last executing test programs:

1m43.340450398s ago: executing program 0 (id=2210):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r3, &(0x7f0000000400), 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98)
splice(r2, 0x0, r5, 0x0, 0x80, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xd, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b9", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
unshare(0x8000400)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r10, 0x29, 0x50, 0x0, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x44000)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000001000000000000000000000000000000000000000000000000000de000000000200200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000001000000000000011000000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000003000000000000200200001000000000fffffffffffffffffeffffff000000000000000300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004)
r11 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100]}}, 0x5c)

1m41.895017456s ago: executing program 0 (id=2218):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000001600)={&(0x7f0000000000), 0xc, &(0x7f00000015c0)={&(0x7f0000000240)={0x1364, 0xd, 0xa, 0x801, 0x70bd28, 0x25dfdbfe, {0x3, 0x0, 0x3}, [@generic="a258b2abfa0d2995301be039b8d06c52fb7b53f43fef243aa7225d38a1c52ff8bbcdfacd43277ed846050a2e0eaf6c139410ebcfaeeecf5295bd2df977c88b296b40728c67eb9628d62a993d997700bc121b61601e16b5ef4af933d2e6925dc9f4aac5eaaad435cb6651291c65aeb041a293904f39c168356f55adaf489cadf1b42d93a951ff176768824b107e66977436362e6b35d967cf4bcc17705602fa5f2bad44157a4c685740730542a946721b618356668cf55e9fec38c21825b7fa48e220cc7d86ee8c6711", @generic="9d96a3ffae2ebc9b303281e40d4027461d05094f0a1ec1b99ba9d5f423725f5a38417ef3465960a3a5260c127ed5616822b8ef02619c25d5cacd498b66b8441a4f47612444dfe43abe5b5ed121b142645451aba5374ba9a6fcf07456c26f26b66e465d65d20b169fbc2eb2cc69bb78595ea855840c3c3ccf595a5e95d79c77f2d974dc53bac9711953c910b3c05a87d2d6f7c526179c173f74c6190887aff74bc3c1ac77e2c77742eb13c0a74a9edc5c73f6840646", @typed={0xe, 0x10e, 0x0, 0x0, @str='@\'+/(\\)@{\x00'}, @nested={0x11b3, 0x1d, 0x0, 0x1, [@nested={0x4, 0x13}, @typed={0x4, 0xee}, @nested={0x4, 0x1b}, @generic="9461e79476f3ed0ae4f3be9c0d665d8d12e39176e40328a166bb75c5e2b89d6b6d79b8d4d049ef9550ef60c9f55403f7ce4b1acae5f338da0625fca6da62c30852af548fbbfa7857c7b10f20185dcb99006747ac3969daf76d8bc2fda0ce5ed639486d508bcb3ae0bb61f01addba038396c70375d1a8ae2a8e3333e0626a4bcfa25f3d7eab6c746b267c5e40cfa19440a3424ac0a16a90562f9900c02ae5e79811f3ba6845dd95bb696aeb06ac55cdeb", @generic="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", @generic="719667e254221b969aaa87bb2e9d2631dc8e88ef59ee3bd2a9c59491e2991ae5eaaf35be121299269e57b1d874d070ac999bbd74bcc0602a265ce3eeb2216a34cd6fd4afb213f6085601f2c04d54643178db50eb0da2d0e8b8488813ad35c2405ccd91801d840fdf87505d4dd8d02a7a3b4441857cbd613e97e893d20338d96a4911329f2215d63842c65e10fe080f6ca158bc5b682127d101f7cff9cfe6e8deefe83b855e16dfa22f3966a7a2cbd7029f26d00a9fabca7fe21b534d3caf3379ad30e4b598b7ead61738bf471c423a1ef61bd06a61d3a41ba895fbbcd15d32", @nested={0x4, 0x86}, @nested={0x4, 0x15d}, @nested={0x4, 0x108}, @typed={0x8, 0x150, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}]}, @typed={0xc, 0x129, 0x0, 0x0, @u64=0xd}]}, 0x1364}, 0x1, 0x0, 0x0, 0x20040000}, 0x885)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="03529864fe18f1db1a1919d3cc7d0168ec717f388b335790d556047b39d55a86bb195aed0bb52dac26cfe795c2de4415b90479f5cfd848ab3064cf4375bf624e30211d7f4ca258c496cdd882f1da843bd2ef9627963d6c9a1f5144dde68a587197ead55fad67078183ba2f81e1544b1b398a243b4180dfc350f07645bf4e48c28c1b28581c65cbc68b6d94f809e0ac1fccf0ee952b0b12407756dd029635ac4a3abde3d52e9566", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000)

1m41.497426691s ago: executing program 0 (id=2220):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002}, 0x94)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0xe06}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x20}}, 0xe4)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x50, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x22}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x396, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
listen(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000400000008000000"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100000004"], 0x18}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

1m39.941882085s ago: executing program 0 (id=2227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040084)

1m39.440396723s ago: executing program 0 (id=2230):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 32)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x4008040, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2, 0x4}, 0x1c) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) (async, rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r3=>0xffffffffffffffff}, 0x4) (rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r5 = socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 32)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (rerun: 32)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) (async, rerun: 32)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0x1, 0x80000000}}}, {{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0x6, 0x9, {@empty, {[0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x5, 0x7, 0x7, 0x7, 0x4, 'vlan0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x0, 0x280}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @dev={0xac, 0x14, 0x14, 0x34}, @empty, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @private=0xa010102, @remote, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) (rerun: 32)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async)
sendmmsg$inet6(r7, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r7], 0x1000f) (async, rerun: 32)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={<r8=>0x0, @remote, @empty}, &(0x7f00000001c0)=0xc) (async, rerun: 32)
pipe(&(0x7f0000000040)={<r9=>0xffffffffffffffff})
ioctl$sock_inet_sctp_SIOCINQ(r9, 0x5761, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xb, 0x4, &(0x7f0000001040)=ANY=[@ANYRES8=r0], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x40f00, 0x0, '\x00', r8, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async, rerun: 64)
nanosleep(&(0x7f0000000440), 0x0) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0)

1m37.386984812s ago: executing program 0 (id=2236):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e00, @private=0xa010102}]}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r3=>0x0]}, &(0x7f0000000100)=0x8)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x40, 0x1, 0x5, 0x7, 0x1, 0x1, 0x10001, 0x1, r3}, 0x20)
unshare(0x6a040000)
socket$inet6(0xa, 0x1, 0x3)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000040801"], 0x20}, 0x1, 0x0, 0x0, 0x400c854}, 0x1)
bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x40, 0xb, 0x2, 0x9, @local}, 0x10)
socket(0x2, 0xa, 0x300)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080), 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811)
close(0x4)

1m22.28624026s ago: executing program 32 (id=2236):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e00, @private=0xa010102}]}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r3=>0x0]}, &(0x7f0000000100)=0x8)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x40, 0x1, 0x5, 0x7, 0x1, 0x1, 0x10001, 0x1, r3}, 0x20)
unshare(0x6a040000)
socket$inet6(0xa, 0x1, 0x3)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000040801"], 0x20}, 0x1, 0x0, 0x0, 0x400c854}, 0x1)
bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x40, 0xb, 0x2, 0x9, @local}, 0x10)
socket(0x2, 0xa, 0x300)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080), 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811)
close(0x4)

1m7.992873811s ago: executing program 2 (id=2279):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="d6bd5257e6ce9ab2964ec7163c2b016c5b195fdcf09050e687493fd157a1bfe335efca1a61807370f72b24ea9800fd00f8e377df05ab8f77294c34edcf5d260ec4"], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)) (async)
close(r0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="d6bd5257e6ce9ab2964ec7163c2b016c5b195fdcf09050e687493fd157a1bfe335efca1a61807370f72b24ea9800fd00f8e377df05ab8f77294c34edcf5d260ec4"], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
socket$inet(0x2, 0x80001, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)

1m7.287510874s ago: executing program 3 (id=2281):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0))
r1 = epoll_create1(0x80000)
bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x201c})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000081127800ffe200009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000df2f6abaff0001000080001c250800000000000200000000000000f8ffffffffffffff020000000000e0fffeffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002900000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, r5, 0x424, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xee2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x225}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)

1m6.506745891s ago: executing program 1 (id=2283):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42)
r2 = epoll_create1(0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390426bd7000eaffffff000003e4", @ANYRES32=r5, @ANYBLOB="83000400000000002800128008000100736974001c00028006000d00ff07000008000300e00000010800010058aa7b"], 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040)
bind$rds(r4, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000004})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x0)
getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
ioctl(r6, 0x8933, &(0x7f0000000040)='veth0:')
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0000001})

1m6.488005365s ago: executing program 2 (id=2284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xea5d}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r2}, 0x38)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600884700000c0003000800110003"]}, 0x58}}, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000100)=0x20)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@delchain={0x24, 0x66, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xf, 0x6}, {0x0, 0xfff1}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000881}, 0x49090)

1m5.711864591s ago: executing program 3 (id=2285):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {0x3, 0x1}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x20000000, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0)

1m5.236487197s ago: executing program 3 (id=2286):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0), &(0x7f00000004c0), 0x6375, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d00)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x10d, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000180c2000001ffff49a200ff00670000090690780a0101010a0101004424b5b30a010102000000030a010102000000070000000080000001ac1014aa00000006440cdd80ffffff01000007ff01071be9ac1414bb0a010102ac1414bbe0000002e0000002e000000207040ee84e224e23", @ANYRES32, @ANYRES32, @ANYBLOB="604000029078fa6813128e73bb6513ad4d9e1d849d5a4f08c776130e473bd3b563d1081f9558d7ba040213120ea569363ea953c816a12531cafe45de0303081e0c180ca0fc0000f90f000000939b9d6dbab312a12749142d553eeca758a932d2bb70aaf043ee38f151b0146644356b14190b5c4c046353254c99542a622668a56492e84c43ec693383fa1df2748bb8"], &(0x7f0000000780)={0x1, 0x4, [0xa2a, 0x553, 0xb3b, 0xf8d]})

1m5.009412067s ago: executing program 1 (id=2287):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x3}]}, 0x44}, 0x1, 0x600, 0x0, 0x40000}, 0x0)

1m3.985689669s ago: executing program 1 (id=2288):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x3800, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000d00)=@ethtool_rxnfc={0x2a, 0xd, 0x8000000000000001, {0x8, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3b}, 0x9, 0xf9}, {0x0, @remote, 0xfff3, 0x81, [0x1, 0x80000000]}, @esp_ip4_spec={@loopback, @remote, 0x1}, {0x0, @local, 0x4, 0x6, [0xb]}, 0x7}}})

1m3.151992442s ago: executing program 2 (id=2290):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001a00030d0000000a000000000200000027"], 0x1c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@bridge_getneigh={0x4c, 0x1e, 0x1, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_NET_NS_FD={0x8}, @IFLA_MAP={0x24, 0xe, {0x2, 0x95, 0xfffffffffffffffd, 0x8, 0x5, 0x52}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008451}, 0x20008840)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000240)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc4510010000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x3a, 0x0, @void}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001a00030d0000000a000000000200000027"], 0x1c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@bridge_getneigh={0x4c, 0x1e, 0x1, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_NET_NS_FD={0x8}, @IFLA_MAP={0x24, 0xe, {0x2, 0x95, 0xfffffffffffffffd, 0x8, 0x5, 0x52}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008451}, 0x20008840) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
writev(r5, &(0x7f0000000240)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc4510010000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x3a, 0x0, @void}, 0x10) (async)

1m2.388069097s ago: executing program 1 (id=2291):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbff, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_emit_ethernet(0x51, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x1b, 0x2c, 0x0, @empty, @mcast2, {[@hopopts={0x84}], "9efe9faef61901056bc1c7dc1f6400842bb072"}}}}}, 0x0)
sendmmsg$sock(r2, &(0x7f0000003f80)=[{{&(0x7f0000000000)=@l2={0x1f, 0x6, @any, 0x643}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80008)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="280000004100070130bd7000fedbdf25027c000004002d8009000180040001800400d080040008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

1m1.399905204s ago: executing program 3 (id=2292):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0xe}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r7)
r9 = socket(0x400000000010, 0x3, 0x0)
getsockopt$sock_int(r9, 0x1, 0x22, 0x0, &(0x7f0000000180))
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r8, @ANYRES8=r10, @ANYRES64=r7, @ANYRESOCT=r9], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r12=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r13, &(0x7f00000015c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r13, 0x0)
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r13, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x78, r14, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x0)

