last executing test programs:

5m59.550975445s ago: executing program 4 (id=4127):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="5ef79b3fa0bf41d33620904120615b6230bd91258337bb9a8842a8251e7f95c1c324709fc1fa44ea701ec5dddd6153ac1e09a48ee7fa536922467d7dfcce92301a79e290d289a018835e88b799264296"], 0x34}}, 0x0)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xe8}}, 0x0)

5m59.329684913s ago: executing program 4 (id=4131):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(0x3)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x400}, @TCA_PIE_LIMIT={0x8, 0x2, 0xad3}, @TCA_PIE_BETA={0x8, 0x5, 0x19}]}}]}, 0x48}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket(0x2a, 0x2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) (async)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async)
close(0x3) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x400}, @TCA_PIE_LIMIT={0x8, 0x2, 0xad3}, @TCA_PIE_BETA={0x8, 0x5, 0x19}]}}]}, 0x48}}, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

5m59.042533855s ago: executing program 4 (id=4135):
socket(0xa, 0x3, 0x3a)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x22, 0x2, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x4)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000003040)=""/4109, 0x100d}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f00000006c0)=""/61, 0x3d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r9)
pwritev(r6, &(0x7f00000003c0)=[{&(0x7f00000002c0)="adb6363f08cd59d07860ec735ce54e0018dddb5f15f6ab3c58766ca2e1f22e83a70d9c347a48cb891c90c99bd383c4383b0b673e1b1c53afac95d4f4482cd170d8824d80c9ff8c429856e397712124cc92a8409270599ef4aa529c507af0f397a01b1cc0d48867377a4df0f88b", 0x6d}, {&(0x7f0000000340)="31c42c60ccfaeaef145db233a7bef15de2b1b54d7cd564494d28f1ed3e2c3e53acb40dedfdba80ceab61", 0x2a}, {&(0x7f0000000380)="538844a7e32cf33cd996dd711ee53a9b762f606885398ce1d2332f0d9f7a80c9ade4c9b90150b3d8406a54d395d62e085129a5d60406a1a688603b29e2214e72", 0x40}], 0x3, 0x9, 0x9)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r10, 0xc88719ede475f2bf, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x400c008)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r10, 0x621, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x22040895)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r8], 0x4)

5m58.638519828s ago: executing program 4 (id=4142):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x4}, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140)

5m58.533672962s ago: executing program 4 (id=4144):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0))
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002940)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x7}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000008c0)="1892", 0x2}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @empty, 0x4000005}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5m58.037847955s ago: executing program 4 (id=4150):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0)

5m57.752407737s ago: executing program 32 (id=4150):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0)

16.821260459s ago: executing program 1 (id=7157):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0), 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
r4 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r5=>0x0})
getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000100)={@remote, @remote, <r6=>0x0}, &(0x7f0000000140)=0xc)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x40c89}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
r9 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r9, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'ip_vti0\x00', <r10=>0x0, 0x80, 0x40, 0x6, 0x9, {{0x2b, 0x4, 0x0, 0x3d, 0xac, 0x9, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x7, 0x9a, [@multicast2]}, @rr={0x7, 0xf, 0xbf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x13, 0x2, [{0x7, 0xd, "465195a15edad898560d7b"}]}, @noop, @timestamp={0x44, 0x1c, 0x3f, 0x0, 0xa, [0x5, 0x6, 0x0, 0x4, 0x81, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x75, 0x3, 0x9, [{@multicast1, 0x5}, {@remote, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x4, [{@rand_addr=0x64010102, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@multicast1, 0x75}]}, @rr={0x7, 0x1b, 0x3f, [@remote, @empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4}]}}}}})
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000340)=<r11=>0x0, &(0x7f0000000380)=0x4)
r12 = socket(0x11, 0x3, 0x0)
r13 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r14=>0x0})
setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000280)={r14, 0x11, 0x6}, 0x10)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r14, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0xc78, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x2a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '!\xad/*\xe0-,+*&!%+.\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeed}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x4}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67}]}]}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "24e454c11cbba68732bb3fa67281f6de578c5fc6854f39db811e681b8885c85f0af274ecd0156e2d7815513b"}, @ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "4419aabb6a7765b0d8a40600e795c6cb8b964b258458fd85d0d9a0f2406914a434610481b65dd6860c3e87cfbb05046c04a4e75c2bd44c2851fa75daca4237f0f21bf4afd4bc42fd703ccc50de5dd85dafaf01a10faeab873236ba6b4b6c9bcf2d473382d0f70b7d22ccfe71bc39fde235653b67b3757c403ae77c0d70748308dd5470801bcedcbdbfb0de09b8397f6903d9d05594bebe7fb92812b14084518e57c3e4ba3f81ab4522f66bdb3c1673eeed982df4bddc0917fc4d81aabe5d6bc75604ceb08ee7fe9cbec64d6e87a7824a88a3a674233a3939df690053"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2cd}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_VALUE={0x5f, 0x4, "018d6e64b1414737a2dfd6e27d26472abd47ef0c141f060376e28c4c76422df0bf5af513fbac26cb458a9e091ebb00334f81a28e36ea4670f339297f63f144222bb2b8b616bc909cd1b208a1b75efc416a8ef6def6c4536c1ab284"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9664}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x7f0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc9, 0x4, "08bd5c9adc6985864bf55b962a9946ab227dce7739f092b37d2d804c74afd269b3d8ea59139e56e9d644ec432f945f86c135569ea61d5fa7eb487cfdb6ca8bb30cf71d277e88f8bb9c633a4c3f8eca775bf949a1fb19eef4dd91785d492c3839f5d813539a3d37a35785c64da18aad9ed62c7e4a80fbd5afce773f8f20f7b323a84505a414c6e2a398cbfcea8adb01731eb8846f17c7807de33997dddd0c2cf2a07c81ffb07f6e9ec60ee6b4425c0c3135f84fcd3ec997e4db0a606284b724699ed2362e96"}, @ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "61dabcb08ae017562cedbb6ccffc0287efc33122ef9fa348614d37a81d4667c8ef40d7abd8bc4169004a703f5db0b6adc1a2e7fb606914b0cbc6f0501c17c1"}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "263e7a082d635fabd19209e30f0495166941aebedd95d5ab1bf03ed1fc6b95cc85b9c2eca6fac8a2a391118699c4"}, @ETHTOOL_A_BITSET_BITS={0x22c, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*[!^&-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*+\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1fb627de}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'v\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{-}$\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{!^}$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x35a5db85}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xf0:{%\x00'}]}, {0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbd6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1db0ef4a}]}]}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8cb2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "4738c719cfd20113cea8339477cdc62b220f16e24dddc6a6b7a6c09f6ac87d09fbbf3b563d6728fdbd9b88080d8754a25f1bcafd861a916d635f180489011cd86ce15a852e8075bff9eaac107eef07976c75008b1558492979928b4faa1b8b8dd3be47656975cf7901253d3168af943a405e1f693b97b8183409edf8110329dfa00a9547870c4c9b2f04608980ae6876272f2230f92de33b14549c9d8aec802b6465902d6035233d7c55c6a98b2e0b72d3233ac1c955a6521690f89970122775c6150ab5d928bb19eb1d4989ab1aa9d4a245063f95820c902351447114"}, @ETHTOOL_A_BITSET_VALUE={0xf2, 0x4, "c39e91bb093bd2f29b48d58c79669676ae946d69b3d1cf12de7b52a3d2c843529da9c7f99bc90e36873842cc6b5af41f513c536507f016f4b13c5fd4b5db1b05942d3c3b7eef8117267f9168509262a2b2eb2af1d6d38cca02035f86684cb75cee7f6cd05591a2cb37548c96860357092bf9c350fdad1f6f4afb4eb15f68a82a065fc1e80932d7abe1787530632743dc9c1e2185333c33890a7906cb36c45f964f32704687145cb0122e2e9caae82e887fcb37bfbfd6485208bb468ea7e07d5ff9a0cf8ab87d6c699ca14b8deab6f4f400f9798a9bd2d0bf2bd36ae6a01dc50fd7ea483bc6cc64657b9972126f8e"}, @ETHTOOL_A_BITSET_VALUE={0x7, 0x4, "a2f432"}, @ETHTOOL_A_BITSET_MASK={0xe4, 0x5, "c87faf3e157e7f23d895d7d1f1b47ff70680e4851b085b8e651de97ec3db7cb4661bf8a7ba7f136a6099636338e0b548e0c79d327bcb7bc008f6b373a9d7e43c0f6fbc958656019d54ae0ff2dc6e07c5d4e9f25d8f6030bc89b2c759040089b0e77f8cd47ed20a4351685885945b5968d6f3da124af01e920b02a1f5308d69ddbeca70d8fefbd61ea5e0b3e717c17ad46e7f8b77e425689faff37715aaf57f2b2362991903461e43cec53b9691cea82b518f5d1c6ac4deaae72d603a144a07088b43b3b70041f7b9a98259d1f7c3ddfa1de0097452e9f8034a09bc14b72dd860"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x94}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-)$#[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x46}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'cpuacct.usage_sys\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$+,\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x92}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_FEATURES_WANTED={0xd4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}}-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc5e3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ',\xe0-&^$*@[Z\xb7$#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x46, 0x5, "5d63f0cfcfe2236a1ce945689e9a843c4e9d2482cb6b95e0314d274ebe4d81cb1e4c4a57850ec21a44717dd4f378f06307e247c0c59d29e8103284fa5b391dcf0e09"}]}]}, 0xc78}, 0x1, 0x0, 0x0, 0x80}, 0x4044000)
r16 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r16, 0x107, 0x7, &(0x7f0000000000)=0xc, 0x4)

16.47630543s ago: executing program 1 (id=7162):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async, rerun: 64)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (rerun: 64)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x4, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

16.18629767s ago: executing program 1 (id=7164):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@jmp={0x5, 0x1, 0x3, 0x2, 0xf3e49ef5e2a279c8, 0x100, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
epoll_create1(0x80000)

15.801409713s ago: executing program 1 (id=7166):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000040)={0x1a68, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x5d}}}}, [@NL80211_ATTR_NAN_FUNC={0x7c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0x4c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x218, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_SRF={0x140, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xf}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xfc}, @NL80211_NAN_FUNC_SERVICE_INFO={0xbb, 0xb, "d60fadcf30a7c50cb81d3d0e9f1b88d179197b5179e50b8e844672ae8e33d76b3f551eb1e461f94a6ab58c9d834448b160e0d49675411762dba5683b43c166eab91aae5a66c2479082d41f0561a9a0ff52612b5df662bd3a356f554f5f2492c1869da1946ff26d9c57e402f57ec089c9e135340cb41711f1d41bf470d9581e3b786f8a77e4d14893ca67ebc302b9abc6752c5f2a940c3a1eb2da0eda9de8be4df944fffc7e92287525acd01f198e42a05b61b7bf7b46db"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x1cc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}, @NL80211_NAN_FUNC_SRF={0x130, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x7a, 0xb, "b349701c452c26bfedb22b26eb648e639f638c54bb545a9ea7de8cd02eacb399ac4c251b0f1b009d9b9e0ff9e90a454b8b51e45b1ef747e5501306e0e19cf581880f792cae72061551611e9d6670d0f4bd0637491f05bec783c02b4ec3b9dae4a61a0a53e834b1a5e0478a320338edc8fc2737543144"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x15bc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x15a0, 0xd, 0x0, 0x1, [{0xde, 0x0, "793d669ed7386c454e1819a2269fbb2032c6089cf879382367459c7ab6c4f74c494cf3956387befbb463ae89aa5a3a9f0db256dc4e92d50d14dc19f8fb897d55627af9168fabf47c2534809657e1b7643c10af44d91d0cbc6920e8d52215a9effe503fc24a773d6e914dd2e4a01d3590418c1077a7e4e63a348d3fc6e0e3f4c4b0d7b7399718e9d5bcd61a4f7eb503228e5d41b9a63648b8990064fd7c6b68c57ef20d001f9ccdc487e59052f2f48792d66faa4ff884dc11ecdfb05959145dd6365f2cd1eaf68dbd39bfbe2e99bda21cd387a51010f277e70503"}, {0x2e, 0x0, "50e40583e3ecaf67871a11ae5aaddcb096c33428103ca29ea9e4685cf64873d07ac39de8c72b1cb8b543"}, {0xd3, 0x0, "9bef768b626a7488d9326b9833c95d83aa6aa2eaf2c6057a0a3b53ad7fc1a3ff21135372ea8d269882a6aca9f2e0583d0b745d89913ba234883736ef14ba3f924255d1473783296e37c6054587ff4c166add6e86a7fd1f0622931eae67577e0f3a64210d1626ecd739337fc4122b29c06a5e1d3ca56e4000e0b162576dd4d35cec51814ef6d8b62f6dd5c288c71044df38690b5e09ff9bcd932e82bc486bcccd81fab747f885410f9cf22246d9dd6869a8d003f3b5d676b8718e3c12ca15e8bcb3c0628b1b802b899d6b490aed6be1"}, {0xf2, 0x0, "96c110ae8d15f7feeca3afe0347b343f237b2ad1ff7b8dfbf24a502e64bf0ff0e29b1752f4ffc781cfcdc73d30d6b20cbded86f2a078e0926237ce4576b6fac974971c196920bc9e9c6bb6257fd2a1f71c37ffbf76814a1078ff587bd7b106c5dade4668b1dd88a908379fc55400f6cc6652f4fe90c0b1c2a6f1c4c36dbc9337e50fbc95b486de1ee8ad9e08369da47622a076572989d9ba291e1c755b84b014a37aadabd2ee962d4ebd86646077117418f401160df48d7c50695d51b24ecb7a658684aaac930a421f1ff1fb437579bba3e21da88afc4f6a926b8076bc804bf70a43fc7e7e2e40f52b79fa9efaea"}, {0xbe, 0x0, "5cf3a51c7bd8aaf8dd81639719c4b299145e5a4264596c20e455f84c82a73df8596626165bfb680f17a5b36e413f4318f89687601e4de53fd7c03b2fb940db1ff363e0de78db29e125136736dedda7e313b0da389fc0fcf47161493da0d9858994016e2455073114e07564d725da08e666469192f96b25db09129be52fd61780e4129546e4a051aa6f3f189ddf93916eacb3d35f2eb607c05fb2e447f6a25a9895c7201e12e845314972d888963d281b81937c37587bcd1e3d89"}, {0xcd, 0x0, "122f527f97890ea7fa91d9bd01a3afba28894d44e4a1378ffc9fa6839603fd8ef4bc70b1d992426c355cd9b1fb21b8c2e8403ca8aab6c2107abbdade8d621ef71a36b2fdf35320553a65fd18260282ab5c9a0d55fd894fac07e52e02b28ef27be106ea20e209749e4b594e61575682430b8b88e8e35ec7c83691125dfa66c78053b5ebb9cd39fcb64fe7a8c32ee490b69490829ff2a98dc4e694e576f2515f0930817ef9e4260aa1305e60a237d462ea3317aaf86d10f9b712495caaa3fba105dae5e1d48c8544bc54"}, {0x1004, 0x0, "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"}, {0x59, 0x0, "31449388b323e946614e9c9157cdab0cdcc78ec5d0d597915073eb8964b209d981b6b7afcaa4122773ed5280090932486dabeb33635f1a55502816d33f4b8294df5777a20ccbdc2eb60ace7477c6c50adc2b39572d"}, {0x29, 0x0, "f01696f53463d2354d46b5ccd1fa41a410cc09891bfa44d7aceada6674356eb706867dbe5f"}, {0xa6, 0x0, "55061f68c77b2de5de456bcea97e656132bf11b7e16db0e3b47cc4bedc1e417ae85a07c412ccfab08db6a3b996f68e585330d9daf0f65e6bb3ab9b3edb785e0722be91648fd380a529e90a56921734e1c3099b20982ac58b719102fed7e75932af8b63f7690205f23e839b69c4a025bc623e88d8810777a5e2c2737b7f8307dbec8d5c4581c833b67787971c8c694fb7844877fa563aa6b33363691447472b307719"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xad}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}]}]}, 0x1a68}, 0x1, 0x0, 0x0, 0x40000800}, 0x44000)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001c00)=<r1=>0x0, &(0x7f0000001c40)=0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)}, 0x20) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f00)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001b40)=@raw=[@exit], &(0x7f0000001b80)='GPL\x00', 0x80000000, 0x14, &(0x7f0000001bc0)=""/20, 0x41000, 0x6, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001cc0)={0x2, 0x2, 0x5, 0x7fffffff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001e40)=[r2, r3, r0, 0x1], &(0x7f0000001e80)=[{0x5, 0x3, 0x5, 0x7}, {0x5, 0x5, 0x0, 0x7}, {0x2, 0x4, 0xa, 0x3}, {0x5, 0x6, 0x3, 0x8}, {0x4, 0x3, 0xc, 0xc}, {0x2, 0x3, 0x1, 0x5}], 0x10, 0x7}, 0x94)
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000001fc0)=""/95, &(0x7f0000002040)=0x5f) (async)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000002080)={0x6, 0x1, 0x3, 0x80, 0x6, 0x3, 0x5, 0x8, 0x9, 0xd, 0xf, 0x7, 0x76, 0x8}, 0xe) (async)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000002140)={0x1, [<r7=>0x0]}, &(0x7f0000002180)=0x8) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002240)={r0, 0x58, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x30, r9, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xf35c, 0x14}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
connect$inet6(r2, &(0x7f0000002400)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}, 0x1c) (async)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000002440)={r7, 0x4, 0x3, [0x1, 0x200, 0x6]}, &(0x7f0000002480)=0xe) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000026c0)={&(0x7f00000024c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x4, [@var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @ptr={0x9, 0x0, 0x0, 0x2, 0x1}, @enum64={0x5, 0x7, 0x0, 0x13, 0x0, 0x4, [{0x6, 0x9, 0x3}, {0x10, 0x3, 0x1}, {0xb, 0x2}, {0x7, 0x6, 0x10001}, {0x4, 0x10000, 0xed}, {0xc, 0x7, 0xffff0000}, {0xb, 0xe9, 0x2}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x33, 0x7}, @var={0x8b, 0x0, 0x0, 0xe, 0x3, 0x2}, @fwd={0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x2}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000025c0)=""/218, 0xe4, 0xda, 0x0, 0x665}, 0x28) (async, rerun: 32)
r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000027c0)={'ip6gre0\x00', &(0x7f0000002740)={'syztnl1\x00', <r13=>0x0, 0x4, 0xe, 0x4, 0x2, 0x11, @empty, @remote, 0x10, 0x10, 0x57c1}})
sendmsg$nl_route(r12, &(0x7f00000028c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10504}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)=@mpls_getnetconf={0x54, 0x52, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x10}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x401}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffffffeb}, @NETCONFA_IFINDEX={0x8, 0x1, r13}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_IFINDEX={0x8, 0x1, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async, rerun: 64)
pipe(&(0x7f0000002900)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff}) (rerun: 64)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r14, 0x84, 0x13, &(0x7f0000002940)={r7, 0x1cae}, &(0x7f0000002980)=0x8)
recvfrom$rxrpc(r14, &(0x7f00000029c0)=""/26, 0x1a, 0x10000, &(0x7f0000002a00)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c40)={0x6, 0x9, &(0x7f0000002a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x8, 0x8, 0x5, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}]}, &(0x7f0000002ac0)='GPL\x00', 0x7, 0xbe, &(0x7f0000002b00)=""/190, 0x41100, 0x2, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000002bc0)=[{0x4, 0x5, 0x9, 0xc}, {0x1, 0x5, 0x10, 0x5}, {0x1, 0x5, 0x7}, {0x1, 0x3, 0x1, 0x1}, {0x1, 0x1, 0x3, 0x5}], 0x10, 0x32b7}, 0x94) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r14, 0x89f5, &(0x7f0000002d40)={'sit0\x00', &(0x7f0000002d00)={@empty, 0x1, 0x0, 0x10, 0x0, [{}]}}) (async, rerun: 32)
getsockopt$inet6_int(r15, 0x29, 0xcb, &(0x7f0000002d80), &(0x7f0000002dc0)=0x4)

