1 has an invalid length.
[  823.854129][ T2715] netlink: 'syz.4.8033': attribute type 24 has an invalid length.
[  823.856723][ T2710] netlink: 'syz.5.8030': attribute type 1 has an invalid length.
[  824.075749][ T1465] net_ratelimit: 1 callbacks suppressed
[  824.075773][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.242514][T27427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.374353][ T2749] syzkaller0: entered promiscuous mode
[  824.380013][ T2749] syzkaller0: entered allmulticast mode
[  824.526595][ T2765] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  824.588981][ T2770] netlink: 5228 bytes leftover after parsing attributes in process `syz.3.8046'.
[  825.122165][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.265332][ T2803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8056'.
[  826.152183][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.313932][ T2891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.323033][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.809335][ T2926] __nla_validate_parse: 1 callbacks suppressed
[  826.809357][ T2926] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8083'.
[  826.904026][ T2930] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8084'.
[  826.990910][ T2934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8086'.
[  827.285141][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.333189][ T2948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8092'.
[  827.392216][ T2950] xt_hashlimit: size too large, truncated to 1048576
[  827.574166][ T2958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8094'.
[  827.672451][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.900180][ T2966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.909331][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.929729][ T2968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8097'.
[  828.045974][ T2975] xt_hashlimit: overflow, try lower: 3/0
[  828.057504][ T2975] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8099'.
[  828.098363][ T2975] bond6: (slave erspan0): Device is not bonding slave
[  828.107038][ T2975] bond6: option active_slave: invalid value (erspan0)
[  828.119395][ T2975] bond6 (unregistering): Released all slaves
[  828.273687][ T2986] Unsupported ieee802154 address type: 0
[  828.541783][ T3003] validate_nla: 59 callbacks suppressed
[  828.548867][ T3003] netlink: 'syz.4.8109': attribute type 3 has an invalid length.
[  828.790020][ T3024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8115'.
[  828.800478][ T3024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8115'.
[  828.810827][ T3025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8115'.
[  828.860359][ T3027] bond6: option lacp_active: mode dependency failed, not supported in mode balance-xor(2)
[  828.888065][ T3027] bond6 (unregistering): Released all slaves
[  829.460522][ T3059] netlink: 'syz.2.8127': attribute type 10 has an invalid length.
[  829.479743][ T3059] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  829.492012][ T3059] net_ratelimit: 1 callbacks suppressed
[  829.492057][ T3059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  830.033317][ T3094] netlink: Unknown conntrack attr (type=12801, max=9)
[  830.087439][ T3096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  830.107994][ T3096] xfrm1: entered promiscuous mode
[  830.113229][ T3096] xfrm1: entered allmulticast mode
[  830.122221][ T3096] tipc: Resetting bearer <eth:syzkaller0>
[  830.140679][ T3095] tipc: Disabling bearer <eth:syzkaller0>
[  830.432601][ T3112] netlink: 'syz.5.8147': attribute type 2 has an invalid length.
[  830.444448][ T3112] netlink: 'syz.5.8147': attribute type 4 has an invalid length.
[  830.525028][ T3118] netlink: 'syz.5.8149': attribute type 1 has an invalid length.
[  830.643420][ T3124] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  830.683336][ T3124] veth3: entered promiscuous mode
[  830.690823][ T3124] bond5: (slave veth3): Enslaving as a backup interface with a down link
[  830.772339][ T3132] veth0: entered promiscuous mode
[  830.789634][ T3133] veth0: left promiscuous mode
[  831.265538][ T3164] SET target dimension over the limit!
[  831.313083][ T3156] hsr_slave_1 (unregistering): left promiscuous mode
[  832.046907][ T3213] __nla_validate_parse: 15 callbacks suppressed
[  832.046930][ T3213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8171'.
[  832.091053][ T3213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8171'.
[  832.337107][ T3231] netlink: 'syz.4.8173': attribute type 33 has an invalid length.
[  832.617906][ T3239] netlink: 'syz.4.8174': attribute type 2 has an invalid length.
[  832.629770][ T3239] netlink: 'syz.4.8174': attribute type 1 has an invalid length.
[  832.698268][ T3247] netlink: 'syz.5.8176': attribute type 4 has an invalid length.
[  832.972378][ T3251] bond6 (unregistering): Released all slaves
[  833.082711][ T3261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8180'.
[  833.093182][ T3261] nbd: must specify at least one socket
[  833.100418][ T3261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8180'.
[  833.110703][ T3261] nbd: must specify at least one socket
[  833.141040][ T3263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8181'.
[  833.162769][ T3263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8181'.
[  833.239578][ T3267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8183'.
[  833.282216][ T3267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8183'.
[  833.401549][ T3275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8186'.
[  833.592638][  T123] block nbd4: Possible stuck request ffff888045ac8000: control (read@0,1024B). Runtime 90 seconds
[  833.597584][ T3286] syzkaller1: entered promiscuous mode
[  833.603585][  T123] block nbd4: Possible stuck request ffff888045ac8200: control (read@1024,1024B). Runtime 90 seconds
[  833.614873][ T3286] syzkaller1: entered allmulticast mode
[  833.620437][  T123] block nbd4: Possible stuck request ffff888045ac8400: control (read@2048,1024B). Runtime 90 seconds
[  833.637427][  T123] block nbd4: Possible stuck request ffff888045ac8600: control (read@3072,1024B). Runtime 90 seconds
[  833.664890][ T3287] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  834.079290][ T3305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8196'.
[  834.154394][ T3310] veth0: entered promiscuous mode
[  834.326855][ T3322] netlink: 'syz.3.8202': attribute type 2 has an invalid length.
[  834.490106][ T3331] netlink: 'syz.4.8206': attribute type 32 has an invalid length.
[  834.521725][ T3331] bond6: Setting coupled_control to off (0)
[  834.885270][ T3360] netlink: 'syz.4.8213': attribute type 16 has an invalid length.
[  834.894985][ T3301] veth0: left promiscuous mode
[  834.920608][ T3360] netlink: 'syz.4.8213': attribute type 17 has an invalid length.
[  834.961148][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.968386][ T3360] bridge0: port 2(bridge_slave_1) entered listening state
[  834.975915][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.983102][ T3360] bridge0: port 1(bridge_slave_0) entered listening state
[  834.998171][ T3360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  835.791396][ T3414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  835.939408][ T3425] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:24098
[  835.985003][ T3425] netlink: 'syz.4.8229': attribute type 10 has an invalid length.
[  835.995546][ T3425] dummy0: entered promiscuous mode
[  836.012610][ T3425] bridge0: port 3(dummy0) entered blocking state
[  836.026541][ T3425] bridge0: port 3(dummy0) entered disabled state
[  836.053687][ T3425] dummy0: entered allmulticast mode
[  836.061771][ T3425] dummy0: left allmulticast mode
[  836.078772][ T3425] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  836.163348][ T3440] tipc: Started in network mode
[  836.172980][ T3440] tipc: Node identity 26aa770ad285, cluster identity 4711
[  836.192718][ T3440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  836.247876][ T3440] tipc: Disabling bearer <eth:syzkaller0>
[  836.329179][ T3452] º
: renamed from veth1_to_batadv (while UP)
[  836.379438][ T3456] ip_vti0: entered promiscuous mode
[  836.438199][ T3456] syzkaller1: entered promiscuous mode
[  836.452671][ T3456] syzkaller1: entered allmulticast mode
[  836.467694][ T3456] sctp: [Deprecated]: syz.3.8239 (pid 3456) Use of int in max_burst socket option.
[  836.467694][ T3456] Use struct sctp_assoc_value instead
[  836.493528][ T3466] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  836.917548][ T3481] netem: incorrect ge model size
[  836.932118][ T3481] netem: change failed
[  837.033863][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  837.035199][ T3485] netlink: 'syz.3.8249': attribute type 16 has an invalid length.
[  837.042572][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  837.082212][ T3485] netlink: 'syz.3.8249': attribute type 17 has an invalid length.
[  837.110852][ T3492] lo: Caught tx_queue_len zero misconfig
[  837.151777][ T3485] erspan0: left promiscuous mode
[  837.160275][ T3485] erspan0: left allmulticast mode
[  837.169989][ T3485] ip_vti0: left promiscuous mode
[  837.226480][ T3485] macvtap0: left allmulticast mode
[  837.238910][ T3485] mac80211_hwsim hwsim84 wlan0: left promiscuous mode
[  837.259642][ T3485] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  837.639394][ T3519] bond6: Unable to set up delay as MII monitoring is disabled
[  837.654452][ T3519] bond6 (unregistering): Released all slaves
[  837.685254][ T3523] Unsupported ieee802154 address type: 0
[  837.701549][ T3518] syzkaller0: entered promiscuous mode
[  837.713210][ T3518] syzkaller0: entered allmulticast mode
[  837.835226][ T3518] netlink: 'syz.2.8259': attribute type 3 has an invalid length.
[  837.844754][ T3518] __nla_validate_parse: 11 callbacks suppressed
[  837.844775][ T3518] netlink: 766 bytes leftover after parsing attributes in process `syz.2.8259'.
[  838.036541][ T3544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8259'.
[  838.323863][ T3559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  838.337957][ T3556] tipc: Disabling bearer <eth:syzkaller0>
[  838.669853][ T3580] netlink: 'syz.2.8278': attribute type 1 has an invalid length.
[  838.827129][ T3587] netlink: 'syz.4.8280': attribute type 11 has an invalid length.
[  838.841938][ T3587] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8280'.
[  838.972300][ T3587] tipc: Failed to remove unknown binding: 66,1,1/0:3144189455/3144189457
[  838.981079][ T3587] tipc: Failed to remove unknown binding: 66,1,1/0:3144189455/3144189457
[  839.112053][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  839.119420][    C0] bridge0: topology change detected, propagating
[  839.126335][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  839.133785][    C0] bridge0: topology change detected, propagating
[  839.308767][ T3604] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  839.389705][ T3611] netlink: 'syz.4.8284': attribute type 1 has an invalid length.
[  839.463803][ T3611] bond7: entered promiscuous mode
[  839.502603][ T3611] bond7: entered allmulticast mode
[  839.508420][ T3611] 8021q: adding VLAN 0 to HW filter on device bond7
[  839.614523][ T3627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8289'.
[  839.627685][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8289'.