1m1.061782389s ago: executing program 2 (id=2293):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="ac5134ff9bcd43041940dc00e71f422bb047c5267ca86f3b6332ba03da2f1684498b814988ccafd15eb2fa91587fcfe181cb243e54fd91c531407451bceadd5cadfb2838f57427f4298022ff9402d90c840d347f7e344d41034ee47f9cb898e6cddc43f20d5cc3a87da4a8f3a097e8a7ce2f57495ff82bb0cea35f491af2e32bb7909f8e8d8d57dec26eae3d0ed32fd8d1908bc7d24661825bf4c6fe0d7ee083d11e5c6627e38160a234371aeab6b4df0a8f54ff7bdc1d1b60a0f1536ec2890c60c30b8b3d5266dd8b9fa44015e1430318185c", 0xd3}], 0x1, &(0x7f00000001c0)}, 0x4001)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
preadv(r0, &(0x7f0000002500)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/177, 0xb1}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/36, 0x24}, {&(0x7f0000002340)=""/56, 0x38}, {&(0x7f0000002380)=""/189, 0xbd}, {&(0x7f0000002440)=""/6, 0x6}, {&(0x7f0000002480)=""/114, 0x72}], 0x8, 0x8, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd26, 0x25dfdbfc, {0xa, 0x14, 0x0, 0x1, 0x92}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xf3b747ef06036fc7}, 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002680), 0x8)
sendto$l2tp(r2, &(0x7f00000026c0)="56733969b2331572d6d5a79ab948782484231a12c7babed11d1916529d4488c9f636336886fb9ddcdb0cfa39a60f8c63e196625fe86cd1083e3f334ded1df35b0f3739d899c470746f022b1537198ec252dac70903fb3dd9ca7a2b587f95bbde1034bc7ad2473c6692f6f466644f6bd0c5460dfbd46b38ba63f23aba923af56c913634ff865c8690f96d1b23413de7643160da3744ce8553a6c5ee0a92ad39d8234adca12a86d51901f8cc8fa839b5c941e15bed474c3ef799bbb89da0602613e3be41c40a834c04d850305fa21f476596501e049e42472c9ee3fa91af8b98a8871bf09f1b19ca28f208e919fcc1ce", 0xef, 0x8000, 0x0, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000027c0)={<r3=>0xffffffffffffffff})
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000002880)={0x5, 0x30, [0x1, 0xfd, 0x7, 0x2], &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000002900), r2)
sendmsg$FOU_CMD_DEL(r3, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x2c, r4, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004084}, 0x0)
ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000002a00)={0x0, 0x0, 0x1, 0x0, 0x6, 0x8})
r5 = socket$inet(0x2, 0x80007, 0x353)
sendto$rxrpc(r2, &(0x7f0000002a40)="abf6be275ac3c090216c6bdd9adde0addb09b9994dd4d3c0a6a37f7e634569a5173164bbd7dc6696c0d73c384f8a689fc7c58eb1c3e7e40a646c3154c9684f915d615652315b452c04c5533b47af86de45d5bbaf64dbbf6a573cdd58b5ee43aa6f0954465ef87c19f696816971872d170646200a7692347e9128a60292094f6d5caeba191a6c2570b80d4985bd3c170efb46bc622bff2d52d793449348e0206574f23d92e992b48de6b3f26442", 0xad, 0xa000, &(0x7f0000002b00)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x24)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002bc0)={'syztnl1\x00', &(0x7f0000002b40)={'syztnl1\x00', <r7=>0x0, 0x29, 0x9, 0x30, 0x9, 0x0, @local, @empty, 0x80, 0x80, 0x0, 0x3}})
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000002c00)='\x00', 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002d00)={'veth1_macvtap\x00', &(0x7f0000002c40)=@ethtool_rx_ntuple={0x35, {0x11, @tcp_ip4_spec={@loopback, @rand_addr=0x64010100, 0x4e22, 0x4e24, 0x5}, @ether_spec={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x3}, 0x6, 0x4, 0x2, 0x80000001, 0xffffffffffffffff}}})
sendmmsg(r1, &(0x7f0000007200)=[{{&(0x7f0000002d40)=@in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x8}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002dc0)="e5d7d7c12a6aec26b823affcfd28587ba6f42cbdcfc6b13f83d91edc6bba8a593fae01a5339ddc5742c98bd5fffa20e38e5be7ef5de7a64d09a4f02638aafdba4175b93c146fb3414f648fec27aede337ec12f647fab6dbc9539cd0283333f667152b53e3d1e6c0912a32f130ec89d05e17a6cdb991424727009d2e8b2bd68ef7b33c8701baeb5a24f4b53ecf6bc21e22ffdd9b768f96701", 0x98}, {&(0x7f0000002e80)="99847be73dfd6c44aa7c79e87956f9adebe9822d40deac51473e2dfeb06d1e008f17120aa887fe82fc2afe15a4df982cdd8631e0a8615f00744c529afdd27d1b9e735621e7990671863b3a05ffc6e0a36c0b5f49e5cfef3be4f23a2977ba5ea9f779c1a7a822084b1f93b8cf0b0b12f1bf07f69168f42a04dc867da633d53e01f5d2b9d7bd56655e83faac1f672dc6848ee5bf01e851bbc7f73cb4074edf6fe1911b1f059676c3d9781803e9", 0xac}, {&(0x7f0000002f40)="114cd4f3c3182766e671495ef5707e66738b32e3100932ab1307f7c43eb69db59e42f4c0c529f925e09cf12f82aec6c58c40e79f1bec7015dcdcbe9a574be4592452888355e376d8941fa516238b26a34329647c6ef6a3d3", 0x58}], 0x3, &(0x7f0000003000)=[{0xc0, 0x10b, 0x5, "82e22f51b81c41fd28bbae89ebf341026355ed98bf89c77fe439e968ab781c0db926bd5762ecd55e49b9b5671f9678c5733bdf8383cf734fb28d1cefffae7d9617bbfdd49e4902fac14a707aa95e7408d44200fd9793d4090f001eea949be07ade4024ee4e508f925e8a3ca36478559431d84709eb99e97142a198a89e7d6d7e0a6e37fd190a962c976482a07f1cf4b28a8d75d6c5e864e4fd580f241487005a29d732ea60f35aa6ad99b8"}, {0x20, 0x115, 0x2, "dc3584ad942e6371b38b5eb7fe5e69e2"}, {0x110, 0x119, 0xde0, "cb133ace87c478519a8b3b0882a948580439c465e760efd4805cfc863d97582f14a88e585773f0b58f6ad742afecb7d337260991b7f3c99b38ec3362d51dd5986d8ed6894a10cceac297b39046e4ddc2c932d3ad39f0ee0cd21a69e00b88edef2e7211a177ad940ca15edcb75af5701496eb7d36753b6b39b6737a96bb948300a85118317c51baf85b632c8cb5e78093473cc49285762d00ae01a7a58901dcc221184d653372f7b71a2a9658fef591d8bb553e33e744c0bd371cf59e551811dfbd39531095f37707efacdf65da827ac95ac9ff11db9f5b02079dd62ea87d3123527d18c366b1bf8b7706a91c7480d3f4daae8e83695aec962435"}, {0x28, 0x119, 0xcc09, "4a77cafd676bbf9ff108c8421c663459e2b6ab40"}], 0x218}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000003240)="3cad9e3fb90120554fc09e64fd3ea15d0784c9d6d96340c24de84ce2", 0x1c}], 0x1, &(0x7f00000032c0)=[{0xc0, 0x10f, 0x8, "f88ccf43b6345fbe593810d5592baa36cf7db7f9b99f88cc2af81e49125f5b9dbec38160810fd388352d9d51d73506da4aaefec81773bae5dbc74272d439d9e226189dc3d4b8c592155a370043e34ea52eef0bd51853d0034377bf6095ac261eb45fafbf34250dedabaeec285ed7b0a35ccc3ad5145c8bc98ee67460afbce69a8bb61016e57e073c4ed1e063f2b14e20e8391c837860ee9e0820dcbe4696a27d500de9a22071a20cab22f1ee"}, {0xf0, 0x115, 0x3, "739800c60bf29534a1a3a995b7ec1a76ecf9bc8474b42993666b7c87f5e09664d96cac3f7576586e6ab60669762b5682c477e25a37f7b8b3ac61db698e63264e7e938b315d043cd5f34dac9f4b4001ada8d8ee0ad8103b72d9acc6fd63c90ec96e2d451db06270e566b2b978c50ffef263edb38be8f3ca6f5ce1db561cb1742a9d2be0a81d52e1420d488a3765d1ff3d7c4c9dce91ddaac16c3cb844ee3531638f4edc252721c2db97dfeb12cdcd9e4a267e3d3465cc33b01507293c4d9feea636af645843f9cabdb368fd513d4e6b00dac23fc952ad1623377c551f3911be"}, {0xf0, 0x10f, 0x5, "dad6cfbab0cab42580237f4edd6c483d480752e9acc339be073f1e19a8088d86495a33df2583331da77f4486c82ab12940f8c1a696aa54cafd8faffc7ca3d573cc45ff01be3b5f64ea484c9a777ef544985f839b997dd49b88de941ac26fbe5dc8d55b3d823dd4dd02fce51df32872ff7e9661bca822653c95e82092ec5ab23cd71331bc03ba1691b04aac5109452690a650b3e4e7e01b2f108bf245ea141fbf1d7f40545a52d23221f5b7818193a38ff5956ccf30ab2d28c494f177f9bad86e64c88787a46a9021e886edfb804d6c11665ca20c866c271651775b7d78"}, {0xd8, 0x119, 0x1, "2f6bdc01aa1a2fd098fe16fc1954c126e6b689813b27e6ef055e95f3e30eca84c9ac93f09fcfbd0efb0ccae1a4d2039bb769f7e2e0e4899266f2a8b7121dd1d12769b62c46787fb830e2159409f4820efdac8df3a43685114cb5f609d78c15b19018cf7012ee2df2f65b066282791f29fe6c0a250ae10e207394a64926bc0b20e047aad0827db2601a9a1722231b62b16cddc808d8b228ca16a9134e4ed71f0f5ff81a5dd4bc80c01eb95e0812536794833ef0bf23aa77afdd9610c6df3b69a592"}, {0x1010, 0x101, 0x1, "0ea37aa9d165bd5352bcbe5686f13b95e0add1de540616cf6c02b26c948434612c50966ed9be6706374f6c65b31ecbdf21b20a79cf14cadd604e48e78870292ae75c11fa4ced1013f9548b5c3c1822357cce18923e7283841b5fe6e8532cbea28329157259d3a6d2bb1261aa55ede61f97af431c2919f49d5caf14949f9a902ef55600c407808bc2f926103533202e3453e375f45cd13c76dfa1bb59bc8ea1d5301a96c3abea49b75b49d2450bcdcd2ac0124d2d44a921ec590276294c697ae78ff5e9f5ca272065c3788a0b39a975cef647a74f7f58eb214fd00364510a0e6abae5f82be90ceea716d97892f38d64b960c74db3cb7ecc8a8a36a19fbc483c1aab605c0f052d71a685855abdfb8856f6c490e04e86d362a37146e4315605889d5188d0361ae9ee3762595c65a96b98661e2f0badff89081458409492f5596f7ec4089326a9df9fbc224a6267a6a5f0697e42aee32c6ee2c7957ae72fec32ae8f05ad7946ba030775fc141abf56b7f445292794a594425a93cd3b5fcebcbb49892b1d1b6a337b914f1ad5daa2e273653bcbc505c2f4735c8d6d1455e0cd31372b4da8a59bda125bbeb10688ab5f1a2495b83fe41a8c577e3a572a06e0401797aecf9216e8e5ada104cd3d8c09903e1131f9adc7bb1c34de4dac3bf8433c1cbf0ad7ebc9b54c2be6dfc6865514b00701174146faaabc01db5fba04076b884e93c73bdae677b13889f1956c45c11350ee8640676b7df04cd741290338bad896a0781ae0f291bb649c6a7c246eaf47ff19d6eb29a7df9513034b0b1ed91d8462caa0787297a0313e79c73702b8436f8c69365dff7238b8bb4b62a721e822e8412cfe0cf8ec7f48eac2358454d16e2128c78e3cd68bcd4cd1d27477af80af438b192096c0956d64fb4991e239a013ec879b6a3c3697ea7efd58f19e62bc62130b9d4d97dcbf51af048756e2f97092f9f067b3f9663ae30e5e97761e98efdbd71dbca7bfcdb23eee3329394db9d55ccd27362e5d13af4002d94afeb3e1d12ba3206d0688fa72cf3ba8f7d773bc712c646b5012ee4cdf268789a1c68081df12a352dc3232d709a59406b936a88c4a1238557953d988082a21d325e2f40b95912a8e387e7b2a5c36a410b19bbab30f71644d6496c0c12f72eaa685eb3b7f89c0b95669d3bce45490ec84ba192584b0cdaae81b2a67c625631ffdc904fed8a2748caca61596ba0f77652a62d0e801dee4ab3e38f08fec477352aa8d337b68852773a9c619170c0da5b73a0834cdd4142a1adcf2374fa26d95f76c10a1d277cc966d5c065f73cf5c40ca1eba7b3b01ca630703741c8f46c0ecc092cc1cd1ca285dc4a87f6c6172acf5e715d3938b38574693cb63e6cf5373468148c6f774ac87911816b1624c797ee3bb932965d38e84b39e085b38cc8dbc6642983664ebc99d3f5e9b969eba93e8ba38e24753cc092c3e2cc7e8957217f296fd13401061af6c8a2acf0449e6f071edd8c2d7f320801425d03cc0312b42e5796a825d5dd7b2f74b8d23573c8189777b9ed0864b72919439c7bb6eab19b68e1192c8e3751e2cef391b3db057054e3ed69ca8ef5e70439ab5c57a33e77d0237ffc43d6b8bd420bcb67a4bb753d1817e02d7ef150958e918cd278d80b142bfeca2b8bb861452a7f1998ce57d6baae7429ed4703447a48abb3c23d692635ee60715fc1580619d2423b3a5340180147cc508d682c75070a2384a858b36bb43ec40f9c6b9894a430ce89bd1acecfaa665c0d742cadaa93115c07419b381ed98e464fde01484c7c88ff197be3c56f2158bdf6c6ac9ef185d5c5b972fc54f8f04f577f618d05865ecbce4045ce96fa7632456e0c9274c8ec9360b39b261fe625c963074c723c08bd4f1abb8463d42482b9d112121615ad11a48de5bb6de35458961affe04409607cd51a3378ca4eda083235c23174bff8c01693f288e959189df0d795fa9c18be36a06d5c544fdf8ae11d938dc0f75d9253fe3922003dfe2771400f468a95ddb5089e1a9d12491603d969750d82773d4ab9903749c82a810e431cf4a619b9d75322046ff47e9caec291d6e5d6d3f5fe668637b08cff2dd25906d5bef18b364b643b9f6caacf44ba54ec85092f834cfed561e58360277c3e43c9c13fbb744526cac21fdac2dd01f12f4bdf5242e1b9a90c0c892f3f99a3258e538d577a0fe37e6c0e286b91f3fae32b002b1ea5e0bec64e49e440278cfbfd03efad76ad829901ec13b50c8235063c44adbdb79eb07f088941a59a44ac1a1760ed6e70454b958c5459ab8873df74d7cf0d9711ce8e14c946310f990d0ff74395fb875ba5a37585b603c6ef36af793de777951fb512181b4ab637e2ca501042e24f1f753a25e6dd3b0d8372f20435b1c64018c7c93382fa84de11e1b718d923c7af325a9e2a00be9f3d8883c90da32ff153370a5e60a8afce676bbfcc4c21cb1692b556d21ababebba892031831ba931f612eb5ec707c86d0e2dd1c4f23975fde80db4f34ab3bae340fe10f1c2e8f42e8e23dfb2cf2878991037dc3ad004628271dbc50a21449cfc2de5ec45982d9cb36d62fede4e22c68857631bd03eab766a769c43abb0189436a7f086e0d424bcb976a3bbaeaca2033950d7fbc4e1d7d1515d2e3fd859008cb850240bf0638617948b9ab6546f1ea97123a1f550b60247dc81e6516834b83ab1811ff5feecb96e1b9c830e56838183e6259748a8a6ccf6f53b0eaac5c274e20d899d0f3772e3444d5ac203187504b93feef9b793e6fe79a1a5c6b18b80d3ce37759e8455a7157b33bf9d5049c02e9f98eb5c18b1cb266cbbdf23accf4fa8966e66ec4b8040c1bacbc34364317d9785d02b9e1b403562fe2145f607540724e218f7efd7a3e98399b2947f5d8c1abe88667c4473ad736bf8d9605d6e414d6d9eaaba573624239af08ba0df39334a812b055fa8edbc3776522d20c9511792b2d809414e2ec7c58950c532c62e3bdf8005eb55ff2689589809f8568a9f72f2fe0faf5b4e83289501e9c60f52536ef4f4914d81e317058b96dffdcd61125652a6046a53aa5a15906535f7de33d0af73211c1e50c5216dceab89ac1673eee67f14a04521765f6cf9099040d1178795cdb3fd7627e24259f81359532342c658d2cdc9fed9a781f48a337b6a7b17e2996ccd6831476f2e54551c4edbec3557aa80198900d4595082a85e04e435301ffef1d15d42d1e518f18244f0dfbcba960690eb6b36a962cd3b84907e6223d2729a8d37cd30f9150a48317bbf14a6b929402d26a77c3f05800388a56a0d0dd003544bd86984217553fbe63f4c59b6f54d5adff56ce68e80da70d7e1a748400c27191f5a20e736131220013a8739d2e6b979ee9a6346ea66f0e9714dc7981b363c6e9b6b9820e63788532cf7845aa2d45c75b391f0be326d29b03228494d5fcc406079192e5ccd6f7b99c007cfab9421de81c70857c30ed7a5f5928a650050d1229a89824ef01c1c3b4143ca5bed6f10efe096596b4e9a32d3a5df10a8e5eeda9635767b3eeda0cff737f7d10ffd50cc7f1752a77fe9513d6d1a0ec338eb5ffa8bdb2c0400af971d02f64e9f5440f2e0f6e173d3dee6dfe01c8bd4c7914ba1c0d30c0a492a5a2f60f5b33afe322428d45df36e5c6e43ce7e6bb25dacaf7fb1f603e96ecdbe92d857b64c2af4614a31baa053fde247d0716cf693bca00a0f9d1b26caf264c59884a9c00fd3d503ed3f47612f3d027317d70db6fba39aec1bb93073d4387701e08b5d146354692728f689778adc391653771d5babee1c83243adb08a6f6de9650671f2a612685556a16b1e3d212522370aafc36402211cc0272c35dbd01cdf4adc33560fe8d9c82bb8aef4415999931a93ea045d0432c916a3fc37fe4d527a6ec31b1375f3cbf0d75470030e9dc7be59298fae4889d2cc9ee30217bf3386ec5cfae72ab3bc698704e5f4de10aefcc492225f789fb00dfdf25577976c394704a05c92139159f2d1ab58d6819a5d9d4470401b05580e6b568ad3b0b6dcac0d68db6b2fdd3c0ceac879bb409a18303f8cd93ec29d95fab2fd8977a50b891245a2419b58a5d78d8ad80c7ca3421b7b65e9a6ffa52e545a0513826bfb1e1ee660a326d2de256e87763af92d4e271a1fadff340e50c619c09bf7734f8f9dec36345be37c8cb1841eb3a763a1a8735e79b63c424d042900143cdce95773eca032d32395a83bd1d377aa94a9fe92c3d4b586514de14b31ed24b55349df1c75edf8032b918e0c7f471c7c787333f9c383275c5e6d85a5b616a87860c6c428760aa020ad7b3011394a58f6dd85e100ea243fb9032d4a654683ec52b98c02082e86b8c3dbd663f6039ccc65ccc4f36475a0c1cffbee4389dc7192547130890239e8f2018c2e7d4f9e84c52f6b2b979bb22bf713fbfdff32018e1830798e6963fe4cd8803a765b0ee1f28feff6fca7770322b64034103f9d115323f6af822889e402c00e0b8cacff0051f43d27661fa1da54f4ad54d01ec9894b49426e26089d7ccdf6eb972cb979c588b906a09a9ee994ddba5aa162fa4bf5fd5e2f64a13554152284c61fb48ce915164d646bb0ddcd86e0706a14a10673ab9c0d266c503d05d0075c259459f3b2817723c727d2a2768513a19978530353c72e28d4aecc20e48432f100c164ef884bc88f0ddf1231d265a73fc267b81af3853b6b65c6f4a216dcca411ef3ef5090752f6da48e723b065978104bee7fb0784307df958c70c12b52c2f34c3ecf09670fd03d833bd5a09c00d7a0b06aa5ae2b88186781ce4e2daf5ae5b2e370f6d519f5cde79f356f834774ad49ad226cd5d39e92007de25c744ed34c79cae080b2533e7b45f5a20868aa143190147e5b97b2471ecd5ac80b26c68e86525d88b00febf5863611cc2976a2a5bcfd73c4c5ef571fb03ba680184f9a62a7236c9c3cbb90138378263be154776f80886e7d1f69bb4d7f2b60f6c7bbfbec7d412380e77f2be22312481f999e641fefb54b5992bab9cc42132b4a67624052cb580d7ce4efb4d7e5e1d04840649442fdf92d431e79089850056be736861e82987a53680ff3fcd70ce6000fc59765eb9240926ce52a927da9d4b0fe5d8ea0f4518b4bdd7c7c3fbf5f844818b06a84be7a2f51a9c464bf8da858ae5a0ffe26a6b0f85e2b9ac6e765d11f3517af4f17d39aaeb610bb6c2badd220a11b4767a1ce2d6125738652d9706af7cd42d5b0e9ef950c65b9340a8ec4d0dfc7263b0a928316431c42fb9b26371c3e38765fa6d8f285aa5e4b77e2116a0dc6af90258d64ff8e4d37fa2fd4c1499fa032a3379f52cd28f7578cdbd9dce3478a27b8547b387a3f8e83eb1a0e7a1d41ac52c706799640e11a96039fa0f8772b75806e28271b2206db4c78131c70428548b3b5d950f71e1d15f9606720e5a2261546718d9489c6d7c418e1d0078e1ed5c4611cc4f41cff02f29ef46e739f88e43342504ccb677d37c7e4fc5097ac19a1610c8390c413c4a5eaf3aee0d0435de834331439a4fec7bf7ae0c6895ca0881cb627b08be263cdd6735006469e4c12d146e639c9b61be214a9a295715bd15b1b86af13465dc129de795f9533fe95e14ff0743e040113bce2d14b34b2ab0a5f02640b9cd6c71b6a33c6adc1f127234e9eadfc86a40ef1cea5691b452091e7df51ad0c0f236d0202392b6fa4c00373635a1d829f1776629f36f3e7e83f2f1848393d2c2010fe8f7a1a540cef82cc5588ea9c745dedccf81ca34ea356138b968ead3d31a9d4dadcd82f8a9012576a2c308e3bd8dbf573c"}, {0xa8, 0x1, 0x3, "a5c4137c5f5041a4f4631284b8b44fd3a36bb38c8b0e08a40268376639a55c29b2c52dbfea0eb4722831187b71a63fe2cccab73e5d116df1ca367e89ea5a8294fb87c8388ddf7ecb0dcce0f3f81e5008d789d5e36aa650c4829db5ffa436558f8e156bbc12f91be32b70687c003d98b3fcc74fca1f74212b52a56cc1163bdf575981934a898cf8ddc448b1f997228b2a7a0b"}], 0x1430}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004700)="281f24888d89d046dd3b5abd5bbd29c6d6b89d6b15c4fb9fff2c84376c52b3f735e9ef5f7a973de5b17506850015607abacad1be2cdf3f917f063673ab381a5bd2697087ab90371c71302d3f4b6cf7db6f18a1b4824e5a4555ccd672749ca5b255784cfe728b3cbd0b0df006b5830ec8598f68e1ff8ea8be35214a5a30e7f4398d3314b36b59886a99d0dc1a25ef1c1a4e63a23276c1181381b9a8b0319c2f2127efb3494275cf936e08284c4ecff33f51613cf097457de4e9629fa280294dfb0c9ceae06cda", 0xc6}, {&(0x7f0000004800)="e95525253a9680ed72e49d399cc498c4b419387289cd97617b3672f6c2d7aec3c5015c0c5bbe80da8c9379c54c19629a8ac42e997507f08cd0b046c49fa3568df5149ee0ebb444fc29848e6d4eb7e4", 0x4f}, {&(0x7f0000004880)="f51f1adf7360000fb3282a75b40af161ea137ff09a8d2f3c2f49d9ac3dedf45646963be48e8e6d15fb6fd2d065d239d3a3e562db57c6af8983f9e07921fc399a6d2f67574e6d246babd20044751516bf0c4295bf38684fc54c36a8c0dd9535ff686dde777d06d7135bd283123c91f8235a4327889a7a5b2b4178c4e73132deaeb9e9a7ba500483c4daecdeacebe79c57f55dff1f28cb29152aec067db251fcc87f8887b30ada74c3fc65ded823a9fcdffff3c1cd415e1e20a295bcaeb0190275e1342ddf99e825d91e4396c6775df274044627fcf6c979", 0xd7}, {&(0x7f0000004980)="35a5a4797a045e6e7a4d89b659157ed448e014e963c2510e", 0x18}, {&(0x7f00000049c0)="bd6cc3a96515a87be063d97e4530af37e2b22929c5", 0x15}], 0x5, &(0x7f0000004a80)}}, {{&(0x7f0000004ac0)=@x25, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004b40)="7c10f0c1dd727b5abc805f34aa423ffaf0526a283006be813fdfd28f19a8d63f67ac1efbfd4a71b2f3827ac1290477eb37160cc926575c56f6f62b582e2d060b8f816fcda044a19a4d2b5ff68cf52158af40e4738e72539cbaff7ecd583148d8963f3a11159142c86bce925e835b04ebe3d7d1afe059625f1efa25e0832969a6374729472301b8bd0ecc9103b174a0182787b628c489bf42037d0396500d9a4255c38b0e9d0d45f35610e6e8fb5a7572d18cfc1e274780f51c9bd050482dfc8a574fdf5baa483005a2", 0xc9}, {&(0x7f0000004c40)="4924e57cc3381de7c913ada1c6522e61b99eebf24aadc3522cc9778905437b5b134db1a74d308371c2f7643688feb9dbb09da9c64f63c6895ba3fa13586f74bcd15e861b3b73d2c86fa0387cb6c8dc1db585cfd374b69e848acb9083afd854da7fa57887852c4cc2528a408651d36d2e06252dfc79", 0x75}, {&(0x7f0000004cc0)="aedc97344b15100bcc8f2e15beb8abe582aa35028461aa509019245e87f81991b17b67a9e2503b625ce79f5dd406110a77e7cb166b50316eb54a0b8d6eddb74bd1dd93fdcd4e627c2ff04ed5520a476dbc391777ca5161513b1ac466645d2f77065abfbeaa705c7a1457e5ad9d28479d4a2e05684d9a376f8276b6a0b34a50e45059262eae05438ba14db1c165432e8c4691e488fb00a5c09e154dfba7af3f9b9a1b0f75204edae26c9413afefaf8b9b76d6c55788f805489d716bd24ae2ec3122dcf9", 0xc3}, {&(0x7f0000004dc0)="2c987498c282e593f98c01b9956f189e9671b39ad87cc254a9776de81b3ddb254329a76bdee55148fe7f98732f53d4bdf095ef3c113c30eb41f53d33ed1a0596031d65e8d856253e674309a7fc941e3b4f0e16b159ab26af798957fd04f183e3965593cf1415b1f2204a9770fca689b5df540a3226060af3010e55e99abe98e5125a722d3542a37aa7dea22d3389f4f8a790aa35fcdd56c1d8e7b15ed365a32947ee465d7274a649d1bee95af679be293eb4ac5c2f7bedd83a5c2f8df7", 0xbd}], 0x4, &(0x7f0000004ec0)=[{0x48, 0x0, 0x1, "3db2b84529d4e6c6b40bf3e9098e8b528dff4ef3548c0457353f2d75825dd80325595e12f324e52af007d768727bbd28a9"}, {0x1010, 0x3a, 0x5, "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"}, {0x98, 0x10d, 0x1, "77041190483a65b9e89dff53b7dfa6d48b344176134f55743f6f434ca23c88198c290a81c948ad2ee637486202c3e964e3553dd5a5d08411bd4dfd539164f0dccb4a49abfd449977078b545ebcf9290abaa01637a71fb9214a43449348d78b08c37e07ab1feaf3c05ad277b08af44ad18a2678be7d080c371c9c5cfcc407a20fe341755465fd"}, {0x1010, 0x108, 0x3ff, "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"}, {0xc0, 0x109, 0xfffffff9, "144e7af23e86bce6ed535c9b40b33f7da9ebf0dc234d97e0b40a95b6cef54ec6b7bbfd4fcddb46d8fedfceaeaa5ff9ef8461be182887d88d784d5c8fac927eb1991073a0a996a2204c9386af576bc2da9e779bdbeca913e07012e558b6f9d6b003c8a992e821a8f2f6219a90a9b7bac94eb1928801828d3f66f649d3fbf02c8901dd7eee20a87559715d62ff35c6e67779618322228aa0c744d0fa7aa3782767d0e30a5aaa747deb002f8f"}, {0x98, 0x114, 0x1, "e5b91797ade99a6ae1f63471415445d397035b6c7921a9969a4f7c6aa88ebbef5381c2df2a17659f8abdb6953d3f54ca202b24b57a0bf222f64e86305f4a40e0638d15712420a1539b0289425c6569010eac074613a29498c12635a037efcaa1258ddbd315567f3c2e83cb7dbb4471703ac4b40e46ca6f7beffff224bb0f6e41daacc4e91d"}, {0x38, 0x119, 0x4, "7217fb60b72c1d56a45a2229364c37fa83c3736e04172670fae91e7a38c4036a558d48"}, {0x50, 0x10b, 0x100, "10be03eed9c72cc5d2e8f63bf0cc3c1247090d9499934bfe71556161b1e861a27de9e028f05bb2ed1a68d399b883f2a1ee7e850e24074f5604889721"}, {0x48, 0x228, 0x5, "0124cbdae310afa3e592f1cc1f6eb5145fedd66ffcc83641570c6c5e9409961da8cd19365e8bd07134d7be44aaf8ca8ede03739651"}], 0x2328}}], 0x4, 0x40040)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000007400)={&(0x7f0000007300)=""/222, 0xde})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000007480)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000007540)={&(0x7f0000007440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000007500)={&(0x7f00000074c0)={0x1c, 0x0, 0xc029cf0a900ee442, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000075c0), r3)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000076c0)={'gre0\x00', &(0x7f0000007600)={'gretap0\x00', <r10=>r7, 0x8, 0x7800, 0x3, 0x1, {{0x22, 0x4, 0x3, 0x9, 0x88, 0x64, 0x0, 0x5d, 0x2f, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x51, 0x0, [{0x2, 0xe, "52ca42513904467f0526fd49"}, {0x7, 0x10, "068daa535c2da3a4e6fb3389231b"}, {0x6, 0x6, "0983ea6f"}, {0x7, 0xa, "d7078a2821db3be1"}, {0x1, 0xd, "07a70c30b8dbfb12f5bda3"}, {0x1, 0x2}, {0x1, 0xe, "a01bf7b0c4a4c7726b820689"}]}, @ssrr={0x89, 0xf, 0x5b, [@multicast1, @empty, @local]}, @rr={0x7, 0x13, 0x47, [@multicast2, @multicast2, @multicast1, @local]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000007740)={'ip_vti0\x00', &(0x7f0000007700)={'tunl0\x00', <r11=>r7, 0x10, 0x1, 0xf, 0x2, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, {[@noop]}}}}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000078c0)={&(0x7f0000007580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007880)={&(0x7f0000007780)={0xe0, r9, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x84}, 0x4041800)
r12 = accept(r5, &(0x7f0000007900)=@in, &(0x7f0000007980)=0x80)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f00000079c0)={0x0, 'syzkaller1\x00', {0x1}, 0x550})

59.957899131s ago: executing program 1 (id=2294):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback, 0x1}, 0x1c)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000005c0)=0x800000, 0x64)
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000200)=0x14)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x8d4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x24}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000054000000060a01040000000000000000010000002c0004802800018008000100666962001c0002800800020300000001080003400000000d080001400000000908000b40000000000900010073797a3000"], 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x94, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x28}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x40}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xfe1cffd2f95943d9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x94}}, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040ed4277240000f8c2b0b5b08ad908043643ac7b0000ce2b96a01b983ebb51263e240600000007e06154a0"], 0x0)