15.592259978s ago: executing program 1 (id=7168):
syz_emit_ethernet(0x11, &(0x7f0000000240)={@broadcast, @remote, @void, {@llc={0x4, {@llc={0x0, 0xd4, 'p'}}}}}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0)

14.837915481s ago: executing program 1 (id=7175):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0xffffe000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400}})

14.200681805s ago: executing program 33 (id=7175):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0xffffe000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400}})

3.909320542s ago: executing program 5 (id=7255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'caif0\x00', 0x1000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f00000000c0))
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2ff, 0x0, 0x9}, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, 0x0, 0x9b}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x6, 0x9, 0x0, 0x0, 0xaed, 0x5, 0x1, 0x100000000}, &(0x7f0000000180)={0x9, 0xe, 0x1629, 0x2, 0x1, 0x6, 0xfd8, 0x5}, &(0x7f00000001c0)={0x3, 0x800, 0x9, 0x9e5, 0x1, 0x4, 0x6, 0x1}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3)

2.769681156s ago: executing program 2 (id=7264):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x8010)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x244, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61995a01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa433}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaec6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8b8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3d, @empty, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x553}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x404c814}, 0x40084)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x72}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000080)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xfc, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xd93d21b1f575ccda}, 0x40010)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000080)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000a40)={<r7=>0x0, 0x8, 0x20}, &(0x7f0000000a80)=0xc)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000ac0)={r7, @in6={{0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}}}, 0x84)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000b80)=0x7, 0x4)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$sock(r8, &(0x7f0000001180)={&(0x7f0000000bc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c40)="0a299454e3b88d50c837ff6c00ecd02a28984d39e6c3e455c82d5c5214733b174a201722163d4d546554944ac80eef6939b1c83ff241b8316b3c0abebaa246229ca597035b8f212b5d214f578c006c25c7738fac2307431dd881b5bda61961c0bb90261eb1698a2a2f7e601524fe532f2ee91b246937364fe74e5a6159f6c2a406", 0x81}, {&(0x7f0000000d00)="6abd39b224f5b1ca799866508a1af8a3e7f66b1551924ab6664d177dcc874d934efa879c8a673bccba87cfd2d709c3d3ffceb5aaec74d0bd14ee6b2a77d35b8a7731da1ed7f6a6766e73f2243aaa5f288c4154378ac527f69fb6bd5c39df429e2254ce169bfacc065ff3c753121b1abb08d1140c335983da13fe233f8368a7ca4748d9593bb36dc2f76557a74f0d1c3474e7aac2d878e8513d2c9dda9f8690fd69a06c346e855df7199e1012fa9cc1782d061bd42d26a9f6705f2d7695fcaa08ec7eab3b43ee67d39cab5032c275b9b60f45", 0xd2}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="1b09a3f28d69b3fd286511dbd96b28b7172a17a68b151c4f7ad1f9b92c9dc344b1646a443ab790f391c9233d075084c3731e7ad7a1d0064ffb0abbcbda58bee44060e864c83c2c74476793239e48a6", 0x4f}, {&(0x7f0000000ec0)="ae1a93ab6891d3bcf74cb91f6ff1f17b014b6244bfb352e71784df86ae675eb7aa5e7a18ef60647b595f5aaff1003e225d171afd4348a0192657745a294c77fac70eaa9aefda24aeea1becb15cbcbe952e2618bf85ac7c2f29fb45507ac9b7fd10e4a0856f9544", 0x67}, {&(0x7f0000000f40)="fc282f7a8644a3e4fad1f2315e815ce22933ea690312ba31383a083c2c96378e22", 0x21}, {&(0x7f0000000f80)="863e98a98193f1888c28cec47cc207c92f14762ac7509e340102c3128f93789053372c5a5c56c99c6f9c95145eb50d323beb34cc8adba299c00cbad90935be3d2a524261c6a237328dc8265f0ec0e78b52a0cea4f503f6823449fa8e7a120e3f66b941167c38d361de1d3618ec2ab04ae4ad86afd857e9507b8a856ba453054d949b286aaabaca19fb5ee727ca1a3493ef45aa2f357e", 0x96}], 0x7, &(0x7f00000010c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa39}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x800}}], 0xa8}, 0x20000080)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f0000001200)={0x1f0, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "57ea7f1763a09f0be201e0853d7de2e5aaeab6ec038c35"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7a2}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5df}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x50}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001480)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f00000014c0)={0x1d, r10, 0x2, {0x1, 0xff, 0x2}, 0xfe}, 0x18)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001500)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000001600)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001640)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e23, 0xb3, 0x4e21, 0xfff9, 0x2, 0xa0, 0xe0, 0x32, r10, r11}, {0x7, 0x4, 0x7, 0x0, 0x1000, 0xfffffffffffffff0, 0x800, 0x3}, {0x200, 0x591, 0x1000, 0xfffffffffffffff8}, 0x80000001, 0x6e6bb2, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@private=0xa010100, 0x3503, 0x1, 0x1, 0x7d, 0x3, 0x7, 0xcf}}, 0xe8)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0xa0, 0x0, 0x500, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x9}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4024085}, 0x20000800)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r12, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0xd0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a80)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000001a00), &(0x7f0000001a40)}, 0x20)
writev(r13, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)="86cdba154215998f58752a7afd3de5e50b62684438e0310ca7ab2fc018cbae0344ece7d132f02478ff52ac2ca309a963d1fc956a07d5cf8479f28a9959791ccdef419c6cba1bcd1793d1250595c09a0449a50a7ba97a54686c5fd46e02dcfffc67e7bd2242986546f872f41d1aa1fb21c108be86f2497a52f7a8f3f737d7ed8334b1ac20074be076", 0x88}, {&(0x7f0000001b80)="4a674b9c157d9a9510a3b4c6fa934966ec099db76db81782bec51ca79a9c98deb28b5262fcfd1e947901b6867ecf96aef83dc85830806b5ece971bbdfa30307b87eb64911891ee2facd53f8740b32434fe07b0ea66fee19bd6bc1bd789b94877de7ef9f16f790aaba1ab17325394a33fdbce83a40c1e3e11760a8fb78ac722192276d0c236e8eae4a3df6c1335ed97ec7b03f007cff9f847a39f5cc339cac71de29b591ddd12dad381bcdf", 0xab}, {&(0x7f0000001c40)="03c5470d767378b60971fcb9497182f3458c06055b16ea37c03f5fbc6eed419aef25e0ca9161b4ac8453d1f80fd9c6d8d139514de1d001a275629b1e532fd431919e3de1e91d7fd97f43aaad6411dd5e3459264c3d69ecc008a6f22db1f841c7c4fcdc7350610274936933da071df430d8ac24f744bb1860af3ef7ee0394ff8e4f38d78974936e72fd646846fffbd16a60841a", 0x93}, {&(0x7f0000001d00)="79052a5e07842c7bb47ea864ab54b0dfb037acd993f521546c687dd0fcfbc65d79b5ddc6d889766cbee3ca3e61070891bb8658967bb1a6a70b781c89e7139c735b955805a90b6867662a47541919d02ab9c36b3d954fac9102b03694085288b393b8107f396e5ba628b8c7477f8705843b8c2d53ce156d1f6b82cd7f57153722fbe484098a3cd48cdcff301e42fa57e49db7f1d5827555fd", 0x98}], 0x4)

2.583217931s ago: executing program 5 (id=7267):
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r2], 0x80}}, 0x0)

2.566633887s ago: executing program 2 (id=7268):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)

2.345039351s ago: executing program 2 (id=7270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @multicast2, @multicast2}}}}}}, 0x0)

2.086760797s ago: executing program 2 (id=7272):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000f14010038bd7004fadbdf25090045006973736d000000000800010000000000080003000100"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x20008040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000000)={0x5, 'syz1\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=ANY=[@ANYBLOB="33c4bb2e6c", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf256500000008000300", @ANYRES32=r4, @ANYBLOB="0c009900030000004d000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.040799127s ago: executing program 5 (id=7274):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3ff}]}, 0x2c}}, 0x40)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESOCT=r2], 0xfc}}, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x88ff)
getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000400))
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20) (async)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10) (async)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3ff}]}, 0x2c}}, 0x40) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESOCT=r2], 0xfc}}, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x88ff) (async)
getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000400)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)

1.970737871s ago: executing program 3 (id=7275):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
accept4(r4, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2e74, 0x3, 0x0, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x2, 0x3, 0x9}, 0x50)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x15, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r7, 0x1, {0x0, 0xff, 0x1}}, 0x18)

1.840560406s ago: executing program 0 (id=7276):
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001900"], 0xa0}}, 0x0)

1.807973485s ago: executing program 5 (id=7277):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x1, @vifc_lcl_ifindex=r6, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11910200359c00001c0012800b0001006d616373656300000c00028005000d000100000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

1.706497934s ago: executing program 2 (id=7278):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETOWNER(r2, 0x400454d4, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000100)=""/148, &(0x7f0000000000)=0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}], 0x1c)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd000aa8afb903e5761996bba4b0ac43109cd34e9d7dc51dcf26960026404e7a5ef4b249cab8526efda284634ae585a109c012c40676d7d60ebd142af34706d1166b6e66b47ad55be0ed6b1a6f8ee46ad14ab46c", 0x83}, {0x0, 0x44}, {0x0, 0x29}, {&(0x7f0000000200)="8b31045cb539b84a7f47932b624df6689f64bca8212b7d2caae00d414a3525c9d91dca2557d1798ce98726fe3dd62aa17ae18d7c94a19386a3c45f5091047951e370e875b80b5eaf7a4e9d59bc1304328a1d895ad4827949f9d6a9529ceadfaaedff66519cecd55e7fd0be1c83f90b6e45f7edce28fd973e7cdfdb14a0ff29dd43c7155db29f25d6f52d3e47b1b8c94bd8e725c66ca1b262aa5e5521a576d1325f3bb47c56d1d3d1b79fe439c74587126866e4e410798243bb5323a4998a6dc4d2c7810b533c94692c65a9458039b026da2c4a09299f8cd130f785f0a7f5ab7a4eb41acd11249e9c9c2dbc25cb547f91c25e8f6523dc9d0243f4ba96dfb0a9bb18dcd5cad95edeb2a720808aa911c842fb5454b4acba219adb1938f79a856b302a06f3c5e6fbaaae6503380d8eb85a0ba5bbc56c7aff81ee212bb4970107de146c1d4d8aff7e81609658684cb3a2b8aa319c0b00b9d3ca1000b529db953a81e28d059a67eb741dd5acaa579215ba484f7401923efd6e280a7f6e132e7195280b781b0e8fd8b3534a5c69f081", 0x34}], 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b8, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x178, 0x1, [@m_ctinfo={0x174, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0xdd, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723ed1f1ae47fadcce83f0df3ec18ad73df9e2dbbf597a81169d561156ddae652f19d529a52ec8bce706bc317ce6d5d0dd605c256dbe2d08b90e595b41e88386bdd18542dd8b689a7975b590b240426a577bd91c6427"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r3, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="69a1dfc8abff557d0c859d8709e05f4030", @ANYRES64=r1, @ANYBLOB="39a07347c36454d47d0c820a3320aaff8c4138758dfed7dd740bbad62610a4439de93c4fdad311ac8408e628e3dc4674ecd47da087358be37d", @ANYRES8=r0, @ANYRESHEX=r6], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000005c0)={0x2, {{0x2, 0x4e23, @multicast2=0xe0000001}}}, 0x88)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004800)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x287e5419ff710347)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

1.533162722s ago: executing program 0 (id=7279):
socket$kcm(0xa, 0x2, 0x88) (async)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000029090000371b00002f00000000000100"], 0x18}, 0x200000c4)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401"], 0x20}, 0x0) (async)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401"], 0x20}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1.496758299s ago: executing program 3 (id=7280):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x9, 0x4) (async)
splice(r0, &(0x7f0000000040)=0x2, r0, &(0x7f0000000080)=0x5, 0x45, 0x3)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000000c0)) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
listen(r1, 0xfffffffa)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)={0x384, 0xd, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34c, 0x3, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xcb}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x73, 0x1, "1062fec2f3185876185afdb620eb70c74422324ae97e33b9537bac9583f1faff5a57c2d4abe65b17589ec233cb64bbfddade557b72f7796d50d2d1b1a6fb5e49207ad5c103fcc43a72320fbc15ce439c59bafaaa44101a852e80aff8b95edb9a911946babdcf0a02df2dc16ca5483a"}, @NFTA_DATA_VALUE={0x45, 0x1, "5fd6e36a217213701fee4259af94835ba86495201d38107cdbad4cfdfe310c668b60e4c807e253e2b8b357d5e679b41a4c70c60855058b4a8b59d5eb3be0f3c868"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x59, 0x1, "67a5a1b7fe56b82fc798c83f4b77af46f7d464a4d71ba24b8cc2d6a94937ae73639b747f528ef94a0aa02ab8947f7f151e58800d137aff0164085787f30343bb19973f7c5d862f1445e4681c13d77d49e49c41a686"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "55f687f758382c587795370acb5d099dbafb8f7cdf184e08f5f393484023df4c7dc8832f783bc50c688ed703c650fb592988488cebfcd75c5046fe1848ad5b1be559caeb51f34e8fe173afe5685c526b9d1a18187c1df8c02509a54f831bffe4f3e90780b09a65db6d9e4e58e8a0c81b44b9ab6edcf64e420d6c8c1722d74ca574fec1f6732b41a61b12e3619c9c3e4fd36c2bede51a64f865255382233b43a381641fe9a66a0e57abea48c8960e35516c129df604adff420aa209560743d661"}]}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x40000}, 0x2040890) (async, rerun: 64)
connect$ax25(r1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e24, 0x8, @loopback, 0x3}, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb2}, 0xffffffffffffffff, {[0x4, 0xffff, 0x0, 0xfffffff7, 0x1, 0x812, 0xc, 0x6]}}, 0x5c) (async, rerun: 32)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan3\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x40}}, 0x4004080) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {}, {0x0, @struct, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000d00)={r7, 0x100, 0x9, 0x1}) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000001100)={@in6={{0xa, 0x4e20, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x1}}, 0x0, 0x0, 0x1c, 0x0, "06f48168c1b28b08562fa3e71f707d6024b89aa330ebb8364b2affde130eb6f33e3296a61af19a0ab8a9055ad0af30d8aa647be1aa2f3c40f63e446fc31df6019425bcfeb7aaeb5ebaf209299466ed0a"}, 0xd8)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001240), r3) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={<r10=>0xffffffffffffffff}) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r11=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)={<r12=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001340)={<r13=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={<r14=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001580)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0xc0, r9, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x5954f00437e3f1ea}, 0x10)

1.182805745s ago: executing program 0 (id=7281):
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r1=>0x0, @loopback, @dev}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x40}}, 0x0)

1.182108664s ago: executing program 5 (id=7282):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0) (async, rerun: 32)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082cbd7000fbdbdf250c0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4047000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.147600556s ago: executing program 3 (id=7283):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffff, 0x1}, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000008710000003000000180000000000000000000000000000009400000000000000750a00000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90)

1.034404599s ago: executing program 5 (id=7284):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) (async)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='objagg_obj_parent_assign\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

974.815415ms ago: executing program 0 (id=7285):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x4e20, 0x3, 'none\x00', 0x11, 0x3}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
setsockopt$inet_int(r1, 0x0, 0x35, &(0x7f00000001c0)=0x80000000, 0x4)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00590214000000002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019b0fb0bba00"/65, 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe73}], 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)

5.374318ms ago: executing program 3 (id=7286):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c00018008001600", @ANYRES32=0xee01], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c00018008001600", @ANYRES32=0xee01], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)

4.789278ms ago: executing program 0 (id=7287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x0)
getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00000000c0)=""/148, &(0x7f0000000080)=0x94)