[  839.746602][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  839.761679][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  839.770765][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  839.782087][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  839.790018][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  840.221334][ T3634] chnl_net:caif_netlink_parms(): no params data found
[  840.302072][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state
[  840.309371][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state
[  840.317112][ T3634] bridge_slave_0: entered allmulticast mode
[  840.324633][ T3634] bridge_slave_0: entered promiscuous mode
[  840.333104][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state
[  840.340301][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state
[  840.347767][ T3634] bridge_slave_1: entered allmulticast mode
[  840.355033][ T3634] bridge_slave_1: entered promiscuous mode
[  840.386398][ T3634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  840.399550][ T3634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.427957][ T3634] team0: Port device team_slave_0 added
[  840.435971][ T3634] team0: Port device team_slave_1 added
[  840.461037][ T3634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  840.468414][ T3634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  840.496207][ T3634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  840.511045][ T3634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  840.518316][ T3634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  840.544853][ T3634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  840.586883][ T3634] hsr_slave_0: entered promiscuous mode
[  840.593458][ T3634] hsr_slave_1: entered promiscuous mode
[  840.599626][ T3634] debugfs: 'hsr0' already exists in 'hsr'
[  840.605728][ T3634] Cannot create hsr debugfs directory
[  841.832021][ T5846] Bluetooth: hci6: command tx timeout
[  842.298001][ T3604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  842.329057][ T3634] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  842.393859][ T3634] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  842.470714][ T3634] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  842.514971][ T3634] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  842.539490][ T3663] netlink: 'syz.2.8299': attribute type 1 has an invalid length.
[  842.555811][ T3663] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8299'.
[  842.797493][ T3684] syzkaller0: entered promiscuous mode
[  842.815433][ T3684] syzkaller0: entered allmulticast mode
[  842.924765][ T3634] 8021q: adding VLAN 0 to HW filter on device bond0
[  843.000605][ T3694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8306'.
[  843.100550][ T3634] 8021q: adding VLAN 0 to HW filter on device team0
[  843.114234][ T3703] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  843.151259][ T1905] bridge0: port 1(bridge_slave_0) entered blocking state
[  843.158740][ T1905] bridge0: port 1(bridge_slave_0) entered forwarding state
[  843.179499][ T3708] netlink: 'syz.2.8310': attribute type 11 has an invalid length.
[  843.198184][ T1899] bridge0: port 2(bridge_slave_1) entered blocking state
[  843.205503][ T1899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  843.600808][ T3724] tap0: tun_chr_ioctl cmd 1074025678
[  843.608272][ T3724] tap0: group set to 0
[  843.874875][ T3634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  843.903808][ T3740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8
[  843.916605][ T5846] Bluetooth: hci6: command tx timeout
[  843.939588][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8322'.
[  844.244195][ T3760] netlink: 'syz.5.8328': attribute type 1 has an invalid length.
[  844.252286][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8328'.
[  844.263737][ T3760] netlink: 'syz.5.8328': attribute type 63 has an invalid length.
[  844.306211][ T3760] netlink: 'syz.5.8328': attribute type 63 has an invalid length.
[  844.369726][ T3767] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8329'.
[  844.384479][ T3767] xt_TPROXY: Can be used only with -p tcp or -p udp
[  844.660884][ T3634] veth0_vlan: entered promiscuous mode
[  844.688576][ T3634] veth1_vlan: entered promiscuous mode
[  844.775355][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8335'.
[  844.822116][ T3794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  844.822740][ T3787] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8335'.
[  844.829597][ T3794] IPv6: NLM_F_CREATE should be set when creating new route
[  844.846178][ T3794] IPv6: NLM_F_CREATE should be set when creating new route
[  844.853639][ T3794] IPv6: NLM_F_CREATE should be set when creating new route
[  844.877004][ T3634] veth0_macvtap: entered promiscuous mode
[  844.907011][ T3634] veth1_macvtap: entered promiscuous mode
[  844.920450][ T3798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  844.948968][ T3634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  844.987118][ T3634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  845.038316][T17520] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  845.095185][T17520] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  845.111254][T17520] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  845.146325][T17520] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  845.163330][ T3808] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8340'.
[  845.332418][ T3814] sock: sock_timestamping_bind_phc: sock not bind to device
[  845.347287][ T1899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.359946][ T1899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  845.485694][T17520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.503465][T17520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  845.528723][ T3823] netlink: 'syz.2.8342': attribute type 1 has an invalid length.
[  845.725102][ T3831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8345'.
[  845.793659][ T3833] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  845.922340][ T3836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8345'.
[  845.943781][ T3836] nbd: nbd64 already in use
[  845.992163][ T5846] Bluetooth: hci6: command tx timeout
[  846.217880][ T3857] delete_channel: no stack
[  846.407357][ T3864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8352'.
[  847.317769][ T3918] netlink: 'syz.4.8362': attribute type 3 has an invalid length.
[  847.604972][ T3930] netlink: 'syz.3.8366': attribute type 2 has an invalid length.
[  848.086685][ T5837] Bluetooth: hci6: command tx timeout
[  848.315534][ T3942] __nla_validate_parse: 5 callbacks suppressed
[  848.315557][ T3942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8371'.
[  848.566741][ T5846] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  849.456176][ T3998] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8384'.
[  850.319674][ T4014] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8389'.
[  850.523416][ T4037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8393'.
[  850.568329][ T4040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8394'.
[  850.584996][ T4040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8394'.
[  850.612775][ T4044] netlink: 'syz.4.8395': attribute type 15 has an invalid length.
[  850.631551][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8395'.
[  850.726428][T17520] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  850.726562][ T4044] netlink: 'syz.4.8395': attribute type 15 has an invalid length.
[  850.759620][T17520] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  850.768800][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8395'.
[  850.797286][ T4049] netlink: 'syz.6.8397': attribute type 6 has an invalid length.
[  850.805866][T17520] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  850.832704][T17520] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  850.836362][ T4055] FAULT_INJECTION: forcing a failure.
[  850.836362][ T4055] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  850.891994][ T4055] CPU: 1 UID: 0 PID: 4055 Comm: syz.3.8399 Not tainted syzkaller #0 PREEMPT(full) 
[  850.892024][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  850.892036][ T4055] Call Trace:
[  850.892045][ T4055]  <TASK>
[  850.892055][ T4055]  dump_stack_lvl+0xe8/0x150
[  850.892087][ T4055]  should_fail_ex+0x412/0x560
[  850.892123][ T4055]  _copy_to_user+0x31/0xb0
[  850.892156][ T4055]  sctp_getsockopt_reconfig_supported+0x411/0x580
[  850.892182][ T4055]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  850.892209][ T4055]  ? __pfx_sctp_getsockopt_reconfig_supported+0x10/0x10
[  850.892238][ T4055]  ? __local_bh_enable_ip+0xd0/0x130
[  850.892262][ T4055]  sctp_getsockopt+0x585/0xb90
[  850.892284][ T4055]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  850.892308][ T4055]  do_sock_getsockopt+0x2d3/0x3f0
[  850.892337][ T4055]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  850.892362][ T4055]  ? __fget_files+0x3a0/0x420
[  850.892383][ T4055]  ? __fget_files+0x2a/0x420
[  850.892411][ T4055]  __x64_sys_getsockopt+0x1a4/0x240
[  850.892447][ T4055]  do_syscall_64+0xe2/0xf80
[  850.892469][ T4055]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.892487][ T4055]  ? trace_irq_disable+0x37/0x100
[  850.892505][ T4055]  ? clear_bhb_loop+0x60/0xb0
[  850.892529][ T4055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.892547][ T4055] RIP: 0033:0x7f382c99aeb9
[  850.892566][ T4055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  850.892583][ T4055] RSP: 002b:00007f382d7c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  850.892606][ T4055] RAX: ffffffffffffffda RBX: 00007f382cc15fa0 RCX: 00007f382c99aeb9
[  850.892621][ T4055] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000003
[  850.892634][ T4055] RBP: 00007f382d7c5090 R08: 0000200000001d80 R09: 0000000000000000
[  850.892647][ T4055] R10: 0000200000001d40 R11: 0000000000000246 R12: 0000000000000001
[  850.892660][ T4055] R13: 00007f382cc16038 R14: 00007f382cc15fa0 R15: 00007ffc1a3405d8
[  850.892693][ T4055]  </TASK>
[  851.458386][ T4073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8407'.
[  851.605849][ T4083] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8409'.
[  851.691721][ T4091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  852.060822][ T4104] FAULT_INJECTION: forcing a failure.
[  852.060822][ T4104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  852.108618][ T4104] CPU: 0 UID: 0 PID: 4104 Comm: syz.6.8414 Not tainted syzkaller #0 PREEMPT(full) 
[  852.108649][ T4104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  852.108662][ T4104] Call Trace:
[  852.108671][ T4104]  <TASK>
[  852.108680][ T4104]  dump_stack_lvl+0xe8/0x150
[  852.108712][ T4104]  should_fail_ex+0x412/0x560
[  852.108741][ T4104]  _copy_from_user+0x2d/0xb0
[  852.108772][ T4104]  kstrtouint_from_user+0xd6/0x180
[  852.108801][ T4104]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  852.108844][ T4104]  proc_fail_nth_write+0x8e/0x210
[  852.108872][ T4104]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  852.108906][ T4104]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  852.108936][ T4104]  vfs_write+0x29a/0xb90
[  852.108974][ T4104]  ? __pfx_vfs_write+0x10/0x10
[  852.109005][ T4104]  ? __fget_files+0x2a/0x420
[  852.109032][ T4104]  ? __fget_files+0x3a0/0x420
[  852.109052][ T4104]  ? __fget_files+0x2a/0x420
[  852.109084][ T4104]  ksys_write+0x150/0x270
[  852.109255][ T4104]  ? __pfx_ksys_write+0x10/0x10
[  852.109280][ T4104]  ? fput+0xa0/0xd0
[  852.109312][ T4104]  do_syscall_64+0xe2/0xf80
[  852.109334][ T4104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.109352][ T4104]  ? trace_irq_disable+0x37/0x100
[  852.109370][ T4104]  ? clear_bhb_loop+0x60/0xb0
[  852.109394][ T4104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.109413][ T4104] RIP: 0033:0x7efdda35b78e
[  852.109433][ T4104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  852.109451][ T4104] RSP: 002b:00007efddb317fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  852.109485][ T4104] RAX: ffffffffffffffda RBX: 00007efddb3186c0 RCX: 00007efdda35b78e
[  852.109500][ T4104] RDX: 0000000000000001 RSI: 00007efddb3180a0 RDI: 0000000000000005
[  852.109520][ T4104] RBP: 00007efddb318090 R08: 0000000000000000 R09: 0000000000000000
[  852.109540][ T4104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  852.109552][ T4104] R13: 00007efdda616038 R14: 00007efdda615fa0 R15: 00007ffebc114368
[  852.109597][ T4104]  </TASK>
[  852.695452][ T4123] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9
[  852.741199][ T4123] wlan0 speed is unknown, defaulting to 1000
[  852.771670][ T4123] wlan0 speed is unknown, defaulting to 1000
[  852.819002][ T4123] wlan0 speed is unknown, defaulting to 1000
[  852.887457][ T4123] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  852.933133][ T4123] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  852.951070][ T4133] rdma_op ffff8880283931f0 conn xmit_rdma 0000000000000000
[  852.991002][ T4123] wlan0 speed is unknown, defaulting to 1000
[  853.000193][ T4123] wlan0 speed is unknown, defaulting to 1000
[  853.010610][ T4123] wlan0 speed is unknown, defaulting to 1000
[  853.020014][ T4123] wlan0 speed is unknown, defaulting to 1000
[  853.028389][ T4123] wlan0 speed is unknown, defaulting to 1000
[  853.029976][ T4136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  853.036476][ T4123] wlan0 speed is unknown, defaulting to 1000
[  853.052040][ T4123] wlan0 speed is unknown, defaulting to 1000
[  853.060377][ T4123] wlan0 speed is unknown, defaulting to 1000
[  853.145150][ T4140] syz_tun: entered allmulticast mode
[  853.151345][ T4138] netlink: 'syz.4.8425': attribute type 8 has an invalid length.