58.912468594s ago: executing program 2 (id=2296):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shutdown(r0, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000500)=""/228, &(0x7f0000000600)=0xe4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

58.696583066s ago: executing program 3 (id=2297):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x3}]}, 0x44}, 0x1, 0xe000, 0x0, 0x40000}, 0x0)

57.917273524s ago: executing program 1 (id=2299):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
shutdown(r2, 0x0)
connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c00018008010600", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r5 = accept(r3, 0x0, 0x0)
close(r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc048001}, 0x800)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaadd6000000000380600fe880000000000000000000000000001fe8000000000000000120000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001d12bb9b69de4386bf2ae6a3b321505c68cd1d12c52a2d43d2c855000000000000000000"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRESHEX], 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000080c000000140001002001000000000000000000000000000114000200fc0200000000000000000000000000ff080018004e244e246ffec4d916392a7a6e2891e8abf79233117381b5776c9578aa91f225f6996e62f558043a171ee8f0f4c57f99f5f83a0728302f222775a798ce1096801ac34e0b952f68d7f2c2"], 0x4c}}, 0x40000)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000600000003c0012800b000100697036746e6c00002c00028014000300200100000010000000000000fc02000100"/67], 0x5c}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r10, @ANYBLOB="72ac79cec3b4ec625a442071e5a72209b013672c5c5e12ec0ca17e13c6de7a35e28e", @ANYRESOCT, @ANYRESOCT=r0, @ANYRESOCT=r9, @ANYRESHEX, @ANYRESDEC=r7], 0x40)

57.159586194s ago: executing program 2 (id=2300):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040))
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffeaa, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8081}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800010063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a60700"/96, 0x60)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, &(0x7f0000000000))
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x20004880}, 0x48801)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90)

56.901330612s ago: executing program 3 (id=2301):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000006200)={0x7, 0x8000, 0x1, 0x4, 0x3, 0xa7, 0x1000}, 0xc)
recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
listen(r0, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x3, 'veth0_virt_wifi\x00', {0x6a23}, 0x3})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto(r2, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0)

42.05410316s ago: executing program 33 (id=2299):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
shutdown(r2, 0x0)
connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c00018008010600", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r5 = accept(r3, 0x0, 0x0)
close(r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc048001}, 0x800)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaadd6000000000380600fe880000000000000000000000000001fe8000000000000000120000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001d12bb9b69de4386bf2ae6a3b321505c68cd1d12c52a2d43d2c855000000000000000000"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRESHEX], 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000080c000000140001002001000000000000000000000000000114000200fc0200000000000000000000000000ff080018004e244e246ffec4d916392a7a6e2891e8abf79233117381b5776c9578aa91f225f6996e62f558043a171ee8f0f4c57f99f5f83a0728302f222775a798ce1096801ac34e0b952f68d7f2c2"], 0x4c}}, 0x40000)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000600000003c0012800b000100697036746e6c00002c00028014000300200100000010000000000000fc02000100"/67], 0x5c}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r10, @ANYBLOB="72ac79cec3b4ec625a442071e5a72209b013672c5c5e12ec0ca17e13c6de7a35e28e", @ANYRESOCT, @ANYRESOCT=r0, @ANYRESOCT=r9, @ANYRESHEX, @ANYRESDEC=r7], 0x40)

41.472075819s ago: executing program 34 (id=2300):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040))
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffeaa, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8081}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800010063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a60700"/96, 0x60)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, &(0x7f0000000000))
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x20004880}, 0x48801)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90)

40.938287417s ago: executing program 35 (id=2301):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000006200)={0x7, 0x8000, 0x1, 0x4, 0x3, 0xa7, 0x1000}, 0xc)
recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
listen(r0, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x3, 'veth0_virt_wifi\x00', {0x6a23}, 0x3})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto(r2, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0)

31.393856924s ago: executing program 4 (id=2310):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r1 = accept(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r0], 0x48) (async)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000002c0)=0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffff8001}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000c80)='GPL\x00', 0x401, 0x32, &(0x7f0000000cc0)=""/50, 0x41100, 0x38, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x8, 0x400, 0xd5}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000e40)=[r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000e80)=[{0x1, 0x4, 0x7, 0x1}, {0x4, 0x4, 0x10, 0xc}, {0x0, 0x2, 0x1, 0x3}], 0x10, 0x69000}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xec1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='GPL\x00', 0x8, 0xa6, &(0x7f0000000b40)=""/166, 0x61900, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x1, 0xa, 0xfffffff9, 0xf}, 0x10, 0x202be, r6, 0x2, &(0x7f0000000f80)=[r3, r3], &(0x7f0000000fc0)=[{0x2, 0x1, 0x10, 0x9}, {0x3, 0x3, 0xb, 0x6}], 0x10, 0x3ff}, 0x94) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0xd}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x9, [@volatile={0xd, 0x0, 0x0, 0x9, 0x5}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x33}]}, @enum64={0x6, 0x4, 0x0, 0x13, 0x0, 0x4, [{0xd, 0x8, 0x40}, {0x10, 0x5, 0x80000000}, {0x5}, {0xf, 0x8, 0x3}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @ptr={0x7, 0x0, 0x0, 0x2, 0x5}, @const={0x9, 0x0, 0x0, 0xa, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x2e, 0x0, 0x30, 0x2e, 0x5f, 0x30, 0x30]}}, &(0x7f0000000780)=""/156, 0xb1, 0x9c, 0x0, 0x3, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x1f, &(0x7f00000004c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x77}, @jmp={0x5, 0x0, 0x4, 0x4, 0x8, 0xfffffffffffffff4, 0xfffffffffffffff0}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0xaf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000005c0)='GPL\x00', 0x9, 0x60, &(0x7f0000000600)=""/96, 0x0, 0x29, '\x00', r8, @cgroup_sockopt=0x15, r9, 0x8, &(0x7f0000000880)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0xc, 0x100, 0x40}, 0x10, 0x0, r4, 0x1, 0x0, &(0x7f0000000900)=[{0x3, 0x1, 0x0, 0x6e05152338ab472e}], 0x10, 0x6}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

28.323319106s ago: executing program 4 (id=2311):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4)
bind$can_raw(r2, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000100)=0x9b3f, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x7400}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5)
recvmmsg(r5, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}, 0x800}, {{&(0x7f0000003940)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x3}], 0x5, 0x20000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000ffffff18010000202078250000000000202062db1af8ff00000000bfa100000000000007010000f8ffffffb706000008000000b7030000000100"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
socket(0x400000000010, 0x3, 0x0)

23.499303151s ago: executing program 4 (id=2312):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000fc0)={0x894, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1c4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@[)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\')!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[-.$%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff1}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "a2bf5f2c141d5d2610f010fb800f6c0248c801a4767cfed9e1c63685dfab2cf90e49eb913428309dcc39219098b1efc92b4b96169322a90cfe90376579b2ee863e6b51cf1c735f116c652f4975cec12b19f3c503e4994d356ce0e3456a5ca874e76c86cad63545062e259f1642c99e6d8872fb91456c74b5ecde32f08efdd5ab2b9f81a379c24f977a9f25f96e5f4a3725787ce232798765a0b872a08e8efc6826eed769cf5ce19a40445351701b43db39eeb28c80eec8f792fb7414d9d1df877b7d2cd558790c3a8eede1e3747227dbd12659"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x374, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "10011427d937ce2e3364a62ee0a5edfae29acf5a4c78f20eac1ad00438f1b4862e0ff7c7151f99a19a39cf538329e4ac07ce30af30240d32561418a7710bfb83f1643bd2fff8999be848d63ae6990c9ad9374be64328fbe53fe2d60243e5b8fc485ed379e9c935465a359e24b3c2ce42875ab4607ddea4a11eba912d934e9620945ffae15c0aa3251c8b5cb186c8500da33efd9767324ca8238865782c541ce1133a"}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\n]\x87)[!^^}%,!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$($\x82!+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xc4^@/}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x500000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\]\x00'}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^\\#}^%(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&![]^-$\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}]}]}, @ETHTOOL_A_LINKMODES_OURS={0x288, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!\'&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '],\x04*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\x9a^\x89-{/\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@\x9f/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*[-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xc4[[%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x15}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4235}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc6e}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "04a1ff96d0844227bdc3fa635e10c242aad3156f3cb3ec7779780a8553dd10caac4e9cb5fef243c96c6870bdadeb8c041bd107db4f856332016665d07dfb70a857f5cd13c04c646d49f485931dea7d37c27fe3bb9e7e83ee11313f0a7195de7869d80b0dec80a820a5e06b642996639fb423f7174768bf93a251562fed39b0f60fc5bed069106b0daa1e00f573a29a6254a61f84fb49c688"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc1}]}, 0x894}, 0x1, 0x0, 0x0, 0x84}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x1, &(0x7f0000000340)=""/1, 0x41100, 0x13}, 0x94)

21.479527051s ago: executing program 4 (id=2313):
recvmmsg(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000000)=@ax25={{}, [@remote, @netrom, @netrom, @null, @rose, @default, @null, @bcast]}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000000c0)=""/228, 0xe4}, {&(0x7f00000001c0)=""/4, 0x4}], 0x3, &(0x7f0000000240)=""/197, 0xc5}, 0x6}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/70, 0x46}], 0x3, &(0x7f0000000540)=""/78, 0x4e}, 0xd}, {{&(0x7f00000005c0)=@xdp={0x2c, 0x0, <r0=>0x0}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/202, 0xca}, {&(0x7f0000001740)=""/129, 0x81}, {&(0x7f0000001800)=""/86, 0x56}, {&(0x7f0000001880)=""/95, 0x5f}], 0x5, &(0x7f0000001980)=""/251, 0xfb}, 0xa29f}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000001b00)=""/90, 0x5a}], 0x2, &(0x7f0000001bc0)=""/161, 0xa1}, 0xb}, {{&(0x7f0000001c80)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001d00)=""/10, 0xa}, {&(0x7f0000001d40)=""/11, 0xb}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/211, 0xd3}], 0x4, &(0x7f0000002ec0)=""/113, 0x71}, 0x1}], 0x5, 0x0, 0x0) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000005e00)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003080)=""/153, 0x99}, {&(0x7f0000003140)=""/227, 0xe3}], 0x2}, 0x9}, {{&(0x7f0000003280)=@ieee802154, 0x80, &(0x7f0000004440)=[{&(0x7f0000003300)=""/69, 0x45}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/143, 0x8f}], 0x3, &(0x7f0000004480)=""/5, 0x5}, 0xffffffff}, {{&(0x7f00000044c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005880)=[{&(0x7f0000004540)=""/4, 0x4}, {&(0x7f0000004580)=""/212, 0xd4}, {&(0x7f0000004680)=""/181, 0xb5}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/106, 0x6a}, {&(0x7f00000057c0)=""/179, 0xb3}], 0x6, &(0x7f0000005900)=""/109, 0x6d}, 0x7f}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005980)=""/96, 0x60}, {&(0x7f0000005a00)=""/180, 0xb4}, {&(0x7f0000005ac0)=""/209, 0xd1}, {&(0x7f0000005bc0)=""/216, 0xd8}], 0x4}, 0x3}], 0x4, 0x8140, &(0x7f0000005e40)={r2, r3+60000000}) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000005f80)={<r4=>r1, &(0x7f0000005e80)=')\x00', 0x80, &(0x7f0000005ec0)={@_ha_fsid={[0x8, 0x10000]}, {0x5000, 0x8, 0x80000000, 0x4}}, 0xffffffff, &(0x7f0000005f00), &(0x7f0000005f40)=0xc40})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006240)={r4, 0x0, 0x8a, 0x19, &(0x7f0000005fc0)="ed95f9fbf437937ef526f475f33d4a9f64630d9caaa6360792f5ee165fa7996a46b58f90538b65b0bb7a779842c0779d3c1176e0426916d4d06804e0a8d8e1274405acd6372646b6f970eaa847ec135d42ad027e059ba0159da5a9f8811701faad69c70abce01da68e93521d3cda819b4c091b8074dd20dddeafb811d071e24510858950dfc408a80a24", &(0x7f0000006080)=""/25, 0x8, 0x0, 0xd2, 0x68, &(0x7f00000060c0)="9d166c19772cb19134c8d462746b467659927903437a8d8dcdf5234fb00f813d11c8f0da11a89c2d72bc85952e87ba83ea8f0b671e00a773a724e0a2b22849b06bdfec5dd45340bac3c89417f8b9da55f111c654edbf10536859503ee62cb85f551e06a0b1028c687bcefd4ea19e5062ea8dc982031b7acccb631abed6bfc7a88137219435b7843ad586e9988bb7932df2214f118ddb42ba8b4bf3fb35c7cd10ff70e1e6d81a3cf7c13e0617fbfb5d45eb313a2551647e54feda3258a3aaa6435ee4b38bc6af820816638f8ae1347c0cc499", &(0x7f00000061c0)="b42e37cc590ab66bbc633805940275f46a4053a61ad143ef88d02b40a7d81ab3cd6024a671edf146a9c7f0346511190ac61295726760530ef5f3aa89e39542952861404aa0a6da8dd80ccab4730f3977d0113d28876d27ea45e3230bc6f174ebe52c07ec2c70360e", 0x2, 0x0, 0x8}, 0x50) (async)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000062c0)={0x0, ""/256, <r5=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000064c0)={{r5, 0x3, 0x1831, 0xe, 0x4, 0x7, 0xffff, 0x5, 0x3ff, 0x0, 0x5, 0x2, 0x400, 0x10001, 0x4}}) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000074c0)={<r6=>0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x8, 0x7}, &(0x7f0000007580)=0x90)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000075c0)={r6, 0x83, "b7ae09fc879832f7f380fe177a1c0b8af56f598285c4a3001073f9452af932e83e21e2584b9a544454e3c8aad1199ecccaee4e18aa22b93105c657002ba4d024a4f7fd78cf7280bb9739d4893754e24e4a1ee8b597f06cb013398ef1ee8d28f252fdbbc9c77455eb048f13d5dad7443c60254ce9a8d70dba1f7eaee0548066e3bd7046"}, &(0x7f0000007680)=0x8b) (async)
ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f0000007780)={&(0x7f00000076c0)=[{0x3, 0x0, 0x9, 0x7fffffffffffffff, 0x34, 0x5, 0x0, 0x8}, {0x0, 0x0, 0x200, 0x29, 0x7f, 0x1ff, 0x7}, {0x0, 0x0, 0x80, 0x5, 0x7fffffffffffffff, 0x80, 0x6, 0x1}], 0x3, 0x38, 0x1, 0x1}) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f00000077c0), r4) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000007940)={{<r7=>0xffffffffffffffff, &(0x7f0000007800)='\x00', 0x418080, &(0x7f0000007840)={@align=0x7fffffff, {0x2, 0xfff3, 0x3, 0x8000}}, 0x8, &(0x7f0000007880), &(0x7f00000078c0)=0x7f}, {[0x631, 0x9, 0x5]}, 0x10, 0x13, &(0x7f0000007900)=""/19}) (async)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000079c0)={0x3, 0x66, 0x9, 0x6, 0xfffffffb, 0x81}) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000007a40), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000007b40)={&(0x7f0000007a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000007b00)={&(0x7f0000007a80)={0x78, r9, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ')\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000815}, 0x40000) (async)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007bc0), r8)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000007c80)={&(0x7f0000007b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000007c40)={&(0x7f0000007c00)={0x2c, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x890) (async)
sendmsg$nl_route(r4, &(0x7f0000007ec0)={&(0x7f0000007cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000007e80)={&(0x7f0000007d00)=@mpls_newroute={0x168, 0x18, 0x100, 0x70bd25, 0x25dfdbfc, {0x1c, 0x20, 0x20, 0x7, 0xfe, 0x4, 0xfe, 0x2, 0x800}, [@RTA_NEWDST={0x84, 0x13, [{0xb12}, {}, {0x200}, {0x4}, {0x2, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x6}, {0xef9}, {0x45}, {}, {0x1, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3}, {0x1}, {0xfff, 0x0, 0x1}, {0x9}, {0x1ff}, {}, {0x8, 0x0, 0x1}, {0x3}, {0x4}, {0x8, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2}, {0x4, 0x0, 0x1}, {0xff}, {0x6}, {0x9eef}, {}, {0x3, 0x0, 0x1}, {0x9d}]}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_NEWDST={0x84, 0x13, [{0x8b, 0x0, 0x1}, {0x7}, {0x7, 0x0, 0x1}, {0x7}, {0x66a7}, {0x2a2, 0x0, 0x1}, {0xffff8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xa9e, 0x0, 0x1}, {0x2df, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7ff}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xf76}, {0xd, 0x0, 0x1}, {0xb}, {0x3, 0x0, 0x1}, {0xe4}, {0x40, 0x0, 0x1}, {0x2f52}, {0x2, 0x0, 0x1}, {0x4}, {0x40, 0x0, 0x1}, {0xc79c}, {0x3}, {0x4, 0x0, 0x1}, {0x537}, {0xb}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3ff, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x1d, 0x6, r0}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_VIA={0x14, 0x12, {0x27, "5528f66b3d8df37decd27a12f4c0"}}, @RTA_MULTIPATH={0xc, 0x9, {0xc, 0x30, 0x98, r0}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000007f00), 0x0, 0x0) (async)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007f80), r8)
sendmsg$IEEE802154_LIST_PHY(r8, &(0x7f0000008040)={&(0x7f0000007f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000008000)={&(0x7f0000007fc0)={0x14, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r7, 0x40109441, &(0x7f0000008080)={0x7, 0x3, 0x1}) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000008100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000008140)=<r14=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000008180)=<r15=>0x0)
sendmsg$NFC_CMD_LLC_SDREQ(r12, &(0x7f0000008640)={&(0x7f00000080c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000008600)={&(0x7f0000008280)={0x364, r13, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_LLC_SDP={0x1d0, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '+[!$$-'}, {0xd, 0x1, '/dev/ppp\x00'}, {0x7, 0x1, '[,$'}]}, {0x14, 0x0, 0x0, 0x1, [{0xd, 0x1, '/dev/ppp\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0x9, 0x1, ':]!\xfb('}, {0x5, 0x1, '-'}, {0x8, 0x1, '-(\x1f^'}]}, {0x30, 0x0, 0x0, 0x1, [{0xe, 0x1, 'wireguard\x00'}, {0xe, 0x1, 'wireguard\x00'}, {0xa, 0x1, '%,\x8f}{\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0xe, 0x1, 'wireguard\x00'}, {0x8, 0x1, 'nbd\x00'}, {0x8, 0x1, '%!&!'}]}, {0x34, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, 'nbd\x00'}, {0x8, 0x1, '{:-\x0f'}, {0x6, 0x1, '-\x9e'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, ')\x00'}, {0xe, 0x1, 'wireguard\x00'}, {0x8, 0x1, 'nbd\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x4}]}, {0x2c, 0x0, 0x0, 0x1, [{0x5, 0x1, '+'}, {0xe, 0x1, 'wireguard\x00'}, {0x6, 0x1, '=}'}, {0x8, 0x1, 'nbd\x00'}]}, {0x38, 0x0, 0x0, 0x1, [{0xd, 0x1, '/dev/ppp\x00'}, {0x5, 0x1, '\x00'}, {0xe, 0x1, 'wireguard\x00'}, {0x4}, {0x5, 0x1, 'm'}]}, {0x48, 0x0, 0x0, 0x1, [{0xe, 0x1, 'wireguard\x00'}, {0xd, 0x1, '/dev/ppp\x00'}, {0x8, 0x1, 'nbd\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x9, 0x1, ')\')-,'}]}]}, @NFC_ATTR_LLC_SDP={0x158, 0x13, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [{0x11, 0x1, '*!&]&,![[{./!'}, {0x7, 0x1, '-}#'}, {0x5, 0x1, '/'}, {0x9, 0x1, '*^[!('}, {0x8, 0x1, ',\\\xb6{'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xd, 0x1, '/dev/ppp\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '\''}]}, {0x14, 0x0, 0x0, 0x1, [{0xe, 0x1, 'wireguard\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0x9, 0x1, '&+#/\\'}, {0xd, 0x1, '/dev/ppp\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0xd, 0x1, '/dev/ppp\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x7, 0x1, '@*{'}, {0xa, 0x1, ',}/&-.'}, {0x7, 0x1, ']#('}]}, {0x50, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x9, 0x1, '$*\xf4#)'}, {0x7, 0x1, '!/('}, {0x6, 0x1, '\x1c&'}, {0xe, 0x1, 'wireguard\x00'}, {0xd, 0x1, '/dev/ppp\x00'}, {0x8, 0x1, 'nbd\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x364}, 0x1, 0x0, 0x0, 0x20000011}, 0x4)

20.814683811s ago: executing program 4 (id=2314):
getpid()
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070000823b3b670200090008000000010000000000000003000600000000000200000000000000000000000000000002000100000000000000050000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a0104"], 0xcc}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000100)={'wlan1\x00', {0x2, 0x0, @loopback}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0xac}}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
socket(0xa, 0x5, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r9, 0x107, 0xe, 0x0, 0x0)

15.35543909s ago: executing program 4 (id=2315):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x7400}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5)
recvmmsg(r5, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}, 0x800}, {{&(0x7f0000003940)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x3}], 0x5, 0x20000, 0x0) (fail_nth: 12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000ffffff18010000202078250000000000202062db1af8ff00000000bfa100000000000007010000f8ffffffb706000008000000b7030000000100"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
readv(r7, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/228, 0xe4}], 0x3)
ioctl$PPPIOCSMRRU(r4, 0x4010744d, &(0x7f0000000080)=0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10)