4.359882ms ago: executing program 3 (id=7288):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x160, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x81, 0x3, 0x5, 0x2, 0x10001, 0x8, 0x4}}, {0xc, 0x2, [0x5, 0x89, 0xb, 0x6]}}, {{0x1c, 0x1, {0x1, 0xf1, 0x7, 0x11, 0x1, 0x7, 0xecc2, 0x3}}, {0xa, 0x2, [0xbb, 0x401, 0x9]}}, {{0x1c, 0x1, {0x9, 0x8, 0xfff, 0x9, 0x1, 0x7, 0x4, 0x2}}, {0x8, 0x2, [0x4, 0x1]}}, {{0x1c, 0x1, {0x2, 0x5, 0xe, 0x140, 0x1, 0x7cd0, 0x7f, 0x4}}, {0xc, 0x2, [0x342, 0x4, 0x7, 0x7f]}}, {{0x1c, 0x1, {0x7, 0x3, 0x4, 0x200, 0x2, 0x7e5, 0x400, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xa74, 0xd, 0x0, 0xa]}}, {{0x1c, 0x1, {0x1, 0x15, 0x3ff, 0x0, 0x2, 0x7fff, 0xfffffff8, 0x2}}, {0x8, 0x2, [0x5, 0x1]}}, {{0x1c, 0x1, {0x9, 0xbc, 0x6, 0x3, 0x2, 0x5, 0xffff, 0x1}}, {0x6, 0x2, [0x101]}}, {{0x1c, 0x1, {0x9, 0x6, 0xfffd, 0xfffffe00, 0x1, 0x3, 0x9, 0x4}}, {0xc, 0x2, [0x3, 0x6, 0x2, 0x9]}}]}]}, 0x160}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r3)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r6, @ANYBLOB="00022cbd7000ffdbdf2509000000580005804c000280080001001200000008000200f0ffffff08000200f9ffffff0800010009000000080001000c0002000800010001000000080003000400000008000300b904000008000200000000000700010069620000040006801c0004800900010073797a30000000000c00078008000400000000000c00058007000100696200002800028008000200040000001c0003800800020009000000080001000500000008000200010001002400098008000200040000000800020000100000080001000000000008000100000001002400038008000300020000000800010008000000080002000101000008000200050000004800078008000200ffff00000c000300030000000000000008000100030000000c00040001000000000000000c0003000700000000000000080002000300000008000200e5c80000bb6e1a8e11976892bcc6b57714b1d352bd0df1115c47dbf72a38accbf5798550ba785b2245f5bdd8241ac9b0084831653c9a0e858b1d92392e10cdea9bbedec826603749bb156f7b491adfb5902c4821803d1b3d410c"], 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0)
getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f00000001c0)) (async)
getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2b0326bd7000fbdb8203899107be45df251200000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r9, 0x400454cd, 0x7)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x0)
accept(r7, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000140)=0x80)

3.863378ms ago: executing program 0 (id=7289):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0}) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x3, {0x2, 0xff, 0x4}}, 0x18) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8) (async, rerun: 32)
r9 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0xf534, 0xffffffff, 0x0, 0x7, 0x8d, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
sendmsg$can_j1939(r3, &(0x7f0000000400)={&(0x7f0000000480)={0x1d, r2, 0x1, {0x1, 0x0, 0x1}}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8085}, 0x1)
socket(0x18, 0x1, 0x1) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000002001c8a134edc4eeaef37a88f64000000000c00028005000d2b03000000000000000000"], 0x3c}}, 0x4) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0) (async)
r14 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x20000010) (async)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x444c}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x50}}, 0x0)

1.838897ms ago: executing program 3 (id=7290):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xf)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x80, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0xb, 0x0, 0x0, 0x74}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0xfffffffffffffd43, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d5}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0x50}, {0x8, 0x819, 0x0, 0x0, 0x2}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x80}}, 0x0)

0s ago: executing program 2 (id=7291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400000000000000691050000000000004000000000000009500002a426904a33f93b9c0c7cd175486a33efccb36659f7eec8e01456cf01543400d828aa253539d7a9ebc565060babde67280c75720311d25f70dea10b5ab7c50ecac47b70b423d6dd0473e3dfe2ad5df12f53031bd5083cf7a3b6bb2ad77aa33d122857b684cb842a9619a03e64ddfd9c38a43e9fee8d94bab5b71356660000000000000000228da06052f8c08d8860f432ccf532e4754488cb9409cfd5b5e5c2539172b8ae749140d7668cde61da3c4c9b4fb61535fa4cbdc6b458daff61a48448c8cec920d832addc15d3b54"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000240)="199dbfef4802ad5c6a11bd3843dc86100cb75c1a93a3ef7622c5d2c04fe4ad864620a8a164d29c5d78583bd475faf800f423a255d656f76a50667e7ae1e5cf82778378afbdd3160ca10dc8e30ea13bd7f2", 0x51, 0x40, &(0x7f00000000c0)={0x11, 0x1a, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="3b24b4406f9ef4302f9fc21d5cbdfe36d4209edff9fe350d3de5733f80e9f6dbeb2f3b8686439bc3c345d2ab301c529eba060881ac5c57d64362c5a1d6d4ec55a90fc65de7656dba6bfa6738795d43b908ead8b8132fb456dad417f5499140172551196a6f0a04e2898f0fc12f8257f2a95ba4e7d92786e56a8c82b08acdda7c481216b198c37afad3a2ed920ea15409023f3585eb35fa7c37662ca9adf09d1d5a41a14a06b972bd2e22a6c9e95362"], 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400000000000000691050000000000004000000000000009500002a426904a33f93b9c0c7cd175486a33efccb36659f7eec8e01456cf01543400d828aa253539d7a9ebc565060babde67280c75720311d25f70dea10b5ab7c50ecac47b70b423d6dd0473e3dfe2ad5df12f53031bd5083cf7a3b6bb2ad77aa33d122857b684cb842a9619a03e64ddfd9c38a43e9fee8d94bab5b71356660000000000000000228da06052f8c08d8860f432ccf532e4754488cb9409cfd5b5e5c2539172b8ae749140d7668cde61da3c4c9b4fb61535fa4cbdc6b458daff61a48448c8cec920d832addc15d3b54"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
sendto$packet(r5, &(0x7f0000000240)="199dbfef4802ad5c6a11bd3843dc86100cb75c1a93a3ef7622c5d2c04fe4ad864620a8a164d29c5d78583bd475faf800f423a255d656f76a50667e7ae1e5cf82778378afbdd3160ca10dc8e30ea13bd7f2", 0x51, 0x40, &(0x7f00000000c0)={0x11, 0x1a, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="3b24b4406f9ef4302f9fc21d5cbdfe36d4209edff9fe350d3de5733f80e9f6dbeb2f3b8686439bc3c345d2ab301c529eba060881ac5c57d64362c5a1d6d4ec55a90fc65de7656dba6bfa6738795d43b908ead8b8132fb456dad417f5499140172551196a6f0a04e2898f0fc12f8257f2a95ba4e7d92786e56a8c82b08acdda7c481216b198c37afad3a2ed920ea15409023f3585eb35fa7c37662ca9adf09d1d5a41a14a06b972bd2e22a6c9e95362"], 0x38}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)

kernel console output (not intermixed with test programs):