[  853.159757][ T4139] syz_tun: left allmulticast mode
[  853.170986][ T4138] ip6_vti0: entered allmulticast mode
[  853.321246][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.329976][ T4148] syzkaller1: linktype set to 823
[  853.338774][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.347189][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.358566][ T4148] syzkaller1: linktype set to 823
[  853.364752][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.371256][ T4148] syzkaller1: linktype set to 823
[  853.377833][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.392100][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.399472][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.406841][ T4148] syzkaller1: linktype set to 823
[  853.412997][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.419460][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.426580][ T4148] syzkaller1: linktype set to 823
[  853.437784][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.447644][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.456451][ T4148] syzkaller1: linktype set to 823
[  853.463584][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.469796][ T4148] syzkaller1: linktype set to 823
[  853.480339][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.532723][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.539560][ T4148] syzkaller1: linktype set to 823
[  853.547315][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.556339][ T4148] syzkaller1: linktype set to 823
[  853.568274][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.584501][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.590919][ T4148] syzkaller1: linktype set to 823
[  853.603053][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.609498][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.615847][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.622780][ T4148] syzkaller1: linktype set to 823
[  853.628615][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.635592][ T4148] syzkaller1: linktype set to 823
[  853.651890][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.695743][ T4129] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  853.712637][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.718839][ T4148] syzkaller1: linktype set to 823
[  853.738110][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.867512][ T4155] __nla_validate_parse: 9 callbacks suppressed
[  853.867534][ T4155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8430'.
[  853.884901][ T4148] syzkaller1: linktype set to 823
[  853.895952][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.941490][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  853.947854][ T4148] syzkaller1: linktype set to 823
[  853.970693][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  853.986606][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  854.042977][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  854.052493][ T4148] syzkaller1: linktype set to 823
[  854.065131][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  854.085332][ T4166] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8432'.
[  854.094995][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  854.155252][ T4148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  854.170939][ T4169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8433'.
[  854.181111][ T4148] syzkaller1: linktype set to 823
[  854.187610][ T4150] syzkaller1: tun_chr_ioctl cmd 1074025673
[  854.287496][ T4169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  854.302464][ T4174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8436'.
[  854.335681][ T4174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8436'.
[  854.381359][ T4174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8436'.
[  854.414950][ T4179] +
: renamed from syzkaller0
[  854.454399][ T4179] tipc: Disabling bearer <eth:syzkaller0>
[  854.502588][ T4192] netlink: 'syz.6.8442': attribute type 1 has an invalid length.
[  854.510611][ T4192] netlink: 16179 bytes leftover after parsing attributes in process `syz.6.8442'.
[  854.606969][ T4192] netlink: 'syz.6.8442': attribute type 1 has an invalid length.
[  854.620815][ T4192] netlink: 16179 bytes leftover after parsing attributes in process `syz.6.8442'.
[  854.625834][ T4197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8444'.
[  854.669857][ T4197] bond7: entered promiscuous mode
[  854.679890][ T4197] bond7: entered allmulticast mode
[  854.689916][ T4197] 8021q: adding VLAN 0 to HW filter on device bond7
[  854.751288][ T4204] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8443'.
[  854.752930][ T4201] macvlan2: entered promiscuous mode
[  854.767675][ T4201] macvlan2: entered allmulticast mode
[  854.776514][ T4201] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  855.650729][ T4261] netlink: 'syz.6.8458': attribute type 12 has an invalid length.
[  858.530389][ T4317] ip6erspan1: entered allmulticast mode
[  858.639456][ T4321] netlink: 'syz.5.8480': attribute type 7 has an invalid length.
[  858.669649][T17500] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  858.678902][ T4321] netlink: 'syz.5.8480': attribute type 7 has an invalid length.
[  858.688584][T17500] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  858.723069][T17500] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  858.733925][T17500] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  858.743815][ T4320] nbd6: detected capacity change from 0 to 22540055482368
[  858.753213][ T4320] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  858.806971][ T5846] block nbd6: Receive control failed (result -104)
[  858.932305][ T4341] __nla_validate_parse: 17 callbacks suppressed
[  858.932328][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8487'.
[  859.309933][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8494'.
[  859.399866][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8496'.
[  859.670111][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8500'.
[  859.679902][ T4380] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.8501'.
[  859.761326][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8500'.
[  859.782100][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8500'.
[  860.217750][   T30] audit: type=1800 audit(1770291129.191:12): pid=4407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8510" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2728 res=0 errno=0
[  860.327024][ T4410] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8512'.
[  860.350125][ T4412] syzkaller0: entered promiscuous mode
[  860.366882][ T4412] syzkaller0: entered allmulticast mode
[  860.507435][ T4418] syzkaller1: tun_chr_ioctl cmd 1074025677
[  860.523127][ T4418] syzkaller1: linktype set to 823
[  860.670577][ T4425] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  860.743157][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8515'.
[  860.911108][ T4440] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8521'.
[  860.930361][ T4444] tc_dump_action: action bad kind
[  860.949038][ T4444] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  860.957855][ T4440] netlink: ct family unspecified
[  860.972685][ T4447] veth0: entered promiscuous mode
[  861.388498][ T4461] netlink: 'syz.4.8526': attribute type 4 has an invalid length.
[  861.441323][ T4467] netlink: 'syz.4.8526': attribute type 4 has an invalid length.
[  861.686211][ T4436] veth0: left promiscuous mode
[  862.360185][ T4506] geneve4: entered promiscuous mode
[  862.425613][ T4511] ipip1: entered allmulticast mode
[  862.785763][ T4531] IPVS: length: 24 != 49176
[  863.382708][ T4557] netlink: 'syz.3.8558': attribute type 11 has an invalid length.
[  863.630230][ T4574] netlink: 'syz.3.8562': attribute type 15 has an invalid length.
[  863.672148][  T123] block nbd4: Possible stuck request ffff888045ac8000: control (read@0,1024B). Runtime 120 seconds
[  863.683825][  T123] block nbd4: Possible stuck request ffff888045ac8200: control (read@1024,1024B). Runtime 120 seconds
[  863.695272][  T123] block nbd4: Possible stuck request ffff888045ac8400: control (read@2048,1024B). Runtime 120 seconds
[  863.707036][  T123] block nbd4: Possible stuck request ffff888045ac8600: control (read@3072,1024B). Runtime 120 seconds
[  863.730077][ T4542] wlan0 speed is unknown, defaulting to 1000
[  864.016677][ T4588] __nla_validate_parse: 6 callbacks suppressed
[  864.016697][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8567'.
[  864.420395][ T4592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  864.476867][ T4603] ipt_REJECT: TCP_RESET invalid for non-tcp
[  864.562683][ T4603] bond8: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  864.600121][ T4603] bond8 (unregistering): Released all slaves
[  864.751604][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8574'.
[  864.777914][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8574'.
[  864.784166][ T4615] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8573'.
[  864.875342][ T4615] SET target dimension over the limit!
[  865.197954][ T4629] netlink: 'syz.6.8577': attribute type 13 has an invalid length.
[  865.240158][ T4646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8584'.
[  865.270462][ T4644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8583'.
[  865.291471][ T4648] pim6reg: left allmulticast mode
[  866.410730][ T4698] netlink: 'syz.5.8601': attribute type 1 has an invalid length.
[  866.566308][ T4698] 8021q: adding VLAN 0 to HW filter on device bond7
[  866.613989][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8604'.
[  866.674958][ T4701] vlan2: entered promiscuous mode
[  866.690590][ T4701] bond7: entered promiscuous mode
[  866.706219][ T4701] vlan2: entered allmulticast mode
[  866.715161][ T4701] bond7: entered allmulticast mode
[  866.721789][ T4717] netlink: 'syz.4.8604': attribute type 1 has an invalid length.
[  866.730287][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8604'.
[  866.830442][ T4725] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  866.891343][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8608'.
[  867.003188][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  867.016184][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  867.083333][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  867.263549][ T4741] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8613'.
[  867.527824][ T4720] infiniband syz2: set down
[  867.532732][ T1465] ip6_vti0 speed is unknown, defaulting to 1000
[  867.547492][ T4720] infiniband syz2: added ip6_vti0
[  867.630709][ T4720] RDS/IB: syz2: added
[  867.645859][ T4720] smc: adding ib device syz2 with port count 1
[  867.669460][ T4720] smc:    ib device syz2 port 1 has pnetid SYZ1 (user defined)
[  867.808633][ T1465] ip6_vti0 speed is unknown, defaulting to 1000
[  867.826699][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  868.366461][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  869.005860][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  869.066577][ T4824] netlink: 'syz.5.8640': attribute type 11 has an invalid length.
[  869.097620][ T4824] __nla_validate_parse: 7 callbacks suppressed
[  869.097640][ T4824] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8640'.
[  871.621281][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  871.827759][ T4867] netlink: 'syz.5.8652': attribute type 18 has an invalid length.
[  871.851624][ T4865] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8651'.
[  872.214615][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8657'.
[  872.626792][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  872.634204][ T4889] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8659'.
[  872.677282][ T4889] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8659'.
[  873.343039][ T4926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8667'.
[  873.371493][ T4922] vlan3: entered allmulticast mode
[  873.462488][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8669'.
[  873.463195][ T4927] vlan3: entered allmulticast mode
[  873.523914][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  873.540004][ T4937] netlink: 'syz.2.8671': attribute type 3 has an invalid length.
[  874.026220][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8677'.
[  874.044086][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  874.168789][ T4964] netlink: 'syz.4.8679': attribute type 23 has an invalid length.
[  874.601773][ T4995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  874.785092][ T5006] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8692'.
[  874.785794][ T4720] ip6_vti0 speed is unknown, defaulting to 1000
[  874.926282][ T5013] netlink: 'syz.5.8693': attribute type 39 has an invalid length.
[  874.964614][ T5016] sctp: [Deprecated]: syz.4.8695 (pid 5016) Use of int in maxseg socket option.
[  874.964614][ T5016] Use struct sctp_assoc_value instead
[  874.965270][ T5013] bridge0: port 3(syz_tun) entered disabled state
[  874.994694][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8694'.
[  875.016176][ T5016] sctp: [Deprecated]: syz.4.8695 (pid 5016) Use of int in maxseg socket option.
[  875.016176][ T5016] Use struct sctp_assoc_value instead
[  875.070092][ T5013] syz_tun (unregistering): left allmulticast mode
[  875.084736][ T5013] syz_tun (unregistering): left promiscuous mode
[  875.100349][ T5013] bridge0: port 3(syz_tun) entered disabled state
[  875.362866][ T5025] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8697'.
[  875.382060][ T5025] openvswitch: netlink: Flow key attr not present in new flow.