0s ago: executing program 36 (id=2315):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x7400}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5)
recvmmsg(r5, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000040)=""/212, 0xd4}], 0x3}, 0x400000}, {{0x0, 0x0, 0x0}, 0x800}, {{&(0x7f0000003940)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x3}], 0x5, 0x20000, 0x0) (fail_nth: 12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000ffffff18010000202078250000000000202062db1af8ff00000000bfa100000000000007010000f8ffffffb706000008000000b7030000000100"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
readv(r7, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/228, 0xe4}], 0x3)
ioctl$PPPIOCSMRRU(r4, 0x4010744d, &(0x7f0000000080)=0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10)

kernel console output (not intermixed with test programs):

smc: adding ib device syz0 with port count 1
[  228.482860][T11584] smc:    ib device syz0 port 1 has no pnetid
[  228.690369][T11606] __nla_validate_parse: 39 callbacks suppressed
[  228.690652][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'.
[  228.718582][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'.
[  229.554058][T11633] Bluetooth: MGMT ver 1.23
[  229.566826][T11630] vlan3: entered promiscuous mode
[  229.566865][T11630] bridge0: entered promiscuous mode
[  229.901985][T11645] FAULT_INJECTION: forcing a failure.
[  229.901985][T11645] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.924010][T11645] CPU: 0 UID: 0 PID: 11645 Comm: syz.2.1371 Not tainted syzkaller #0 PREEMPT(full) 
[  229.924052][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  229.924064][T11645] Call Trace:
[  229.924072][T11645]  <TASK>
[  229.924080][T11645]  dump_stack_lvl+0xe8/0x150
[  229.924112][T11645]  should_fail_ex+0x410/0x560
[  229.924152][T11645]  _copy_from_user+0x2d/0xb0
[  229.924170][T11645]  ___sys_sendmsg+0x1c6/0x360
[  229.924186][T11645]  ? __lock_acquire+0x6df/0x2e50
[  229.924206][T11645]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.924279][T11645]  ? __fget_files+0x2a/0x420
[  229.924301][T11645]  ? __fget_files+0x3a2/0x420
[  229.924331][T11645]  __x64_sys_sendmsg+0x1b1/0x290
[  229.924364][T11645]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  229.924430][T11645]  do_syscall_64+0x166/0x520
[  229.924455][T11645]  ? trace_irq_disable+0x3b/0x140
[  229.924472][T11645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.924490][T11645]  ? clear_bhb_loop+0x70/0xc0
[  229.924513][T11645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.924532][T11645] RIP: 0033:0x7f8c4a39e159
[  229.924550][T11645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.924566][T11645] RSP: 002b:00007f8c485b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.924586][T11645] RAX: ffffffffffffffda RBX: 00007f8c4a626180 RCX: 00007f8c4a39e159
[  229.924599][T11645] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000004
[  229.924610][T11645] RBP: 00007f8c485b4090 R08: 0000000000000000 R09: 0000000000000000
[  229.924621][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.924632][T11645] R13: 00007f8c4a626218 R14: 00007f8c4a626180 R15: 00007ffd81d73848
[  229.924661][T11645]  </TASK>
[  230.001803][T11649] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1373'.
[  230.002024][T11649] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1373'.
[  230.002187][T11649] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1373'.
[  230.002338][T11649] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1373'.
[  230.002492][T11649] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1373'.
[  230.002782][T11649] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1373'.
[  230.002937][T11649] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1373'.
[  230.003087][T11649] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1373'.
[  230.425123][T11659] netlink: 'syz.1.1374': attribute type 1 has an invalid length.
[  230.962286][T11677] 8021q: adding VLAN 0 to HW filter on device bond3
[  230.988042][T11677] 8021q: adding VLAN 0 to HW filter on device bond3
[  230.988922][T11677] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  230.989681][T11677] bond3: (slave wireguard0): Error -95 calling set_mac_address
[  231.022379][T11681] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  231.023116][T11681] bond3: (slave wlan1): Opening slave failed
[  231.201313][T11683] netlink: 'syz.3.1382': attribute type 6 has an invalid length.
[  231.225894][T11683] x_tables: duplicate underflow at hook 1
[  231.467523][T11695] xt_hashlimit: size too large, truncated to 1048576
[  231.467789][T11695] xt_hashlimit: max too large, truncated to 1048576
[  231.602113][T11702] netlink: 'syz.3.1388': attribute type 13 has an invalid length.
[  233.185594][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  233.313670][ T5618] udevd[5618]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory
[  233.812107][T11773] __nla_validate_parse: 36 callbacks suppressed
[  233.820076][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'.
[  234.413279][T11793] syzkaller1: tun_chr_ioctl cmd 1074025681
[  234.424893][   T30] audit: type=1800 audit(1788440832.819:8): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1415" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1308 res=0 errno=0
[  234.535017][T11800] netlink: 'syz.0.1417': attribute type 2 has an invalid length.
[  234.543086][T11800] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1417'.
[  234.555789][T11800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.755839][T11807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'.
[  234.755882][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'.
[  234.779895][T11807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'.
[  234.790203][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'.
[  234.799936][T11807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'.
[  234.809385][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'.
[  235.863524][T11858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1432'.
[  235.891785][T11858] ipvlan2: entered promiscuous mode
[  235.891970][T11858] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  235.891990][T11858] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  235.892114][T11858] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  236.277470][T11874] Bluetooth: hci0: unsupported parameter 5135
[  236.277516][T11874] Bluetooth: hci0: unsupported parameter 8192
[  236.277544][T11874] Bluetooth: hci0: unsupported parameter 5135
[  236.277555][T11874] Bluetooth: hci0: unsupported parameter 8192
[  236.396885][T11880] Bluetooth: hci0: unsupported parameter 5135
[  236.396926][T11880] Bluetooth: hci0: unsupported parameter 8192
[  236.396956][T11880] Bluetooth: hci0: unsupported parameter 5135
[  236.396971][T11880] Bluetooth: hci0: unsupported parameter 8192
[  236.629237][T11889] sctp: [Deprecated]: syz.4.1439 (pid 11889) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.629237][T11889] Use struct sctp_sack_info instead
[  236.629885][T11889] sctp: [Deprecated]: syz.4.1439 (pid 11889) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.629885][T11889] Use struct sctp_sack_info instead
[  236.870041][T11901] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  236.873461][T11901] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.876243][T11901] bridge0: entered allmulticast mode
[  236.902357][T11900] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  237.079057][T11906] wg0: entered allmulticast mode
[  237.084984][T11901] bridge_slave_0: left allmulticast mode
[  237.085042][T11901] bridge_slave_0: left promiscuous mode
[  237.089446][T11901] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.430999][T11974] ip_tables: iptables: counters copy to user failed while replacing table
[  238.470312][T11979] veth1_to_team: entered promiscuous mode
[  238.470390][T11979] veth1_to_team: entered allmulticast mode
[  238.472027][T11967] syzkaller0: entered promiscuous mode
[  238.472050][T11967] syzkaller0: entered allmulticast mode
[  238.489438][T11974] ip_tables: iptables: counters copy to user failed while replacing table
[  238.536124][T11967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.672736][T11965] tipc: Resetting bearer <eth:syzkaller0>
[  238.752108][T11965] tipc: Disabling bearer <eth:syzkaller0>
[  239.449929][T12015] netlink: 'syz.3.1470': attribute type 10 has an invalid length.
[  239.497035][T12015] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  239.590118][T12023] netlink: 'syz.2.1475': attribute type 13 has an invalid length.
[  240.160579][T12035] netlink: 'syz.4.1479': attribute type 8 has an invalid length.
[  240.178180][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  240.178439][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  240.178645][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  240.178849][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  240.179062][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  240.179270][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  240.179472][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  240.187632][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  240.187858][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  240.188063][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'.
[  242.604536][T12044] tc action pedit offset -64 out of bounds
[  242.604589][T12044] tc action pedit offset -64 out of bounds
[  242.604623][T12044] tc action pedit offset -64 out of bounds
[  242.604636][T12044] tc action pedit offset -64 out of bounds
[  242.604650][T12044] tc action pedit offset -64 out of bounds
[  242.604660][T12044] tc action pedit offset -64 out of bounds
[  242.604669][T12044] tc action pedit offset -64 out of bounds
[  242.604682][T12044] tc action pedit offset -64 out of bounds
[  242.604690][T12044] tc action pedit offset -64 out of bounds
[  242.604698][T12044] tc action pedit offset -64 out of bounds
[  242.604718][T12044] 0: reclassify loop, rule prio 0, protocol 800
[  242.746284][T12046] ieee802154 phy0 wpan0: encryption failed: -22
[  242.828406][T12052] netlink: 'syz.2.1485': attribute type 3 has an invalid length.
[  243.867690][T12106] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  243.932701][T12112] FAULT_INJECTION: forcing a failure.
[  243.932701][T12112] name failslab, interval 1, probability 0, space 0, times 1
[  243.932777][T12112] CPU: 1 UID: 0 PID: 12112 Comm: syz.2.1496 Not tainted syzkaller #0 PREEMPT(full) 
[  243.932797][T12112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.932806][T12112] Call Trace:
[  243.932812][T12112]  <TASK>
[  243.932818][T12112]  dump_stack_lvl+0xe8/0x150
[  243.932846][T12112]  should_fail_ex+0x410/0x560
[  243.932875][T12112]  should_failslab+0xa8/0x100
[  243.932896][T12112]  ? skb_clone+0x212/0x3a0
[  243.932914][T12112]  kmem_cache_alloc_noprof+0xa1/0x600
[  243.932942][T12112]  ? skb_clone+0x212/0x3a0
[  243.932965][T12112]  skb_clone+0x212/0x3a0
[  243.932983][T12112]  __netlink_deliver_tap+0x413/0x860
[  243.933010][T12112]  ? netlink_deliver_tap+0x2e/0x1b0
[  243.933031][T12112]  netlink_deliver_tap+0x19c/0x1b0
[  243.933060][T12112]  netlink_unicast+0x781/0x940
[  243.933088][T12112]  netlink_sendmsg+0x813/0xb40
[  243.933117][T12112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.933144][T12112]  ? apparmor_socket_sendmsg+0x98/0x360
[  243.933172][T12112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.933191][T12112]  sock_sendmsg_nosec+0x13a/0x180
[  243.933216][T12112]  ____sys_sendmsg+0x54e/0x850
[  243.933239][T12112]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.933265][T12112]  ? import_iovec+0x73/0xa0
[  243.933298][T12112]  ___sys_sendmsg+0x2a5/0x360
[  243.933314][T12112]  ? __lock_acquire+0x6df/0x2e50
[  243.933336][T12112]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.933385][T12112]  ? __fget_files+0x2a/0x420
[  243.933406][T12112]  ? __fget_files+0x3a2/0x420
[  243.933438][T12112]  __x64_sys_sendmsg+0x1b1/0x290
[  243.933458][T12112]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.933495][T12112]  do_syscall_64+0x166/0x520
[  243.933518][T12112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.933536][T12112]  ? clear_bhb_loop+0x70/0xc0
[  243.933556][T12112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.933574][T12112] RIP: 0033:0x7f8c4a39e159
[  243.933591][T12112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.933607][T12112] RSP: 002b:00007f8c485f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.933626][T12112] RAX: ffffffffffffffda RBX: 00007f8c4a625fa0 RCX: 00007f8c4a39e159
[  243.933639][T12112] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  243.933650][T12112] RBP: 00007f8c485f6090 R08: 0000000000000000 R09: 0000000000000000
[  243.933661][T12112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.933672][T12112] R13: 00007f8c4a626038 R14: 00007f8c4a625fa0 R15: 00007ffd81d73848
[  243.933701][T12112]  </TASK>
[  244.115714][T12116] openvswitch: netlink: Key type 3006 is out of range max 32
[  244.271837][T12124] block nbd3: Unsupported socket: should be TCP or UNIX.
[  244.311313][T12124] syz_tun: entered allmulticast mode
[  244.335610][T12133] block nbd4: Unsupported socket: should be TCP or UNIX.
[  245.378715][T12180] vcan0: tx drop: invalid sa for name 0x0102030405060708
[  245.385991][T12183] netlink: 'syz.3.1511': attribute type 1 has an invalid length.
[  245.396033][T12180] __nla_validate_parse: 30 callbacks suppressed
[  245.403192][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1510'.
[  245.438099][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1511'.
[  245.438142][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1511'.
[  245.494767][T12186] netlink: 'syz.3.1511': attribute type 1 has an invalid length.
[  245.532204][T12183] bond4: entered promiscuous mode
[  245.542134][T12183] 8021q: adding VLAN 0 to HW filter on device bond4
[  245.584999][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'.
[  246.584698][T12219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1519'.
[  246.847409][T12231] FAULT_INJECTION: forcing a failure.
[  246.847409][T12231] name failslab, interval 1, probability 0, space 0, times 0
[  246.866064][T12231] CPU: 0 UID: 0 PID: 12231 Comm: syz.2.1523 Not tainted syzkaller #0 PREEMPT(full) 
[  246.866091][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  246.866103][T12231] Call Trace:
[  246.866111][T12231]  <TASK>
[  246.866119][T12231]  dump_stack_lvl+0xe8/0x150
[  246.866151][T12231]  should_fail_ex+0x410/0x560
[  246.866180][T12231]  ? __alloc_skb+0x1db/0x7a0
[  246.866205][T12231]  should_failslab+0xa8/0x100
[  246.866227][T12231]  ? __alloc_skb+0x1db/0x7a0
[  246.866247][T12231]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  246.866272][T12231]  ? __alloc_skb+0x18d/0x7a0
[  246.866295][T12231]  ? __alloc_skb+0x1db/0x7a0
[  246.866325][T12231]  __alloc_skb+0x1db/0x7a0
[  246.866354][T12231]  netlink_ack+0x136/0xb30
[  246.866371][T12231]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  246.866400][T12231]  ? ref_tracker_free+0x689/0x830
[  246.866429][T12231]  ? __pfx_ref_tracker_free+0x10/0x10
[  246.866464][T12231]  netlink_rcv_skb+0x2a4/0x4a0
[  246.866484][T12231]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  246.866510][T12231]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  246.866541][T12231]  ? netlink_deliver_tap+0x2e/0x1b0
[  246.866560][T12231]  ? netlink_deliver_tap+0x2e/0x1b0
[  246.866585][T12231]  netlink_unicast+0x7bd/0x940
[  246.866613][T12231]  netlink_sendmsg+0x813/0xb40
[  246.866641][T12231]  ? __pfx_netlink_sendmsg+0x10/0x10
[  246.866669][T12231]  ? apparmor_socket_sendmsg+0x98/0x360
[  246.866696][T12231]  ? __pfx_netlink_sendmsg+0x10/0x10
[  246.866715][T12231]  sock_sendmsg_nosec+0x13a/0x180
[  246.866740][T12231]  ____sys_sendmsg+0x54e/0x850
[  246.866762][T12231]  ? __pfx_____sys_sendmsg+0x10/0x10
[  246.866789][T12231]  ? import_iovec+0x73/0xa0
[  246.866818][T12231]  ___sys_sendmsg+0x2a5/0x360
[  246.866834][T12231]  ? __lock_acquire+0x6df/0x2e50
[  246.866856][T12231]  ? __pfx____sys_sendmsg+0x10/0x10
[  246.866912][T12231]  ? __fget_files+0x2a/0x420
[  246.866937][T12231]  ? __fget_files+0x3a2/0x420
[  246.866968][T12231]  __x64_sys_sendmsg+0x1b1/0x290
[  246.866989][T12231]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  246.867026][T12231]  do_syscall_64+0x166/0x520
[  246.867048][T12231]  ? trace_irq_disable+0x3b/0x140
[  246.867065][T12231]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.867084][T12231]  ? clear_bhb_loop+0x70/0xc0
[  246.867105][T12231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.867123][T12231] RIP: 0033:0x7f8c4a39e159
[  246.867140][T12231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.867155][T12231] RSP: 002b:00007f8c485f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.867176][T12231] RAX: ffffffffffffffda RBX: 00007f8c4a625fa0 RCX: 00007f8c4a39e159
[  246.867189][T12231] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  246.867200][T12231] RBP: 00007f8c485f6090 R08: 0000000000000000 R09: 0000000000000000
[  246.867211][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.867222][T12231] R13: 00007f8c4a626038 R14: 00007f8c4a625fa0 R15: 00007ffd81d73848
[  246.867252][T12231]  </TASK>
[  246.879385][T12222] netlink: 'syz.4.1522': attribute type 2 has an invalid length.
[  246.890416][T12233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1524'.
[  247.339541][T12243] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1525'.
[  247.339600][T12243] netlink: 239 bytes leftover after parsing attributes in process `syz.1.1525'.
[  247.383620][T12243] netlink: zone id is out of range
[  247.383666][T12243] netlink: zone id is out of range
[  247.383691][T12243] netlink: zone id is out of range
[  247.383698][T12243] netlink: zone id is out of range
[  247.383705][T12243] netlink: zone id is out of range
[  247.383711][T12243] netlink: zone id is out of range
[  247.383717][T12243] netlink: zone id is out of range
[  247.383723][T12243] netlink: zone id is out of range
[  247.383746][T12243] netlink: zone id is out of range
[  247.920180][T12256] netlink: 'syz.2.1529': attribute type 3 has an invalid length.
[  247.942770][T12256] netlink: 'syz.2.1529': attribute type 3 has an invalid length.
[  247.943596][T12256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1529'.
[  248.156807][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'.
[  248.665891][T12265] IPVS: Error connecting to the multicast addr
[  248.837690][T12267] ipvlan2: entered allmulticast mode
[  248.841018][T12267] syz_tun: entered allmulticast mode
[  249.274087][T12302] FAULT_INJECTION: forcing a failure.
[  249.274087][T12302] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  249.274146][T12302] CPU: 1 UID: 0 PID: 12302 Comm: syz.1.1537 Not tainted syzkaller #0 PREEMPT(full) 
[  249.274168][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  249.274180][T12302] Call Trace:
[  249.274187][T12302]  <TASK>
[  249.274195][T12302]  dump_stack_lvl+0xe8/0x150
[  249.274227][T12302]  should_fail_ex+0x410/0x560
[  249.274259][T12302]  _copy_to_user+0x31/0xb0
[  249.274280][T12302]  simple_read_from_buffer+0xe1/0x170
[  249.274310][T12302]  proc_fail_nth_read+0x1bb/0x230
[  249.274337][T12302]  ? common_file_perm+0x20e/0x2b0
[  249.274365][T12302]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  249.274396][T12302]  ? rw_verify_area+0x24a/0x4c0
[  249.274424][T12302]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  249.274450][T12302]  vfs_read+0x213/0xa80
[  249.274480][T12302]  ? __pfx___mutex_lock+0x10/0x10
[  249.274506][T12302]  ? __pfx_vfs_read+0x10/0x10
[  249.274532][T12302]  ? __fget_files+0x2a/0x420
[  249.274560][T12302]  ? __fget_files+0x3a2/0x420
[  249.274582][T12302]  ? __fget_files+0x2a/0x420
[  249.274614][T12302]  ksys_read+0x150/0x270
[  249.274640][T12302]  ? __pfx_ksys_read+0x10/0x10
[  249.274677][T12302]  do_syscall_64+0x166/0x520
[  249.274700][T12302]  ? trace_irq_disable+0x3b/0x140
[  249.274718][T12302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.274737][T12302]  ? clear_bhb_loop+0x70/0xc0
[  249.274759][T12302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.274777][T12302] RIP: 0033:0x7f99e8d5e98e
[  249.274794][T12302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  249.274811][T12302] RSP: 002b:00007f99e6ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  249.274831][T12302] RAX: ffffffffffffffda RBX: 00007f99e6ff66c0 RCX: 00007f99e8d5e98e
[  249.274845][T12302] RDX: 000000000000000f RSI: 00007f99e6ff60a0 RDI: 0000000000000006
[  249.274856][T12302] RBP: 00007f99e6ff6090 R08: 0000000000000000 R09: 0000000000000000
[  249.274868][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.274879][T12302] R13: 00007f99e9026038 R14: 00007f99e9025fa0 R15: 00007ffdff374b58
[  249.274908][T12302]  </TASK>
[  251.375169][T12271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  251.694911][T12328] __nla_validate_parse: 1 callbacks suppressed
[  251.695121][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'.
[  251.730634][T12331] batman_adv: batadv0: Interface activated: dummy0
[  251.730678][T12331] net_ratelimit: 5 callbacks suppressed
[  251.731321][T12331] batadv0: mtu less than device minimum
[  251.734164][T12331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.736623][T12331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.737939][T12331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.739228][T12331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.740509][T12331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.741800][T12331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.743096][T12331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.744418][T12331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  251.745762][T12331] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  252.014173][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1544'.
[  252.037026][T12331] batman_adv: batadv0: Interface deactivated: dummy0
[  252.037072][T12331] batman_adv: batadv0: Removing interface: dummy0
[  252.085111][T12341] netlink: 'syz.2.1547': attribute type 30 has an invalid length.
[  252.102918][T12331] bond0: (slave bond_slave_0): Releasing backup interface
[  252.188431][T12331] team0: Port device team_slave_1 removed
[  252.192353][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.192381][T12331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.230792][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.230862][T12331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.429276][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'.
[  252.612424][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'.
[  253.622061][T12364] netlink: 'syz.4.1550': attribute type 4 has an invalid length.
[  253.691696][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'.
[  253.691796][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'.
[  253.914340][T12375] netlink: 'syz.1.1554': attribute type 7 has an invalid length.
[  253.956272][T12375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1554'.
[  254.026749][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'.
[  254.182307][T12378] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  254.759939][T12393] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1557'.
[  254.884593][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'.
[  255.592918][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  255.735899][T12420] sctp: [Deprecated]: syz.1.1565 (pid 12420) Use of int in maxseg socket option.
[  255.735899][T12420] Use struct sctp_assoc_value instead
[  255.760210][T12417] batman_adv: batadv0: Adding interface: macsec1
[  255.760280][T12417] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  255.760345][T12417] batman_adv: batadv0: Interface activated: macsec1
[  255.871953][T12419] netlink: 'syz.4.1566': attribute type 4 has an invalid length.
[  255.878159][T12419] netlink: 'syz.4.1566': attribute type 4 has an invalid length.
[  257.035892][T12439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1569'.
[  257.463771][T12447] syzkaller0: entered promiscuous mode
[  257.472922][T12447] syzkaller0: entered allmulticast mode
[  257.578686][T12447] tipc: Started in network mode
[  257.579995][T12447] tipc: Node identity 52dc13de2af5, cluster identity 4711
[  257.609978][T12447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.695872][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'.
[  257.747191][T12447] tipc: Resetting bearer <eth:syzkaller0>
[  257.910091][T12454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1575'.
[  257.932438][T12445] tipc: Resetting bearer <eth:syzkaller0>
[  257.985028][T12445] tipc: Disabling bearer <eth:syzkaller0>
[  258.299996][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'.
[  258.328221][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'.
[  258.342611][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'.