2 family 0 port 6081 - 0
[  602.811800][T11422] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  602.842167][T11422] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  602.909684][T11428] tipc: Subscription rejected, illegal request
[  603.343000][T26387] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5750'.
[  603.647931][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5753'.
[  604.261344][T26414] netlink: 'syz.5.5762': attribute type 1 has an invalid length.
[  604.294858][T26414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  604.354775][T26414] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5762'.
[  604.630836][T26433] netlink: 'syz.2.5767': attribute type 10 has an invalid length.
[  604.782117][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  604.792705][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  604.801990][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  604.810350][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  604.818566][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  604.978455][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  605.022469][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5770'.
[  605.034497][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  605.043370][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  605.052584][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  605.063594][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  605.305949][T26453] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5770'.
[  605.330385][T26452] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5772'.
[  605.404972][T26436] lo speed is unknown, defaulting to 1000
[  606.015393][   T55] block nbd2: Possible stuck request ffff888024fd7380: control (read@0,1024B). Runtime 120 seconds
[  606.027777][   T55] block nbd2: Possible stuck request ffff888024fd7540: control (read@1024,1024B). Runtime 120 seconds
[  606.039708][   T55] block nbd2: Possible stuck request ffff888024fd7700: control (read@2048,1024B). Runtime 120 seconds
[  606.051901][   T55] block nbd2: Possible stuck request ffff888024fd78c0: control (read@3072,1024B). Runtime 120 seconds
[  606.239698][T26478] RDS: rds_bind could not find a transport for ::ffff:172.30.254.2, load rds_tcp or rds_rdma?
[  606.619896][T11428] bond2 (unregistering): (slave gretap1): Releasing active interface
[  606.716968][T26490] openvswitch: netlink: Actions may not be safe on all matching packets
[  606.911807][T11428] team0: Port device geneve4 removed
[  607.134436][   T51] Bluetooth: hci3: command tx timeout
[  607.250391][T11428] bond1 (unregistering): Released all slaves
[  607.409593][T11428] bond2 (unregistering): Released all slaves
[  607.428915][T11428] bond3 (unregistering): Released all slaves
[  607.590137][T11428] bond4 (unregistering): Released all slaves
[  607.738130][T11428] bond5 (unregistering): Released all slaves
[  607.768229][T26436] wg1 speed is unknown, defaulting to 1000
[  608.552412][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5792'.
[  608.772564][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5793'.
[  608.915277][T26534] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5793'.
[  609.044880][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5794'.
[  609.091497][T26542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5795'.
[  609.103722][T26542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5795'.
[  609.128895][T26542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5795'.
[  609.168424][T26542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5795'.
[  609.217489][   T51] Bluetooth: hci3: command tx timeout
[  609.360545][T26436] chnl_net:caif_netlink_parms(): no params data found
[  609.574571][T11428] tipc: Disabling bearer <udp:s>
[  609.580474][T11428] tipc: Disabling bearer <udp:syz2>
[  609.603587][T26560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5801'.
[  609.612637][T11428] tipc: Left network mode
[  609.679594][T26560] netlink: 'syz.1.5801': attribute type 10 has an invalid length.
[  609.731687][T26560] batman_adv: batadv0: Removing interface: team0
[  610.210161][T26436] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.233425][T26436] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.250110][T26436] bridge_slave_0: entered allmulticast mode
[  610.260970][T26436] bridge_slave_0: entered promiscuous mode
[  610.303911][T26436] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.314171][T26436] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.339892][T26436] bridge_slave_1: entered allmulticast mode
[  610.381786][T26436] bridge_slave_1: entered promiscuous mode
[  610.659951][T26436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  610.709386][T26436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  610.888632][T26604] sctp: [Deprecated]: syz.1.5813 (pid 26604) Use of struct sctp_assoc_value in delayed_ack socket option.
[  610.888632][T26604] Use struct sctp_sack_info instead
[  610.991170][T26436] team0: Port device team_slave_0 added
[  610.997417][T26609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5812'.
[  611.149740][T26436] team0: Port device team_slave_1 added
[  611.293497][   T51] Bluetooth: hci3: command tx timeout
[  611.481597][T26436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  611.499760][T26436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.529902][T26436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  611.554100][T26436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  611.571362][T26436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.598095][T26436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  611.767441][T11428] hsr_slave_0: left promiscuous mode
[  611.786169][T11428] hsr_slave_1: left promiscuous mode
[  611.806163][T11428] batman_adv: batadv0: Removing interface: macsec1
[  613.312302][T26640] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.374717][   T51] Bluetooth: hci3: command tx timeout
[  613.509629][T26647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  613.875829][T26655] __nla_validate_parse: 5 callbacks suppressed
[  613.875850][T26655] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5825'.
[  613.990411][T11444] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.053362][T11444] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.062316][T11444] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.080302][T26661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5827'.
[  614.160335][T26667] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5829'.
[  614.183758][T11444] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.196027][T26665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5828'.
[  614.222959][T26665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5828'.
[  614.376195][T26436] hsr_slave_0: entered promiscuous mode
[  614.398061][T26436] hsr_slave_1: entered promiscuous mode
[  614.406148][T26436] debugfs: 'hsr0' already exists in 'hsr'
[  614.421050][T26436] Cannot create hsr debugfs directory
[  614.437181][T26664] batadv0: entered promiscuous mode
[  614.481408][T26664] batadv0: left promiscuous mode
[  614.679838][T26687] netlink: 'syz.0.5834': attribute type 6 has an invalid length.
[  614.710431][T11428] IPVS: stop unused estimator thread 0...
[  614.771578][T26695] warn_alloc: 1 callbacks suppressed
[  614.771599][T26695] syz.1.5835: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  614.890295][T26695] CPU: 0 UID: 0 PID: 26695 Comm: syz.1.5835 Not tainted syzkaller #0 PREEMPT(full) 
[  614.890326][T26695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  614.890339][T26695] Call Trace:
[  614.890348][T26695]  <TASK>
[  614.890357][T26695]  dump_stack_lvl+0x189/0x250
[  614.890391][T26695]  ? __pfx_dump_stack_lvl+0x10/0x10
[  614.890416][T26695]  ? __pfx__printk+0x10/0x10
[  614.890443][T26695]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  614.890468][T26695]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  614.890494][T26695]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  614.890521][T26695]  warn_alloc+0x214/0x310
[  614.890554][T26695]  ? stack_depot_save_flags+0x40/0x860
[  614.890584][T26695]  ? __pfx_warn_alloc+0x10/0x10
[  614.890630][T26695]  ? kasan_save_track+0x4f/0x80
[  614.890651][T26695]  ? xskq_create+0x56/0x170
[  614.890667][T26695]  ? xsk_init_queue+0xb0/0x110
[  614.890682][T26695]  ? xsk_setsockopt+0x4dc/0x8d0
[  614.890708][T26695]  ? do_sock_setsockopt+0x179/0x1b0
[  614.890727][T26695]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  614.890760][T26695]  ? do_syscall_64+0xfa/0x3b0
[  614.890779][T26695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.890810][T26695]  __vmalloc_node_range_noprof+0x125/0x12f0
[  614.890878][T26695]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  614.890904][T26695]  ? xskq_create+0x56/0x170
[  614.890927][T26695]  ? __kasan_kmalloc+0x93/0xb0
[  614.890953][T26695]  vmalloc_user_noprof+0xad/0xf0
[  614.890990][T26695]  ? xskq_create+0xbf/0x170
[  614.891011][T26695]  xskq_create+0xbf/0x170
[  614.891033][T26695]  xsk_init_queue+0xb0/0x110
[  614.891056][T26695]  xsk_setsockopt+0x4dc/0x8d0
[  614.891089][T26695]  ? __pfx_xsk_setsockopt+0x10/0x10
[  614.891118][T26695]  ? __pfx_aa_sk_perm+0x10/0x10
[  614.891150][T26695]  ? aa_sock_opt_perm+0xff/0x1b0
[  614.891172][T26695]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  614.891192][T26695]  ? __pfx_xsk_setsockopt+0x10/0x10
[  614.891223][T26695]  do_sock_setsockopt+0x179/0x1b0
[  614.891250][T26695]  __x64_sys_setsockopt+0x13f/0x1b0
[  614.891278][T26695]  do_syscall_64+0xfa/0x3b0
[  614.891304][T26695]  ? lockdep_hardirqs_on+0x9c/0x150
[  614.891324][T26695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.891342][T26695]  ? clear_bhb_loop+0x60/0xb0
[  614.891367][T26695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.891385][T26695] RIP: 0033:0x7f7bef58eec9
[  614.891404][T26695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  614.891419][T26695] RSP: 002b:00007f7bf03fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  614.891441][T26695] RAX: ffffffffffffffda RBX: 00007f7bef7e5fa0 RCX: 00007f7bef58eec9
[  614.891455][T26695] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  614.891467][T26695] RBP: 00007f7bef611f91 R08: 0000000000000004 R09: 0000000000000000
[  614.891480][T26695] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  614.891492][T26695] R13: 00007f7bef7e6038 R14: 00007f7bef7e5fa0 R15: 00007ffcdcd76078
[  614.891528][T26695]  </TASK>
[  615.199251][T26695] Mem-Info:
[  615.202479][T26695] active_anon:5540 inactive_anon:0 isolated_anon:0
[  615.202479][T26695]  active_file:3017 inactive_file:40099 isolated_file:0
[  615.202479][T26695]  unevictable:768 dirty:74 writeback:0
[  615.202479][T26695]  slab_reclaimable:13762 slab_unreclaimable:146096
[  615.202479][T26695]  mapped:31306 shmem:1427 pagetables:1154
[  615.202479][T26695]  sec_pagetables:0 bounce:0
[  615.202479][T26695]  kernel_misc_reclaimable:0
[  615.202479][T26695]  free:1266171 free_pcp:12621 free_cma:0
[  615.249520][T26695] Node 0 active_anon:22160kB inactive_anon:0kB active_file:12068kB inactive_file:160196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125124kB dirty:292kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15456kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  615.283564][T26695] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  615.316207][T26695] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  615.346411][T26695] lowmem_reserve[]: 0 2497 2499 2499 2499
[  615.355045][T26695] Node 0 DMA32 free:1157592kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22112kB inactive_anon:0kB active_file:12068kB inactive_file:158620kB unevictable:1536kB writepending:288kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:39440kB local_pcp:22140kB free_cma:0kB
[  615.384847][T26703] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5836'.
[  615.390489][T26695] lowmem_reserve[]: 0 0 1 1 1
[  615.402718][T26695] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  615.436408][T26695] lowmem_reserve[]: 0 0 0 0 0
[  615.441206][T26695] Node 1 Normal free:3891720kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11048kB local_pcp:7720kB free_cma:0kB
[  615.474830][T26695] lowmem_reserve[]: 0 0 0 0 0
[  615.479701][T26695] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  615.492801][T26695] Node 0 DMA32: 1980*4kB (UME) 843*8kB (UME) 326*16kB (UME) 467*32kB (UME) 78*64kB (UME) 49*128kB (UME) 23*256kB (UM) 13*512kB (UM) 4*1024kB (ME) 1*2048kB (M) 267*4096kB (UM) = 1158408kB
[  615.519195][T26695] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  615.532367][T26695] Node 1 Normal: 192*4kB (UM) 53*8kB (UME) 42*16kB (UME) 222*32kB (UME) 60*64kB (UME) 16*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3891720kB
[  615.552566][T26695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  615.563036][T26695] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  615.576326][T26695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  615.602298][T26695] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  615.667219][T26695] 44490 total pagecache pages
[  615.671976][T26695] 0 pages in swap cache
[  615.692226][T26695] Free swap  = 124996kB
[  615.760209][T26695] Total swap = 124996kB
[  615.770343][T26695] 2097051 pages RAM
[  615.790639][T26695] 0 pages HighMem/MovableOnly
[  615.812079][T26695] 425672 pages reserved
[  615.823601][T26695] 0 pages cma reserved
[  616.092961][T26719] can: request_module (can-proto-0) failed.
[  616.254596][T26729] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  616.731037][T26436] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  616.802400][T26436] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  616.810718][T26758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5853'.
[  616.872320][T26436] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  616.912367][T26765] netlink: 'syz.0.5855': attribute type 2 has an invalid length.
[  616.935999][T26436] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  616.936689][T26765] netlink: 'syz.0.5855': attribute type 8 has an invalid length.
[  617.010867][T26765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5855'.
[  617.288266][T26436] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.338829][T26436] 8021q: adding VLAN 0 to HW filter on device team0
[  617.367529][T11433] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.374863][T11433] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.408794][T11442] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.416039][T11442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.636359][T26799] netlink: 'syz.1.5859': attribute type 1 has an invalid length.
[  617.656522][T26799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  618.078248][T26436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  618.085828][T26811] netlink: 'syz.0.5863': attribute type 10 has an invalid length.
[  618.248592][T26816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  618.326835][T26816] tipc: Resetting bearer <eth:syzkaller0>
[  618.372560][T26815] tipc: Disabling bearer <eth:syzkaller0>
[  618.373627][T26826] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5868'.
[  618.431883][T26436] veth0_vlan: entered promiscuous mode
[  618.462451][T26436] veth1_vlan: entered promiscuous mode
[  618.638441][T26839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5871'.
[  618.650592][T26839] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  618.688367][T26436] veth0_macvtap: entered promiscuous mode
[  618.740895][T26436] veth1_macvtap: entered promiscuous mode
[  618.820055][T26436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  618.856560][T26436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  618.893795][T11444] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.937814][T11444] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.998352][T11444] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.020915][T11444] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.346679][T26869] lo speed is unknown, defaulting to 1000
[  619.363007][T26872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5879'.
[  619.766858][T11428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  619.807957][T11428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.879741][T26869] wg1 speed is unknown, defaulting to 1000
[  619.949169][T11428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.004115][T11428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.238316][T26884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5883'.
[  620.282844][T26886] veth11: entered allmulticast mode
[  620.376366][T26895] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20004
[  620.526714][T26904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5889'.
[  621.374663][T26934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5896'.
[  621.409514][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5898'.
[  621.413658][T26934] netlink: 'syz.5.5896': attribute type 30 has an invalid length.
[  621.474286][T11444] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  621.504296][T26938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5898'.
[  621.515909][T11438] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  621.553883][T11438] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  621.586879][T11428] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  622.572510][T26978] netlink: 'syz.0.5907': attribute type 1 has an invalid length.
[  622.665951][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5907'.
[  622.993860][T26993] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  623.096723][T27005] mac80211_hwsim hwsim34 syzkaller0: Caught tx_queue_len zero misconfig
[  623.402380][T27012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5915'.
[  623.627458][T27018] tipc: Resetting bearer <eth:syzkaller0>
[  623.780575][T11446] tipc: Resetting bearer <eth:syzkaller0>
[  623.792688][T27018] netlink: 'syz.1.5917': attribute type 11 has an invalid length.
[  623.826586][T27018] netlink: 'syz.1.5917': attribute type 10 has an invalid length.
[  623.890097][T27035] openvswitch: netlink: Missing key (keys=40, expected=80)
[  623.898671][T27036] netlink: 'syz.3.5922': attribute type 39 has an invalid length.
[  624.574668][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  625.089126][T27094] netlink: 'syz.3.5935': attribute type 1 has an invalid length.
[  625.101303][T27094] netlink: 784 bytes leftover after parsing attributes in process `syz.3.5935'.
[  625.366888][T27104] bond0: option ad_select: unable to set because the bond device is up
[  625.585930][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5940'.
[  625.610702][T27109] bond0: entered promiscuous mode
[  625.630448][T27109] bond_slave_0: entered promiscuous mode
[  625.642244][T27109] bond_slave_1: entered promiscuous mode
[  625.683536][T27109] bond0: left promiscuous mode
[  625.688586][T27109] bond_slave_0: left promiscuous mode
[  625.707047][T27109] bond_slave_1: left promiscuous mode
[  625.911811][T27124] !��: renamed from bond_slave_0
[  626.114542][T27133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5948'.
[  626.126358][T27126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5946'.
[  626.303060][T13901] IPVS: starting estimator thread 0...
[  626.416662][T27146] IPVS: using max 25 ests per chain, 60000 per kthread
[  627.094568][T27195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5964'.
[  627.211286][T27199] netlink: 'syz.5.5965': attribute type 1 has an invalid length.
[  627.328165][T27199] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  627.329231][T27205] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5966'.
[  627.364978][T27199] 8021q: adding VLAN 0 to HW filter on device bond6
[  627.372974][T11428] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  627.402007][T27205] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  627.537959][T11433] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  628.707565][T27269] netlink: 'syz.5.5983': attribute type 2 has an invalid length.
[  628.730382][T27269] netlink: 1184 bytes leftover after parsing attributes in process `syz.5.5983'.
[  628.773999][T27272] netlink: 11 bytes leftover after parsing attributes in process `syz.5.5983'.
[  628.886482][T27280] netlink: 'syz.2.5986': attribute type 1 has an invalid length.
[  628.897648][T27280] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5986'.
[  628.921795][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5986'.
[  629.042250][T27288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  629.187554][T27294] netlink: 'syz.2.5990': attribute type 6 has an invalid length.
[  629.320942][T27299] netlink: del zone limit has 4 unknown bytes
[  629.565358][T27308] delete_channel: no stack
[  629.796834][T27312] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  629.832940][T11428] bond5: left allmulticast mode
[  629.859798][T11428] bond5: left promiscuous mode
[  629.881906][T11428] bridge0: port 1(bond5) entered disabled state
[  630.173258][ T5185] Bluetooth: hci3: command 0x0405 tx timeout
[  631.531204][T11428] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[  631.744929][T11428] bond3 (unregistering): (slave geneve2): Releasing backup interface
[  632.137494][T11428] ` (unregistering): Released all slaves
[  632.295132][T11428] bond1 (unregistering): Released all slaves
[  632.309549][T11428] bond2 (unregistering): Released all slaves
[  632.327676][T11428] bond3 (unregistering): Released all slaves
[  632.352930][T11428] bond4 (unregistering): Released all slaves
[  632.526968][T11428] bond5 (unregistering): Released all slaves
[  632.540668][T11428] bond6 (unregistering): Released all slaves
[  632.571879][T27316] bridge6: entered promiscuous mode
[  632.578107][T27316] bridge6: entered allmulticast mode
[  632.586142][T27323] netlink: 'syz.3.5999': attribute type 25 has an invalid length.
[  632.784110][T11428] tipc: Disabling bearer <udp:syz2>
[  632.817710][T11428] tipc: Left network mode
[  632.819632][T27339] netlink: 'syz.3.6005': attribute type 32 has an invalid length.
[  632.865565][T27342] __nla_validate_parse: 3 callbacks suppressed
[  632.865597][T27342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6004'.
[  632.986206][T27354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6004'.
[  633.127734][T27344] netlink: 'syz.1.6006': attribute type 3 has an invalid length.
[  633.192105][T27344] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6006'.
[  633.319211][T27350] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6007'.
[  633.394264][T27344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6006'.
[  634.027313][T27399] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6014'.
[  634.049735][T27399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6014'.
[  634.099963][T27401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6015'.
[  634.212952][T27406] vlan3: entered promiscuous mode
[  634.322107][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6016'.
[  635.067880][T27433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6020'.
[  635.332977][T27437] netlink: 'syz.5.6023': attribute type 1 has an invalid length.
[  635.664885][T27437] 8021q: adding VLAN 0 to HW filter on device bond7
[  635.678089][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  635.689914][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  635.702316][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  635.712014][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  635.720931][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  635.758272][T27444] 8021q: adding VLAN 0 to HW filter on device bond7
[  635.766153][T27444] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address
[  635.779784][T27444] bond7: (slave vxcan5): Error -95 calling set_mac_address
[  635.834078][T27448] veth13: entered promiscuous mode
[  635.834561][T27460] netlink: 'syz.3.6026': attribute type 16 has an invalid length.
[  635.854984][T27460] netlink: 'syz.3.6026': attribute type 17 has an invalid length.
[  635.900719][T11428] hsr_slave_0: left promiscuous mode
[  635.922672][T11428] hsr_slave_1: left promiscuous mode
[  636.098566][   T55] block nbd2: Possible stuck request ffff888024fd7380: control (read@0,1024B). Runtime 150 seconds
[  636.110038][   T55] block nbd2: Possible stuck request ffff888024fd7540: control (read@1024,1024B). Runtime 150 seconds
[  636.122148][   T55] block nbd2: Possible stuck request ffff888024fd7700: control (read@2048,1024B). Runtime 150 seconds
[  636.134326][   T55] block nbd2: Possible stuck request ffff888024fd78c0: control (read@3072,1024B). Runtime 150 seconds
[  637.111290][T11437] smc: removing ib device syz0