[  875.814671][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8705'.
[  875.845802][ T5051] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication
[  876.103277][ T5064] delete_channel: no stack
[  876.523688][ T5088] IPVS: set_ctl: invalid protocol: 4 172.30.1.4:20000
[  876.624197][ T5094] Cannot find add_set index 65532 as target
[  876.738596][ T5105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8721'.
[  876.932086][ T5116] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8727'.
[  877.309456][ T5144] netlink: 'syz.4.8733': attribute type 4 has an invalid length.
[  877.314008][ T5146] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8735'.
[  877.341531][ T5146] openvswitch: netlink: Flow actions attr not present in new flow.
[  877.672254][ T5159] netlink: 'syz.5.8739': attribute type 1 has an invalid length.
[  877.701267][ T5163] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  877.871619][ T5174] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8739'.
[  877.940201][ T5179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8741'.
[  878.200575][ T5192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8742'.
[  878.284162][ T5200] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  878.544806][ T5209] team0: Device gtp0 is up. Set it down before adding it as a team port
[  878.550409][ T5210] netlink: 'syz.6.8744': attribute type 6 has an invalid length.
[  878.675883][ T5219] netlink: 'syz.5.8751': attribute type 1 has an invalid length.
[  878.697912][ T5222] tap0: tun_chr_ioctl cmd 1074025676
[  878.722013][ T5222] tap0: owner set to 0
[  878.853351][ T5226] xt_l2tp: v2 doesn't support IP mode
[  879.026424][ T5231] 8021q: adding VLAN 0 to HW filter on device bond3
[  879.272185][ T5248] netlink: 'syz.4.8760': attribute type 11 has an invalid length.
[  879.329136][ T5252] netlink: 'syz.5.8762': attribute type 1 has an invalid length.
[  879.509574][ T5264] netlink: 'syz.3.8764': attribute type 9 has an invalid length.
[  879.920461][ T5284] netlink: 'syz.4.8772': attribute type 33 has an invalid length.
[  879.993660][ T5270] syz.6.8767 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  880.017213][ T5287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  880.081578][ T5284] netlink: 'syz.4.8772': attribute type 33 has an invalid length.
[  880.099400][ T5284] __nla_validate_parse: 5 callbacks suppressed
[  880.099421][ T5284] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8772'.
[  880.101966][ T5270] CPU: 0 UID: 0 PID: 5270 Comm: syz.6.8767 Not tainted syzkaller #0 PREEMPT(full) 
[  880.101989][ T5270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  880.102000][ T5270] Call Trace:
[  880.102008][ T5270]  <TASK>
[  880.102016][ T5270]  dump_stack_lvl+0xe8/0x150
[  880.102044][ T5270]  dump_header+0xd3/0x4c0
[  880.102067][ T5270]  oom_kill_process+0x3ab/0x970
[  880.102089][ T5270]  out_of_memory+0x106c/0x1410
[  880.102111][ T5270]  ? __pfx___mutex_lock+0x10/0x10
[  880.102139][ T5270]  ? __pfx_out_of_memory+0x10/0x10
[  880.102153][ T5270]  ? do_raw_spin_unlock+0xf5/0x210
[  880.102185][ T5270]  try_charge_memcg+0xc53/0x1560
[  880.102224][ T5270]  ? __pfx_try_charge_memcg+0x10/0x10
[  880.102239][ T5270]  ? xa_load+0x60/0x210
[  880.102263][ T5270]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  880.102292][ T5270]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  880.102323][ T5270]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  880.102353][ T5270]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  880.102383][ T5270]  __read_swap_cache_async+0x212/0x480
[  880.102416][ T5270]  swap_cluster_readahead+0x358/0x680
[  880.102446][ T5270]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  880.102483][ T5270]  ? get_vma_policy+0x27b/0x3c0
[  880.102506][ T5270]  swapin_readahead+0x196/0xc50
[  880.102533][ T5270]  ? swap_table_get+0x1e/0x260
[  880.102561][ T5270]  ? __pfx_swapin_readahead+0x10/0x10
[  880.102587][ T5270]  ? swap_table_get+0x1e/0x260
[  880.102607][ T5270]  ? swap_table_get+0x1e/0x260
[  880.102626][ T5270]  ? swap_table_get+0x1e/0x260
[  880.102648][ T5270]  ? swap_table_get+0x216/0x260
[  880.102670][ T5270]  ? swap_cache_get_folio+0x513/0x520
[  880.102694][ T5270]  do_swap_page+0x8ce/0x5e10
[  880.102728][ T5270]  ? ___pte_offset_map+0x29/0x240
[  880.102752][ T5270]  ? ___pte_offset_map+0x29/0x240
[  880.102776][ T5270]  ? do_swap_page+0x18b/0x5e10
[  880.102796][ T5270]  ? __pfx_do_swap_page+0x10/0x10
[  880.102827][ T5270]  ? __lock_acquire+0x6b5/0x2cf0
[  880.102849][ T5270]  ? __pfx_default_wake_function+0x10/0x10
[  880.102876][ T5270]  ? ___pte_offset_map+0x1ae/0x240
[  880.102903][ T5270]  ? pte_offset_map_rw_nolock+0xea/0x160
[  880.102930][ T5270]  handle_mm_fault+0x12d2/0x32a0
[  880.102969][ T5270]  ? handle_mm_fault+0xee/0x32a0
[  880.103000][ T5270]  ? __pfx_handle_mm_fault+0x10/0x10
[  880.103022][ T5270]  ? lock_vma_under_rcu+0x45a/0x500
[  880.103067][ T5270]  do_user_addr_fault+0xa73/0x1360
[  880.103100][ T5270]  ? rcu_is_watching+0x15/0xb0
[  880.103119][ T5270]  ? trace_page_fault_user+0x84/0x1c0
[  880.103147][ T5270]  exc_page_fault+0x6a/0xc0
[  880.103167][ T5270]  asm_exc_page_fault+0x26/0x30
[  880.103184][ T5270] RIP: 0033:0x7efdda3560b8
[  880.103202][ T5270] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[  880.103217][ T5270] RSP: 002b:00007ffebc114450 EFLAGS: 00010246
[  880.103234][ T5270] RAX: 0000000000000000 RBX: 00005555676bc500 RCX: 00007efdda35b78e
[  880.103246][ T5270] RDX: 00007ffebc1144a0 RSI: 0000000000000000 RDI: 0000000000000000
[  880.103258][ T5270] RBP: 00007efdda617da0 R08: 0000000000000000 R09: 0000000000000000
[  880.103269][ T5270] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000d6f2d
[  880.103281][ T5270] R13: 00007efdda615fac R14: 00000000000d6c40 R15: 00007ffebc1145d0
[  880.103313][ T5270]  </TASK>
[  880.103320][ T5270] memory: usage 305120kB, limit 307200kB, failcnt 228
[  880.380798][ T5296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8775'.
[  880.490299][ T5296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8775'.
[  880.511109][ T5270] memory+swap: usage 287524kB, limit 9007199254740988kB, failcnt 0
[  880.526999][ T5297] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  880.538041][ T5297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8774'.
[  880.541413][ T5270] kmem: usage 280976kB, limit 9007199254740988kB, failcnt 0
[  880.590661][ T5300] xt_l2tp: v2 doesn't support IP mode
[  880.606768][ T5270] Memory cgroup stats for /syz6:
[  880.606934][ T5270] cache 0
[  880.632133][ T5270] rss 6897664
[  880.650032][ T5270] rss_huge 0
[  880.676856][ T5270] shmem 0
[  880.732274][ T5270] mapped_file 0
[  880.735807][ T5270] dirty 0
[  880.771892][ T5270] writeback 0
[  880.775343][ T5270] workingset_refault_anon 6
[  880.840362][ T5270] workingset_refault_file 0
[  880.872031][ T5270] swap 172032
[  880.903782][ T5270] swapcached 24576
[  880.914513][ T5313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8782'.
[  880.918898][ T5270] pgpgin 9548
[  880.973135][ T5270] pgpgout 7859
[  880.976582][ T5270] pgfault 20629
[  881.009376][ T5270] pgmajfault 3
[  881.027785][ T5270] inactive_anon 0
[  881.031490][ T5270] active_anon 24576
[  881.081980][ T5270] inactive_file 0
[  881.085700][ T5270] active_file 0
[  881.089187][ T5270] unevictable 6864896
[  881.127903][ T5270] hierarchical_memory_limit 314572800
[  881.142002][ T5270] hierarchical_memsw_limit 9223372036854771712
[  881.159786][ T5270] total_cache 0
[  881.168811][ T5270] total_rss 6897664
[  881.192111][ T5270] total_rss_huge 0
[  881.195977][ T5270] total_shmem 0
[  881.199463][ T5270] total_mapped_file 0
[  881.211972][ T5270] total_dirty 0
[  881.216183][ T5270] total_writeback 0
[  881.220113][ T5270] total_workingset_refault_anon 6
[  881.241986][ T5270] total_workingset_refault_file 0
[  881.252236][ T5270] total_swap 172032
[  881.256092][ T5270] total_swapcached 24576
[  881.280780][ T5270] total_pgpgin 9548
[  881.290928][ T5270] total_pgpgout 7859
[  881.301081][ T5270] total_pgfault 20629
[  881.321955][ T5270] total_pgmajfault 3
[  881.325911][ T5270] total_inactive_anon 0
[  881.330180][ T5270] total_active_anon 24576
[  881.335309][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8786'.
[  881.391986][ T5270] total_inactive_file 0
[  881.396218][ T5270] total_active_file 0
[  881.400306][ T5270] total_unevictable 6864896
[  881.441984][ T5270] anon_cost 0
[  881.452779][ T5270] file_cost 0
[  881.460882][ T5270] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.8767,pid=5270,uid=0
[  881.521195][ T5270] Memory cgroup out of memory: Killed process 5270 (syz.6.8767) total-vm:102124kB, anon-rss:13372kB, file-rss:22668kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[  881.858632][ T5349] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8793'.
[  881.982416][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8794'.
[  882.080721][ T5356] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8795'.
[  882.105340][ T5356] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048)
[  882.172949][ T5358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8797'.
[  882.191218][ T5351] hsr_slave_1 (unregistering): left promiscuous mode
[  882.594804][ T5371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  882.738703][ T5371] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  882.773253][ T5386] syzkaller0: entered promiscuous mode
[  882.798589][ T5386] syzkaller0: entered allmulticast mode
[  882.871054][ T5371] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  883.062448][ T5394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  883.168827][ T5383] tipc: Resetting bearer <eth:syzkaller0>
[  883.175081][ T5402] xt_NFQUEUE: number of total queues is 0
[  883.262141][ T5383] tipc: Disabling bearer <eth:syzkaller0>
[  883.377252][T17500] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  883.476717][T17500] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  883.572094][T17500] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  883.573373][ T5419] netlink: 'syz.5.8812': attribute type 1 has an invalid length.
[  883.601218][T17500] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  883.940695][ T5440] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[  884.092749][ T5440] netlink: 'syz.2.8814': attribute type 1 has an invalid length.