[  258.368076][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'.
[  258.382389][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'.
[  259.378759][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'.
[  259.963886][T12510] rdma_rxe: rxe_newlink: failed to add xfrm0
[  260.088451][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'.
[  260.860875][T12513] hsr_slave_1 (unregistering): left promiscuous mode
[  261.515008][T12542] netlink: 'syz.3.1595': attribute type 9 has an invalid length.
[  261.863858][T12544] macvtap1: entered promiscuous mode
[  261.864061][T12544] bridge0: entered promiscuous mode
[  262.435311][T12561] __nla_validate_parse: 3 callbacks suppressed
[  262.435915][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'.
[  262.574749][T12561] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  263.237914][T12579] net_ratelimit: 12 callbacks suppressed
[  263.238124][T12579] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  263.768064][T12589] syzkaller0: entered promiscuous mode
[  263.777074][T12589] syzkaller0: entered allmulticast mode
[  264.268135][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1608'.
[  264.299646][T12602] netlink: 'syz.0.1608': attribute type 1 has an invalid length.
[  264.299844][T12602] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1608'.
[  264.829148][T12588] workqueue: Failed to create a rescuer kthread for wq "nfc13_nci_cmd_wq": -EINTR
[  265.180122][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'.
[  265.180322][T12646] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1610'.
[  265.408296][T12646] netlink: 'syz.3.1610': attribute type 4 has an invalid length.
[  265.445155][T12644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  265.583540][T12644] bond0: (slave bond_slave_0): Releasing backup interface
[  265.622009][T12644] bond0: (slave bond_slave_1): Releasing backup interface
[  265.684103][T12644] team0: Port device team_slave_0 removed
[  265.733103][T12644] team0: Port device team_slave_1 removed
[  265.734900][T12644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.789234][T12644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.828019][T12644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  265.849985][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  265.920027][T12651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1611'.
[  266.168731][T12656] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  266.477300][T12661] netlink: 'syz.4.1613': attribute type 1 has an invalid length.
[  266.477507][T12661] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1613'.
[  266.605048][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1615'.
[  267.292071][T12676] syzkaller0: entered promiscuous mode
[  267.292434][T12676] syzkaller0: entered allmulticast mode
[  267.345153][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'.
[  267.360981][T12675] tipc: Started in network mode
[  267.361166][T12675] tipc: Node identity , cluster identity 4711
[  267.361179][T12675] tipc: Failed to obtain node identity
[  267.361203][T12675] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  267.423844][T12681] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  267.745726][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  267.905873][ T5614] Bluetooth: hci4: command 0x0405 tx timeout
[  268.034292][T12690] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1621'.
[  268.280062][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'.
[  268.302742][T12695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1623'.
[  268.719531][T12704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1625'.
[  269.597783][T12713] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1626'.
[  270.207139][T12730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  271.251400][T12752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1635'.
[  271.690170][T12762] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1637'.
[  271.690855][T12762] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1637'.
[  271.691483][T12762] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1637'.
[  272.950104][T12723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  273.472089][T12784] netlink: 'syz.4.1643': attribute type 10 has an invalid length.
[  273.693794][T12785] netlink: Failed to add  helper -22
[  273.693932][T12785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.751199][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'.
[  273.754914][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'.
[  274.614497][T12812] netlink: 79 bytes leftover after parsing attributes in process `syz.4.1649'.
[  275.461303][T12832] Bluetooth: hci0: Opcode 0x080f failed: -22
[  276.262443][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'.
[  277.463601][ T7054] tipc: Subscription rejected, illegal request
[  278.529908][T12901] netlink: 'syz.3.1668': attribute type 1 has an invalid length.
[  278.630481][T12901] 8021q: adding VLAN 0 to HW filter on device bond5
[  278.753770][T12910] netlink: 'syz.3.1668': attribute type 10 has an invalid length.
[  278.753990][T12910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1668'.
[  279.032955][T12906] bond5: (slave veth5): Enslaving as a backup interface with a down link
[  279.255560][ T9194] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  279.258566][T12901] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  279.279955][T12910] dummy0: entered promiscuous mode
[  279.314307][T12910] bond5: (slave dummy0): Removing an active aggregator
[  279.328370][ T7054] bond5: (slave dummy0): link status up again after 0 ms
[  279.337503][T12910] bond5: (slave dummy0): Releasing backup interface
[  282.495052][T12991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1683'.
[  284.132956][T13017] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  284.763414][T12965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  284.794336][T13023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1691'.
[  284.812784][T13023] netlink: 9152 bytes leftover after parsing attributes in process `syz.4.1691'.
[  285.326851][T13031] tc_dump_action: action bad kind
[  285.857564][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'.
[  286.048439][T13046] netlink: 'syz.3.1696': attribute type 7 has an invalid length.
[  286.056690][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'.
[  286.066085][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'.
[  286.593977][T13060] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  286.952413][T13068] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1701'.
[  286.961792][T13068] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1701'.
[  286.962005][T13068] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1701'.
[  288.907407][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1711'.
[  288.919112][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1711'.
[  289.366403][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1711'.
[  289.376119][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1711'.
[  289.403388][T13100] netlink: 826 bytes leftover after parsing attributes in process `syz.2.1710'.
[  289.498914][T13109] netlink: 'syz.0.1711': attribute type 1 has an invalid length.
[  289.503686][T13112] netlink: 'syz.0.1711': attribute type 1 has an invalid length.
[  289.968390][T13132] xt_NETMAP: bad MAP_IPS.
[  289.991987][T13135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  289.993587][T13135] IPv6: NLM_F_CREATE should be set when creating new route
[  290.063357][T13136] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1716'.
[  291.117633][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'.
[  291.117728][T13168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'.
[  291.197452][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'.
[  291.197530][T13168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'.
[  296.368339][T13222] x_tables: duplicate underflow at hook 2
[  296.548797][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  296.719588][T13227] __nla_validate_parse: 1 callbacks suppressed
[  296.728259][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'.
[  296.867561][T13229] netlink: 'syz.3.1743': attribute type 16 has an invalid length.
[  296.867755][T13229] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1743'.
[  296.984927][T13229] xt_hashlimit: size too large, truncated to 1048576
[  297.441769][T13245] syzkaller0: entered promiscuous mode
[  297.442230][T13245] syzkaller0: entered allmulticast mode
[  298.818222][T13278] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1751'.
[  298.821176][T13278] sctp: [Deprecated]: syz.0.1751 (pid 13278) Use of struct sctp_assoc_value in delayed_ack socket option.
[  298.821176][T13278] Use struct sctp_sack_info instead
[  299.870498][T13292] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1755'.
[  300.535875][T13308] netlink: 'syz.3.1758': attribute type 1 has an invalid length.
[  300.538427][T13308] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1758'.
[  300.538524][T13308] netlink: 'syz.3.1758': attribute type 2 has an invalid length.
[  300.538558][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'.
[  301.223566][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'.
[  301.321362][T13331] Bluetooth: ISO socket layer initialized
[  301.340640][T13324] 8021q: adding VLAN 0 to HW filter on device bond6
[  301.384425][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1763'.
[  301.420440][T13298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1756'.
[  301.420539][T13298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1756'.
[  301.544274][T13335] pimreg9: entered allmulticast mode
[  301.721382][T13331] 8021q: adding VLAN 0 to HW filter on device bond7
[  301.738598][T13331] bond6: (slave bond7): Enslaving as an active interface with an up link
[  302.170260][T13341] __nla_validate_parse: 1 callbacks suppressed
[  302.170347][T13341] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1764'.
[  302.176386][T13342] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1764'.
[  302.176445][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1764'.
[  302.264766][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'.
[  302.433596][T13345] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1766'.
[  302.433953][T13345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1766'.
[  302.802593][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1768'.
[  302.973264][T13354] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  302.973367][T13354] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  302.973484][T13354] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  303.208170][T13354] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  303.906933][T13376] SET target dimension over the limit!
[  303.932702][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'.
[  303.961022][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'.
[  304.088498][T13384] x_tables: duplicate underflow at hook 2
[  304.089180][T13384] x_tables: duplicate underflow at hook 2
[  304.089815][T13384] x_tables: duplicate underflow at hook 2
[  304.090454][T13384] x_tables: duplicate underflow at hook 2
[  304.091271][T13384] x_tables: duplicate underflow at hook 2
[  304.092303][T13384] x_tables: duplicate underflow at hook 2
[  304.135840][T13384] x_tables: duplicate underflow at hook 2
[  304.143665][T13384] x_tables: duplicate underflow at hook 2
[  305.018006][T13397] netlink: 'syz.4.1780': attribute type 1 has an invalid length.
[  305.209883][T13402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1780'.
[  305.346747][T13408] netlink: 'syz.4.1780': attribute type 10 has an invalid length.
[  305.539599][T13397] bond6: option mode: invalid value (11)
[  305.597007][T13397] bond6 (unregistering): Released all slaves
[  307.012798][T13408] dummy0: entered promiscuous mode
[  307.014693][T13411] tipc: Invalid UDP bearer configuration
[  307.014791][T13411] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  307.661896][T13439] xt_NETMAP: bad MAP_IPS.
[  307.865545][T13445] __nla_validate_parse: 2 callbacks suppressed
[  307.865731][T13445] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1789'.
[  308.006245][T13446] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  309.016619][T13459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.021656][T13460] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  309.031855][T13459] syzkaller0: entered promiscuous mode
[  309.031919][T13459] syzkaller0: entered allmulticast mode
[  309.149424][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'.
[  309.197316][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'.
[  309.580891][T13437] =v: renamed from veth0_to_bond (while UP)
[  310.145817][ T7106] tipc: Node number set to 2015957982
[  310.244702][T13458] tipc: Resetting bearer <eth:syzkaller0>
[  310.561526][T13458] tipc: Disabling bearer <eth:syzkaller0>
[  310.751938][T13472] bridge0: port 1(vlan3) entered blocking state
[  310.752517][T13472] bridge0: port 1(vlan3) entered disabled state
[  310.752857][T13472] vlan3: entered allmulticast mode
[  310.752872][T13472] geneve0: entered allmulticast mode
[  311.565800][T13499] geneve1: entered promiscuous mode
[  311.566178][T13499] geneve1: entered allmulticast mode
[  313.513764][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1797'.
[  313.513859][T13504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1797'.
[  313.513933][T13504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1797'.
[  313.904707][T13516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1799'.
[  314.412432][T13527] tipc: Failed to remove unknown binding: 66,1,1/2015957982:2537909442/2537909444
[  314.747424][T13538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1802'.
[  315.111157][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1804'.
[  315.131772][T13542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1804'.
[  315.312579][T13553] netlink: 'syz.1.1808': attribute type 4 has an invalid length.
[  315.377967][T13551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1804'.
[  315.936538][T13564] sock: sock_timestamping_bind_phc: sock not bind to device
[  316.192451][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'.
[  316.289112][T13573] set match dimension is over the limit!
[  316.362018][T13576] block nbd0: reconnected socket
[  316.362313][T13576] block nbd0: reconnected socket
[  316.379305][T13567] syzkaller0: entered promiscuous mode
[  316.379498][T13567] syzkaller0: entered allmulticast mode
[  316.625093][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'.
[  316.720292][T13584] netlink: zone id is out of range
[  316.720479][T13584] netlink: zone id is out of range
[  316.720488][T13584] netlink: zone id is out of range
[  316.720495][T13584] netlink: zone id is out of range
[  316.720502][T13584] netlink: zone id is out of range
[  316.720510][T13584] netlink: zone id is out of range
[  316.720521][T13584] netlink: zone id is out of range
[  316.720528][T13584] netlink: zone id is out of range
[  316.720535][T13584] netlink: zone id is out of range
[  316.720542][T13584] netlink: zone id is out of range
[  316.970927][ T4933] block nbd0: Receive control failed (result -32)
[  316.980035][ T5614] block nbd0: Receive control failed (result -32)
[  317.033826][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  317.545276][T13604] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig
[  318.484333][T13628] netlink: 'syz.3.1822': attribute type 1 has an invalid length.
[  320.432590][T13667] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  320.948719][T13675] __nla_validate_parse: 3 callbacks suppressed
[  320.948925][T13675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1835'.
[  321.056770][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1836'.
[  321.282069][T13684] ip6_vti0: Caught tx_queue_len zero misconfig
[  321.576900][T13684] syzkaller0: entered promiscuous mode
[  321.577285][T13684] syzkaller0: entered allmulticast mode
[  321.977961][T13698] netlink: 'syz.4.1839': attribute type 4 has an invalid length.
[  322.723763][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1841'.
[  327.671789][T13725] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1844'.
[  328.887287][T13750] net_ratelimit: 1712 callbacks suppressed
[  328.901434][T13750] netlink: zone id is out of range
[  328.901500][T13750] netlink: zone id is out of range
[  328.901540][T13750] netlink: zone id is out of range
[  328.901568][T13750] netlink: zone id is out of range
[  328.901595][T13750] netlink: zone id is out of range
[  328.901627][T13750] netlink: zone id is out of range
[  328.901736][T13750] netlink: zone id is out of range
[  328.901765][T13750] netlink: zone id is out of range
[  328.901869][T13750] netlink: zone id is out of range
[  328.901896][T13750] netlink: zone id is out of range
[  329.175640][T13756] netlink: 'syz.0.1851': attribute type 1 has an invalid length.
[  329.184508][T13756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1851'.
[  329.758955][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1852'.
[  330.179434][T13767] bond9: option mode: invalid value (7)
[  330.188849][T13767] bond9 (unregistering): Released all slaves
[  330.235589][T13780] netlink: 'syz.3.1855': attribute type 8 has an invalid length.
[  330.441539][T13763] syzkaller1: entered promiscuous mode
[  330.449670][T13763] syzkaller1: entered allmulticast mode
[  331.923181][T13807] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1859'.
[  331.923372][T13807] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1859'.
[  332.060239][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1858'.
[  332.543968][T13822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1862'.
[  332.616757][T13825] netlink: 'syz.4.1863': attribute type 1 has an invalid length.
[  332.682049][T13826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1863'.
[  332.686497][T13827] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1863'.
[  332.686519][T13827] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1863'.
[  332.774954][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1861'.
[  334.148009][T13849] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  334.514212][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'.
[  334.738307][T13860] netlink: 'syz.2.1870': attribute type 3 has an invalid length.
[  335.506601][ T9197] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  335.507365][ T9197] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  335.507584][ T9197] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  335.507779][ T9197] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  336.025090][T13876] xt_hashlimit: size too large, truncated to 1048576
[  336.213965][T13880] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  336.314895][T13881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1875'.
[  336.582852][T13884] xt_LOG: prefix is not null-terminated
[  336.650945][T13887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1876'.
[  337.005082][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'.
[  337.311495][T13909] FAULT_INJECTION: forcing a failure.
[  337.311495][T13909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  337.313219][T13892] bond8 (unregistering): Released all slaves
[  337.326274][T13909] CPU: 1 UID: 0 PID: 13909 Comm: syz.1.1880 Not tainted syzkaller #0 PREEMPT(full) 
[  337.326300][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  337.326316][T13909] Call Trace:
[  337.326327][T13909]  <TASK>
[  337.326335][T13909]  dump_stack_lvl+0xe8/0x150
[  337.326368][T13909]  should_fail_ex+0x410/0x560
[  337.326400][T13909]  _copy_from_user+0x2d/0xb0
[  337.326423][T13909]  ___sys_sendmsg+0x1c6/0x360
[  337.326441][T13909]  ? __lock_acquire+0x6df/0x2e50
[  337.326465][T13909]  ? __pfx____sys_sendmsg+0x10/0x10
[  337.326516][T13909]  ? __fget_files+0x2a/0x420
[  337.326539][T13909]  ? __fget_files+0x3a2/0x420
[  337.326571][T13909]  __x64_sys_sendmsg+0x1b1/0x290
[  337.326592][T13909]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  337.326629][T13909]  do_syscall_64+0x166/0x520
[  337.326652][T13909]  ? trace_irq_disable+0x3b/0x140
[  337.326667][T13909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.326685][T13909]  ? clear_bhb_loop+0x70/0xc0
[  337.326706][T13909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.326724][T13909] RIP: 0033:0x7f99e8d9e159
[  337.326742][T13909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  337.326758][T13909] RSP: 002b:00007f99e6ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  337.326778][T13909] RAX: ffffffffffffffda RBX: 00007f99e9025fa0 RCX: 00007f99e8d9e159
[  337.326791][T13909] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003
[  337.326803][T13909] RBP: 00007f99e6ff6090 R08: 0000000000000000 R09: 0000000000000000
[  337.326814][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.326825][T13909] R13: 00007f99e9026038 R14: 00007f99e9025fa0 R15: 00007ffdff374b58
[  337.326854][T13909]  </TASK>
[  337.505473][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  337.738572][T13903] bond0: (slave bond_slave_1): Releasing backup interface
[  337.814006][T13912] siw: device registration error -23
[  337.920253][ T9193] bond0: (slave ip6gretap0): interface is now down
[  338.026916][T13911] dummy0: left promiscuous mode
[  338.170091][T13925] net_ratelimit: 31 callbacks suppressed
[  338.177494][T13925] netlink: ct_mark mask cannot be 0
[  338.184596][T13925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.283686][T13911] geneve1: left promiscuous mode
[  338.309835][T13911] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  338.596251][T13928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.881561][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'.
[  339.800770][T13966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1892'.
[  339.982999][T13968] sctp: [Deprecated]: syz.0.1893 (pid 13968) Use of int in max_burst socket option.
[  339.982999][T13968] Use struct sctp_assoc_value instead
[  340.002795][T13969] ip6gre0: Caught tx_queue_len zero misconfig
[  340.002825][T13969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1890'.
[  340.009872][ T9202] bond0: (slave ip6gretap0): interface is now down
[  341.763068][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'.
[  342.067434][ T7043] bond0: (slave ip6gretap0): interface is now down
[  342.613701][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'.
[  342.613917][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'.
[  342.634952][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  342.722315][T14022] netlink: 'syz.1.1901': attribute type 1 has an invalid length.
[  342.993440][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'.
[  342.996047][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'.
[  343.232581][T14034] vlan4: entered allmulticast mode
[  343.234473][T14034] bridge8: entered allmulticast mode
[  343.271402][T14036] bridge8: port 1(erspan0) entered blocking state
[  343.279135][T14036] bridge8: port 1(erspan0) entered disabled state
[  343.287118][T14036] erspan0: entered allmulticast mode
[  343.297714][T14036] erspan0: entered promiscuous mode
[  343.309019][T14036] bridge8: port 1(erspan0) entered blocking state
[  343.310002][T14036] bridge8: port 1(erspan0) entered forwarding state
[  343.874964][T14052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1908'.
[  343.923832][T14052] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  344.146880][  T117] bond0: (slave ip6gretap0): interface is now down
[  344.170847][  T117] bond0: now running without any active interface!
[  344.931350][T14070] netlink: 'syz.3.1913': attribute type 4 has an invalid length.
[  345.544318][T14086] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1916'.
[  345.681647][T14059] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  345.724966][T14091] xt_hashlimit: size too large, truncated to 1048576
[  346.423962][T14059] bond5 (unregistering): Released all slaves
[  346.551121][T14081] syzkaller1: tun_chr_ioctl cmd 2147767521
[  346.640633][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1919'.
[  347.078557][T14111] netlink: 'syz.1.1920': attribute type 1 has an invalid length.
[  347.203255][T14111] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.356291][T14132] netlink: 'syz.2.1926': attribute type 8 has an invalid length.
[  348.557359][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'.
[  348.666364][T14147] syzkaller0: left promiscuous mode
[  348.666403][T14147] syzkaller0: left allmulticast mode
[  348.693423][T14147] tcf_pedit_act: 7 callbacks suppressed
[  348.693512][T14147] tc action pedit offset -64 out of bounds
[  348.694274][T14147] tc action pedit offset -64 out of bounds
[  348.694310][T14147] tc action pedit offset -64 out of bounds
[  348.694339][T14147] tc action pedit offset -64 out of bounds