[  637.176471][T27459] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.199427][T27459] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.340966][T27460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  637.606163][T27481] netlink: 'syz.2.6032': attribute type 1 has an invalid length.
[  637.622170][T27481] netlink: 'syz.2.6032': attribute type 3 has an invalid length.
[  637.637162][T27481] NCSI netlink: No device for ifindex 813332851
[  637.651987][T27455] wg1 speed is unknown, defaulting to 1000
[  637.775430][   T51] Bluetooth: hci4: command tx timeout
[  639.125671][T27524] __nla_validate_parse: 3 callbacks suppressed
[  639.125692][T27524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6042'.
[  639.196694][T27524] netlink: zone id is out of range
[  639.237519][T27524] netlink: zone id is out of range
[  639.243021][T27524] netlink: zone id is out of range
[  639.285693][T27524] netlink: zone id is out of range
[  639.291914][T27532] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6043'.
[  639.708324][T27544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6046'.
[  639.854850][   T51] Bluetooth: hci4: command tx timeout
[  640.014723][T27558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6051'.
[  640.350034][T27574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6055'.
[  640.701338][T27583] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  640.730565][T27590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6059'.
[  640.802838][T27593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6059'.
[  640.847799][T27588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6058'.
[  641.334383][T27455] chnl_net:caif_netlink_parms(): no params data found
[  641.855930][T27618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6065'.
[  641.933828][   T51] Bluetooth: hci4: command tx timeout
[  642.486213][T27657] netlink: 'syz.3.6074': attribute type 5 has an invalid length.
[  642.623300][T27455] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.635017][T27455] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.650631][T27455] bridge_slave_0: entered allmulticast mode
[  642.696199][T27455] bridge_slave_0: entered promiscuous mode
[  642.744871][T27455] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.773241][T27455] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.814351][T27455] bridge_slave_1: entered allmulticast mode
[  642.860527][T27455] bridge_slave_1: entered promiscuous mode
[  643.097546][T27679] netlink: 'syz.3.6079': attribute type 11 has an invalid length.
[  643.132785][T27679] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6079'.
[  643.271025][T27455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  643.348159][T27455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  643.729255][T27455] team0: Port device team_slave_0 added
[  643.768004][T27455] team0: Port device team_slave_1 added
[  644.014540][   T51] Bluetooth: hci4: command tx timeout
[  644.082805][T27715] netlink: 'syz.3.6087': attribute type 1 has an invalid length.
[  644.196967][T27455] batman_adv: batadv0: Adding interface: batadv_slave_0
[  644.205162][T27455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.235697][T27455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  644.282475][T27455] batman_adv: batadv0: Adding interface: batadv_slave_1
[  644.308098][T27455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.352932][T27455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  644.428899][T27725] __nla_validate_parse: 1 callbacks suppressed
[  644.428919][T27725] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6092'.
[  644.691110][T11428] IPVS: stop unused estimator thread 0...
[  644.698573][T27730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6092'.
[  644.726843][T27730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6092'.
[  644.753319][T27730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6092'.
[  644.889747][T27736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6094'.
[  644.916770][T27736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6094'.
[  644.964047][T27736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6094'.
[  645.141250][T27455] hsr_slave_0: entered promiscuous mode
[  645.148329][T27754] netlink: 'syz.0.6098': attribute type 1 has an invalid length.
[  645.181716][T27455] hsr_slave_1: entered promiscuous mode
[  645.212420][T27455] debugfs: 'hsr0' already exists in 'hsr'
[  645.236937][T27455] Cannot create hsr debugfs directory
[  645.270545][T27749] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6098'.
[  645.301023][T27749] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6098'.
[  646.051762][T27455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  646.077086][T27455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.135764][T27794] netlink: 'syz.0.6112': attribute type 10 has an invalid length.
[  646.152863][T27794] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  646.315849][T27455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  646.351421][T27455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.575059][T27812] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6116'.
[  646.636171][T27455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  646.648175][T27455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.916927][T27455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  646.938838][T27829] netlink: 'syz.3.6120': attribute type 10 has an invalid length.
[  646.941565][T27455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.020186][T27829] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  647.422628][T27846] openvswitch: netlink: Flow actions attr not present in new flow.
[  647.448503][T27849] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy�ڇv���[�D�w��zR3��p(@O�>���P�ʡRaG�ͽ'
[  647.479022][T27849] CPU: 1 UID: 0 PID: 27849 Comm: syz.2.6128 Not tainted syzkaller #0 PREEMPT(full) 
[  647.479052][T27849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  647.479062][T27849] Call Trace:
[  647.479071][T27849]  <TASK>
[  647.479079][T27849]  dump_stack_lvl+0x189/0x250
[  647.479113][T27849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  647.479135][T27849]  ? __pfx__printk+0x10/0x10
[  647.479166][T27849]  ? kernfs_path_from_node+0x2f/0x290
[  647.479188][T27849]  ? kernfs_path_from_node+0x250/0x290
[  647.479208][T27849]  ? kernfs_path_from_node+0x2f/0x290
[  647.479237][T27849]  sysfs_warn_dup+0x8e/0xa0
[  647.479259][T27849]  sysfs_do_create_link_sd+0xc0/0x110
[  647.479283][T27849]  device_add_class_symlinks+0x1cf/0x240
[  647.479312][T27849]  device_add+0x475/0xb50
[  647.479341][T27849]  wiphy_register+0x1ba6/0x28d0
[  647.479385][T27849]  ? __pfx_wiphy_register+0x10/0x10
[  647.479404][T27849]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  647.479438][T27849]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  647.479468][T27849]  ieee80211_register_hw+0x3484/0x4100
[  647.479514][T27849]  ? ieee80211_register_hw+0x14b1/0x4100
[  647.479552][T27849]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  647.479594][T27849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  647.479637][T27849]  ? __hrtimer_setup+0x187/0x210
[  647.479656][T27849]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  647.479681][T27849]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  647.479747][T27849]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  647.479772][T27849]  ? trace_kmalloc+0x1f/0xd0
[  647.479792][T27849]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  647.479817][T27849]  ? kstrndup+0xbf/0x160
[  647.479850][T27849]  hwsim_new_radio_nl+0xea4/0x1b10
[  647.479882][T27849]  ? __pfx___nla_validate_parse+0x10/0x10
[  647.479922][T27849]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  647.479966][T27849]  ? __nla_parse+0x40/0x60
[  647.479994][T27849]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  647.480033][T27849]  genl_family_rcv_msg_doit+0x212/0x300
[  647.480069][T27849]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  647.480114][T27849]  ? bpf_lsm_capable+0x9/0x20
[  647.480135][T27849]  ? security_capable+0x7e/0x2e0
[  647.480175][T27849]  genl_rcv_msg+0x60e/0x790
[  647.480208][T27849]  ? __pfx_genl_rcv_msg+0x10/0x10
[  647.480234][T27849]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  647.480278][T27849]  netlink_rcv_skb+0x208/0x470
[  647.480295][T27849]  ? __lock_acquire+0xab9/0xd20
[  647.480323][T27849]  ? __pfx_genl_rcv_msg+0x10/0x10
[  647.480352][T27849]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  647.480399][T27849]  ? down_read+0x1ad/0x2e0
[  647.480594][T27849]  genl_rcv+0x28/0x40
[  647.480622][T27849]  netlink_unicast+0x82f/0x9e0
[  647.480665][T27849]  ? __pfx_netlink_unicast+0x10/0x10
[  647.480698][T27849]  ? netlink_sendmsg+0x642/0xb30
[  647.480718][T27849]  ? skb_put+0x11b/0x210
[  647.480744][T27849]  netlink_sendmsg+0x805/0xb30
[  647.480776][T27849]  ? __pfx_netlink_sendmsg+0x10/0x10
[  647.480802][T27849]  ? aa_sock_msg_perm+0xf1/0x1d0
[  647.480825][T27849]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  647.480847][T27849]  ? __pfx_netlink_sendmsg+0x10/0x10
[  647.480871][T27849]  __sock_sendmsg+0x219/0x270
[  647.480907][T27849]  ____sys_sendmsg+0x505/0x830
[  647.480941][T27849]  ? __pfx_____sys_sendmsg+0x10/0x10
[  647.480980][T27849]  ? import_iovec+0x74/0xa0
[  647.481014][T27849]  ___sys_sendmsg+0x21f/0x2a0
[  647.481044][T27849]  ? __pfx____sys_sendmsg+0x10/0x10
[  647.481133][T27849]  ? __fget_files+0x2a/0x420
[  647.481150][T27849]  ? __fget_files+0x3a0/0x420
[  647.481182][T27849]  __x64_sys_sendmsg+0x19b/0x260
[  647.481211][T27849]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  647.481251][T27849]  ? rcu_is_watching+0x15/0xb0
[  647.481280][T27849]  ? do_syscall_64+0xbe/0x3b0
[  647.481308][T27849]  do_syscall_64+0xfa/0x3b0
[  647.481352][T27849]  ? lockdep_hardirqs_on+0x9c/0x150
[  647.481374][T27849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.481394][T27849]  ? clear_bhb_loop+0x60/0xb0
[  647.481420][T27849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.481439][T27849] RIP: 0033:0x7feb0e18eec9
[  647.481460][T27849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  647.481477][T27849] RSP: 002b:00007feb0ef58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  647.481511][T27849] RAX: ffffffffffffffda RBX: 00007feb0e3e5fa0 RCX: 00007feb0e18eec9
[  647.481525][T27849] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  647.481538][T27849] RBP: 00007feb0e211f91 R08: 0000000000000000 R09: 0000000000000000
[  647.481551][T27849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  647.481563][T27849] R13: 00007feb0e3e6038 R14: 00007feb0e3e5fa0 R15: 00007ffebf94e448
[  647.481603][T27849]  </TASK>
[  648.104083][T27455] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  648.205398][T27455] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  648.233816][T27455] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  648.271437][T27455] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  648.363746][T27873] 8021q: adding VLAN 0 to HW filter on device bond2
[  648.481705][T27875] only policy match revision 0 supported
[  648.481762][T27875] unable to load match
[  648.743924][T27899] netlink: 'syz.3.6138': attribute type 12 has an invalid length.
[  648.812124][T27899] netlink: 'syz.3.6138': attribute type 12 has an invalid length.
[  648.812595][T11433] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  648.885903][T11433] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  648.933933][T11433] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  648.942710][T11433] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  648.976262][T27906] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  649.011043][T27906] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  649.024312][T27906] gretap1: entered promiscuous mode
[  649.029689][T27906] gretap1: entered allmulticast mode
[  649.048354][T27911] netlink: 'syz.3.6143': attribute type 4 has an invalid length.
[  649.107732][T27911] netlink: 'syz.3.6143': attribute type 4 has an invalid length.
[  649.229755][T27455] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.317672][T27455] 8021q: adding VLAN 0 to HW filter on device team0
[  649.343156][T26201] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.351098][T26201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.371874][T11444] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.379201][T11444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  649.661161][T27930] __nla_validate_parse: 13 callbacks suppressed
[  649.661183][T27930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6148'.
[  649.692074][T27932] netlink: 'syz.5.6150': attribute type 1 has an invalid length.
[  649.724417][T27930] netlink: 'syz.0.6148': attribute type 1 has an invalid length.
[  649.840337][T27936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6148'.
[  649.901433][T27930] 8021q: adding VLAN 0 to HW filter on device bond7
[  649.972805][T27938] veth0_to_team: entered promiscuous mode
[  649.983467][T27938] veth0_to_team: entered allmulticast mode
[  650.232930][T11438] veth0_to_bridge: left allmulticast mode
[  650.252073][T11438] veth0_to_bridge: left promiscuous mode
[  650.272368][T27954] netlink: 'syz.0.6156': attribute type 11 has an invalid length.
[  650.279507][T11438] bridge0: port 2(veth0_to_bridge) entered disabled state
[  650.298763][T11438] bond5: left promiscuous mode
[  650.307868][T11438] bridge0: port 1(bond5) entered disabled state
[  650.315898][T27954] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6156'.
[  650.622503][T27965] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6156'.
[  651.012574][T11438] dvmrp0 (unregistering): left allmulticast mode
[  651.712851][T11438] bond0 (unregistering): Released all slaves
[  651.732200][T11438] bond1 (unregistering): Released all slaves
[  651.885894][T11438] bond2 (unregistering): Released all slaves
[  651.902554][T11438] bond3 (unregistering): Released all slaves
[  652.055457][T11438] bond4 (unregistering): (slave veth5): Releasing active interface
[  652.067645][T11438] bond4 (unregistering): (slave veth7): Releasing active interface
[  652.078147][T11438] bond4 (unregistering): Released all slaves
[  652.239034][T11438] bond5 (unregistering): Released all slaves
[  652.382160][T11438] bond6 (unregistering): Released all slaves
[  652.530282][T11438] bond7 (unregistering): Released all slaves
[  652.678384][T11438] bond8 (unregistering): (slave veth11): Releasing active interface
[  652.690724][T11438] bond8 (unregistering): (slave veth13): Releasing active interface
[  652.701252][T11438] bond8 (unregistering): Released all slaves
[  652.836637][  T849] wg1 speed is unknown, defaulting to 1000
[  652.842567][  T849] syz2: Port: 1 Link DOWN
[  652.893012][T27969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6160'.
[  652.931078][T11438] tipc: Disabling bearer <eth:syzkaller0>
[  653.009186][T11438] tipc: Left network mode
[  653.050844][T27455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.514948][T27455] veth0_vlan: entered promiscuous mode
[  653.576132][T27997] vlan3: entered allmulticast mode
[  653.589008][T27997] : entered allmulticast mode
[  653.609549][T27997] hsr_slave_0: entered allmulticast mode
[  653.628036][T27997] hsr_slave_1: entered allmulticast mode
[  653.721832][T27990] macvtap1: entered promiscuous mode
[  653.727998][T27990] vlan0: entered promiscuous mode
[  653.735409][T27990] geneve1: entered promiscuous mode
[  653.742031][T27990] macvtap1: entered allmulticast mode
[  653.752555][T27990] vlan0: entered allmulticast mode
[  653.758653][T27990] geneve1: entered allmulticast mode
[  653.867336][T28005] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.6171'.
[  653.892079][T28005] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  653.904516][T27455] veth1_vlan: entered promiscuous mode
[  654.056783][T27455] veth0_macvtap: entered promiscuous mode
[  654.146108][T28013] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6174'.
[  654.409829][T27455] veth1_macvtap: entered promiscuous mode
[  654.598828][T27455] batman_adv: batadv0: Interface activated: batadv_slave_0
[  654.649516][T27455] batman_adv: batadv0: Interface activated: batadv_slave_1
[  654.752592][T27868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.805036][T27868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.876321][T27868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.890436][T27868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  655.366588][T11438] hsr_slave_0: left promiscuous mode
[  655.399037][T11438] hsr_slave_1: left promiscuous mode
[  655.453336][T11438] veth1_macvtap: left promiscuous mode
[  655.459387][T11438] veth0_macvtap: left promiscuous mode
[  655.625472][T28057] vxcan1: tx address claim with dest, not broadcast
[  655.815094][T11438] pimreg3 (unregistering): left allmulticast mode
[  655.886744][T28059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6187'.
[  655.941515][T11438] pim6reg (unregistering): left allmulticast mode
[  655.991501][T11438] pim6reg527 (unregistering): left allmulticast mode
[  657.199507][T28063] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  657.392233][T11422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.423460][T11422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.612049][T11433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.641067][T11433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.987862][T28104] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6194'.
[  657.990062][T11438] IPVS: stop unused estimator thread 0...
[  658.049852][T28108] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6017'.
[  658.550238][T28122] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6197'.
[  658.614074][T28127] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  659.148800][T28151] netlink: 'syz.3.6203': attribute type 4 has an invalid length.
[  659.386109][T28154] sctp: [Deprecated]: syz.5.6204 (pid 28154) Use of int in maxseg socket option.
[  659.386109][T28154] Use struct sctp_assoc_value instead
[  659.471413][T28157] sctp: [Deprecated]: syz.5.6204 (pid 28157) Use of int in maxseg socket option.
[  659.471413][T28157] Use struct sctp_assoc_value instead
[  659.589313][ T5185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  659.601165][ T5185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  659.610518][ T5185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  659.622228][ T5185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  659.632494][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  659.648954][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6207'.
[  659.797565][T28172] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6210'.
[  659.807414][T28172] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6210'.
[  660.045740][T28184] netlink: 900 bytes leftover after parsing attributes in process `syz.5.6211'.
[  660.094223][T28184] netlink: 'syz.5.6211': attribute type 11 has an invalid length.
[  660.122619][T28184] netlink: 'syz.5.6211': attribute type 4 has an invalid length.
[  660.147737][T28184] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6211'.
[  660.248748][T28190] netlink: 'syz.0.6216': attribute type 5 has an invalid length.
[  660.269671][T28188] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  660.909267][T28214] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6223'.
[  661.066835][T28219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6225'.
[  661.335409][T28162] chnl_net:caif_netlink_parms(): no params data found
[  661.438252][T28233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6229'.
[  661.694032][ T5185] Bluetooth: hci1: command tx timeout
[  661.818506][T28162] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.834367][T28162] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.841771][T28162] bridge_slave_0: entered allmulticast mode
[  661.851277][T28162] bridge_slave_0: entered promiscuous mode
[  661.862658][T28162] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.875384][T28162] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.882811][T28162] bridge_slave_1: entered allmulticast mode
[  661.892221][T28162] bridge_slave_1: entered promiscuous mode
[  662.119525][T28162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.137695][T28162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.224912][T28277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6237'.
[  662.272784][T28162] team0: Port device team_slave_0 added
[  662.294720][T28162] team0: Port device team_slave_1 added
[  662.392483][T28162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  662.401690][T28162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  662.435801][T28162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  662.450216][T28162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  662.457736][T28162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  662.484606][T28162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  662.491983][T28283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6239'.
[  662.601794][T28285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6240'.
[  662.626066][T28162] hsr_slave_0: entered promiscuous mode
[  662.632736][T28162] hsr_slave_1: entered promiscuous mode
[  662.641779][T28285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6240'.
[  663.275391][T28315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6246'.
[  663.361466][T28318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6250'.
[  663.404381][T28318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6250'.
[  663.570724][T28162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.598612][T28162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.612971][T28326] xt_HMARK: spi-set and port-set can't be combined
[  663.644233][T28318] gretap0: entered promiscuous mode
[  663.650622][T28318] gretap0: left promiscuous mode
[  663.668834][T28328] delete_channel: no stack
[  663.775441][ T5185] Bluetooth: hci1: command tx timeout
[  663.775718][T28162] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode
[  663.802531][T28162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.814701][T28162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.967575][T28162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  664.003375][T28162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.116399][T28162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  664.127149][T28162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.297464][T28162] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  664.310699][T28162] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  664.323035][T28162] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  664.338522][T28162] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  664.442222][T28162] 8021q: adding VLAN 0 to HW filter on device bond0
[  664.471538][T28162] 8021q: adding VLAN 0 to HW filter on device team0
[  664.486336][T11444] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.493552][T11444] bridge0: port 1(bridge_slave_0) entered forwarding state
[  664.512667][T11438] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.519887][T11438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  664.806631][T28162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  664.861947][T28162] veth0_vlan: entered promiscuous mode
[  664.882034][T28162] veth1_vlan: entered promiscuous mode
[  664.929093][T28162] veth0_macvtap: entered promiscuous mode
[  664.941976][T28162] veth1_macvtap: entered promiscuous mode
[  664.963948][T28162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  664.980807][T28162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  665.002386][T26201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.012046][T27868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.025844][T27868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.035583][T11438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.132898][T26201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.148739][T26201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.189784][T27868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.200024][T27868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.854493][ T5185] Bluetooth: hci1: command tx timeout
[  666.176678][   T55] block nbd2: Possible stuck request ffff888024fd7380: control (read@0,1024B). Runtime 180 seconds
[  666.188198][   T55] block nbd2: Possible stuck request ffff888024fd7540: control (read@1024,1024B). Runtime 180 seconds
[  666.199826][   T55] block nbd2: Possible stuck request ffff888024fd7700: control (read@2048,1024B). Runtime 180 seconds
[  666.211971][   T55] block nbd2: Possible stuck request ffff888024fd78c0: control (read@3072,1024B). Runtime 180 seconds
[  667.935425][ T5185] Bluetooth: hci1: command tx timeout
[  668.172467][ T5235] udevd[5235]: worker [21006] /devices/virtual/block/nbd2 timeout; kill it