[  884.254059][ T5450] vlan2: entered promiscuous mode
[  884.291930][ T5450] geneve1: entered promiscuous mode
[  884.333594][ T5450] vlan2: entered allmulticast mode
[  884.338790][ T5450] geneve1: entered allmulticast mode
[  884.657976][ T5465] x_tables: duplicate underflow at hook 2
[  884.689128][ T5464] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  884.724005][ T1465] ip6_vti0 speed is unknown, defaulting to 1000
[  884.730563][ T1465] syz2: Port: 1 Link ACTIVE
[  884.742099][ T1460] ip6_vti0 speed is unknown, defaulting to 1000
[  884.790311][ T5469] netlink: 'syz.2.8820': attribute type 1 has an invalid length.
[  884.798677][ T5469] netlink: 'syz.2.8820': attribute type 3 has an invalid length.
[  885.284284][ T5507] xt_NFQUEUE: number of total queues is 0
[  885.472120][ T5521] __nla_validate_parse: 11 callbacks suppressed
[  885.472140][ T5521] netlink: 184 bytes leftover after parsing attributes in process `syz.6.8836'.
[  885.508569][ T5526] tipc: New replicast peer: 255.255.255.255
[  885.544123][ T5526] tipc: Enabled bearer <udp:syz2>, priority 10
[  885.705766][ T5532] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8839'.
[  885.720049][ T5533] ip6gretap0: entered promiscuous mode
[  885.739206][ T5532] 8021q: VLANs not supported on ip_vti0
[  885.739440][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8838'.
[  886.063922][ T5546] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8841'.
[  886.074455][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  886.089718][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  886.100055][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  886.113578][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  886.122586][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  886.130221][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  886.552594][T27430] tipc: Node number set to 4043332660
[  886.748332][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8843'.
[  886.991124][ T5544] wlan0 speed is unknown, defaulting to 1000
[  886.998291][ T5544] ip6_vti0 speed is unknown, defaulting to 1000
[  887.238010][ T5544] chnl_net:caif_netlink_parms(): no params data found
[  887.310815][ T5544] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.320372][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state
[  887.328137][ T5544] bridge_slave_0: entered allmulticast mode
[  887.335906][ T5544] bridge_slave_0: entered promiscuous mode
[  887.344145][ T5544] bridge0: port 2(bridge_slave_1) entered blocking state
[  887.351469][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.359832][ T5544] bridge_slave_1: entered allmulticast mode
[  887.367470][ T5544] bridge_slave_1: entered promiscuous mode
[  887.397052][ T5544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  887.409368][ T5544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  887.442672][ T5544] team0: Port device team_slave_0 added
[  887.450541][ T5544] team0: Port device team_slave_1 added
[  887.477015][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_0
[  887.484272][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  887.512166][ T5544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  887.525128][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_1
[  887.543460][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  887.569786][ T5544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  887.617624][ T5544] hsr_slave_0: entered promiscuous mode
[  887.624719][ T5544] hsr_slave_1: entered promiscuous mode
[  887.630925][ T5544] debugfs: 'hsr0' already exists in 'hsr'
[  887.636739][ T5544] Cannot create hsr debugfs directory
[  887.751396][ T5544] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  887.820025][ T5544] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  887.868285][ T5544] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  887.926161][ T5544] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  888.159162][ T5499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  888.186011][ T5544] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  888.240458][ T5837] Bluetooth: hci7: command tx timeout
[  888.253997][ T5544] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  888.278094][ T5544] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  888.330204][ T5544] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  888.563561][ T5601] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.8851'.
[  888.656922][ T5544] 8021q: adding VLAN 0 to HW filter on device bond0
[  888.759069][ T5544] 8021q: adding VLAN 0 to HW filter on device team0
[  888.829212][ T5609] bond3: option miimon: invalid value (18446744073709551585)
[  888.834381][ T5612] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8855'.
[  888.837146][ T5609] bond3: option miimon: allowed values 0 - 2147483647
[  888.860090][ T5609] bond3 (unregistering): Released all slaves
[  888.883446][ T5616] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  889.272205][  T123] block nbd6: Possible stuck request ffff888025970000: control (read@0,4096B). Runtime 30 seconds
[  889.411457][T17503] bridge0: port 1(bridge_slave_0) entered blocking state
[  889.418799][T17503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  889.484046][T17520] bridge0: port 2(bridge_slave_1) entered blocking state
[  889.491249][T17520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  889.553215][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8861'.
[  889.579978][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8861'.
[  889.680111][ T5633] : entered promiscuous mode
[  889.767540][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8864'.
[  889.858588][ T5652] syzkaller0: entered promiscuous mode
[  889.881773][ T5652] syzkaller0: entered allmulticast mode
[  890.313754][ T5837] Bluetooth: hci7: command tx timeout
[  890.540386][ T5680] gretap0: entered promiscuous mode
[  890.590098][ T5544] 8021q: adding VLAN 0 to HW filter on device batadv0
[  890.715893][ T5544] veth0_vlan: entered promiscuous mode
[  890.747871][ T5544] veth1_vlan: entered promiscuous mode
[  890.824134][ T5544] veth0_macvtap: entered promiscuous mode
[  890.854537][ T5544] veth1_macvtap: entered promiscuous mode
[  890.893943][ T5544] batman_adv: batadv0: Interface activated: batadv_slave_0
[  890.926845][ T5544] batman_adv: batadv0: Interface activated: batadv_slave_1
[  890.947017][ T1903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  890.978090][ T1903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  891.002797][ T1903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  891.015985][T17503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  891.295882][ T5688] netlink: 'syz.5.8875': attribute type 2 has an invalid length.
[  891.429421][T17520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.441424][ T1903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.451055][ T5696] __nla_validate_parse: 2 callbacks suppressed
[  891.451075][ T5696] netlink: 332 bytes leftover after parsing attributes in process `syz.4.8878'.
[  891.468331][T17520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.474250][ T1903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.550523][T17520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.576295][T17520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.638569][ T5701] netlink: 'syz.3.8881': attribute type 23 has an invalid length.
[  891.653754][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8882'.
[  891.686470][ T5705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8882'.
[  891.880096][ T5719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8840'.
[  891.931095][ T5722] xt_l2tp: v2 sid > 0xffff: 1114112
[  892.198001][ T5730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8888'.
[  892.260465][ T5740] sctp: [Deprecated]: syz.5.8889 (pid 5740) Use of int in maxseg socket option.
[  892.260465][ T5740] Use struct sctp_assoc_value instead
[  892.270300][ T5730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8888'.
[  892.298240][ T5739] netlink: 312 bytes leftover after parsing attributes in process `syz.4.8891'.
[  892.398437][ T5837] Bluetooth: hci7: command tx timeout
[  893.043324][ T5774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8899'.
[  893.240957][ T5750] wlan0 speed is unknown, defaulting to 1000
[  893.249560][ T5750] ip6_vti0 speed is unknown, defaulting to 1000
[  893.266583][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8903'.
[  893.456838][ T5784] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  893.549020][ T5784] bond5 (unregistering): Released all slaves
[  893.642335][ T5798] netlink: 'syz.3.8903': attribute type 7 has an invalid length.
[  893.753155][  T123] block nbd4: Possible stuck request ffff888045ac8000: control (read@0,1024B). Runtime 150 seconds
[  893.764261][  T123] block nbd4: Possible stuck request ffff888045ac8200: control (read@1024,1024B). Runtime 150 seconds
[  893.775614][  T123] block nbd4: Possible stuck request ffff888045ac8400: control (read@2048,1024B). Runtime 150 seconds
[  893.787062][  T123] block nbd4: Possible stuck request ffff888045ac8600: control (read@3072,1024B). Runtime 150 seconds
[  893.995489][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8909'.
[  894.022029][ T5813] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8
[  894.472090][ T5837] Bluetooth: hci7: command tx timeout
[  895.159968][ T5878] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  895.733478][ T5898] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  896.154396][ T5929] geneve5: entered promiscuous mode
[  896.177853][ T5933] netlink: 'syz.5.8948': attribute type 5 has an invalid length.
[  896.195744][ T1903] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 57161 - 0
[  896.240652][ T1903] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 57161 - 0
[  896.286563][ T1903] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 57161 - 0
[  896.328363][ T1903] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 57161 - 0
[  896.593480][ T5957] dvmrp0: entered allmulticast mode
[  896.620173][ T5961] xt_time: unknown flags 0xf4
[  896.738245][ T5964] netlink: 'syz.5.8956': attribute type 2 has an invalid length.
[  896.758407][ T5966] IPv4: Oversized IP packet from 172.20.20.24
[  896.765216][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  896.771488][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  896.774449][ T5964] netlink: 'syz.5.8956': attribute type 1 has an invalid length.
[  896.821269][ T5972] netlink: 'syz.5.8956': attribute type 2 has an invalid length.
[  896.842526][ T5972] netlink: 'syz.5.8956': attribute type 1 has an invalid length.
[  896.872716][ T5971] __nla_validate_parse: 5 callbacks suppressed
[  896.872739][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8958'.
[  896.927601][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8958'.
[  896.939346][ T5976] netlink: 'syz.3.8962': attribute type 7 has an invalid length.
[  896.943095][ T5979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8961'.
[  896.962511][ T5980] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  896.974356][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8963'.
[  896.984688][ T5980] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  896.993129][ T5980] gretap1: entered promiscuous mode
[  896.998568][ T5980] gretap1: entered allmulticast mode
[  897.011323][ T5976] netlink: 'syz.3.8962': attribute type 7 has an invalid length.
[  897.207814][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8963'.
[  897.220827][ T5987] veth5: entered promiscuous mode
[  897.396584][ T5998] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8967'.
[  897.479802][ T6007] netlink: 165 bytes leftover after parsing attributes in process `syz.5.8969'.
[  897.575842][ T6008] netlink: 'syz.4.8970': attribute type 10 has an invalid length.
[  897.634841][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8971'.
[  897.661101][ T6015] netlink: 'syz.3.8971': attribute type 30 has an invalid length.
[  897.703030][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8971'.
[  897.868572][ T6029] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8977'.
[  898.503256][ T6070] netlink: 'syz.3.8991': attribute type 1 has an invalid length.
[  898.521426][ T6070] nbd: error processing sock list
[  898.540016][ T6070] block nbd7: shutting down sockets
[  898.657974][ T6079] netlink: 'syz.4.8993': attribute type 16 has an invalid length.
[  898.704840][ T6083] openvswitch: netlink: ERSPAN option length err (len 441, max 255).
[  898.714798][ T6083] openvswitch: netlink: Missing valid actions attribute.