[  348.694368][T14147] tc action pedit offset -64 out of bounds
[  348.694396][T14147] tc action pedit offset -64 out of bounds
[  348.694424][T14147] tc action pedit offset -64 out of bounds
[  348.694439][T14147] tc action pedit offset -64 out of bounds
[  348.694467][T14147] tc action pedit offset -64 out of bounds
[  348.694495][T14147] tc action pedit offset -64 out of bounds
[  348.694536][T14147] 0: reclassify loop, rule prio 0, protocol 800
[  349.082228][T14150] bond6: option xmit_hash_policy: invalid value (10)
[  349.254883][T14150] bond6 (unregistering): Released all slaves
[  349.849602][T14149] bond6 (unregistering): Released all slaves
[  350.073292][T14167] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  350.073389][T14167] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  350.171294][T14167] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  350.178681][T14167] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  350.222864][T14167] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  350.238516][T14167] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  350.258906][T14173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.323228][T14177] IPVS: stopping backup sync thread 5971 ...
[  350.336972][T14167] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  350.337178][T14167] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  351.152196][T14193] netlink: 'syz.2.1940': attribute type 1 has an invalid length.
[  351.152331][T14193] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1940'.
[  351.305800][T14196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1938'.
[  351.467849][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'.
[  351.505071][T14203] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1942'.
[  351.663509][T14196] vlan3: entered promiscuous mode
[  351.663713][T14196] 0·: entered promiscuous mode
[  351.690998][T14196] vlan3: entered allmulticast mode
[  351.691187][T14196] 0·: entered allmulticast mode
[  351.691204][T14196] hsr_slave_0: entered allmulticast mode
[  351.691517][T14196] hsr_slave_1: entered allmulticast mode
[  351.881049][T14208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1943'.
[  352.867649][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'.
[  352.901357][T14218] vlan0: left allmulticast mode
[  352.901543][T14218] veth0_vlan: left allmulticast mode
[  352.903257][T14218] vlan0: left promiscuous mode
[  352.941704][T14218] bridge0: port 3(vlan0) entered disabled state
[  352.981379][T14218] bridge_slave_1: left allmulticast mode
[  352.981930][T14218] bridge_slave_1: left promiscuous mode
[  352.990470][T14218] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.037082][T14218] bridge_slave_0: left allmulticast mode
[  353.037571][T14218] bridge_slave_0: left promiscuous mode
[  353.045190][T14218] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.328240][T14225] netlink: zone id is out of range
[  353.340325][T14225] netlink: zone id is out of range
[  353.347076][T14225] netlink: zone id is out of range
[  353.347464][T14225] netlink: zone id is out of range
[  353.372043][T14225] netlink: zone id is out of range
[  353.416277][T14227] sctp: [Deprecated]: syz.4.1947 (pid 14227) Use of int in max_burst socket option deprecated.
[  353.416277][T14227] Use struct sctp_assoc_value instead
[  353.934724][T14231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.013983][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'.
[  354.035139][T14231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1948'.
[  354.049113][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'.
[  354.214270][T14234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1949'.
[  355.839949][T14254] netlink: 'syz.0.1953': attribute type 3 has an invalid length.
[  355.840473][T14254] netlink: 'syz.0.1953': attribute type 3 has an invalid length.
[  356.544474][T14255] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  356.594201][T14259] __nla_validate_parse: 2 callbacks suppressed
[  356.594282][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'.
[  356.594348][T14259] netlink: 'syz.4.1955': attribute type 21 has an invalid length.
[  356.940427][T14258] bridge7: entered allmulticast mode
[  357.591287][T14267] syzkaller0: entered promiscuous mode
[  357.598984][T14267] syzkaller0: entered allmulticast mode
[  359.941368][T14304] netlink: 'syz.0.1967': attribute type 1 has an invalid length.
[  360.069036][T14304] bond9: entered promiscuous mode
[  360.071066][T14304] 8021q: adding VLAN 0 to HW filter on device bond9
[  360.187094][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'.
[  360.330731][T14315] No such timeout policy "syz1"
[  361.070665][T14307] 8021q: adding VLAN 0 to HW filter on device bond9
[  361.075859][T14307] bond9: (slave gre1): The slave device specified does not support setting the MAC address
[  361.075941][T14307] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  361.102660][T14307] bond9: (slave gre1): making interface the new active one
[  361.102856][T14307] gre1: entered promiscuous mode
[  361.132976][T14307] bond9: (slave gre1): Enslaving as an active interface with an up link
[  361.182640][T14304] bond9 (unregistering): (slave gre1): Releasing backup interface
[  361.197047][T14304] gre1: left promiscuous mode
[  361.212421][T14304] bond9 (unregistering): Released all slaves
[  361.417301][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'.
[  362.776788][T14353] Bluetooth: hci1: Opcode 0x0401 failed: -22
[  363.713125][T14373] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  364.983652][T14397] syzkaller0: entered promiscuous mode
[  364.983736][T14397] syzkaller0: entered allmulticast mode
[  365.113890][T14405] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1989'.
[  365.401729][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'.
[  365.497467][T14393] syzkaller0: entered promiscuous mode
[  365.507483][T14393] syzkaller0: entered allmulticast mode
[  365.583681][T14423] netlink: 13791 bytes leftover after parsing attributes in process `syz.2.1991'.
[  365.603755][T14424] netlink: 13791 bytes leftover after parsing attributes in process `syz.2.1991'.
[  366.247376][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1995'.
[  366.667701][T14453] netlink: 'syz.2.1997': attribute type 4 has an invalid length.
[  370.986972][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'.
[  371.111144][T14471] nft_compat: unsupported protocol 0
[  371.475262][T14468] 8021q: adding VLAN 0 to HW filter on device bond8
[  372.026583][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'.
[  372.748553][T14504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2005'.
[  373.043570][T14513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2006'.
[  373.043991][T14513] ovs-system: left promiscuous mode
[  373.550729][T14530] siw: device registration error -23
[  373.676739][T14518] tipc: Started in network mode
[  373.676833][T14518] tipc: Node identity 20010000000000000000000000000001, cluster identity 4711
[  373.676995][T14518] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  373.678406][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'.
[  373.688045][T14522] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  374.209875][T14540] netlink: 'syz.4.2011': attribute type 4 has an invalid length.
[  376.167835][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2020'.
[  376.442530][T14604] netlink: 'syz.2.2021': attribute type 10 has an invalid length.
[  376.550371][T14610] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2021'.
[  376.651651][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'.
[  377.033687][T14604] team0 (unregistering): Port device netdevsim1 removed
[  377.867371][T14638] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2025'.
[  378.281426][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2029'.
[  378.299779][T14652] openvswitch: netlink: Flow actions attr not present in new flow.
[  378.470875][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  378.718016][T14654] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2029'.
[  379.386985][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2033'.
[  379.474381][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2035'.
[  379.485024][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'.
[  379.615716][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'.
[  380.687516][T14710] netlink: 'syz.1.2037': attribute type 2 has an invalid length.
[  380.919531][T14689] hsr_slave_1 (unregistering): left promiscuous mode
[  380.980372][T14692] bridge0: entered allmulticast mode
[  381.022487][T14709] bond0: option updelay: invalid value (18446744072861506180)
[  381.022713][T14709] bond0: option updelay: allowed values 0 - 2147483647
[  381.287959][T14724] FAULT_INJECTION: forcing a failure.
[  381.287959][T14724] name failslab, interval 1, probability 0, space 0, times 0
[  381.305762][T14724] CPU: 1 UID: 0 PID: 14724 Comm: syz.3.2039 Not tainted syzkaller #0 PREEMPT(full) 
[  381.305789][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  381.305801][T14724] Call Trace:
[  381.305809][T14724]  <TASK>
[  381.305817][T14724]  dump_stack_lvl+0xe8/0x150
[  381.305941][T14724]  should_fail_ex+0x410/0x560
[  381.306059][T14724]  ? __alloc_skb+0x1db/0x7a0
[  381.306192][T14724]  should_failslab+0xa8/0x100
[  381.306238][T14724]  ? __alloc_skb+0x1db/0x7a0
[  381.306259][T14724]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  381.306295][T14724]  ? __alloc_skb+0x18d/0x7a0
[  381.306317][T14724]  ? __alloc_skb+0x1db/0x7a0
[  381.306346][T14724]  __alloc_skb+0x1db/0x7a0
[  381.306379][T14724]  netlink_sendmsg+0x5d4/0xb40
[  381.306465][T14724]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.306492][T14724]  ? apparmor_socket_sendmsg+0x98/0x360
[  381.306567][T14724]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.306587][T14724]  sock_sendmsg_nosec+0x13a/0x180
[  381.306646][T14724]  ____sys_sendmsg+0x54e/0x850
[  381.306670][T14724]  ? __pfx_____sys_sendmsg+0x10/0x10
[  381.306697][T14724]  ? import_iovec+0x73/0xa0
[  381.306784][T14724]  ___sys_sendmsg+0x2a5/0x360
[  381.306802][T14724]  ? __lock_acquire+0x6df/0x2e50
[  381.306854][T14724]  ? __pfx____sys_sendmsg+0x10/0x10
[  381.306871][T14724]  ? irqentry_exit+0x218/0x910
[  381.307008][T14724]  ? __fget_files+0x2a/0x420
[  381.307042][T14724]  ? __fget_files+0x3a2/0x420
[  381.307075][T14724]  __x64_sys_sendmsg+0x1b1/0x290
[  381.307096][T14724]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  381.307134][T14724]  do_syscall_64+0x166/0x520
[  381.307186][T14724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.307224][T14724]  ? clear_bhb_loop+0x70/0xc0
[  381.307247][T14724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.307266][T14724] RIP: 0033:0x7f369759e159
[  381.307284][T14724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.307301][T14724] RSP: 002b:00007f3698383028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  381.307321][T14724] RAX: ffffffffffffffda RBX: 00007f3697825fa0 RCX: 00007f369759e159
[  381.307335][T14724] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  381.307347][T14724] RBP: 00007f3698383090 R08: 0000000000000000 R09: 0000000000000000
[  381.307359][T14724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.307370][T14724] R13: 00007f3697826038 R14: 00007f3697825fa0 R15: 00007ffeca87e4f8
[  381.307400][T14724]  </TASK>
[  381.881987][T14727] __nla_validate_parse: 1 callbacks suppressed
[  381.882187][T14727] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2041'.
[  382.365048][T14751] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2050'.
[  382.602786][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'.
[  383.932570][T14787] netlink: 'syz.1.2053': attribute type 1 has an invalid length.
[  384.056242][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'.
[  384.100592][T14797] FAULT_INJECTION: forcing a failure.
[  384.100592][T14797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  384.100801][T14797] CPU: 0 UID: 0 PID: 14797 Comm: syz.0.2055 Not tainted syzkaller #0 PREEMPT(full) 
[  384.100822][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  384.100831][T14797] Call Trace:
[  384.100838][T14797]  <TASK>
[  384.100846][T14797]  dump_stack_lvl+0xe8/0x150
[  384.100877][T14797]  should_fail_ex+0x410/0x560
[  384.100907][T14797]  _copy_from_iter+0x1d3/0x1660
[  384.100932][T14797]  ? __alloc_skb+0x27a/0x7a0
[  384.100958][T14797]  ? __alloc_skb+0x27a/0x7a0
[  384.100983][T14797]  ? __alloc_skb+0x27a/0x7a0
[  384.101007][T14797]  ? __pfx__copy_from_iter+0x10/0x10
[  384.101030][T14797]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  384.101055][T14797]  ? __alloc_skb+0x27a/0x7a0
[  384.101076][T14797]  ? __alloc_skb+0x27a/0x7a0
[  384.101105][T14797]  ? netlink_sendmsg+0x650/0xb40
[  384.101125][T14797]  ? skb_put+0x112/0x210
[  384.101151][T14797]  netlink_sendmsg+0x6c0/0xb40
[  384.101179][T14797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  384.101206][T14797]  ? apparmor_socket_sendmsg+0x98/0x360
[  384.101234][T14797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  384.101253][T14797]  sock_sendmsg_nosec+0x13a/0x180
[  384.101277][T14797]  ____sys_sendmsg+0x54e/0x850
[  384.101304][T14797]  ? __pfx_____sys_sendmsg+0x10/0x10
[  384.101330][T14797]  ? import_iovec+0x73/0xa0
[  384.101358][T14797]  ___sys_sendmsg+0x2a5/0x360
[  384.101374][T14797]  ? __lock_acquire+0x6df/0x2e50
[  384.101396][T14797]  ? __pfx____sys_sendmsg+0x10/0x10
[  384.101444][T14797]  ? __fget_files+0x2a/0x420
[  384.101465][T14797]  ? __fget_files+0x3a2/0x420
[  384.101495][T14797]  __x64_sys_sendmsg+0x1b1/0x290
[  384.101516][T14797]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  384.101551][T14797]  do_syscall_64+0x166/0x520
[  384.101573][T14797]  ? trace_irq_disable+0x3b/0x140
[  384.101629][T14797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.101653][T14797]  ? clear_bhb_loop+0x70/0xc0
[  384.101674][T14797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.101692][T14797] RIP: 0033:0x7fa6cf39e159
[  384.101709][T14797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.101724][T14797] RSP: 002b:00007fa6d02dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  384.101743][T14797] RAX: ffffffffffffffda RBX: 00007fa6cf625fa0 RCX: 00007fa6cf39e159
[  384.101757][T14797] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  384.101768][T14797] RBP: 00007fa6d02dc090 R08: 0000000000000000 R09: 0000000000000000
[  384.101779][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.101789][T14797] R13: 00007fa6cf626038 R14: 00007fa6cf625fa0 R15: 00007fff51abca18
[  384.101818][T14797]  </TASK>
[  384.218836][T14787] 8021q: adding VLAN 0 to HW filter on device bond6
[  384.566780][T14792] bond6: (slave veth7): Enslaving as an active interface with a down link
[  384.714511][T14798] 8021q: adding VLAN 0 to HW filter on device batadv1
[  384.739250][T14798] bond6: (slave batadv1): making interface the new active one
[  384.807510][T14798] batadv1: entered promiscuous mode
[  384.822344][T14798] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  385.273942][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'.
[  385.367408][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'.
[  385.765155][T14831] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2062'.
[  385.779459][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'.
[  386.401071][T14832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.406830][T14832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.933826][T14860] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2068'.
[  386.956689][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'.
[  386.956902][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'.
[  387.057161][T14832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.071617][T14832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.442427][T14832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.442527][T14832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.616801][T14873] netlink: 'syz.3.2072': attribute type 1 has an invalid length.
[  388.929613][T14875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2072'.
[  388.941346][T14875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2072'.
[  388.961995][T14875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2072'.
[  389.155437][T14879] bond0: (slave veth0_to_bond): Releasing backup interface
[  389.242855][T14881] bridge9: entered promiscuous mode
[  389.259661][T14898] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  389.261092][T14899] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  389.630286][T14832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.630536][T14832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.915088][T14919] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2076'.
[  390.823212][T14939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2080'.
[  390.917978][  T117] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  390.918077][  T117] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.970472][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2080'.
[  390.970580][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2080'.
[  391.096078][ T9194] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  391.096299][ T9194] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.215499][ T9194] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  391.215718][ T9194] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.396202][  T117] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  391.396412][  T117] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.703390][T14949] syzkaller0: entered promiscuous mode
[  391.703749][T14949] syzkaller0: entered allmulticast mode
[  391.812172][T14949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.874384][T14965] FAULT_INJECTION: forcing a failure.
[  391.874384][T14965] name failslab, interval 1, probability 0, space 0, times 0
[  391.889879][T14965] CPU: 1 UID: 0 PID: 14965 Comm: syz.3.2086 Not tainted syzkaller #0 PREEMPT(full) 
[  391.889908][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  391.889920][T14965] Call Trace:
[  391.889927][T14965]  <TASK>
[  391.889935][T14965]  dump_stack_lvl+0xe8/0x150
[  391.889967][T14965]  should_fail_ex+0x410/0x560
[  391.889999][T14965]  should_failslab+0xa8/0x100
[  391.890020][T14965]  ? skb_clone+0x212/0x3a0
[  391.890040][T14965]  kmem_cache_alloc_noprof+0xa1/0x600
[  391.890069][T14965]  ? skb_clone+0x212/0x3a0
[  391.890094][T14965]  skb_clone+0x212/0x3a0
[  391.890117][T14965]  __netlink_deliver_tap+0x413/0x860
[  391.890149][T14965]  ? netlink_deliver_tap+0x2e/0x1b0
[  391.890172][T14965]  netlink_deliver_tap+0x19c/0x1b0
[  391.890194][T14965]  netlink_unicast+0x781/0x940
[  391.890238][T14965]  netlink_sendmsg+0x813/0xb40
[  391.890269][T14965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  391.890297][T14965]  ? apparmor_socket_sendmsg+0x98/0x360
[  391.890326][T14965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  391.890346][T14965]  sock_sendmsg_nosec+0x13a/0x180
[  391.890373][T14965]  ____sys_sendmsg+0x54e/0x850
[  391.890397][T14965]  ? __pfx_____sys_sendmsg+0x10/0x10
[  391.890424][T14965]  ? import_iovec+0x73/0xa0
[  391.890456][T14965]  ___sys_sendmsg+0x2a5/0x360
[  391.890473][T14965]  ? __lock_acquire+0x6df/0x2e50
[  391.890496][T14965]  ? __pfx____sys_sendmsg+0x10/0x10
[  391.890553][T14965]  ? __fget_files+0x2a/0x420
[  391.890575][T14965]  ? __fget_files+0x3a2/0x420
[  391.890603][T14965]  __x64_sys_sendmsg+0x1b1/0x290
[  391.890623][T14965]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  391.890659][T14965]  do_syscall_64+0x166/0x520
[  391.890683][T14965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.890700][T14965]  ? clear_bhb_loop+0x70/0xc0
[  391.890722][T14965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.890746][T14965] RIP: 0033:0x7f369759e159
[  391.890763][T14965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.890779][T14965] RSP: 002b:00007f3698383028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  391.890800][T14965] RAX: ffffffffffffffda RBX: 00007f3697825fa0 RCX: 00007f369759e159
[  391.890813][T14965] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  391.890824][T14965] RBP: 00007f3698383090 R08: 0000000000000000 R09: 0000000000000000
[  391.890835][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.890845][T14965] R13: 00007f3697826038 R14: 00007f3697825fa0 R15: 00007ffeca87e4f8
[  391.890875][T14965]  </TASK>
[  391.970788][T14953] syzkaller1: entered promiscuous mode
[  391.970960][T14953] syzkaller1: entered allmulticast mode
[  392.002476][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  392.085134][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  392.085156][T14958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2083'.
[  392.155125][T14958] netlink: 'syz.1.2083': attribute type 7 has an invalid length.
[  393.528612][T14979] ip6gretap3: entered allmulticast mode
[  393.558149][T14979] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[  393.559522][T14979] batman_adv: batadv0: Adding interface: ip6gretap3
[  393.559590][T14979] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.612480][T14979] batman_adv: batadv0: Interface activated: ip6gretap3
[  393.637663][  T985] tipc: Node number set to 869084727
[  393.761292][T14947] tipc: Resetting bearer <eth:syzkaller0>
[  393.962575][T14947] tipc: Disabling bearer <eth:syzkaller0>
[  394.060986][T15005] syzkaller0: entered promiscuous mode
[  394.068119][T15005] syzkaller0: entered allmulticast mode
[  395.429949][T15042] FAULT_INJECTION: forcing a failure.
[  395.429949][T15042] name failslab, interval 1, probability 0, space 0, times 0
[  395.430145][T15042] CPU: 0 UID: 0 PID: 15042 Comm: syz.3.2098 Not tainted syzkaller #0 PREEMPT(full) 
[  395.430166][T15042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.430177][T15042] Call Trace:
[  395.430184][T15042]  <TASK>
[  395.430192][T15042]  dump_stack_lvl+0xe8/0x150
[  395.430223][T15042]  should_fail_ex+0x410/0x560
[  395.430253][T15042]  should_failslab+0xa8/0x100
[  395.430275][T15042]  __kvmalloc_node_noprof+0x176/0x820
[  395.430299][T15042]  ? alloc_netdev_mqs+0xa9/0x12a0
[  395.430421][T15042]  ? alloc_netdev_mqs+0xa9/0x12a0
[  395.430446][T15042]  alloc_netdev_mqs+0xa9/0x12a0
[  395.430465][T15042]  ? __pfx_snprintf+0x10/0x10
[  395.430484][T15042]  ? __pfx_ipgre_tap_setup+0x10/0x10
[  395.430580][T15042]  rtnl_create_link+0x321/0xd70
[  395.430647][T15042]  rtnl_newlink_create+0x258/0x7b0
[  395.430698][T15042]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  395.430720][T15042]  ? __pfx___mutex_lock+0x10/0x10
[  395.430754][T15042]  ? ns_capable+0x89/0xe0
[  395.430792][T15042]  rtnl_newlink+0x166d/0x1c30
[  395.430833][T15042]  ? __pfx_rtnl_newlink+0x10/0x10
[  395.430856][T15042]  ? do_syscall_64+0x166/0x520
[  395.430883][T15042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.430936][T15042]  ? kasan_quarantine_put+0xbb/0x1f0
[  395.430964][T15042]  ? lockdep_hardirqs_on+0x7b/0x110
[  395.430994][T15042]  ? nlmon_xmit+0xb0/0x100
[  395.431101][T15042]  ? kmem_cache_free+0x182/0x650
[  395.431130][T15042]  ? __lock_acquire+0x6df/0x2e50
[  395.431152][T15042]  ? __dev_queue_xmit+0x29b/0x3820
[  395.431201][T15042]  ? __local_bh_enable_ip+0xd6/0x140
[  395.431228][T15042]  ? lockdep_hardirqs_on+0x7b/0x110
[  395.431250][T15042]  ? __dev_queue_xmit+0x29b/0x3820
[  395.431271][T15042]  ? __local_bh_enable_ip+0xd6/0x140
[  395.431290][T15042]  ? __dev_queue_xmit+0x29b/0x3820
[  395.431317][T15042]  ? lock_acquire+0x115/0x350
[  395.431348][T15042]  ? __pfx_rtnl_newlink+0x10/0x10
[  395.431372][T15042]  rtnetlink_rcv_msg+0x802/0xc00
[  395.431400][T15042]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  395.431424][T15042]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  395.431447][T15042]  ? ref_tracker_free+0x689/0x830
[  395.431510][T15042]  ? __pfx_ref_tracker_free+0x10/0x10
[  395.431545][T15042]  netlink_rcv_skb+0x226/0x4a0
[  395.431566][T15042]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  395.431593][T15042]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  395.431625][T15042]  ? netlink_deliver_tap+0x2e/0x1b0
[  395.431644][T15042]  ? netlink_deliver_tap+0x2e/0x1b0
[  395.431669][T15042]  netlink_unicast+0x7bd/0x940
[  395.431697][T15042]  netlink_sendmsg+0x813/0xb40
[  395.431726][T15042]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.431754][T15042]  ? apparmor_socket_sendmsg+0x98/0x360
[  395.431781][T15042]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.431800][T15042]  sock_sendmsg_nosec+0x13a/0x180
[  395.431824][T15042]  ____sys_sendmsg+0x54e/0x850
[  395.431848][T15042]  ? __pfx_____sys_sendmsg+0x10/0x10
[  395.431880][T15042]  ? import_iovec+0x73/0xa0
[  395.431910][T15042]  ___sys_sendmsg+0x2a5/0x360
[  395.431926][T15042]  ? __lock_acquire+0x6df/0x2e50
[  395.431948][T15042]  ? __pfx____sys_sendmsg+0x10/0x10