[  668.181932][ T5235] udevd[5235]: seq 24923 '/devices/virtual/block/nbd2' killed
[  696.262648][   T55] block nbd2: Possible stuck request ffff888024fd7380: control (read@0,1024B). Runtime 210 seconds
[  696.274513][   T55] block nbd2: Possible stuck request ffff888024fd7540: control (read@1024,1024B). Runtime 210 seconds
[  696.287160][   T55] block nbd2: Possible stuck request ffff888024fd7700: control (read@2048,1024B). Runtime 210 seconds
[  696.298548][   T55] block nbd2: Possible stuck request ffff888024fd78c0: control (read@3072,1024B). Runtime 210 seconds
[  722.932688][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6259'.
[  722.940316][T28366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6261'.
[  723.107984][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  723.118610][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  723.127340][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  723.142652][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  723.159851][T28373] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.6264'.
[  723.172367][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  723.180415][T28377] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6263'.
[  723.238542][T28373] netlink: zone id is out of range
[  723.244374][T28373] netlink: zone id is out of range
[  723.249594][T28373] netlink: zone id is out of range
[  723.255335][T28373] netlink: zone id is out of range
[  723.260796][T28373] netlink: zone id is out of range
[  723.266119][T28373] netlink: zone id is out of range
[  723.271336][T28373] netlink: zone id is out of range
[  723.277204][T28373] netlink: zone id is out of range
[  723.282434][T28373] netlink: zone id is out of range
[  723.287922][T28373] netlink: zone id is out of range
[  723.462996][T28387] syzkaller1: entered promiscuous mode
[  723.482185][T28387] syzkaller1: entered allmulticast mode
[  723.726365][T28400] netlink: 'syz.5.6270': attribute type 1 has an invalid length.
[  723.964315][T28404] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  724.284288][T28424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6274'.
[  724.346299][T28423] netlink: 'syz.3.6276': attribute type 1 has an invalid length.
[  724.368929][T28423] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6276'.
[  724.390265][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6276'.
[  724.910385][T28449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6282'.
[  724.932537][T28368] chnl_net:caif_netlink_parms(): no params data found
[  725.195723][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6286'.
[  725.249772][T28464] geneve2: entered promiscuous mode
[  725.294375][ T5185] Bluetooth: hci0: command tx timeout
[  725.307739][T28465] 8021q: adding VLAN 0 to HW filter on device bond1
[  725.317193][T28368] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.329041][T28368] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.338769][T28368] bridge_slave_0: entered allmulticast mode
[  725.349197][T28368] bridge_slave_0: entered promiscuous mode
[  725.365633][T28466] bond_slave_0: entered promiscuous mode
[  725.371697][T28466] bond_slave_1: entered promiscuous mode
[  725.379411][T28466] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  725.391704][T28466] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  725.404270][T28368] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.415823][T28368] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.434433][T28368] bridge_slave_1: entered allmulticast mode
[  725.442781][T28368] bridge_slave_1: entered promiscuous mode
[  725.590881][T28368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  725.610682][T28471] netlink: 'syz.1.6288': attribute type 12 has an invalid length.
[  725.637767][T28471] netlink: 'syz.1.6288': attribute type 29 has an invalid length.
[  725.646298][T28471] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6288'.
[  725.663567][T28471] netlink: 'syz.1.6288': attribute type 2 has an invalid length.
[  725.679358][T28368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  725.810299][T28368] team0: Port device team_slave_0 added
[  725.837859][T28368] team0: Port device team_slave_1 added
[  725.947346][T28487] netlink: 'syz.3.6293': attribute type 1 has an invalid length.
[  725.989879][T28368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  726.005349][T28368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  726.059901][T28368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  726.190920][T28487] 8021q: adding VLAN 0 to HW filter on device bond3
[  726.285036][T28490] vlan0: entered promiscuous mode
[  726.290237][T28490] bond3: entered promiscuous mode
[  726.340800][   T55] block nbd2: Possible stuck request ffff888024fd7380: control (read@0,1024B). Runtime 240 seconds
[  726.353760][T28490] vlan0: entered allmulticast mode
[  726.353784][T28490] bond3: entered allmulticast mode
[  726.367595][   T55] block nbd2: Possible stuck request ffff888024fd7540: control (read@1024,1024B). Runtime 240 seconds
[  726.376219][T28368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  726.389208][   T55] block nbd2: Possible stuck request ffff888024fd7700: control (read@2048,1024B). Runtime 240 seconds
[  726.401211][   T55] block nbd2: Possible stuck request ffff888024fd78c0: control (read@3072,1024B). Runtime 240 seconds
[  726.417160][T28368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  726.482141][T28368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  726.660288][T28497] bond3: (slave gretap1): making interface the new active one
[  726.675289][T28497] gretap1: entered promiscuous mode
[  726.680983][T28497] gretap1: entered allmulticast mode
[  726.726504][T28497] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  727.197000][T28536] mac80211_hwsim hwsim63 �
: renamed from wlan1 (while UP)
[  727.255138][T28368] hsr_slave_0: entered promiscuous mode
[  727.268223][T28368] hsr_slave_1: entered promiscuous mode
[  727.281355][T28368] debugfs: 'hsr0' already exists in 'hsr'
[  727.309705][T28368] Cannot create hsr debugfs directory
[  727.375713][ T5185] Bluetooth: hci0: command tx timeout
[  727.390524][T28529] pim6reg1: entered promiscuous mode
[  727.400341][T28529] pim6reg1: entered allmulticast mode
[  727.927432][T28368] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  727.962227][T28368] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.149251][T28563] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004
[  728.166621][T28368] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  728.193609][T28368] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.289586][T28567] __nla_validate_parse: 7 callbacks suppressed
[  728.289605][T28567] netlink: 288 bytes leftover after parsing attributes in process `syz.3.6314'.
[  728.290682][T28368] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  728.328661][T28368] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.409512][T28368] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  728.426799][T28368] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.763802][T28581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6316'.
[  728.794972][T28581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6316'.
[  728.809231][T28581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6316'.
[  728.846025][T28581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6316'.
[  729.044751][T28368] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  729.101909][T28368] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  729.171733][T28587] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6318'.
[  729.279913][T28368] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  729.312042][T28368] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  729.454078][ T5185] Bluetooth: hci0: command tx timeout
[  729.581196][T28601] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6321'.
[  729.724147][T28368] 8021q: adding VLAN 0 to HW filter on device bond0
[  729.802231][T28607] netlink: 'syz.3.6323': attribute type 33 has an invalid length.
[  729.812623][T28368] 8021q: adding VLAN 0 to HW filter on device team0
[  729.839035][T27601] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.846322][T27601] bridge0: port 1(bridge_slave_0) entered forwarding state
[  729.847807][T28607] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6323'.
[  729.901731][T27601] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.908967][T27601] bridge0: port 2(bridge_slave_1) entered forwarding state
[  730.107119][T28614] net_ratelimit: 218 callbacks suppressed
[  730.107187][T28614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  730.180445][T28368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  730.268670][T28620] : renamed from hsr0 (while UP)
[  730.449639][T28635] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  730.461808][   T30] audit: type=1804 audit(1758706740.776:11): pid=28632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6330" name="/newroot/33/cgroup.controllers" dev="tmpfs" ino=188 res=1 errno=0
[  730.556877][   T30] audit: type=1800 audit(1758706740.776:12): pid=28632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6330" name="cgroup.controllers" dev="tmpfs" ino=188 res=0 errno=0
[  730.792166][T28654] Bluetooth: MGMT ver 1.23
[  731.016968][T28664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6339'.
[  731.109420][T28670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6341'.
[  731.128270][T28368] 8021q: adding VLAN 0 to HW filter on device batadv0
[  731.282691][T28368] veth0_vlan: entered promiscuous mode
[  731.344759][T28368] veth1_vlan: entered promiscuous mode
[  731.542767][ T5185] Bluetooth: hci0: command tx timeout
[  731.549587][T28368] veth0_macvtap: entered promiscuous mode
[  731.698070][T28368] veth1_macvtap: entered promiscuous mode
[  731.808212][T28368] batman_adv: batadv0: Interface activated: batadv_slave_0
[  731.860269][T28368] batman_adv: batadv0: Interface activated: batadv_slave_1
[  731.922711][T27868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  731.956917][T27868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  731.976134][T27868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  732.020040][T27868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  732.589467][T27601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  732.623928][T27601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  732.769463][T11444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  732.801823][T11444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  732.966252][T28730] tipc: Started in network mode
[  732.971187][T28730] tipc: Node identity 080211, cluster identity 4711
[  732.995021][T28730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  733.007965][T28730] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode
[  733.024439][T28730] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode
[  733.077398][T28730] tipc: Resetting bearer <eth:syzkaller0>
[  733.205468][T28735] netlink: 'syz.0.6359': attribute type 1 has an invalid length.
[  733.456597][T28739] tipc: Started in network mode
[  733.480353][T28739] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  733.485194][T28741] __nla_validate_parse: 4 callbacks suppressed
[  733.485212][T28741] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6362'.
[  733.495022][T28739] tipc: Enabled bearer <udp:syz1>, priority 10
[  733.615012][ T5185] Bluetooth: hci0: command tx timeout
[  733.932322][T28765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6371'.
[  734.063563][ T6594] tipc: Node number set to 134353152
[  734.368455][T28783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6377'.
[  734.467056][ T5185] block nbd4: Receive control failed (result -32)
[  734.469630][T28786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6378'.
[  734.484257][  T849] tipc: Node number set to 4269801492
[  735.126230][T28800] netlink: 'syz.1.6385': attribute type 1 has an invalid length.
[  735.171279][T28800] netlink: 'syz.1.6385': attribute type 2 has an invalid length.
[  735.286503][T28812] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.6387'.
[  735.374996][T28814] dvmrp1: entered allmulticast mode
[  735.434525][T28817] netdevsim netdevsim3 ������: renamed from netdevsim0 (while UP)
[  735.557705][T28832] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6394'.
[  736.148522][T28856] syzkaller1: entered promiscuous mode
[  736.180216][T28856] syzkaller1: entered allmulticast mode
[  736.240514][T28858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6400'.
[  736.290913][T28862] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  736.720757][T28880] netlink: 'syz.5.6402': attribute type 1 has an invalid length.
[  736.946198][ T6594] IPVS: starting estimator thread 0...
[  736.952256][T28884] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  737.095918][T28894] IPVS: using max 26 ests per chain, 62400 per kthread
[  737.307739][T28907] gtp0: entered promiscuous mode
[  737.329184][T28907] gtp0: entered allmulticast mode
[  737.348301][T28911] netlink: 'syz.5.6415': attribute type 1 has an invalid length.
[  737.481961][T28918] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  737.621565][T22922] udevd[22922]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory
[  737.688674][T22922] udevd[22922]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory
[  737.806013][T28933] netlink: 'syz.3.6420': attribute type 9 has an invalid length.
[  737.834952][T28933] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.6420'.
[  737.996724][T28943] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  738.050357][T28943] netlink: 'syz.0.6424': attribute type 10 has an invalid length.
[  738.081772][T28943] bridge0: port 3(team0) entered blocking state
[  738.111465][T28943] bridge0: port 3(team0) entered disabled state
[  738.138567][T28943] team0: entered allmulticast mode
[  738.152901][T28943] team_slave_0: entered allmulticast mode
[  738.168891][T28943] team_slave_1: entered allmulticast mode
[  738.193528][T28943] team0: entered promiscuous mode
[  738.200556][T28943] team_slave_0: entered promiscuous mode
[  738.241914][T28943] team_slave_1: entered promiscuous mode
[  738.268050][T28943] bridge0: port 3(team0) entered blocking state
[  738.274650][T28943] bridge0: port 3(team0) entered forwarding state
[  738.369780][T28953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6427'.
[  738.441459][T28953] mac80211_hwsim hwsim68 �
: renamed from wlan1 (while UP)
[  738.632936][T28966] netlink: 'syz.2.6431': attribute type 25 has an invalid length.
[  738.924251][T28973] netlink: 360 bytes leftover after parsing attributes in process `syz.0.6432'.
[  738.991842][T28975] netlink: 360 bytes leftover after parsing attributes in process `syz.0.6432'.
[  739.016104][T28979] tipc: Started in network mode
[  739.027127][T28979] tipc: Node identity 628452726fa7, cluster identity 4711
[  739.043985][T28979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  739.201679][T28979] syzkaller0: entered promiscuous mode
[  739.220723][T28979] syzkaller0: entered allmulticast mode
[  739.238778][T28979] tipc: Resetting bearer <eth:syzkaller0>
[  739.258912][T28983] bridge: RTM_NEWNEIGH with invalid ether address
[  739.306891][T28976] tipc: Resetting bearer <eth:syzkaller0>
[  740.163670][ T6594] tipc: Node number set to 220418674
[  740.340290][T29013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6443'.
[  742.039053][T28976] tipc: Disabling bearer <eth:syzkaller0>
[  742.330001][T29027] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6449'.
[  742.389019][T29027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6449'.
[  742.447611][T29032] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6450'.
[  742.471673][T29035] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6451'.
[  742.773737][T29047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6453'.
[  742.816508][T29041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  742.952349][T29055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6458'.
[  743.019744][T29055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6458'.
[  743.098365][T29056] gretap0: entered promiscuous mode
[  743.124381][T29056] vlan1: entered promiscuous mode
[  743.241743][T29062] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  743.864639][T29099] netlink: 'syz.1.6469': attribute type 21 has an invalid length.
[  743.981909][T29108] __nla_validate_parse: 6 callbacks suppressed
[  743.981932][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6473'.
[  744.219698][T13695] hid-generic 0005:15C2:0008.0002: item fetching failed at offset 0/1
[  744.231774][T29115] "syz.2.6475" (29115) uses obsolete ecb(arc4) skcipher
[  744.256847][T29115] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  744.267352][T13695] hid-generic 0005:15C2:0008.0002: probe with driver hid-generic failed with error -22
[  744.500428][T29125] netlink: 'syz.2.6478': attribute type 1 has an invalid length.
[  744.520016][T29120] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  744.639027][T29128] netlink: 'syz.5.6479': attribute type 2 has an invalid length.
[  744.672036][T29125] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  744.726483][T29125] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  744.737276][T29128] netlink: 'syz.5.6479': attribute type 1 has an invalid length.
[  744.737318][T29128] netlink: 'syz.5.6479': attribute type 1 has an invalid length.
[  744.737331][T29128] netlink: 'syz.5.6479': attribute type 2 has an invalid length.
[  744.799277][T29125] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  744.892914][T29131] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  744.950632][T29131] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  745.288732][T29154] netlink: 'syz.1.6485': attribute type 62 has an invalid length.
[  746.123945][T29183] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.6493'.
[  746.154582][T29183] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.6493'.
[  747.092564][T29210] netlink: 'syz.1.6501': attribute type 1 has an invalid length.
[  747.124494][T29212] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6503'.
[  747.385329][T29225] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6507'.
[  747.410129][T29227] IPv6: Can't replace route, no match found
[  747.834237][   T30] audit: type=1107 audit(1758706758.136:13): pid=29244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%�U�A����٠�0���l�t�ݕ/�� ��'116򊨊�ѣȭ�Ku�C��נԱ>�����=t%X��ne����J��X����}!]��Oĩ����P�"tj��q�S�5�gktDq�N��h�p���e���]�O##ք�jM��ΪQ�F��
[  747.834237][   T30] q�<�!���hh��æDBp@���I4�'
[  748.150153][T29257] openvswitch: netlink: Key type 29 is not supported
[  748.410227][T29281] netlink: 'syz.0.6524': attribute type 21 has an invalid length.
[  748.425890][T29278] IPVS: set_ctl: invalid protocol: 108 172.30.1.6:20000
[  748.435370][T29278] IPVS: set_ctl: invalid protocol: 108 172.30.1.6:20000
[  748.442517][T29278] IPVS: set_ctl: invalid protocol: 108 172.30.1.6:20000
[  748.451291][T29278] IPVS: set_ctl: invalid protocol: 108 172.30.1.6:20000
[  748.459882][T29281] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6524'.
[  749.251717][T29332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6536'.
[  749.320055][T29332] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  749.340820][T29332] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  749.375787][T29339] netlink: 'syz.1.6537': attribute type 58 has an invalid length.
[  749.390319][T29341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6539'.
[  749.408861][T29339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6537'.
[  750.305907][T29344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  750.474204][T29347] netlink: 'syz.0.6541': attribute type 2 has an invalid length.
[  750.483938][T29347] netlink: 'syz.0.6541': attribute type 1 has an invalid length.
[  750.771703][T29359] sch_fq: defrate 0 ignored.
[  750.778578][T29358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6545'.
[  751.296680][T29384] netlink: 'syz.0.6552': attribute type 16 has an invalid length.
[  751.357218][T29384] netlink: 'syz.0.6552': attribute type 16 has an invalid length.
[  752.635875][T29414] tun0: tun_chr_ioctl cmd 1074025675
[  752.641251][T29414] tun0: persist disabled
[  752.734938][T29417] netlink: 6012 bytes leftover after parsing attributes in process `syz.0.6564'.
[  753.004368][T29430] macvtap1: entered promiscuous mode
[  753.037314][T29429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6568'.
[  753.041682][T29434] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  753.064220][T29430] macvtap1: entered allmulticast mode
[  753.147431][T29428] macvtap2: entered promiscuous mode
[  753.154017][T29428] macvtap2: entered allmulticast mode
[  753.192045][T29440] !��: renamed from bond_slave_0 (while UP)
[  753.207933][T29444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6573'.
[  753.455271][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6577'.
[  753.513753][T29458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6577'.
[  753.552709][T29458] netlink: 'syz.2.6577': attribute type 20 has an invalid length.
[  753.570455][T29448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6574'.
[  753.635370][T29458] netlink: 'syz.2.6577': attribute type 20 has an invalid length.
[  753.637341][T27868] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  753.720429][T27868] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  753.744647][T27868] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  753.759506][T27868] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  753.834325][T11426] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  753.883323][T11426] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  753.912392][T11426] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  753.924488][T11444] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  754.345316][T29496] __nla_validate_parse: 2 callbacks suppressed
[  754.345338][T29496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6588'.
[  754.534477][T29506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6590'.
[  754.578801][T13695] IPVS: starting estimator thread 0...
[  754.654052][ T5185] Bluetooth: hci3: command 0x0405 tx timeout
[  754.683630][T29509] IPVS: using max 25 ests per chain, 60000 per kthread
[  754.782697][T29515] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6594'.
[  755.297024][T29539] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  755.332713][T29539] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  755.588208][T29556] netlink: 'syz.5.6606': attribute type 1 has an invalid length.
[  755.708399][T29556] 8021q: adding VLAN 0 to HW filter on device bond9
[  755.846299][T29560] bond9: (slave geneve3): making interface the new active one
[  755.872120][T29560] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  756.083622][T11444] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  756.115085][T11444] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  756.134579][T11444] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  756.142781][T29578] netlink: 'syz.2.6611': attribute type 15 has an invalid length.
[  756.171053][T11444] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  756.205285][T29581] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6611'.
[  756.238227][T29581] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave
[  756.279615][T29581] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0)
[  756.491872][   T55] block nbd2: Possible stuck request ffff888024fd7380: control (read@0,1024B). Runtime 270 seconds
[  756.503491][   T55] block nbd2: Possible stuck request ffff888024fd7540: control (read@1024,1024B). Runtime 270 seconds
[  756.515733][   T55] block nbd2: Possible stuck request ffff888024fd7700: control (read@2048,1024B). Runtime 270 seconds
[  756.528132][   T55] block nbd2: Possible stuck request ffff888024fd78c0: control (read@3072,1024B). Runtime 270 seconds
[  756.647471][T29594] netlink: 'syz.0.6616': attribute type 2 has an invalid length.
[  756.720256][T29594] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  756.880106][T29617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'.
[  757.262022][T29639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6626'.
[  757.435137][T29644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  757.470139][T29643] netlink: 'syz.0.6628': attribute type 10 has an invalid length.
[  757.520361][T29644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  757.552694][T29644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  757.607624][T29644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  757.729816][T29643] netlink: 'syz.0.6628': attribute type 10 has an invalid length.
[  757.814367][T29643] netlink: 'syz.0.6628': attribute type 10 has an invalid length.