[  898.731986][ T6083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  898.765264][ T6079] ip6_vti0: left allmulticast mode
[  898.790561][ T6079] 8021q: adding VLAN 0 to HW filter on device team0
[  898.803547][ T6079] dummy0: left promiscuous mode
[  898.832682][ T6079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  898.913834][ T6094] 8021q: adding VLAN 0 to HW filter on device bond1
[  899.118753][ T6115] tipc: MTU too low for tipc bearer
[  899.278118][ T6123] xt_hashlimit: size too large, truncated to 1048576
[  899.592505][ T6140] xt_l2tp: unknown flags: 10
[  899.974550][ T6164] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  900.161285][ T6178] bridge0: port 3(team0) entered blocking state
[  900.194448][ T6178] bridge0: port 3(team0) entered disabled state
[  900.220631][ T6178] team0: entered allmulticast mode
[  900.244434][ T6178] team_slave_0: entered allmulticast mode
[  900.260490][ T6178] team_slave_1: entered allmulticast mode
[  900.281704][ T6178] team0: entered promiscuous mode
[  900.302168][ T6178] team_slave_0: entered promiscuous mode
[  900.319666][ T6178] team_slave_1: entered promiscuous mode
[  900.330493][ T6178] bridge0: port 3(team0) entered blocking state
[  900.337241][ T6178] bridge0: port 3(team0) entered forwarding state
[  900.586884][ T6192] nbd: nbd6 already in use
[  900.672756][ T6200] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  900.908357][ T6208] syzkaller0: entered promiscuous mode
[  900.915306][ T6208] syzkaller0: entered allmulticast mode
[  906.563586][T31159] NFSD: Failed to start, no listeners configured.
[  916.116666][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  916.134480][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  916.145190][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  916.157105][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  916.172984][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  916.225765][ T6226] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  916.238785][ T6226] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  916.249117][ T6226] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  916.258280][ T6226] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  916.266555][ T6226] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  916.350910][ T6226] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  916.361116][ T6226] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  916.374062][ T6226] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  916.382951][ T6226] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  916.390930][ T6226] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  916.420898][ T5831] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  916.452536][ T5831] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  916.465387][ T5831] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  916.485227][ T5831] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  916.502684][ T5831] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  916.564897][ T5831] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  916.584411][ T5831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  916.594101][ T5831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  916.604678][ T5831] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  916.616413][ T5831] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  916.698024][ T6223] wlan0 speed is unknown, defaulting to 1000
[  916.707128][ T6223] ip6_vti0 speed is unknown, defaulting to 1000
[  916.944102][ T6225] wlan0 speed is unknown, defaulting to 1000
[  916.979889][ T6225] ip6_vti0 speed is unknown, defaulting to 1000
[  917.220497][ T6223] chnl_net:caif_netlink_parms(): no params data found
[  917.375365][ T6228] wlan0 speed is unknown, defaulting to 1000
[  917.390132][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.412075][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state
[  917.419421][ T6223] bridge_slave_0: entered allmulticast mode
[  917.444249][ T6223] bridge_slave_0: entered promiscuous mode
[  917.464553][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state
[  917.472634][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.479856][ T6223] bridge_slave_1: entered allmulticast mode
[  917.491037][ T6223] bridge_slave_1: entered promiscuous mode
[  917.546274][ T6228] ip6_vti0 speed is unknown, defaulting to 1000
[  917.566993][ T6230] wlan0 speed is unknown, defaulting to 1000
[  917.599079][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  917.632239][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  917.764544][ T6223] team0: Port device team_slave_0 added
[  917.793890][ T6223] team0: Port device team_slave_1 added
[  917.910130][ T6232] wlan0 speed is unknown, defaulting to 1000
[  917.917736][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0
[  917.926729][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  917.956005][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  917.971201][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1
[  917.978517][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  918.006434][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  918.031261][ T6232] ip6_vti0 speed is unknown, defaulting to 1000
[  918.213564][ T6223] hsr_slave_0: entered promiscuous mode
[  918.222918][ T6223] hsr_slave_1: entered promiscuous mode
[  918.229658][ T6223] debugfs: 'hsr0' already exists in 'hsr'
[  918.233513][ T5831] Bluetooth: hci3: command tx timeout
[  918.236381][ T6223] Cannot create hsr debugfs directory
[  918.271696][ T6230] ip6_vti0 speed is unknown, defaulting to 1000
[  918.312431][ T5831] Bluetooth: hci8: command tx timeout
[  918.476124][ T5831] Bluetooth: hci9: command tx timeout
[  918.500157][ T6225] chnl_net:caif_netlink_parms(): no params data found
[  918.552412][ T5831] Bluetooth: hci10: command tx timeout
[  918.632222][ T5831] Bluetooth: hci11: command tx timeout
[  918.751622][ T6228] chnl_net:caif_netlink_parms(): no params data found
[  918.809795][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.817293][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.824752][ T6225] bridge_slave_0: entered allmulticast mode
[  918.833563][ T6225] bridge_slave_0: entered promiscuous mode
[  918.886363][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.894396][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.901778][ T6225] bridge_slave_1: entered allmulticast mode
[  918.910108][ T6225] bridge_slave_1: entered promiscuous mode
[  918.999667][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  919.054463][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  919.134520][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.143159][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.150584][ T6228] bridge_slave_0: entered allmulticast mode
[  919.158196][ T6228] bridge_slave_0: entered promiscuous mode
[  919.198808][ T6225] team0: Port device team_slave_0 added
[  919.205036][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.213543][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.220773][ T6228] bridge_slave_1: entered allmulticast mode
[  919.229004][ T6228] bridge_slave_1: entered promiscuous mode
[  919.250940][ T6232] chnl_net:caif_netlink_parms(): no params data found
[  919.286880][ T6225] team0: Port device team_slave_1 added
[  919.348906][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  919.353806][  T123] block nbd6: Possible stuck request ffff888025970000: control (read@0,4096B). Runtime 60 seconds
[  919.370511][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  919.417808][ T6230] chnl_net:caif_netlink_parms(): no params data found
[  919.449222][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  919.456779][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  919.483356][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  919.509671][ T6228] team0: Port device team_slave_0 added
[  919.519972][ T6228] team0: Port device team_slave_1 added
[  919.526807][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  919.534726][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  919.562529][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  919.655979][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  919.663565][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  919.690421][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  919.709006][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.716701][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.724453][ T6232] bridge_slave_0: entered allmulticast mode
[  919.732279][ T6232] bridge_slave_0: entered promiscuous mode
[  919.741064][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  919.748340][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  919.776612][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  919.804812][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.812745][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.820177][ T6232] bridge_slave_1: entered allmulticast mode
[  919.828090][ T6232] bridge_slave_1: entered promiscuous mode
[  919.883871][ T6225] hsr_slave_0: entered promiscuous mode
[  919.890557][ T6225] hsr_slave_1: entered promiscuous mode
[  919.897181][ T6225] debugfs: 'hsr0' already exists in 'hsr'
[  919.903249][ T6225] Cannot create hsr debugfs directory
[  919.950355][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.959102][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.968197][ T6230] bridge_slave_0: entered allmulticast mode
[  919.975517][ T6230] bridge_slave_0: entered promiscuous mode
[  919.986257][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  920.003364][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  920.020036][ T6228] hsr_slave_0: entered promiscuous mode
[  920.026930][ T6228] hsr_slave_1: entered promiscuous mode
[  920.033616][ T6228] debugfs: 'hsr0' already exists in 'hsr'
[  920.039359][ T6228] Cannot create hsr debugfs directory
[  920.045492][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.052979][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.060893][ T6230] bridge_slave_1: entered allmulticast mode
[  920.068718][ T6230] bridge_slave_1: entered promiscuous mode
[  920.174223][ T6232] team0: Port device team_slave_0 added
[  920.201103][ T6230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  920.215337][ T6232] team0: Port device team_slave_1 added
[  920.235675][ T6230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  920.312950][ T5831] Bluetooth: hci3: command tx timeout
[  920.332895][ T6230] team0: Port device team_slave_0 added
[  920.339428][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  920.346791][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  920.375177][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  920.392576][ T5831] Bluetooth: hci8: command tx timeout
[  920.418859][ T6230] team0: Port device team_slave_1 added
[  920.425494][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  920.433101][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  920.459656][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  920.531770][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  920.538962][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  920.565692][ T5831] Bluetooth: hci9: command tx timeout
[  920.567456][ T6230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  920.606739][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  920.614032][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  920.642902][ T6230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  920.653581][ T5831] Bluetooth: hci10: command tx timeout
[  920.712359][ T5831] Bluetooth: hci11: command tx timeout
[  920.760723][ T6232] hsr_slave_0: entered promiscuous mode
[  920.768402][ T6232] hsr_slave_1: entered promiscuous mode
[  920.776248][ T6232] debugfs: 'hsr0' already exists in 'hsr'
[  920.782349][ T6232] Cannot create hsr debugfs directory
[  920.824712][ T6230] hsr_slave_0: entered promiscuous mode
[  920.831726][ T6230] hsr_slave_1: entered promiscuous mode
[  920.838632][ T6230] debugfs: 'hsr0' already exists in 'hsr'
[  920.844663][ T6230] Cannot create hsr debugfs directory
[  921.010889][ T6228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  921.139880][ T6228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  921.225700][ T6228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  921.280095][ T6228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  921.451655][ T6232] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.543782][ T6232] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.620025][ T6232] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.709178][ T6232] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.392421][ T5831] Bluetooth: hci3: command tx timeout
[  922.472301][ T5831] Bluetooth: hci8: command tx timeout
[  922.632090][ T5831] Bluetooth: hci9: command tx timeout
[  922.712318][ T5831] Bluetooth: hci10: command tx timeout
[  922.792138][ T5831] Bluetooth: hci11: command tx timeout
[  923.835984][  T123] block nbd4: Possible stuck request ffff888045ac8000: control (read@0,1024B). Runtime 180 seconds
[  923.847697][  T123] block nbd4: Possible stuck request ffff888045ac8200: control (read@1024,1024B). Runtime 180 seconds
[  923.859608][  T123] block nbd4: Possible stuck request ffff888045ac8400: control (read@2048,1024B). Runtime 180 seconds
[  923.871431][  T123] block nbd4: Possible stuck request ffff888045ac8600: control (read@3072,1024B). Runtime 180 seconds
[  924.472791][ T5831] Bluetooth: hci3: command tx timeout
[  924.552067][ T5831] Bluetooth: hci8: command tx timeout
[  924.712118][ T5831] Bluetooth: hci9: command tx timeout
[  924.792227][ T5831] Bluetooth: hci10: command tx timeout