[  395.432000][T15042]  ? __fget_files+0x2a/0x420
[  395.432021][T15042]  ? __fget_files+0x3a2/0x420
[  395.432053][T15042]  __x64_sys_sendmsg+0x1b1/0x290
[  395.432073][T15042]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  395.432111][T15042]  do_syscall_64+0x166/0x520
[  395.432132][T15042]  ? trace_irq_disable+0x3b/0x140
[  395.432149][T15042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.432167][T15042]  ? clear_bhb_loop+0x70/0xc0
[  395.432189][T15042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.432207][T15042] RIP: 0033:0x7f369759e159
[  395.432223][T15042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.432239][T15042] RSP: 002b:00007f3698383028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.432258][T15042] RAX: ffffffffffffffda RBX: 00007f3697825fa0 RCX: 00007f369759e159
[  395.432271][T15042] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  395.432283][T15042] RBP: 00007f3698383090 R08: 0000000000000000 R09: 0000000000000000
[  395.432294][T15042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.432304][T15042] R13: 00007f3697826038 R14: 00007f3697825fa0 R15: 00007ffeca87e4f8
[  395.432333][T15042]  </TASK>
[  395.556338][T15043] netlink: 'syz.1.2097': attribute type 2 has an invalid length.
[  395.556360][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'.
[  397.125445][ T1118] batadv1: left promiscuous mode
[  398.720446][T15127] netlink: 'syz.0.2117': attribute type 4 has an invalid length.
[  398.766990][T15126] netlink: 'syz.1.2116': attribute type 1 has an invalid length.
[  398.767172][T15126] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2116'.
[  400.266223][T15162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2122'.
[  400.319631][T15164] netlink: Failed to add  helper -22
[  400.319848][T15164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.697522][T15173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2122'.
[  400.777246][T15169] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  401.727066][T15190] netlink: 'syz.0.2129': attribute type 4 has an invalid length.
[  402.077724][T15199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  402.077791][T15199] IPv6: NLM_F_CREATE should be set when creating new route
[  402.412001][T15204] netlink: 'syz.3.2133': attribute type 4 has an invalid length.
[  402.434515][T15204] netlink: 'syz.3.2133': attribute type 4 has an invalid length.
[  404.149123][T15239] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2144'.
[  404.658739][T15248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2147'.
[  405.210172][T15253] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2148'.
[  405.982570][T15266] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[  405.982650][T15266] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode
[  406.427143][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2153'.
[  406.646965][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'.
[  407.386406][T15299] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2159'.
[  409.188730][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  409.877428][T15344] netlink: 'syz.3.2169': attribute type 1 has an invalid length.
[  410.144171][T15344] 8021q: adding VLAN 0 to HW filter on device bond9
[  410.164424][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2168'.
[  410.490171][T15345] ovs-system: entered promiscuous mode
[  410.733381][T15366] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  410.733723][T15366] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  411.308468][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'.
[  411.317759][T15377] team0: Caught tx_queue_len zero misconfig
[  411.378249][T15379] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2175'.
[  411.863632][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'.
[  412.591935][T15411] FAULT_INJECTION: forcing a failure.
[  412.591935][T15411] name failslab, interval 1, probability 0, space 0, times 0
[  412.592155][T15411] CPU: 0 UID: 0 PID: 15411 Comm: syz.0.2183 Not tainted syzkaller #0 PREEMPT(full) 
[  412.592190][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  412.592201][T15411] Call Trace:
[  412.592208][T15411]  <TASK>
[  412.592216][T15411]  dump_stack_lvl+0xe8/0x150
[  412.592251][T15411]  should_fail_ex+0x410/0x560
[  412.592284][T15411]  should_failslab+0xa8/0x100
[  412.592308][T15411]  __kvmalloc_node_noprof+0x176/0x820
[  412.592330][T15411]  ? alloc_netdev_mqs+0x8fb/0x12a0
[  412.592352][T15411]  ? alloc_netdev_mqs+0x8fb/0x12a0
[  412.592383][T15411]  alloc_netdev_mqs+0x8fb/0x12a0
[  412.592403][T15411]  ? __pfx_ipgre_tap_setup+0x10/0x10
[  412.592436][T15411]  rtnl_create_link+0x321/0xd70
[  412.592465][T15411]  rtnl_newlink_create+0x258/0x7b0
[  412.592489][T15411]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  412.592510][T15411]  ? __pfx___mutex_lock+0x10/0x10
[  412.592545][T15411]  ? ns_capable+0x89/0xe0
[  412.592573][T15411]  rtnl_newlink+0x166d/0x1c30
[  412.592613][T15411]  ? __pfx_rtnl_newlink+0x10/0x10
[  412.592635][T15411]  ? do_syscall_64+0x166/0x520
[  412.592657][T15411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.592772][T15411]  ? kasan_quarantine_put+0xbb/0x1f0
[  412.592812][T15411]  ? lockdep_hardirqs_on+0x7b/0x110
[  412.592841][T15411]  ? nlmon_xmit+0xb0/0x100
[  412.592866][T15411]  ? kmem_cache_free+0x182/0x650
[  412.592894][T15411]  ? __lock_acquire+0x6df/0x2e50
[  412.592919][T15411]  ? __dev_queue_xmit+0x29b/0x3820
[  412.592942][T15411]  ? __local_bh_enable_ip+0xd6/0x140
[  412.592966][T15411]  ? lockdep_hardirqs_on+0x7b/0x110
[  412.592991][T15411]  ? __dev_queue_xmit+0x29b/0x3820
[  412.593009][T15411]  ? __local_bh_enable_ip+0xd6/0x140
[  412.593032][T15411]  ? __dev_queue_xmit+0x29b/0x3820
[  412.593062][T15411]  ? lock_acquire+0x115/0x350
[  412.593093][T15411]  ? __pfx_rtnl_newlink+0x10/0x10
[  412.593117][T15411]  rtnetlink_rcv_msg+0x802/0xc00
[  412.593148][T15411]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  412.593177][T15411]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  412.593199][T15411]  ? ref_tracker_free+0x689/0x830
[  412.593227][T15411]  ? __pfx_ref_tracker_free+0x10/0x10
[  412.593273][T15411]  netlink_rcv_skb+0x226/0x4a0
[  412.593296][T15411]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  412.593323][T15411]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  412.593356][T15411]  ? netlink_deliver_tap+0x2e/0x1b0
[  412.593376][T15411]  ? netlink_deliver_tap+0x2e/0x1b0
[  412.593403][T15411]  netlink_unicast+0x7bd/0x940
[  412.593431][T15411]  netlink_sendmsg+0x813/0xb40
[  412.593461][T15411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.593491][T15411]  ? apparmor_socket_sendmsg+0x98/0x360
[  412.593519][T15411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.593538][T15411]  sock_sendmsg_nosec+0x13a/0x180
[  412.593563][T15411]  ____sys_sendmsg+0x54e/0x850
[  412.593588][T15411]  ? __pfx_____sys_sendmsg+0x10/0x10
[  412.593614][T15411]  ? import_iovec+0x73/0xa0
[  412.593646][T15411]  ___sys_sendmsg+0x2a5/0x360
[  412.593663][T15411]  ? __lock_acquire+0x6df/0x2e50
[  412.593686][T15411]  ? __pfx____sys_sendmsg+0x10/0x10
[  412.593739][T15411]  ? __fget_files+0x2a/0x420
[  412.593764][T15411]  ? __fget_files+0x3a2/0x420
[  412.593794][T15411]  __x64_sys_sendmsg+0x1b1/0x290
[  412.593815][T15411]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  412.593854][T15411]  do_syscall_64+0x166/0x520
[  412.593877][T15411]  ? trace_irq_disable+0x3b/0x140
[  412.593896][T15411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.593915][T15411]  ? clear_bhb_loop+0x70/0xc0
[  412.593937][T15411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.593955][T15411] RIP: 0033:0x7fa6cf39e159
[  412.593976][T15411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.593992][T15411] RSP: 002b:00007fa6d02dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.594013][T15411] RAX: ffffffffffffffda RBX: 00007fa6cf625fa0 RCX: 00007fa6cf39e159
[  412.594027][T15411] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  412.594038][T15411] RBP: 00007fa6d02dc090 R08: 0000000000000000 R09: 0000000000000000
[  412.594050][T15411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  412.594061][T15411] R13: 00007fa6cf626038 R14: 00007fa6cf625fa0 R15: 00007fff51abca18
[  412.594094][T15411]  </TASK>
[  413.233800][T15424] netlink: 548 bytes leftover after parsing attributes in process `syz.0.2186'.
[  413.569707][T15428] netlink: 'syz.1.2189': attribute type 1 has an invalid length.
[  413.677786][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'.
[  413.731905][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'.
[  413.807188][T15428] bond7: entered promiscuous mode
[  413.816654][T15428] 8021q: adding VLAN 0 to HW filter on device bond7
[  414.348267][T15433] vlan3 (unregistering): left allmulticast mode
[  414.355566][T15433] geneve0 (unregistering): left allmulticast mode
[  414.365237][T15433] bridge0: port 1(vlan3) entered disabled state
[  414.497967][T15438] bond7 (unregistering): Released all slaves
[  414.596376][   T38] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.617476][   T38] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.618023][   T38] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.618145][   T38] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.087019][T15466] FAULT_INJECTION: forcing a failure.
[  415.087019][T15466] name failslab, interval 1, probability 0, space 0, times 0
[  415.087221][T15466] CPU: 0 UID: 0 PID: 15466 Comm: syz.2.2196 Not tainted syzkaller #0 PREEMPT(full) 
[  415.087243][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  415.087253][T15466] Call Trace:
[  415.087261][T15466]  <TASK>
[  415.087268][T15466]  dump_stack_lvl+0xe8/0x150
[  415.087299][T15466]  should_fail_ex+0x410/0x560
[  415.087325][T15466]  should_failslab+0xa8/0x100
[  415.087345][T15466]  __kmalloc_cache_noprof+0xa3/0x600
[  415.087374][T15466]  ? alloc_netdev_mqs+0xc2d/0x12a0
[  415.087393][T15466]  ? alloc_netdev_mqs+0xc2d/0x12a0
[  415.087414][T15466]  ? __xdp_rxq_info_reg+0x171/0x280
[  415.087545][T15466]  alloc_netdev_mqs+0xc2d/0x12a0
[  415.087573][T15466]  rtnl_create_link+0x321/0xd70
[  415.087600][T15466]  rtnl_newlink_create+0x258/0x7b0
[  415.087625][T15466]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  415.087647][T15466]  ? __pfx___mutex_lock+0x10/0x10
[  415.087681][T15466]  ? ns_capable+0x89/0xe0
[  415.087708][T15466]  rtnl_newlink+0x166d/0x1c30
[  415.087747][T15466]  ? __pfx_rtnl_newlink+0x10/0x10
[  415.087770][T15466]  ? do_syscall_64+0x166/0x520
[  415.087792][T15466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.087844][T15466]  ? kasan_quarantine_put+0xbb/0x1f0
[  415.087871][T15466]  ? lockdep_hardirqs_on+0x7b/0x110
[  415.087914][T15466]  ? nlmon_xmit+0xb0/0x100
[  415.087937][T15466]  ? kmem_cache_free+0x182/0x650
[  415.087975][T15466]  ? __lock_acquire+0x6df/0x2e50
[  415.087998][T15466]  ? __dev_queue_xmit+0x29b/0x3820
[  415.088021][T15466]  ? __local_bh_enable_ip+0xd6/0x140
[  415.088044][T15466]  ? lockdep_hardirqs_on+0x7b/0x110
[  415.088065][T15466]  ? __dev_queue_xmit+0x29b/0x3820
[  415.088082][T15466]  ? __local_bh_enable_ip+0xd6/0x140
[  415.088105][T15466]  ? __dev_queue_xmit+0x29b/0x3820
[  415.088132][T15466]  ? lock_acquire+0x115/0x350
[  415.088162][T15466]  ? __pfx_rtnl_newlink+0x10/0x10
[  415.088187][T15466]  rtnetlink_rcv_msg+0x802/0xc00
[  415.088215][T15466]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  415.088239][T15466]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  415.088261][T15466]  ? ref_tracker_free+0x689/0x830
[  415.088288][T15466]  ? __pfx_ref_tracker_free+0x10/0x10
[  415.088323][T15466]  netlink_rcv_skb+0x226/0x4a0
[  415.088345][T15466]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  415.088372][T15466]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  415.088405][T15466]  ? netlink_deliver_tap+0x2e/0x1b0
[  415.088425][T15466]  ? netlink_deliver_tap+0x2e/0x1b0
[  415.088450][T15466]  netlink_unicast+0x7bd/0x940
[  415.088479][T15466]  netlink_sendmsg+0x813/0xb40
[  415.088508][T15466]  ? __pfx_netlink_sendmsg+0x10/0x10
[  415.088536][T15466]  ? apparmor_socket_sendmsg+0x98/0x360
[  415.088564][T15466]  ? __pfx_netlink_sendmsg+0x10/0x10
[  415.088582][T15466]  sock_sendmsg_nosec+0x13a/0x180
[  415.088608][T15466]  ____sys_sendmsg+0x54e/0x850
[  415.088631][T15466]  ? __pfx_____sys_sendmsg+0x10/0x10
[  415.088656][T15466]  ? import_iovec+0x73/0xa0
[  415.088687][T15466]  ___sys_sendmsg+0x2a5/0x360
[  415.088703][T15466]  ? __lock_acquire+0x6df/0x2e50
[  415.088725][T15466]  ? __pfx____sys_sendmsg+0x10/0x10
[  415.088776][T15466]  ? __fget_files+0x2a/0x420
[  415.088802][T15466]  ? __fget_files+0x3a2/0x420
[  415.088832][T15466]  __x64_sys_sendmsg+0x1b1/0x290
[  415.088856][T15466]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  415.088894][T15466]  do_syscall_64+0x166/0x520
[  415.088920][T15466]  ? trace_irq_disable+0x3b/0x140
[  415.088940][T15466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.088957][T15466]  ? clear_bhb_loop+0x70/0xc0
[  415.088987][T15466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.089006][T15466] RIP: 0033:0x7f8c4a39e159
[  415.089024][T15466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.089040][T15466] RSP: 002b:00007f8c485f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  415.089061][T15466] RAX: ffffffffffffffda RBX: 00007f8c4a625fa0 RCX: 00007f8c4a39e159
[  415.089074][T15466] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  415.089085][T15466] RBP: 00007f8c485f6090 R08: 0000000000000000 R09: 0000000000000000
[  415.089096][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  415.089107][T15466] R13: 00007f8c4a626038 R14: 00007f8c4a625fa0 R15: 00007ffd81d73848
[  415.089137][T15466]  </TASK>
[  415.932537][T15474] pim6reg: entered allmulticast mode
[  415.933383][T15476] pim6reg: left allmulticast mode
[  416.466195][T15486] C: renamed from veth1_to_team (while UP)
[  416.537875][T15486] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2198'.
[  416.906205][T15507] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes.
[  418.414669][T15505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2200'.
[  419.160412][T15546] netlink: 'syz.1.2207': attribute type 1 has an invalid length.
[  419.160612][T15546] netlink: 'syz.1.2207': attribute type 2 has an invalid length.
[  419.752635][T15570] xt_hashlimit: overflow, try lower: 18446744073709551614/255
[  420.163876][T15580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2216'.
[  420.252398][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'.
[  420.277858][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2216'.
[  420.503331][T15588] netlink: 'syz.0.2218': attribute type 21 has an invalid length.
[  420.503597][T15588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2218'.
[  420.503704][T15588] netlink: 'syz.0.2218': attribute type 1 has an invalid length.
[  421.907526][T15614] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2224'.
[  421.910071][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2224'.
[  422.209975][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2225'.
[  422.495739][T15622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2226'.
[  422.513941][T15616] 8021q: adding VLAN 0 to HW filter on device bond10
[  422.862865][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2229'.
[  423.129624][T15642] x_tables: duplicate underflow at hook 1
[  423.130165][T15642] x_tables: duplicate underflow at hook 1
[  423.131702][T15642] x_tables: duplicate underflow at hook 1
[  423.132072][T15642] x_tables: duplicate underflow at hook 1
[  423.132318][T15642] x_tables: duplicate underflow at hook 1
[  423.132678][T15642] x_tables: duplicate underflow at hook 1
[  423.133040][T15642] x_tables: duplicate underflow at hook 1
[  423.133408][T15642] x_tables: duplicate underflow at hook 1
[  423.133774][T15642] x_tables: duplicate underflow at hook 1
[  423.134290][T15642] x_tables: duplicate underflow at hook 1
[  424.233402][T15655] FAULT_INJECTION: forcing a failure.
[  424.233402][T15655] name failslab, interval 1, probability 0, space 0, times 0
[  424.233620][T15655] CPU: 0 UID: 0 PID: 15655 Comm: syz.2.2235 Not tainted syzkaller #0 PREEMPT(full) 
[  424.233642][T15655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.233675][T15655] Call Trace:
[  424.233683][T15655]  <TASK>
[  424.233691][T15655]  dump_stack_lvl+0xe8/0x150
[  424.233723][T15655]  should_fail_ex+0x410/0x560
[  424.233754][T15655]  ? __alloc_skb+0x1db/0x7a0
[  424.233780][T15655]  should_failslab+0xa8/0x100
[  424.233802][T15655]  ? __alloc_skb+0x1db/0x7a0
[  424.233826][T15655]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  424.233856][T15655]  ? __alloc_skb+0x18d/0x7a0
[  424.233881][T15655]  ? __alloc_skb+0x1db/0x7a0
[  424.233911][T15655]  __alloc_skb+0x1db/0x7a0
[  424.233947][T15655]  netlink_ack+0x136/0xb30
[  424.233967][T15655]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.233992][T15655]  ? ref_tracker_free+0x689/0x830
[  424.234021][T15655]  ? __pfx_ref_tracker_free+0x10/0x10
[  424.234057][T15655]  netlink_rcv_skb+0x2a4/0x4a0
[  424.234078][T15655]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.234105][T15655]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  424.234138][T15655]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.234156][T15655]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.234182][T15655]  netlink_unicast+0x7bd/0x940
[  424.234211][T15655]  netlink_sendmsg+0x813/0xb40
[  424.234240][T15655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.234268][T15655]  ? apparmor_socket_sendmsg+0x98/0x360
[  424.234295][T15655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.234315][T15655]  sock_sendmsg_nosec+0x13a/0x180
[  424.234341][T15655]  ____sys_sendmsg+0x54e/0x850
[  424.234364][T15655]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.234391][T15655]  ? import_iovec+0x73/0xa0
[  424.234422][T15655]  ___sys_sendmsg+0x2a5/0x360
[  424.234438][T15655]  ? __lock_acquire+0x6df/0x2e50
[  424.234461][T15655]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.234515][T15655]  ? __fget_files+0x2a/0x420
[  424.234537][T15655]  ? __fget_files+0x3a2/0x420
[  424.234569][T15655]  __x64_sys_sendmsg+0x1b1/0x290
[  424.234590][T15655]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  424.234628][T15655]  do_syscall_64+0x166/0x520
[  424.234657][T15655]  ? trace_irq_disable+0x3b/0x140
[  424.234676][T15655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.234694][T15655]  ? clear_bhb_loop+0x70/0xc0
[  424.234718][T15655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.234737][T15655] RIP: 0033:0x7f8c4a39e159
[  424.234755][T15655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.234771][T15655] RSP: 002b:00007f8c485f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.234792][T15655] RAX: ffffffffffffffda RBX: 00007f8c4a625fa0 RCX: 00007f8c4a39e159
[  424.234805][T15655] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  424.234817][T15655] RBP: 00007f8c485f6090 R08: 0000000000000000 R09: 0000000000000000
[  424.234829][T15655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  424.234840][T15655] R13: 00007f8c4a626038 R14: 00007f8c4a625fa0 R15: 00007ffd81d73848
[  424.234870][T15655]  </TASK>
[  426.186645][T15673] ip_tables: iptables: counters copy to user failed while replacing table
[  427.281505][T15681] block nbd3: server does not support multiple connections per device.
[  427.282434][T15681] block nbd3: shutting down sockets
[  430.035965][T15703] netlink: 'syz.4.2244': attribute type 1 has an invalid length.
[  431.564576][T15704] bond6: (slave geneve2): making interface the new active one
[  431.580148][T15704] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  431.615391][  T117] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  431.626257][   T38] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  431.626692][ T9193] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  431.626730][ T9193] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  433.382407][T15727] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  433.382615][T15727] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  433.563700][T15727] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2247'.
[  434.192837][T15736] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2248'.
[  434.931975][T15745] netlink: 'syz.3.2249': attribute type 1 has an invalid length.
[  435.650146][T15745] 8021q: adding VLAN 0 to HW filter on device bond11
[  435.775183][T15746] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  435.794779][T15750] ip6tnl0: Caught tx_queue_len zero misconfig
[  438.662984][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2255'.
[  438.971041][T15781] FAULT_INJECTION: forcing a failure.
[  438.971041][T15781] name failslab, interval 1, probability 0, space 0, times 0
[  438.985543][T15781] CPU: 0 UID: 0 PID: 15781 Comm: syz.4.2257 Not tainted syzkaller #0 PREEMPT(full) 
[  438.985571][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  438.985582][T15781] Call Trace:
[  438.985589][T15781]  <TASK>
[  438.985598][T15781]  dump_stack_lvl+0xe8/0x150
[  438.985630][T15781]  should_fail_ex+0x410/0x560
[  438.985667][T15781]  should_failslab+0xa8/0x100
[  438.985690][T15781]  ? skb_clone+0x212/0x3a0
[  438.985710][T15781]  kmem_cache_alloc_noprof+0xa1/0x600
[  438.985739][T15781]  ? skb_clone+0x212/0x3a0
[  438.985764][T15781]  skb_clone+0x212/0x3a0
[  438.985787][T15781]  __netlink_deliver_tap+0x413/0x860
[  438.985821][T15781]  ? netlink_deliver_tap+0x2e/0x1b0
[  438.985843][T15781]  netlink_deliver_tap+0x19c/0x1b0
[  438.985870][T15781]  netlink_sendskb+0x68/0x140
[  438.985891][T15781]  netlink_rcv_skb+0x2a4/0x4a0
[  438.985912][T15781]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  438.985942][T15781]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  438.985976][T15781]  ? netlink_deliver_tap+0x2e/0x1b0
[  438.985996][T15781]  ? netlink_deliver_tap+0x2e/0x1b0
[  438.986029][T15781]  netlink_unicast+0x7bd/0x940
[  438.986063][T15781]  netlink_sendmsg+0x813/0xb40
[  438.986093][T15781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  438.986123][T15781]  ? apparmor_socket_sendmsg+0x98/0x360
[  438.986151][T15781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  438.986170][T15781]  sock_sendmsg_nosec+0x13a/0x180
[  438.986197][T15781]  ____sys_sendmsg+0x54e/0x850
[  438.986220][T15781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  438.986248][T15781]  ? import_iovec+0x73/0xa0
[  438.986280][T15781]  ___sys_sendmsg+0x2a5/0x360
[  438.986297][T15781]  ? __lock_acquire+0x6df/0x2e50
[  438.986321][T15781]  ? __pfx____sys_sendmsg+0x10/0x10
[  438.986374][T15781]  ? __fget_files+0x2a/0x420
[  438.986397][T15781]  ? __fget_files+0x3a2/0x420
[  438.986429][T15781]  __x64_sys_sendmsg+0x1b1/0x290
[  438.986453][T15781]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  438.986493][T15781]  do_syscall_64+0x166/0x520
[  438.986517][T15781]  ? trace_irq_disable+0x3b/0x140
[  438.986535][T15781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.986554][T15781]  ? clear_bhb_loop+0x70/0xc0
[  438.986577][T15781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.986600][T15781] RIP: 0033:0x7fb82979e159
[  438.986618][T15781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.986634][T15781] RSP: 002b:00007fb82a67e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  438.986655][T15781] RAX: ffffffffffffffda RBX: 00007fb829a25fa0 RCX: 00007fb82979e159
[  438.986668][T15781] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  438.986680][T15781] RBP: 00007fb82a67e090 R08: 0000000000000000 R09: 0000000000000000
[  438.986691][T15781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  438.986703][T15781] R13: 00007fb829a26038 R14: 00007fb829a25fa0 R15: 00007ffed93e5418
[  438.986734][T15781]  </TASK>
[  439.927351][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  442.422969][ T4933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  442.438763][ T4933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  442.461943][ T4933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  442.503524][ T4933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  442.528789][ T4933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  443.053192][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  443.061202][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  443.075648][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  443.186286][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  443.223824][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  443.580481][T15814] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2264'.
[  445.265860][ T4933] Bluetooth: hci5: command tx timeout
[  447.415426][ T4933] Bluetooth: hci5: command tx timeout
[  447.952065][T15858] FAULT_INJECTION: forcing a failure.
[  447.952065][T15858] name failslab, interval 1, probability 0, space 0, times 0
[  447.969458][T15858] CPU: 0 UID: 0 PID: 15858 Comm: syz.2.2269 Not tainted syzkaller #0 PREEMPT(full) 