[  757.876276][T29643] netlink: 'syz.0.6628': attribute type 10 has an invalid length.
[  757.942327][T29643] netlink: 'syz.0.6628': attribute type 10 has an invalid length.
[  758.015111][T29643] netlink: 'syz.0.6628': attribute type 10 has an invalid length.
[  758.046417][T29643] netlink: 'syz.0.6628': attribute type 10 has an invalid length.
[  758.308154][T29675] sctp: [Deprecated]: syz.5.6635 (pid 29675) Use of struct sctp_assoc_value in delayed_ack socket option.
[  758.308154][T29675] Use struct sctp_sack_info instead
[  758.458336][T29680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6638'.
[  758.677578][T29664] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  758.889559][T29700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  759.096974][T29708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6648'.
[  759.338735][T29728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6654'.
[  759.503908][T29739] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  759.519802][T29739] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  759.651941][T29739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6654'.
[  759.677468][T29745] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6660'.
[  759.694251][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6659'.
[  759.775602][ T5185] Bluetooth: hci4: command 0x0406 tx timeout
[  759.862668][T29748] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6659'.
[  760.067202][T29764] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  760.251972][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6665'.
[  760.281065][T29779] wg1: entered promiscuous mode
[  760.293413][T29779] wg1: entered allmulticast mode
[  760.310773][T29788] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6665'.
[  760.559117][T29796] sock: sock_set_timeout: `syz.1.6671' (pid 29796) tries to set negative timeout
[  760.648952][T29800] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6672'.
[  760.676281][T29800] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6672'.
[  760.687799][T29800] 0��{X��: renamed from gretap0
[  760.709001][T29800] 0��{X��: entered allmulticast mode
[  760.722697][T29800] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  760.744248][T29807] validate_nla: 31 callbacks suppressed
[  760.744270][T29807] netlink: 'syz.0.6674': attribute type 10 has an invalid length.
[  760.758377][T29807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6674'.
[  760.955831][T29811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6676'.
[  762.604358][T29887] veth0: entered promiscuous mode
[  762.619445][T29887] veth0: left promiscuous mode
[  762.699849][T29895] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  763.933726][T29949] netlink: 'syz.1.6709': attribute type 1 has an invalid length.
[  764.234921][T29959] netlink: 'syz.3.6714': attribute type 2 has an invalid length.
[  764.253890][T29958] netlink: 'syz.3.6714': attribute type 2 has an invalid length.
[  764.671530][T29980] __nla_validate_parse: 5 callbacks suppressed
[  764.671550][T29980] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6719'.
[  764.833007][T29987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6720'.
[  764.860011][T29988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6721'.
[  764.898568][T29990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6722'.
[  764.915342][T29987] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.6720'.
[  764.949945][T29987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6720'.
[  764.950910][T29995] netlink: 'syz.2.6723': attribute type 12 has an invalid length.
[  765.100002][T30002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6725'.
[  765.233746][T30012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6728'.
[  765.268043][T30012] openvswitch: netlink: Unknown nsh attribute 0
[  765.295813][T30012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  765.459947][T30021] macvtap2: entered promiscuous mode
[  765.494415][T30021] macvtap2: entered allmulticast mode
[  765.560891][T30033] netlink: 'syz.0.6734': attribute type 10 has an invalid length.
[  765.621204][T30038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6736'.
[  765.624341][T30036] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6730'.
[  765.671269][T30030] macvtap2: entered promiscuous mode
[  765.677564][T30030] macvtap2: entered allmulticast mode
[  765.729504][T30033] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  765.961359][T30043] netlink: 'syz.2.6736': attribute type 6 has an invalid length.
[  766.332162][T30069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  766.666297][T30083] netlink: 'syz.3.6748': attribute type 23 has an invalid length.
[  767.036213][T30101] netlink: 'syz.3.6750': attribute type 1 has an invalid length.
[  767.270278][T30101] 8021q: adding VLAN 0 to HW filter on device bond4
[  767.890621][T30131] lo: left allmulticast mode
[  767.895842][T30131] netlink: 'syz.5.6759': attribute type 2 has an invalid length.
[  767.904172][T30131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  767.931355][T30139] tipc: Started in network mode
[  767.939112][T30139] tipc: Node identity 42be4dd4db43, cluster identity 4711
[  767.953932][T30139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  767.986594][T30134] syzkaller0: entered promiscuous mode
[  767.992137][T30134] syzkaller0: entered allmulticast mode
[  768.075501][T30134] tipc: Resetting bearer <eth:syzkaller0>
[  768.123293][T30133] tipc: Resetting bearer <eth:syzkaller0>
[  768.177535][T30133] tipc: Disabling bearer <eth:syzkaller0>
[  768.644494][T30159] netlink: 'syz.3.6766': attribute type 21 has an invalid length.
[  769.620048][T30215] netlink: 'syz.2.6783': attribute type 10 has an invalid length.
[  769.837998][T30215] mac80211_hwsim hwsim68 �
: entered promiscuous mode
[  769.879644][T30215] bond0: (slave �
): Enslaving as an active interface with an up link
[  770.305606][T30238] veth1_macvtap: left promiscuous mode
[  770.377572][T30240] __nla_validate_parse: 11 callbacks suppressed
[  770.377595][T30240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6788'.
[  770.411064][T30242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6789'.
[  770.570810][T30244] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  770.716112][T30247] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6791'.
[  770.730860][T30256] netlink: 'syz.1.6793': attribute type 3 has an invalid length.
[  770.971031][T30265] netlink: 'syz.5.6795': attribute type 1 has an invalid length.
[  771.086128][T30265] bond10: entered promiscuous mode
[  771.092372][T30265] 8021q: adding VLAN 0 to HW filter on device bond10
[  771.130483][T30281] bond10: (slave bridge7): making interface the new active one
[  771.144709][T30281] bridge7: entered promiscuous mode
[  771.151923][T30281] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  771.185637][T30282] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6798'.
[  771.501405][T30298] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6802'.
[  771.757925][T30312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6806'.
[  771.859809][T30312] netlink: 'syz.3.6806': attribute type 1 has an invalid length.
[  771.972012][T30327] netlink: 'syz.0.6810': attribute type 24 has an invalid length.
[  772.044795][T30329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6811'.
[  772.231859][T30338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6813'.
[  772.261415][T30338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6813'.
[  772.416703][T30347] netlink: 'syz.0.6817': attribute type 1 has an invalid length.
[  772.463415][T30349] netlink: 'syz.1.6816': attribute type 1 has an invalid length.
[  772.469773][T30347] bond1: (slave gretap1): making interface the new active one
[  772.480444][T30347] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  772.579949][T30341] netlink: 788 bytes leftover after parsing attributes in process `syz.5.6814'.
[  773.608602][T30383] netlink: 'syz.1.6827': attribute type 23 has an invalid length.
[  773.700818][T30390] netlink: 'syz.3.6829': attribute type 1 has an invalid length.
[  774.235313][T30414] netlink: 'syz.1.6836': attribute type 3 has an invalid length.
[  774.669301][T30426] netlink: 'syz.5.6840': attribute type 24 has an invalid length.
[  774.974349][T30434] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  775.263946][T30437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  775.286092][T30442] syzkaller0: entered promiscuous mode
[  775.291726][T30442] syzkaller0: entered allmulticast mode
[  775.873751][T30466] syzkaller0: entered promiscuous mode
[  775.887047][T30466] syzkaller0: entered allmulticast mode
[  775.902486][T30472] __nla_validate_parse: 6 callbacks suppressed
[  775.902506][T30472] netlink: 808 bytes leftover after parsing attributes in process `syz.0.6852'.
[  775.925409][T30436] tipc: Resetting bearer <eth:syzkaller0>
[  775.980391][T30436] tipc: Disabling bearer <eth:syzkaller0>
[  776.157937][T30483] netlink: 'syz.0.6855': attribute type 1 has an invalid length.
[  776.485693][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6859'.
[  776.502257][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6859'.
[  778.642144][T30483] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  778.947093][T30515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6862'.
[  779.002712][T26190] IPVS: starting estimator thread 0...
[  779.012664][T30515] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  779.029132][T30523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6864'.
[  779.104552][T30519] IPVS: using max 23 ests per chain, 55200 per kthread
[  779.486037][T30533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  779.517940][T30533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.732893][T30533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  779.748415][T30533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.976900][T30533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  779.996091][T30533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.179657][T30565] netlink: 7224 bytes leftover after parsing attributes in process `syz.2.6875'.
[  780.195915][T30533] netdevsim netdevsim3 ������ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  780.215666][T30565] openvswitch: netlink: Flow key attr not present in new flow.
[  780.227177][T30533] netdevsim netdevsim3 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.238836][T30572] netlink: 'syz.2.6875': attribute type 10 has an invalid length.
[  780.258767][T30568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6877'.
[  780.274167][T30572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6875'.
[  780.320694][T30572] batadv0: entered promiscuous mode
[  780.329446][T30572] batadv0: entered allmulticast mode
[  780.337826][T30572] bridge0: port 3(batadv0) entered blocking state
[  780.346052][T30572] bridge0: port 3(batadv0) entered disabled state
[  780.358924][T30572] bridge0: port 3(batadv0) entered blocking state
[  780.365627][T30572] bridge0: port 3(batadv0) entered forwarding state
[  780.646676][T11437] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  780.666455][T11437] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  780.685792][T11437] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  780.698405][T11437] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  780.708045][T30579] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  780.759011][T27604] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  780.768341][T27604] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  780.782480][T11433] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  780.812752][T11433] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  780.980240][T30586] netlink: 81 bytes leftover after parsing attributes in process `syz.1.6880'.
[  781.083329][T11422] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  781.120757][T11422] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  781.374938][T30611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6887'.
[  781.403702][T30611] openvswitch: netlink: nsh attr 8196 is out of range max 3
[  781.428370][T30611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  781.644906][T30619] : entered promiscuous mode
[  782.182867][T30648] netlink: 'syz.2.6898': attribute type 21 has an invalid length.
[  782.354238][T30656] netlink: 'syz.0.6899': attribute type 29 has an invalid length.
[  782.379812][T30658] netlink: 'syz.5.6900': attribute type 1 has an invalid length.
[  782.426036][T30658] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6900'.
[  782.484033][T30660] netlink: zone id is out of range
[  782.494184][T30660] netlink: zone id is out of range
[  782.690669][T30665] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6903'.
[  782.805466][T30673] netlink: 'syz.5.6906': attribute type 1 has an invalid length.
[  782.821403][T30673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  783.015949][T30680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6909'.
[  783.949678][T30730] netlink: 'syz.3.6922': attribute type 1 has an invalid length.
[  784.155938][T30730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6922'.
[  784.198435][T30740] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  784.237110][T30740] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  784.262672][T30740] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  784.358221][T30750] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  784.582105][T30760] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6930'.
[  784.595868][T30759] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  784.668472][T30760] Bluetooth: MGMT ver 1.23
[  784.840114][T30769] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  784.952010][T30774] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  785.181682][T30788] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6939'.
[  785.447157][T30805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6946'.
[  785.688271][T30813] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  785.688271][T30818] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  785.688552][T30819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6950'.
[  785.960950][T30833] netlink: 'syz.1.6954': attribute type 1 has an invalid length.
[  786.026267][T30830] nbd5: detected capacity change from 0 to 127
[  786.045159][   T51] block nbd5: Receive control failed (result -104)
[  786.055112][T22922] block nbd5: Send control failed (result -32)
[  786.065633][T22922] block nbd5: Request send failed, requeueing
[  786.076663][   T55] block nbd5: Dead connection, failed to find a fallback
[  786.085362][   T55] block nbd5: shutting down sockets
[  786.093853][   T55] blk_print_req_error: 138 callbacks suppressed
[  786.093876][   T55] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  786.115240][   T55] buffer_io_error: 138 callbacks suppressed
[  786.115260][   T55] Buffer I/O error on dev nbd5, logical block 3, async page read
[  786.197717][T30841] netlink: 'syz.2.6956': attribute type 1 has an invalid length.
[  786.310392][T30848] netlink: 'syz.0.6958': attribute type 2 has an invalid length.
[  786.646105][T30867] pimreg3: entered allmulticast mode
[  786.654075][T30866] netlink: 'syz.2.6964': attribute type 1 has an invalid length.
[  786.662023][T30866] netlink: 'syz.2.6964': attribute type 2 has an invalid length.
[  786.705029][T30868] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.729992][T30868] bridge_slave_1: left allmulticast mode
[  786.741576][T30868] bridge_slave_1: left promiscuous mode
[  786.761606][T30868] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.765234][T30876] __nla_validate_parse: 2 callbacks suppressed
[  786.765251][T30876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6962'.
[  786.828430][T30868] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  787.134520][   T55] block nbd2: Possible stuck request ffff888024fd7380: control (read@0,1024B). Runtime 300 seconds
[  787.149681][   T55] block nbd2: Possible stuck request ffff888024fd7540: control (read@1024,1024B). Runtime 300 seconds
[  787.169972][   T55] block nbd2: Possible stuck request ffff888024fd7700: control (read@2048,1024B). Runtime 300 seconds
[  787.192400][   T55] block nbd2: Possible stuck request ffff888024fd78c0: control (read@3072,1024B). Runtime 300 seconds
[  787.215124][T30897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6969'.
[  787.430074][T30897] sit1: entered allmulticast mode
[  787.648418][T30901] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  787.755384][T30904] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  787.974124][T30917] vxcan1: tx address claim with different name
[  788.025053][T30911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  788.032870][T30911] syzkaller0: entered promiscuous mode
[  788.068007][T30911] syzkaller0: entered allmulticast mode
[  788.105893][T30911] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6976'.
[  788.141407][T30911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6976'.
[  788.159100][T30911] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6976'.
[  788.195439][T30929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'.
[  788.218689][T30911] validate_nla: 1 callbacks suppressed
[  788.218711][T30911] netlink: 'syz.0.6976': attribute type 3 has an invalid length.
[  788.245430][T30911] netlink: 'syz.0.6976': attribute type 2 has an invalid length.
[  788.277599][T30911] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6976'.
[  788.451931][T30911] tipc: Resetting bearer <eth:syzkaller0>
[  788.487122][T30910] tipc: Resetting bearer <eth:syzkaller0>
[  788.596508][T30910] tipc: Disabling bearer <eth:syzkaller0>
[  788.635577][T30948] netlink: 'syz.3.6986': attribute type 1 has an invalid length.
[  788.657913][T30948] netlink: 'syz.3.6986': attribute type 4 has an invalid length.
[  788.676748][T30948] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6986'.
[  788.834580][T30954] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6987'.
[  789.103812][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6988'.
[  789.127645][T30966] netlink: 'syz.0.6988': attribute type 5 has an invalid length.
[  789.278632][T30977] sctp: [Deprecated]: syz.1.6991 (pid 30977) Use of int in maxseg socket option.
[  789.278632][T30977] Use struct sctp_assoc_value instead
[  789.753709][T30996] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  789.779577][T30996] openvswitch: netlink: Duplicate key (type 0).
[  789.790117][T31000] gtp0: entered promiscuous mode
[  789.818827][T31000] gtp0: entered allmulticast mode
[  789.873708][T30996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  789.916581][T31000] netlink: 'syz.5.6999': attribute type 12 has an invalid length.
[  789.939762][T31007] netlink: 'syz.1.6997': attribute type 4 has an invalid length.
[  790.250325][T31021] netlink: 'syz.3.7004': attribute type 83 has an invalid length.
[  791.206513][T31031] netdevsim netdevsim5: Direct firmware load for /.� failed with error -2
[  791.215843][T31031] netdevsim netdevsim5: Falling back to sysfs fallback for: /.�
[  791.297240][T31037] netlink: 'syz.3.7007': attribute type 12 has an invalid length.
[  791.656806][T31066] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  791.696105][T31066] team_slave_0: entered allmulticast mode
[  791.848619][T31074] __nla_validate_parse: 9 callbacks suppressed
[  791.848643][T31074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7019'.
[  791.896072][T31077] macvlan0: mtu less than device minimum
[  792.015309][T31074] netlink: 'syz.3.7019': attribute type 6 has an invalid length.
[  792.026902][T31081] openvswitch: netlink: IPv4 tun info is not correct
[  792.042826][T31089] team0: left allmulticast mode
[  792.052687][T31089] team_slave_0: left allmulticast mode
[  792.069326][T31089] team_slave_1: left allmulticast mode
[  792.075912][T31089] team0: left promiscuous mode
[  792.081125][T31089] team_slave_0: left promiscuous mode
[  792.090697][T31089] team_slave_1: left promiscuous mode
[  792.166618][T31089] bridge0: port 3(team0) entered disabled state
[  792.332472][T13695] IPVS: starting estimator thread 0...
[  792.458003][T31109] IPVS: using max 27 ests per chain, 64800 per kthread
[  792.548783][T31116] 8021q: adding VLAN 0 to HW filter on device bond6
[  792.575674][T31116] vlan1: entered promiscuous mode
[  792.581009][T31116] bond6: entered promiscuous mode
[  792.587588][T31116] vlan1: entered allmulticast mode
[  792.588571][T31124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7029'.
[  792.592902][T31116] bond6: entered allmulticast mode
[  792.913635][T31140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7034'.
[  792.945979][T31140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7034'.
[  792.969120][T31141] lo: entered promiscuous mode
[  793.016102][T31141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  793.127970][T31141] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7032'.
[  793.141812][T31150] netlink: 232 bytes leftover after parsing attributes in process `syz.5.7037'.
[  793.233785][T31141] netlink: zone id is out of range
[  793.253607][T31141] netlink: zone id is out of range
[  793.259085][T31141] netlink: zone id is out of range
[  793.276911][T31141] netlink: zone id is out of range
[  793.305378][T31141] netlink: zone id is out of range
[  793.332207][T31141] netlink: zone id is out of range
[  793.531840][T31168] netlink: 'syz.5.7042': attribute type 11 has an invalid length.
[  793.724285][T31172] syzkaller1: entered promiscuous mode
[  793.743614][T31172] syzkaller1: entered allmulticast mode
[  794.003703][T31187] validate_nla: 4 callbacks suppressed
[  794.003726][T31187] netlink: 'syz.0.7046': attribute type 12 has an invalid length.
[  794.058329][T31187] netlink: 'syz.0.7046': attribute type 29 has an invalid length.
[  794.114620][T31190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7046'.
[  794.117125][T31187] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7046'.
[  794.130376][T31193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7050'.
[  794.171561][T31193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7050'.
[  794.390845][T31199] netlink: 'syz.0.7053': attribute type 1 has an invalid length.
[  794.966668][T31229] netlink: 'syz.2.7062': attribute type 14 has an invalid length.
[  794.976600][T31229] netlink: 'syz.2.7062': attribute type 14 has an invalid length.
[  795.746683][T31244] sctp: [Deprecated]: syz.5.7069 (pid 31244) Use of int in max_burst socket option deprecated.
[  795.746683][T31244] Use struct sctp_assoc_value instead
[  795.840344][T31253] netlink: 'syz.3.7065': attribute type 10 has an invalid length.
[  795.917909][T31253] team0: Port device geneve0 added
[  795.967213][T31257] syzkaller1: entered promiscuous mode
[  795.987570][T31257] syzkaller1: entered allmulticast mode
[  797.121119][T31306] sctp: [Deprecated]: syz.2.7086 (pid 31306) Use of struct sctp_assoc_value in delayed_ack socket option.
[  797.121119][T31306] Use struct sctp_sack_info instead
[  797.145846][T31305] __nla_validate_parse: 7 callbacks suppressed
[  797.145871][T31305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7085'.
[  797.916264][T31327] syzkaller0: entered allmulticast mode
[  798.037980][T31332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7095'.
[  798.423607][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7101'.
[  798.441521][T31349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7100'.
[  798.452345][T31348] netlink: 'syz.5.7101': attribute type 5 has an invalid length.
[  798.460312][T31348] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7101'.
[  798.554981][T31353] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7100'.
[  799.389198][T31401] macvtap1: entered promiscuous mode
[  799.421482][T31401] macvtap1: entered allmulticast mode
[  799.457041][T31401] bond_slave_0: entered promiscuous mode
[  799.462871][T31401] bond_slave_1: entered promiscuous mode
[  799.510511][T31401] bond0: entered allmulticast mode
[  799.557079][T31401] bond_slave_0: entered allmulticast mode
[  799.562892][T31401] bond_slave_1: entered allmulticast mode
[  799.603576][T31401] bond0: entered promiscuous mode
[  799.621543][T31401] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  799.660957][T31401] team0: Device macvtap1 failed to register rx_handler
[  799.680017][T31401] bond0: left allmulticast mode
[  799.685155][T31401] bond_slave_0: left allmulticast mode
[  799.691052][T31401] bond_slave_1: left allmulticast mode
[  799.724175][T31401] bond0: left promiscuous mode
[  799.740128][T31401] bond_slave_0: left promiscuous mode
[  799.745681][T31401] bond_slave_1: left promiscuous mode
[  799.837884][T31397] macvtap1: entered promiscuous mode
[  799.846942][T31397] macvtap1: entered allmulticast mode