[  924.872206][ T5831] Bluetooth: hci11: command tx timeout
[  924.906401][ T5199] udevd[5199]: worker [31608] /devices/virtual/block/nbd4 timeout; kill it
[  924.915592][ T5199] udevd[5199]: seq 33322 '/devices/virtual/block/nbd4' killed
[  924.923415][ T5199] udevd[5199]: worker [31685] /devices/virtual/block/nbd6 is taking a long time
[  949.437757][  T123] block nbd6: Possible stuck request ffff888025970000: control (read@0,4096B). Runtime 90 seconds
[  949.592194][ T5846] Bluetooth: hci1: command 0x0405 tx timeout
[  953.913434][  T123] block nbd4: Possible stuck request ffff888045ac8000: control (read@0,1024B). Runtime 210 seconds
[  953.924619][  T123] block nbd4: Possible stuck request ffff888045ac8200: control (read@1024,1024B). Runtime 210 seconds
[  953.935730][  T123] block nbd4: Possible stuck request ffff888045ac8400: control (read@2048,1024B). Runtime 210 seconds
[  953.946987][  T123] block nbd4: Possible stuck request ffff888045ac8600: control (read@3072,1024B). Runtime 210 seconds
[  976.057258][ T5846] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  976.069349][ T5846] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  976.080986][ T5846] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  976.086102][ T6274] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  976.098247][ T6274] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  976.108143][ T5837] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  976.108542][ T6274] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  976.123925][ T5837] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  976.135100][ T5837] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  976.146842][ T5831] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  976.323643][ T6271] wlan0 speed is unknown, defaulting to 1000
[  976.334236][ T6271] ip6_vti0 speed is unknown, defaulting to 1000
[  976.590301][ T6273] wlan0 speed is unknown, defaulting to 1000
[  976.608091][ T6273] ip6_vti0 speed is unknown, defaulting to 1000
[  976.800390][ T6271] chnl_net:caif_netlink_parms(): no params data found
[  976.941090][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.948745][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.957583][ T6271] bridge_slave_0: entered allmulticast mode
[  976.966353][ T6271] bridge_slave_0: entered promiscuous mode
[  976.977471][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state
[  976.986842][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state
[  976.996899][ T6271] bridge_slave_1: entered allmulticast mode
[  977.007227][ T6271] bridge_slave_1: entered promiscuous mode
[  977.200397][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  977.240978][ T6226] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  977.248151][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  977.262371][ T6226] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  977.282511][ T6226] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  977.290759][ T6226] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  977.298808][ T6226] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  977.329986][ T5837] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  977.364603][ T5837] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  977.385049][ T5837] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  977.394750][ T5837] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  977.398095][ T6271] team0: Port device team_slave_0 added
[  977.410794][ T5837] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  977.429189][ T6273] chnl_net:caif_netlink_parms(): no params data found
[  977.452745][ T6271] team0: Port device team_slave_1 added
[  977.475782][ T5837] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  977.489538][ T5837] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  977.507104][ T5837] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  977.518826][ T5837] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  977.535789][ T5837] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  977.558584][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  977.565964][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  977.593649][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  977.627705][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  977.635153][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  977.661809][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  977.825424][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.834746][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.845631][ T6273] bridge_slave_0: entered allmulticast mode
[  977.854412][ T6273] bridge_slave_0: entered promiscuous mode
[  977.872440][ T6271] hsr_slave_0: entered promiscuous mode
[  977.880624][ T6271] hsr_slave_1: entered promiscuous mode
[  977.890090][ T6271] debugfs: 'hsr0' already exists in 'hsr'
[  977.896294][ T6271] Cannot create hsr debugfs directory
[  977.902485][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.909729][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.924481][ T6273] bridge_slave_1: entered allmulticast mode
[  977.933756][ T6273] bridge_slave_1: entered promiscuous mode
[  977.943973][ T6288] wlan0 speed is unknown, defaulting to 1000
[  978.005808][ T6288] ip6_vti0 speed is unknown, defaulting to 1000
[  978.063949][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.078410][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.162097][ T5837] Bluetooth: hci12: command tx timeout
[  978.180896][ T6273] team0: Port device team_slave_0 added
[  978.202046][ T6273] team0: Port device team_slave_1 added
[  978.237541][ T5837] Bluetooth: hci13: command tx timeout
[  978.311616][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  978.320168][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.349522][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  978.384502][ T6293] wlan0 speed is unknown, defaulting to 1000
[  978.402981][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  978.410683][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.439085][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  978.467903][ T6293] ip6_vti0 speed is unknown, defaulting to 1000
[  978.602982][ T6273] hsr_slave_0: entered promiscuous mode
[  978.610146][ T6273] hsr_slave_1: entered promiscuous mode
[  978.617744][ T6273] debugfs: 'hsr0' already exists in 'hsr'
[  978.624231][ T6273] Cannot create hsr debugfs directory
[  978.677117][ T6290] wlan0 speed is unknown, defaulting to 1000
[  978.847180][ T6290] ip6_vti0 speed is unknown, defaulting to 1000
[  979.268729][ T6288] chnl_net:caif_netlink_parms(): no params data found
[  979.353053][ T5837] Bluetooth: hci14: command tx timeout
[  979.499141][ T6293] chnl_net:caif_netlink_parms(): no params data found
[  979.510688][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.520303][  T123] block nbd6: Possible stuck request ffff888025970000: control (read@0,4096B). Runtime 120 seconds
[  979.522386][ T5837] Bluetooth: hci15: command tx timeout
[  979.532920][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.545103][ T6288] bridge_slave_0: entered allmulticast mode
[  979.554001][ T6288] bridge_slave_0: entered promiscuous mode
[  979.568308][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.575667][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.583228][ T6288] bridge_slave_1: entered allmulticast mode
[  979.590366][ T6288] bridge_slave_1: entered promiscuous mode
[  979.602175][ T5837] Bluetooth: hci16: command tx timeout
[  979.683884][ T6288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  979.722598][ T6288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  979.799791][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.809563][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.817721][ T6293] bridge_slave_0: entered allmulticast mode
[  979.826713][ T6293] bridge_slave_0: entered promiscuous mode
[  979.838125][ T6288] team0: Port device team_slave_0 added
[  979.850738][ T6288] team0: Port device team_slave_1 added
[  979.867909][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.878568][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.887998][ T6293] bridge_slave_1: entered allmulticast mode
[  979.895578][ T6293] bridge_slave_1: entered promiscuous mode
[  979.959523][ T6290] chnl_net:caif_netlink_parms(): no params data found
[  979.973153][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  979.980218][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  980.006969][ T6288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  980.052239][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  980.059261][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  980.087853][ T6288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  980.102572][ T6293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  980.117590][ T6293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  980.212999][ T6293] team0: Port device team_slave_0 added
[  980.232307][ T5837] Bluetooth: hci12: command tx timeout
[  980.244062][ T6293] team0: Port device team_slave_1 added
[  980.307479][ T6288] hsr_slave_0: entered promiscuous mode
[  980.315107][ T6288] hsr_slave_1: entered promiscuous mode
[  980.321344][ T6288] debugfs: 'hsr0' already exists in 'hsr'
[  980.322073][ T5837] Bluetooth: hci13: command tx timeout
[  980.327810][ T6288] Cannot create hsr debugfs directory
[  980.349634][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state
[  980.357387][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state
[  980.365199][ T6290] bridge_slave_0: entered allmulticast mode
[  980.374852][ T6290] bridge_slave_0: entered promiscuous mode
[  980.385189][ T6293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  980.392688][ T6293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  980.418985][ T6293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  980.430727][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state
[  980.438357][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state
[  980.446440][ T6290] bridge_slave_1: entered allmulticast mode
[  980.454694][ T6290] bridge_slave_1: entered promiscuous mode
[  980.478719][ T6293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  980.486190][ T6293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  980.512844][ T6293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  980.590504][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  980.604468][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  980.672311][ T6290] team0: Port device team_slave_0 added
[  980.685756][ T6293] hsr_slave_0: entered promiscuous mode
[  980.693247][ T6293] hsr_slave_1: entered promiscuous mode
[  980.699586][ T6293] debugfs: 'hsr0' already exists in 'hsr'
[  980.705884][ T6293] Cannot create hsr debugfs directory
[  980.721041][ T6290] team0: Port device team_slave_1 added
[  980.777999][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  980.785797][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  980.814947][   T31] INFO: task syz.0.8042:2754 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  980.822772][ T6290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  980.826226][   T31]       Not tainted syzkaller #0
[  980.840178][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  980.850852][   T31] task:syz.0.8042      state:D stack:24640 pid:2754  tgid:2753  ppid:27179  task_flags:0x400140 flags:0x00080002
[  980.854220][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  980.863831][   T31] Call Trace:
[  980.875830][   T31]  <TASK>
[  980.891938][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  980.902064][   T31]  __schedule+0x14ea/0x5050
[  980.948294][   T31]  ? __pfx___schedule+0x10/0x10
[  980.956438][   T31]  ? schedule+0x90/0x360
[  980.960745][   T31]  schedule+0x164/0x360
[  980.965438][   T31]  schedule_preempt_disabled+0x13/0x30
[  980.975108][   T31]  __mutex_lock+0x7fe/0x1300
[  980.975686][ T6290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  980.979752][   T31]  ? __mutex_lock+0x5ac/0x1300
[  981.020058][   T31]  ? nfsd_nl_threads_get_doit+0x1ba/0x700
[  981.026867][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  981.034722][   T31]  ? __nlmsg_put+0xef/0x1b0
[  981.039314][   T31]  ? genlmsg_put+0x137/0x2e0
[  981.048428][   T31]  nfsd_nl_threads_get_doit+0x1ba/0x700
[  981.054934][   T31]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  981.061094][   T31]  ? dev_hard_start_xmit+0x78b/0x7f0
[  981.068485][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  981.074773][   T31]  ? __asan_memcpy+0x40/0x70
[  981.079678][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  981.086604][   T31]  ? __dev_queue_xmit+0x274/0x3850
[  981.093282][   T31]  genl_rcv_msg+0x61c/0x7a0
[  981.097830][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  981.103805][   T31]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  981.109976][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  981.116689][   T31]  netlink_rcv_skb+0x232/0x4b0
[  981.121578][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  981.127534][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  981.133173][   T31]  ? genl_rcv+0x19/0x40
[  981.137579][   T31]  ? down_read+0x272/0x2e0
[  981.142149][   T31]  ? genl_rcv+0xd/0x40
[  981.146437][   T31]  genl_rcv+0x28/0x40
[  981.150445][   T31]  netlink_unicast+0x80f/0x9b0
[  981.157735][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  981.163685][   T31]  ? __alloc_skb+0x193/0x390
[  981.168526][   T31]  ? netlink_sendmsg+0x650/0xb40
[  981.174640][   T31]  ? skb_put+0x11b/0x210
[  981.179428][   T31]  netlink_sendmsg+0x813/0xb40