[  799.855510][T31397] bond_slave_0: entered promiscuous mode
[  799.861427][T31397] bond_slave_1: entered promiscuous mode
[  799.889294][T31397] bond0: entered allmulticast mode
[  799.895325][T31397] bond_slave_0: entered allmulticast mode
[  799.901311][T31397] bond_slave_1: entered allmulticast mode
[  799.908400][T31397] bond0: entered promiscuous mode
[  799.917272][T31397] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  799.925276][T31397] team0: Device macvtap1 failed to register rx_handler
[  799.939849][T31397] bond0: left allmulticast mode
[  799.945892][T31397] bond_slave_0: left allmulticast mode
[  799.951479][T31397] bond_slave_1: left allmulticast mode
[  799.957347][T31397] bond0: left promiscuous mode
[  799.962512][T31397] bond_slave_0: left promiscuous mode
[  799.968106][T31397] bond_slave_1: left promiscuous mode
[  800.033775][T31413] IPVS: Error connecting to the multicast addr
[  800.277144][T31426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7122'.
[  800.715595][T11426] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  800.759491][T31447] netlink: 'syz.0.7126': attribute type 1 has an invalid length.
[  800.806055][T31442] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7127'.
[  800.966302][T31447] bond2: entered promiscuous mode
[  800.972038][T31447] 8021q: adding VLAN 0 to HW filter on device bond2
[  801.229647][T31457] 8021q: adding VLAN 0 to HW filter on device bond3
[  801.259313][T31472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7130'.
[  801.270930][T31457] bond2: (slave bond3): making interface the new active one
[  801.298431][T31457] bond3: entered promiscuous mode
[  801.305373][T31474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7129'.
[  801.305734][T31457] bond2: (slave bond3): Enslaving as an active interface with an up link
[  801.426808][T31470] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  801.634741][T11426] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  801.687826][T13695] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  801.699882][T11426] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  801.894202][T13695] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  802.336275][T31518] __nla_validate_parse: 2 callbacks suppressed
[  802.336297][T31518] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7142'.
[  802.424673][ T5955] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  803.127749][T31557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7153'.
[  803.542754][T31569] netlink: 'syz.1.7157': attribute type 3 has an invalid length.
[  804.459655][T31603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7165'.
[  804.653704][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  804.841599][T31616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7169'.
[  805.320913][T31629] netlink: 'syz.5.7173': attribute type 11 has an invalid length.
[  805.693716][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  806.189331][T31642] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7179'.
[  806.234062][T31642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7179'.
[  806.286893][T31642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7179'.
[  806.454476][ T5955] hid-generic 0005:15C2:0008.0003: item fetching failed at offset 0/1
[  806.514389][ T5955] hid-generic 0005:15C2:0008.0003: probe with driver hid-generic failed with error -22
[  806.562269][T31660] netlink: 'syz.5.7183': attribute type 10 has an invalid length.
[  806.570320][T31660] bridge0: left allmulticast mode
[  806.581303][T31660] bridge0: entered allmulticast mode
[  806.592851][T31660] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  806.618493][T31662] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7185'.
[  806.672646][T31662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7185'.
[  807.132163][T31676] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  807.162170][T31676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  807.183637][T31676] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  807.219579][T31676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  807.232643][T31676] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  807.520122][T31688] net_ratelimit: 4 callbacks suppressed
[  807.520146][T31688] openvswitch: netlink: Missing key (keys=40, expected=80)
[  808.717204][T31734] netlink: 'syz.0.7203': attribute type 1 has an invalid length.
[  808.826760][T31732] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.941537][T31675] chnl_net:caif_netlink_parms(): no params data found
[  809.186594][T31756] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7208'.
[  809.220384][T31762] netlink: 'syz.0.7210': attribute type 29 has an invalid length.
[  809.231158][T31766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7210'.
[  809.293641][   T51] Bluetooth: hci4: command tx timeout
[  809.303116][T31762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7210'.
[  809.686178][T31675] bridge0: port 1(bridge_slave_0) entered blocking state
[  809.695143][T31675] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.702809][T31675] bridge_slave_0: entered allmulticast mode
[  809.730440][T31675] bridge_slave_0: entered promiscuous mode
[  809.751792][T31675] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.783601][T31675] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.812600][T31675] bridge_slave_1: entered allmulticast mode
[  809.837591][T31675] bridge_slave_1: entered promiscuous mode
[  809.855993][T31783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  809.936438][T31788] syzkaller0: entered promiscuous mode
[  809.942088][T31788] syzkaller0: entered allmulticast mode
[  809.949371][T31788] tipc: Resetting bearer <eth:syzkaller0>
[  810.207806][T27601] tipc: Resetting bearer <eth:syzkaller0>
[  810.259214][T31782] tipc: Resetting bearer <eth:syzkaller0>
[  811.373586][   T51] Bluetooth: hci4: command tx timeout
[  812.587874][T31782] tipc: Disabling bearer <eth:syzkaller0>
[  812.664316][T31675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  812.673839][T31806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7220'.
[  812.673882][T31806] nbd: nbd0 already in use
[  812.801042][T31675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  813.107831][T31675] team0: Port device team_slave_0 added
[  813.147413][T31675] team0: Port device team_slave_1 added
[  813.401613][T31675] batman_adv: batadv0: Adding interface: batadv_slave_0
[  813.430057][T31675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  813.454164][   T51] Bluetooth: hci4: command tx timeout
[  813.499786][T31675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  813.503364][T31839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7229'.
[  813.516185][T31675] batman_adv: batadv0: Adding interface: batadv_slave_1
[  813.529168][T31675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  813.557998][T31675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  813.628445][T31838] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  813.717978][T31848] netlink: 'syz.5.7230': attribute type 15 has an invalid length.
[  813.722702][T31843] 8021q: adding VLAN 0 to HW filter on device bond4
[  813.735631][T31838] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  813.750292][T31838] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  813.761856][T31848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7230'.
[  813.769475][T31851] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7233'.
[  813.783101][T31850] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7233'.
[  813.918496][T31675] hsr_slave_0: entered promiscuous mode
[  813.937379][T31675] hsr_slave_1: entered promiscuous mode
[  813.955117][T31675] debugfs: 'hsr0' already exists in 'hsr'
[  813.966959][T31675] Cannot create hsr debugfs directory
[  814.013766][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  815.211680][T31877] netlink: 'syz.5.7241': attribute type 29 has an invalid length.
[  815.221846][T31877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7241'.
[  815.534945][   T51] Bluetooth: hci4: command tx timeout
[  815.698392][T31898] netlink: 'syz.3.7246': attribute type 30 has an invalid length.
[  815.742295][T31675] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  815.751686][T31900] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7247'.
[  815.829285][T31675] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  815.868106][T31675] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  815.918185][T31675] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  816.344912][   T30] audit: type=1107 audit(1758706826.656:14): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  816.358919][T31931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7254'.
[  816.484530][T31931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7254'.
[  816.557049][T31675] 8021q: adding VLAN 0 to HW filter on device bond0
[  816.574850][   T55] block nbd5: Possible stuck request ffff8880250e5080: control (read@0,1024B). Runtime 30 seconds
[  816.586439][   T55] block nbd5: Possible stuck request ffff8880250e5240: control (read@1024,1024B). Runtime 30 seconds
[  816.600226][   T55] block nbd5: Possible stuck request ffff8880250e5400: control (read@2048,1024B). Runtime 30 seconds
[  816.667746][T31675] 8021q: adding VLAN 0 to HW filter on device team0
[  816.682601][T31942] netlink: 'syz.2.7257': attribute type 1 has an invalid length.
[  816.701702][T31942] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.7257'.
[  816.736971][T30984] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.744217][T30984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  816.779061][T30984] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.786853][T30984] bridge0: port 2(bridge_slave_1) entered forwarding state
[  817.061097][T31961] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0
[  817.217193][   T55] block nbd2: Possible stuck request ffff888024fd7380: control (read@0,1024B). Runtime 330 seconds
[  817.228656][   T55] block nbd2: Possible stuck request ffff888024fd7540: control (read@1024,1024B). Runtime 330 seconds
[  817.241397][   T55] block nbd2: Possible stuck request ffff888024fd7700: control (read@2048,1024B). Runtime 330 seconds
[  817.253037][   T55] block nbd2: Possible stuck request ffff888024fd78c0: control (read@3072,1024B). Runtime 330 seconds
[  817.282369][T31965] netlink: 'syz.2.7261': attribute type 21 has an invalid length.
[  817.318724][T31965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7261'.
[  817.571397][T31675] 8021q: adding VLAN 0 to HW filter on device batadv0
[  817.605449][T31974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7265'.
[  817.975692][T31988] netlink: 'syz.3.7269': attribute type 7 has an invalid length.
[  817.998121][T31995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7271'.
[  818.031322][T31992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7271'.
[  818.050835][T31988] : entered promiscuous mode
[  818.080169][T31995] ksmbd: Unknown IPC event: 12, ignore.
[  818.275248][T32002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7272'.
[  818.287723][T32003] veth0: entered promiscuous mode
[  818.358884][T32001] veth0: left promiscuous mode
[  818.596663][T32019] netlink: 'syz.5.7277': attribute type 21 has an invalid length.
[  818.631446][T32019] netlink: 'syz.5.7277': attribute type 22 has an invalid length.
[  818.659801][T31675] veth0_vlan: entered promiscuous mode
[  818.665378][T32019] netlink: 'syz.5.7277': attribute type 23 has an invalid length.
[  818.665405][T32019] netlink: 'syz.5.7277': attribute type 25 has an invalid length.
[  818.731775][T31675] veth1_vlan: entered promiscuous mode
[  818.862859][T32029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  818.941250][T31675] veth0_macvtap: entered promiscuous mode
[  818.998010][T31675] veth1_macvtap: entered promiscuous mode
[  819.127464][T31675] batman_adv: batadv0: Interface activated: batadv_slave_0
[  819.150229][T31675] batman_adv: batadv0: Interface activated: batadv_slave_1
[  819.270061][T30983] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.345240][T30983] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.347751][T32053] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  819.366885][T32053] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  819.378294][T30983] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.419016][T30983] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  819.601907][T32050] syzkaller0: entered promiscuous mode
[  819.608511][T32050] syzkaller0: entered allmulticast mode
[  821.694584][   T31] INFO: task udevd:21006 blocked for more than 143 seconds.
[  821.705617][   T31]       Not tainted syzkaller #0
[  821.710617][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  821.719866][   T31] task:udevd           state:D stack:20872 pid:21006 tgid:21006 ppid:5235   task_flags:0x400140 flags:0x00004006
[  821.732218][   T31] Call Trace:
[  821.735928][   T31]  <TASK>
[  821.738909][   T31]  __schedule+0x1798/0x4cc0
[  821.743923][   T31]  ? __pfx___schedule+0x10/0x10
[  821.749580][   T31]  ? schedule+0x91/0x360
[  821.754194][   T31]  schedule+0x165/0x360
[  821.758402][   T31]  io_schedule+0x80/0xd0
[  821.762852][   T31]  folio_wait_bit_common+0x6b0/0xb90
[  821.768940][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  821.775470][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  821.781096][   T31]  ? __filemap_get_folio+0x760/0xaf0
[  821.786584][   T31]  ? do_read_cache_folio+0x4e9/0x590
[  821.791909][   T31]  do_read_cache_folio+0x1aa/0x590
[  821.797202][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  821.802702][   T31]  read_part_sector+0xb6/0x2b0
[  821.808237][   T31]  adfspart_check_POWERTEC+0x8c/0xf30
[  821.814150][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  821.819727][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  821.825898][   T31]  bdev_disk_changed+0x75f/0x14b0
[  821.830975][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  821.836731][   T31]  ? wait_on_inode+0xc0/0x230
[  821.841457][   T31]  blkdev_get_whole+0x380/0x510
[  821.846564][   T31]  bdev_open+0x31e/0xd30
[  821.851494][   T31]  blkdev_open+0x457/0x600
[  821.857807][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  821.862795][   T31]  do_dentry_open+0x950/0x13f0
[  821.868186][   T31]  vfs_open+0x3b/0x340
[  821.872325][   T31]  ? path_openat+0x2ecd/0x3830
[  821.878808][   T31]  path_openat+0x2ee5/0x3830
[  821.885207][   T31]  ? arch_stack_walk+0xfc/0x150
[  821.890402][   T31]  ? stack_depot_save_flags+0x40/0x860
[  821.896442][   T31]  ? __pfx_path_openat+0x10/0x10
[  821.901605][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.909095][   T31]  do_filp_open+0x1fa/0x410
[  821.915449][   T31]  ? __lock_acquire+0xab9/0xd20
[  821.920758][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  821.926954][   T31]  ? _raw_spin_unlock+0x28/0x50
[  821.932231][   T31]  ? alloc_fd+0x64c/0x6c0
[  821.937866][   T31]  do_sys_openat2+0x121/0x1c0
[  821.942689][   T31]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  821.949041][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  821.955441][   T31]  ? rcu_is_watching+0x15/0xb0
[  821.960452][   T31]  __x64_sys_openat+0x138/0x170
[  821.965992][   T31]  do_syscall_64+0xfa/0x3b0
[  821.970648][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.978164][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  821.985007][   T31]  ? clear_bhb_loop+0x60/0xb0
[  821.989731][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.996511][   T31] RIP: 0033:0x7f34f04a7407
[  822.000951][   T31] RSP: 002b:00007fff695d35d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  822.009987][   T31] RAX: ffffffffffffffda RBX: 00007f34f0c0c880 RCX: 00007f34f04a7407
[  822.018949][   T31] RDX: 00000000000a0800 RSI: 00005607b3584520 RDI: ffffffffffffff9c
[  822.027465][   T31] RBP: 00005607b3583910 R08: 0000000000000000 R09: 0000000000000000
[  822.037018][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005607b35af970
[  822.045932][   T31] R13: 00005607b3591190 R14: 0000000000000000 R15: 00005607b35af970
[  822.055099][   T31]  </TASK>
[  822.058392][   T31] 
[  822.058392][   T31] Showing all locks held in the system:
[  822.073604][   T31] 1 lock held by khungtaskd/31:
[  822.078885][   T31]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  822.090113][   T31] 2 locks held by getty/5628:
[  822.098231][   T31]  #0: ffff88814df680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  822.110196][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  822.120818][   T31] 1 lock held by udevd/21006:
[  822.125934][   T31]  #0: ffff888024f80358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  822.136233][   T31] 1 lock held by udevd/22922:
[  822.140941][   T31]  #0: ffff888024f86358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  822.150943][   T31] 3 locks held by kworker/u8:5/30983:
[  822.157543][   T31]  #0: ffff88814cbd3948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  822.169764][   T31]  #1: ffffc9000d4dfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  822.183193][   T31]  #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  822.193959][   T31] 3 locks held by kworker/u8:6/30984:
[  822.199596][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  822.212200][   T31]  #1: ffffc9000d4bfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  822.223757][   T31]  #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  822.234657][   T31] 3 locks held by syz-executor/31675:
[  822.240081][   T31]  #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.248720][   T31]  #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  822.260925][   T31]  #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3048/0x4100
[  822.271818][   T31] 2 locks held by syz.5.7284/32050:
[  822.277644][   T31]  #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  822.287263][   T31]  #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  822.300639][   T31] 1 lock held by syz.0.7289/32067:
[  822.306233][   T31]  #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0
[  822.316395][   T31] 1 lock held by syz.0.7289/32069:
[  822.321617][   T31]  #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  822.331055][   T31] 1 lock held by syz.3.7290/32073:
[  822.337737][   T31]  #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ea/0x900
[  822.347381][   T31] 2 locks held by syz.2.7291/32075:
[  822.352733][   T31]  #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.362173][   T31]  #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  822.371728][   T31] 1 lock held by syz.2.7291/32076:
[  822.377326][   T31]  #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  822.387115][   T31] 2 locks held by syz.2.7291/32077:
[  822.392357][   T31]  #0: ffffffff8fa3eb08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  822.402048][   T31]  #1: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  822.412003][   T31] 
[  822.414992][   T31] =============================================
[  822.414992][   T31] 
[  822.423910][   T31] NMI backtrace for cpu 1
[  822.423931][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  822.423951][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  822.423962][   T31] Call Trace:
[  822.423969][   T31]  <TASK>
[  822.423976][   T31]  dump_stack_lvl+0x189/0x250
[  822.424003][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  822.424020][   T31]  ? __pfx__printk+0x10/0x10
[  822.424049][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  822.424076][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  822.424103][   T31]  ? __pfx__printk+0x10/0x10
[  822.424127][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  822.424154][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  822.424179][   T31]  watchdog+0xf93/0xfe0
[  822.424205][   T31]  ? watchdog+0x1de/0xfe0
[  822.424231][   T31]  kthread+0x70e/0x8a0
[  822.424255][   T31]  ? __pfx_watchdog+0x10/0x10
[  822.424275][   T31]  ? __pfx_kthread+0x10/0x10
[  822.424297][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  822.424313][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  822.424328][   T31]  ? __pfx_kthread+0x10/0x10
[  822.424349][   T31]  ret_from_fork+0x439/0x7d0
[  822.424369][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  822.424392][   T31]  ? __switch_to_asm+0x39/0x70
[  822.424410][   T31]  ? __switch_to_asm+0x33/0x70
[  822.424428][   T31]  ? __pfx_kthread+0x10/0x10
[  822.424449][   T31]  ret_from_fork_asm+0x1a/0x30
[  822.424486][   T31]  </TASK>
[  822.424493][   T31] Sending NMI from CPU 1 to CPUs 0:
[  822.575903][    C0] NMI backtrace for cpu 0
[  822.575922][    C0] CPU: 0 UID: 0 PID: 11438 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) 
[  822.575941][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  822.575952][    C0] Workqueue: bat_events batadv_nc_worker
[  822.575979][    C0] RIP: 0010:lock_acquire+0xe7/0x360
[  822.576004][    C0] Code: 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 11 df 9c 8d e8 69 24 dd 09 <65> ff 05 12 c2 03 11 45 31 c9 4c 89 7c 24 08 41 f7 c7 00 02 00 00
[  822.576017][    C0] RSP: 0018:ffffc9001aee7980 EFLAGS: 00000082
[  822.576031][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 38a5eaf05a59ec00
[  822.576041][    C0] RDX: 0000000000000000 RSI: ffffffff8d9cdf11 RDI: ffffffff8be33f00
[  822.576052][    C0] RBP: ffffffff8b47e802 R08: 0000000000000000 R09: 0000000000000000
[  822.576062][    C0] R10: dffffc0000000000 R11: ffffffff8b47e730 R12: 0000000000000002
[  822.576073][    C0] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000246
[  822.576084][    C0] FS:  0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000
[  822.576097][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  822.576109][    C0] CR2: 000055556c3395c8 CR3: 0000000076c7a000 CR4: 00000000003526f0
[  822.576125][    C0] Call Trace:
[  822.576132][    C0]  <TASK>
[  822.576143][    C0]  ? batadv_nc_worker+0xd2/0x610
[  822.576164][    C0]  ? batadv_nc_worker+0xd2/0x610
[  822.576184][    C0]  batadv_nc_worker+0xef/0x610
[  822.576204][    C0]  ? batadv_nc_worker+0xd2/0x610
[  822.576225][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  822.576242][    C0]  process_scheduled_works+0xae1/0x17b0
[  822.576270][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  822.576293][    C0]  worker_thread+0x8a0/0xda0
[  822.576321][    C0]  kthread+0x70e/0x8a0
[  822.576341][    C0]  ? __pfx_worker_thread+0x10/0x10
[  822.576356][    C0]  ? __pfx_kthread+0x10/0x10
[  822.576375][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  822.576390][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  822.576405][    C0]  ? __pfx_kthread+0x10/0x10
[  822.576423][    C0]  ret_from_fork+0x439/0x7d0
[  822.576441][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  822.576459][    C0]  ? __switch_to_asm+0x39/0x70
[  822.576477][    C0]  ? __switch_to_asm+0x33/0x70
[  822.576494][    C0]  ? __pfx_kthread+0x10/0x10
[  822.576512][    C0]  ret_from_fork_asm+0x1a/0x30
[  822.576538][    C0]  </TASK>
[  822.577688][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  822.818370][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  822.827484][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  822.837643][   T31] Call Trace:
[  822.840936][   T31]  <TASK>
[  822.843871][   T31]  dump_stack_lvl+0x99/0x250
[  822.848473][   T31]  ? __asan_memcpy+0x40/0x70
[  822.853070][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  822.858270][   T31]  ? __pfx__printk+0x10/0x10
[  822.862907][   T31]  vpanic+0x281/0x750
[  822.867008][   T31]  ? __pfx_vpanic+0x10/0x10
[  822.871644][   T31]  ? preempt_schedule+0xae/0xc0
[  822.876522][   T31]  ? preempt_schedule_common+0x83/0xd0
[  822.881995][   T31]  panic+0xb9/0xc0
[  822.885726][   T31]  ? __pfx_panic+0x10/0x10
[  822.890151][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  822.895543][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  822.901730][   T31]  watchdog+0xfd2/0xfe0
[  822.906019][   T31]  ? watchdog+0x1de/0xfe0
[  822.910629][   T31]  kthread+0x70e/0x8a0
[  822.914993][   T31]  ? __pfx_watchdog+0x10/0x10
[  822.919745][   T31]  ? __pfx_kthread+0x10/0x10
[  822.924356][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  822.929768][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  822.935076][   T31]  ? __pfx_kthread+0x10/0x10
[  822.939687][   T31]  ret_from_fork+0x439/0x7d0
[  822.944286][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  822.949446][   T31]  ? __switch_to_asm+0x39/0x70
[  822.954389][   T31]  ? __switch_to_asm+0x33/0x70
[  822.959165][   T31]  ? __pfx_kthread+0x10/0x10
[  822.963936][   T31]  ret_from_fork_asm+0x1a/0x30
[  822.968722][   T31]  </TASK>
[  822.972071][   T31] Kernel Offset: disabled
[  822.976482][   T31] Rebooting in 86400 seconds..