[  981.185139][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  981.192399][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  981.198294][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  981.204230][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  981.210031][   T31]  ____sys_sendmsg+0xa68/0xad0
[  981.214942][   T31]  ? __might_fault+0xaf/0x130
[  981.219800][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  981.225207][   T31]  ? import_iovec+0x73/0xa0
[  981.230280][   T31]  ___sys_sendmsg+0x2a5/0x360
[  981.235754][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  981.241112][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  981.246743][   T31]  ? futex_wake+0x4ac/0x580
[  981.251487][   T31]  ? __fget_files+0x2a/0x420
[  981.256878][   T31]  ? __fget_files+0x3a0/0x420
[  981.262278][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  981.267739][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  981.273941][   T31]  ? rcu_is_watching+0x15/0xb0
[  981.279727][   T31]  do_syscall_64+0xe2/0xf80
[  981.284692][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  981.290921][   T31]  ? trace_irq_disable+0x37/0x100
[  981.297140][   T31]  ? clear_bhb_loop+0x60/0xb0
[  981.302039][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  981.308043][   T31] RIP: 0033:0x7ff8ccb9aeb9
[  981.312646][   T31] RSP: 002b:00007ff8cda19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  981.321718][   T31] RAX: ffffffffffffffda RBX: 00007ff8cce15fa0 RCX: 00007ff8ccb9aeb9
[  981.330185][   T31] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000003
[  981.338463][   T31] RBP: 00007ff8ccc08c1f R08: 0000000000000000 R09: 0000000000000000
[  981.347097][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  981.355948][   T31] R13: 00007ff8cce16038 R14: 00007ff8cce15fa0 R15: 00007ffea83ada98
[  981.364375][   T31]  </TASK>
[  981.367517][   T31] 
[  981.367517][   T31] Showing all locks held in the system:
[  981.376030][   T31] 5 locks held by rcu_exp_gp_kthr/18:
[  981.381641][   T31] 1 lock held by khungtaskd/31:
[  981.386819][   T31]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  981.398245][   T31] 2 locks held by getty/5585:
[  981.403441][   T31]  #0: ffff8880351610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  981.413713][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  981.424583][   T31] 2 locks held by syz.1.6985/31159:
[  981.429820][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.438797][ T5837] Bluetooth: hci14: command tx timeout
[  981.445042][   T31]  #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  981.456680][   T31] 1 lock held by udevd/31608:
[  981.462248][   T31]  #0: ffff888041b4d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  981.472332][   T31] 1 lock held by udevd/31685:
[  981.477313][   T31]  #0: ffff8880258a2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  981.487740][   T31] 3 locks held by kworker/0:17/1457:
[  981.493411][   T31]  #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  981.506228][   T31]  #1: ffffc90004e27bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  981.517655][   T31]  #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  981.529688][   T31] 2 locks held by kworker/0:20/1460:
[  981.535611][   T31] 4 locks held by kworker/u8:5/1898:
[  981.540931][   T31]  #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  981.553517][   T31]  #1: ffffc90000aa7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  981.565082][   T31]  #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  981.575005][   T31]  #3: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  981.586469][   T31] 2 locks held by syz.0.8042/2754:
[  981.591601][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.605842][ T5837] Bluetooth: hci15: command tx timeout
[  981.612228][   T31]  #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1ba/0x700
[  981.622810][   T31] 6 locks held by syz.6.9029/6192:
[  981.628407][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.637155][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  981.646837][   T31]  #2: ffff888025747278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  981.657600][   T31]  #3: ffff8881423a19d0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0
[  981.667386][   T31]  #4: ffff8881423a1370 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  981.680200][ T5837] Bluetooth: hci16: command tx timeout
[  981.687596][   T31]  #5: ffff8881423a13a8 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  981.700443][   T31] 2 locks held by syz.4.9030/6194:
[  981.707100][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.716389][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  981.726279][   T31] 2 locks held by syz.3.9031/6197:
[  981.731422][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.740143][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  981.749403][   T31] 2 locks held by syz.5.9034/6208:
[  981.754934][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.763754][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  981.773158][   T31] 2 locks held by syz.2.9035/6213:
[  981.778307][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.787316][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  981.797204][   T31] 2 locks held by syz-executor/6223:
[  981.803170][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.824349][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  981.851901][   T31] 2 locks held by syz-executor/6225:
[  981.857322][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.881903][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  981.891169][   T31] 2 locks held by syz-executor/6228:
[  981.912081][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.920559][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  981.948342][   T31] 2 locks held by syz-executor/6230:
[  981.961879][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  981.970261][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  982.003124][   T31] 2 locks held by syz-executor/6232:
[  982.008572][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  982.018762][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  982.030536][   T31] 2 locks held by syz-executor/6271:
[  982.036308][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  982.050978][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  982.060645][   T31] 2 locks held by syz-executor/6273:
[  982.067118][   T31]  #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  982.079917][   T31]  #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  982.089729][   T31] 3 locks held by syz-executor/6288:
[  982.095313][   T31]  #0: ffff88802a364ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  982.105455][   T31]  #1: ffff88802a3640c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  982.116478][   T31]  #2: ffffffff8fb388a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  982.126800][   T31] 4 locks held by syz-executor/6290:
[  982.132427][   T31]  #0: ffff8880578b4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  982.142764][   T31]  #1: ffff8880578b40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  982.152702][   T31]  #2: ffffffff8fb388a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  982.162959][   T31]  #3: ffff8880a6d50338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0
[  982.172419][   T31] 3 locks held by syz-executor/6293:
[  982.177703][   T31]  #0: ffff8880b34dcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  982.187944][   T31]  #1: ffff8880b34dc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  982.197840][   T31]  #2: ffffffff8fb388a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  982.217908][   T31] 
[  982.220302][   T31] =============================================
[  982.220302][   T31] 
[  982.228857][   T31] NMI backtrace for cpu 0
[  982.228878][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  982.228900][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  982.228912][   T31] Call Trace:
[  982.228920][   T31]  <TASK>
[  982.228928][   T31]  dump_stack_lvl+0xe8/0x150
[  982.228960][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  982.228984][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  982.229010][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  982.229035][   T31]  sys_info+0x135/0x170
[  982.229053][   T31]  watchdog+0xf90/0xfe0
[  982.229075][   T31]  ? watchdog+0x209/0xfe0
[  982.229098][   T31]  kthread+0x726/0x8b0
[  982.229119][   T31]  ? __pfx_watchdog+0x10/0x10
[  982.229135][   T31]  ? __pfx_kthread+0x10/0x10
[  982.229156][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  982.229178][   T31]  ? __pfx_kthread+0x10/0x10
[  982.229196][   T31]  ret_from_fork+0x51b/0xa40
[  982.229222][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  982.229243][   T31]  ? __switch_to+0xc82/0x1410
[  982.229268][   T31]  ? __pfx_kthread+0x10/0x10
[  982.229286][   T31]  ret_from_fork_asm+0x1a/0x30
[  982.229321][   T31]  </TASK>
[  982.229328][   T31] Sending NMI from CPU 0 to CPUs 1:
[  982.321997][ T5837] Bluetooth: hci12: command tx timeout
[  982.324059][    C1] NMI backtrace for cpu 1
[  982.324076][    C1] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  982.324095][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  982.324106][    C1] Workqueue: hci12 hci_cmd_timeout
[  982.324133][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  982.324156][    C1] Code: e8 ee b7 92 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 04 fb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 23 68 06 cc 44 89 f9 80 e1 07
[  982.324169][    C1] RSP: 0018:ffffc900043ff390 EFLAGS: 00000002
[  982.324183][    C1] RAX: 1ffffffff3466c00 RBX: 00000000000003fd RCX: 0000000000000000
[  982.324195][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  982.324206][    C1] RBP: ffffffff9a336530 R08: ffff888022bb8237 R09: 1ffff11004577046
[  982.324218][    C1] R10: dffffc0000000000 R11: ffffffff8531bf10 R12: dffffc0000000000
[  982.324230][    C1] R13: 0000000000000000 R14: ffffffff9a3362a0 R15: 0000000000000000
[  982.324242][    C1] FS:  0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000
[  982.324255][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  982.324267][    C1] CR2: 0000558579f37ee8 CR3: 000000000e346000 CR4: 00000000003526f0
[  982.324284][    C1] Call Trace:
[  982.324291][    C1]  <TASK>
[  982.324301][    C1]  wait_for_lsr+0x1a1/0x2f0
[  982.324325][    C1]  serial8250_console_write+0x1348/0x1ba0
[  982.324352][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  982.324370][    C1]  ? console_flush_all+0x123/0xb20
[  982.324391][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  982.324410][    C1]  ? console_flush_all+0x123/0xb20
[  982.324427][    C1]  console_flush_all+0x718/0xb20
[  982.324445][    C1]  ? console_flush_all+0x123/0xb20
[  982.324465][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  982.324484][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  982.324505][    C1]  console_unlock+0xd1/0x1c0
[  982.324520][    C1]  ? vprintk_emit+0x2cf/0x560
[  982.324535][    C1]  ? __pfx_console_unlock+0x10/0x10
[  982.324553][    C1]  ? vprintk_emit+0x2cf/0x560
[  982.324567][    C1]  ? vprintk_emit+0x2cf/0x560
[  982.324583][    C1]  vprintk_emit+0x485/0x560
[  982.324600][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  982.324620][    C1]  _printk+0xdd/0x130
[  982.324644][    C1]  ? __pfx__printk+0x10/0x10
[  982.324676][    C1]  bt_err+0x121/0x180
[  982.324691][    C1]  ? lock_acquire+0x106/0x330
[  982.324713][    C1]  ? __pfx_bt_err+0x10/0x10
[  982.324735][    C1]  hci_cmd_timeout+0xff/0x1e0
[  982.324753][    C1]  ? process_scheduled_works+0xa0f/0x17a0
[  982.324775][    C1]  process_scheduled_works+0xaec/0x17a0
[  982.324808][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  982.324828][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  982.324846][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  982.324862][    C1]  ? schedule+0x90/0x360
[  982.324881][    C1]  worker_thread+0xda6/0x1360
[  982.324922][    C1]  kthread+0x726/0x8b0
[  982.324941][    C1]  ? __pfx_worker_thread+0x10/0x10
[  982.324962][    C1]  ? __pfx_kthread+0x10/0x10
[  982.324980][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  982.325001][    C1]  ? __pfx_kthread+0x10/0x10
[  982.325018][    C1]  ret_from_fork+0x51b/0xa40
[  982.325042][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  982.325062][    C1]  ? __switch_to+0xc82/0x1410
[  982.325084][    C1]  ? __pfx_kthread+0x10/0x10
[  982.325101][    C1]  ret_from_fork_asm+0x1a/0x30
[  982.325128][    C1]  </TASK>
[  982.326354][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  982.326370][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  982.326390][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  982.326402][   T31] Call Trace:
[  982.326410][   T31]  <TASK>
[  982.326418][   T31]  vpanic+0x1e0/0x670
[  982.326446][   T31]  panic+0xc5/0xd0
[  982.326467][   T31]  ? __pfx_panic+0x10/0x10
[  982.326489][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  982.326521][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  982.326549][   T31]  watchdog+0xfda/0xfe0
[  982.326574][   T31]  ? watchdog+0x209/0xfe0
[  982.326599][   T31]  kthread+0x726/0x8b0
[  982.326622][   T31]  ? __pfx_watchdog+0x10/0x10
[  982.326640][   T31]  ? __pfx_kthread+0x10/0x10
[  982.326671][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  982.326696][   T31]  ? __pfx_kthread+0x10/0x10
[  982.326716][   T31]  ret_from_fork+0x51b/0xa40
[  982.326745][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  982.326769][   T31]  ? __switch_to+0xc82/0x1410
[  982.326796][   T31]  ? __pfx_kthread+0x10/0x10
[  982.326817][   T31]  ret_from_fork_asm+0x1a/0x30
[  982.326855][   T31]  </TASK>
[  982.329299][   T31] Kernel Offset: disabled