[  447.969485][T15858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  447.969496][T15858] Call Trace:
[  447.969504][T15858]  <TASK>
[  447.969511][T15858]  dump_stack_lvl+0xe8/0x150
[  447.969543][T15858]  should_fail_ex+0x410/0x560
[  447.969574][T15858]  should_failslab+0xa8/0x100
[  447.969596][T15858]  ? skb_clone+0x212/0x3a0
[  447.969622][T15858]  kmem_cache_alloc_noprof+0xa1/0x600
[  447.969651][T15858]  ? skb_clone+0x212/0x3a0
[  447.969676][T15858]  skb_clone+0x212/0x3a0
[  447.969698][T15858]  __netlink_deliver_tap+0x413/0x860
[  447.969731][T15858]  ? netlink_deliver_tap+0x2e/0x1b0
[  447.969753][T15858]  netlink_deliver_tap+0x19c/0x1b0
[  447.969775][T15858]  netlink_sendskb+0x68/0x140
[  447.969796][T15858]  netlink_rcv_skb+0x2a4/0x4a0
[  447.969817][T15858]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  447.969848][T15858]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  447.969882][T15858]  ? netlink_deliver_tap+0x2e/0x1b0
[  447.969902][T15858]  ? netlink_deliver_tap+0x2e/0x1b0
[  447.969927][T15858]  netlink_unicast+0x7bd/0x940
[  447.969957][T15858]  netlink_sendmsg+0x813/0xb40
[  447.969987][T15858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.970016][T15858]  ? apparmor_socket_sendmsg+0x98/0x360
[  447.970048][T15858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.970067][T15858]  sock_sendmsg_nosec+0x13a/0x180
[  447.970094][T15858]  ____sys_sendmsg+0x54e/0x850
[  447.970117][T15858]  ? __pfx_____sys_sendmsg+0x10/0x10
[  447.970144][T15858]  ? import_iovec+0x73/0xa0
[  447.970176][T15858]  ___sys_sendmsg+0x2a5/0x360
[  447.970193][T15858]  ? __lock_acquire+0x6df/0x2e50
[  447.970216][T15858]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.970270][T15858]  ? __fget_files+0x2a/0x420
[  447.970292][T15858]  ? __fget_files+0x3a2/0x420
[  447.970325][T15858]  __x64_sys_sendmsg+0x1b1/0x290
[  447.970346][T15858]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  447.970386][T15858]  do_syscall_64+0x166/0x520
[  447.970409][T15858]  ? trace_irq_disable+0x3b/0x140
[  447.970427][T15858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.970447][T15858]  ? clear_bhb_loop+0x70/0xc0
[  447.970469][T15858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.970487][T15858] RIP: 0033:0x7f8c4a39e159
[  447.970505][T15858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.970520][T15858] RSP: 002b:00007f8c485f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.970540][T15858] RAX: ffffffffffffffda RBX: 00007f8c4a625fa0 RCX: 00007f8c4a39e159
[  447.970554][T15858] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  447.970566][T15858] RBP: 00007f8c485f6090 R08: 0000000000000000 R09: 0000000000000000
[  447.970578][T15858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  447.970589][T15858] R13: 00007f8c4a626038 R14: 00007f8c4a625fa0 R15: 00007ffd81d73848
[  447.970625][T15858]  </TASK>
[  449.437534][ T4933] Bluetooth: hci5: command tx timeout
[  451.506280][ T4933] Bluetooth: hci5: command tx timeout
[  455.705148][T15911] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2281'.
[  462.113476][T15953] tunl0: Caught tx_queue_len zero misconfig
[  463.119764][T15965] netlink: 'syz.1.2294': attribute type 1 has an invalid length.
[  463.119968][T15965] netlink: 'syz.1.2294': attribute type 4 has an invalid length.
[  463.122894][T15965] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2294'.
[  465.565915][T15982] netlink: 'syz.1.2299': attribute type 2 has an invalid length.
[  465.666958][T15809] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.667567][T15809] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.671030][T15809] bridge_slave_0: entered allmulticast mode
[  465.684121][T15809] bridge_slave_0: entered promiscuous mode
[  466.269417][T15985] netlink: 'syz.2.2300': attribute type 11 has an invalid length.
[  466.354537][T15982] 
: entered promiscuous mode
[  466.355971][T15990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2299'.
[  471.276447][T15809] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.292430][T15809] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.305788][T15809] bridge_slave_1: entered allmulticast mode
[  471.308309][T15809] bridge_slave_1: entered promiscuous mode
[  474.652348][T15988] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  474.776900][T15988] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  475.745683][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  479.284206][T16020] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  479.307435][T16020] netlink: 'syz.4.2305': attribute type 1 has an invalid length.
[  479.340187][T16018] IPVS: Scheduler module ip_vs_sip not found
[  479.471105][T16018] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2305'.
[  481.743541][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  481.757714][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  481.769449][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  481.778815][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  481.789328][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  482.436323][ T4933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  482.454458][ T4933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  482.462745][ T4933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  482.478474][ T4933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  482.489207][ T4933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  483.089214][ T4933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  483.109088][ T4933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  483.160695][ T4933] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  483.186750][ T4933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  483.405340][ T4933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  483.826210][ T4933] Bluetooth: hci4: command tx timeout
[  484.517262][T15988] 8021q: adding VLAN 0 to HW filter on device bond7
[  484.650493][T15988] 8021q: adding VLAN 0 to HW filter on device bond8
[  484.715623][ T4933] Bluetooth: hci6: command tx timeout
[  485.956950][ T4933] Bluetooth: hci7: command tx timeout
[  485.959212][ T4933] Bluetooth: hci4: command tx timeout
[  486.179984][T15809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.190590][T16020] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  486.712136][ T7039] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  486.787094][ T5614] Bluetooth: hci6: command tx timeout
[  486.823616][T15809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.898729][T15809] team0: Port device team_slave_0 added
[  487.995397][ T5614] Bluetooth: hci4: command tx timeout
[  487.995608][ T5614] Bluetooth: hci7: command tx timeout
[  488.546132][T15809] team0: Port device team_slave_1 added
[  488.867141][ T4933] Bluetooth: hci6: command tx timeout
[  489.342343][T15809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.342577][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.342602][T15809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.357381][T15809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.357395][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.357419][T15809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.066815][ T5614] Bluetooth: hci4: command tx timeout
[  490.067068][ T4933] Bluetooth: hci7: command tx timeout
[  490.785451][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  490.957106][ T4933] Bluetooth: hci6: command tx timeout
[  492.145466][ T4933] Bluetooth: hci7: command tx timeout
[  494.999476][T15809] hsr_slave_0: entered promiscuous mode
[  495.004965][T15809] hsr_slave_1: entered promiscuous mode
[  495.010354][T15809] debugfs: 'hsr0' already exists in 'hsr'
[  495.010374][T15809] Cannot create hsr debugfs directory
[  496.455023][ T9193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.455246][ T9193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  496.455267][ T9193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.455296][ T9193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  498.457044][ T9193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.457283][ T9193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  498.464751][ T9193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.464781][ T9193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  498.785464][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  500.003452][ T9193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.003664][ T9193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  500.003690][ T9193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.003712][ T9193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  500.740291][ T9193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.740520][ T9193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  500.740739][ T9193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.740944][ T9193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  501.359018][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  501.495673][T16090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  501.510884][T16090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  501.521655][T16090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  501.538495][T16090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  501.545346][T16090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  503.895363][ T4933] Bluetooth: hci0: command tx timeout
[  505.905407][ T4933] Bluetooth: hci0: command tx timeout
[  507.985358][ T4933] Bluetooth: hci0: command tx timeout
[  508.760187][ T9193] pimreg9: left allmulticast mode
[  510.065577][ T4933] Bluetooth: hci0: command tx timeout
[  523.897434][T16090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  523.910512][T16090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  523.929324][T16090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  524.015655][T16090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  524.058648][T16090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  526.226320][T16090] Bluetooth: hci1: command tx timeout
[  528.308945][T16090] Bluetooth: hci1: command tx timeout
[  530.515945][T16090] Bluetooth: hci1: command tx timeout
[  531.818013][ T9193] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  532.565274][T16090] Bluetooth: hci1: command tx timeout
[  540.926249][ T4933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  540.960745][ T4933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  540.972559][ T4933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  540.987744][ T4933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  540.998132][ T4933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  542.796444][T16145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  542.806676][T16145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  542.822595][T16145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  542.833594][T16145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  542.843779][T16145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  542.927772][T16145] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  542.948390][T16145] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  542.975727][T16145] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  542.977664][T16145] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  542.986022][T16145] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  543.109199][T16145] Bluetooth: hci2: command tx timeout
[  544.951728][T16090] Bluetooth: hci5: command tx timeout
[  545.186594][T16145] Bluetooth: hci2: command tx timeout
[  545.186794][T16090] Bluetooth: hci8: command tx timeout
[  547.025852][T16145] Bluetooth: hci5: command tx timeout
[  547.267789][T16145] Bluetooth: hci8: command tx timeout
[  547.268638][T16145] Bluetooth: hci2: command tx timeout
[  549.109538][T16145] Bluetooth: hci5: command tx timeout
[  549.355732][T16145] Bluetooth: hci8: command tx timeout
[  549.356518][T16145] Bluetooth: hci2: command tx timeout
[  551.215245][T16090] Bluetooth: hci5: command tx timeout
[  551.427354][T16090] Bluetooth: hci8: command tx timeout
[  561.857059][T16145] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  561.870496][T16145] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  561.879179][T16145] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  561.893481][T16145] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  561.903833][T16145] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  563.016961][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  564.043976][T16145] Bluetooth: hci9: command tx timeout
[  566.068240][T16145] Bluetooth: hci9: command tx timeout
[  568.159780][T16145] Bluetooth: hci9: command tx timeout
[  570.365848][T16145] Bluetooth: hci9: command tx timeout
[  583.258123][T16090] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  583.266824][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  583.280278][T16090] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  583.287984][T16090] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  583.308261][T16090] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  583.325847][T16090] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  585.506804][T16145] Bluetooth: hci10: command tx timeout
[  587.596848][T16145] Bluetooth: hci10: command tx timeout
[  589.667920][T16145] Bluetooth: hci10: command tx timeout
[  591.749476][T16145] Bluetooth: hci10: command tx timeout
[  603.530984][T16090] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  603.600482][T16090] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  603.637980][T16090] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  603.669098][T16090] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  603.770408][ T5614] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  604.519116][T16171] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  604.531166][T16171] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  604.553575][T16171] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  604.571316][T16171] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  604.582251][T16171] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  604.643791][T16177] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  604.668514][T16177] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  604.686966][T16177] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  604.699952][T16177] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  604.716219][T16177] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  605.827842][T16145] Bluetooth: hci6: command 0x0406 tx timeout
[  605.829166][T16145] Bluetooth: hci4: command 0x0406 tx timeout
[  605.991243][T16090] Bluetooth: hci11: command tx timeout
[  606.786384][ T4933] Bluetooth: hci12: command tx timeout
[  606.877896][ T4933] Bluetooth: hci13: command tx timeout
[  608.073318][ T4933] Bluetooth: hci11: command tx timeout
[  608.887663][ T4933] Bluetooth: hci12: command tx timeout
[  608.987248][T16171] Bluetooth: hci13: command tx timeout
[  610.147062][T16171] Bluetooth: hci11: command tx timeout
[  610.945391][T16090] Bluetooth: hci12: command tx timeout
[  611.039834][T16090] Bluetooth: hci7: command 0x0406 tx timeout
[  611.042739][T16171] Bluetooth: hci13: command tx timeout
[  612.287374][ T4933] Bluetooth: hci11: command tx timeout
[  613.025522][ T4933] Bluetooth: hci12: command tx timeout
[  613.120179][ T4933] Bluetooth: hci13: command tx timeout
[  623.200937][T16090] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  623.218769][T16090] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  623.230010][T16090] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  623.261916][T16090] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  623.291280][T16090] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  624.248539][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  625.443893][T16090] Bluetooth: hci14: command tx timeout
[  626.305588][T16090] Bluetooth: hci0: command 0x0406 tx timeout
[  627.681987][ T4933] Bluetooth: hci14: command tx timeout
[  629.777706][ T4933] Bluetooth: hci14: command tx timeout
[  631.826153][ T4933] Bluetooth: hci14: command tx timeout
[  644.793199][T16171] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  644.814537][T16171] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  644.829247][T16171] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  644.842152][T16171] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  644.868486][T16171] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  646.790504][T16171] Bluetooth: hci1: command 0x0406 tx timeout
[  646.959064][T16171] Bluetooth: hci15: command tx timeout
[  649.025588][ T4933] Bluetooth: hci15: command tx timeout
[  651.110310][ T4933] Bluetooth: hci15: command tx timeout
[  653.187238][T16171] Bluetooth: hci15: command tx timeout
[  658.149324][   T31] INFO: task dhcpcd:5278 blocked for more than 143 seconds.
[  658.150497][   T31]       Not tainted syzkaller #0
[  658.150804][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  658.151386][   T31] task:dhcpcd          state:D stack:20392 pid:5278  tgid:5278  ppid:5277   task_flags:0x400140 flags:0x00080000
[  658.152924][   T31] Call Trace:
[  658.153478][   T31]  <TASK>
[  658.154038][   T31]  __schedule+0x17d4/0x5820
[  658.155978][   T31]  ? __pfx___schedule+0x10/0x10
[  658.156470][   T31]  ? schedule+0x90/0x2b0
[  658.156964][   T31]  schedule+0x164/0x2b0
[  658.157221][   T31]  schedule_preempt_disabled+0x13/0x30
[  658.157683][   T31]  __mutex_lock+0x7c1/0x1550
[  658.157943][   T31]  ? __mutex_lock+0x5d4/0x1550
[  658.158408][   T31]  ? devinet_ioctl+0x2fb/0x1c50
[  658.159486][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  658.159783][   T31]  ? bpf_lsm_capable+0x9/0x20
[  658.160061][   T31]  ? security_capable+0x7e/0x2c0
[  658.160402][   T31]  devinet_ioctl+0x2fb/0x1c50
[  658.161812][   T31]  ? __pfx_devinet_ioctl+0x10/0x10
[  658.162324][   T31]  ? get_user_ifreq+0x12b/0x180
[  658.162592][   T31]  inet_ioctl+0x42a/0x560
[  658.162854][   T31]  ? __pfx_inet_ioctl+0x10/0x10
[  658.164929][   T31]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  658.166889][   T31]  sock_do_ioctl+0x101/0x320
[  658.167147][   T31]  ? __pfx_sock_do_ioctl+0x10/0x10
[  658.167616][   T31]  ? hook_file_ioctl+0x1f2/0x600
[  658.168661][   T31]  sock_ioctl+0x57a/0x7e0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  658.168950][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[  658.169668][   T31]  ? fd_install+0x94/0x3d0
[  658.169926][   T31]  ? fd_install+0x309/0x3d0
[  658.170416][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  658.170694][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[  658.170942][   T31]  __se_sys_ioctl+0xfc/0x170
[  658.171415][   T31]  do_syscall_64+0x166/0x520
[  658.171699][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.172170][   T31]  ? clear_bhb_loop+0x70/0xc0
[  658.172426][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.172684][   T31] RIP: 0033:0x7f8b2a83d378
[  658.172925][   T31] RSP: 002b:00007ffdb5e7fb38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  658.173383][   T31] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00007f8b2a83d378
[  658.173614][   T31] RDX: 00007ffdb5e8fd30 RSI: 0000000000008914 RDI: 0000000000000016
[  658.174068][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  658.174301][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb5e9fed0
[  658.174744][   T31] R13: 00007f8b2a73d708 R14: 0000000000000028 R15: 0000000000008914
[  658.175472][   T31]  </TASK>
[  658.177413][   T31] INFO: task kworker/u8:24:7054 blocked for more than 143 seconds.
[  658.177870][   T31]       Not tainted syzkaller #0
[  658.178119][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  658.178129][   T31] task:kworker/u8:24   state:D stack:22344 pid:7054  tgid:7054  ppid:2      task_flags:0x4208160 flags:0x00080000
[  658.179533][   T31] Workqueue: ipv6_addrconf addrconf_verify_work
[  658.180123][   T31] Call Trace:
[  658.180131][   T31]  <TASK>
[  658.180592][   T31]  __schedule+0x17d4/0x5820
[  658.181769][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.182719][   T31]  ? __pfx___schedule+0x10/0x10
[  658.183442][   T31]  ? schedule+0x90/0x2b0
[  658.184395][   T31]  schedule+0x164/0x2b0
[  658.184886][   T31]  schedule_preempt_disabled+0x13/0x30
[  658.185165][   T31]  __mutex_lock+0x7c1/0x1550
[  658.225519][   T31]  ? __mutex_lock+0x5d4/0x1550
[  658.226686][   T31]  ? addrconf_verify_work+0x19/0x30
[  658.227634][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  658.227911][   T31]  ? rcu_is_watching+0x16/0xb0
[  658.228238][   T31]  ? process_scheduled_works+0x97a/0x1630
[  658.228557][   T31]  addrconf_verify_work+0x19/0x30
[  658.229272][   T31]  process_scheduled_works+0xc3d/0x1630
[  658.230596][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  658.231446][   T31]  ? assign_work+0x3cf/0x5d0
[  658.231737][   T31]  worker_thread+0xa47/0xfb0
[  658.232167][   T31]  ? __kthread_parkme+0x71/0x1f0
[  658.232695][   T31]  kthread+0x38b/0x480
[  658.233239][   T31]  ? __pfx_worker_thread+0x10/0x10
[  658.233516][   T31]  ? __pfx_kthread+0x10/0x10
[  658.233797][   T31]  ret_from_fork+0x514/0xb70
[  658.234292][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  658.234549][   T31]  ? __switch_to+0xc89/0x1420
[  658.235831][   T31]  ? __pfx_kthread+0x10/0x10
[  658.236322][   T31]  ret_from_fork_asm+0x1a/0x30
[  658.237053][   T31]  </TASK>
[  658.237316][   T31] INFO: task kworker/u8:83:9199 blocked for more than 143 seconds.
[  658.237499][   T31]       Not tainted syzkaller #0
[  658.237508][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  658.237739][   T31] task:kworker/u8:83   state:D stack:22568 pid:9199  tgid:9199  ppid:2      task_flags:0x4208060 flags:0x00080000
[  658.238948][   T31] Workqueue: events_unbound linkwatch_event
[  658.239206][   T31] Call Trace:
[  658.239214][   T31]  <TASK>
[  658.239667][   T31]  __schedule+0x17d4/0x5820
[  658.240851][   T31]  ? __pfx___schedule+0x10/0x10
[  658.241345][   T31]  ? schedule+0x90/0x2b0
[  658.241834][   T31]  schedule+0x164/0x2b0
[  658.242092][   T31]  schedule_preempt_disabled+0x13/0x30
[  658.242350][   T31]  __mutex_lock+0x7c1/0x1550
[  658.242609][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[  658.242874][   T31]  ? __mutex_lock+0x5d4/0x1550
[  658.243135][   T31]  ? linkwatch_event+0xe/0x60
[  658.243826][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  658.244314][   T31]  ? lock_acquire+0x115/0x350
[  658.245014][   T31]  ? rcu_is_watching+0x16/0xb0
[  658.357002][   T31]  ? process_scheduled_works+0x97a/0x1630
[  658.357041][   T31]  linkwatch_event+0xe/0x60
[  658.357063][   T31]  process_scheduled_works+0xc3d/0x1630
[  658.357117][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  658.357147][   T31]  ? assign_work+0x3cf/0x5d0
[  658.357176][   T31]  worker_thread+0xa47/0xfb0
[  658.357227][   T31]  kthread+0x38b/0x480
[  658.357246][   T31]  ? __pfx_worker_thread+0x10/0x10
[  658.357269][   T31]  ? __pfx_kthread+0x10/0x10
[  658.357292][   T31]  ret_from_fork+0x514/0xb70
[  658.357325][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  658.357353][   T31]  ? __switch_to+0xc89/0x1420
[  658.357381][   T31]  ? __pfx_kthread+0x10/0x10
[  658.357401][   T31]  ret_from_fork_asm+0x1a/0x30
[  658.357443][   T31]  </TASK>
[  658.357473][   T31] INFO: task syz-executor:15809 blocked for more than 143 seconds.
[  658.357489][   T31]       Not tainted syzkaller #0
[  658.357498][   T31]       Blocked by coredump.
[  658.357504][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  658.357512][   T31] task:syz-executor    state:D stack:22320 pid:15809 tgid:15809 ppid:1      task_flags:0x40054c flags:0x00080003
[  658.357569][   T31] Call Trace:
[  658.357576][   T31]  <TASK>
[  658.357587][   T31]  __schedule+0x17d4/0x5820
[  658.357638][   T31]  ? __pfx___schedule+0x10/0x10
[  658.357668][   T31]  ? schedule+0x90/0x2b0
[  658.357694][   T31]  schedule+0x164/0x2b0
[  658.357718][   T31]  schedule_preempt_disabled+0x13/0x30
[  658.357740][   T31]  __mutex_lock+0x7c1/0x1550
[  658.357768][   T31]  ? __mutex_lock+0x5d4/0x1550
[  658.357796][   T31]  ? tun_chr_close+0x3e/0x1c0
[  658.357942][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  658.357992][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  658.358016][   T31]  tun_chr_close+0x3e/0x1c0
[  658.358040][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  658.358063][   T31]  __fput+0x418/0xa50
[  658.358094][   T31]  task_work_run+0x1d9/0x270
[  658.358118][   T31]  ? __pfx_task_work_run+0x10/0x10
[  658.358142][   T31]  ? do_exit+0x735/0x2360
[  658.358162][   T31]  ? kmem_cache_free+0x182/0x650
[  658.358183][   T31]  ? put_net+0x191/0x260
[  658.358211][   T31]  do_exit+0x73a/0x2360
[  658.358236][   T31]  ? netlink_sendmsg+0x84e/0xb40
[  658.358258][   T31]  ? __pfx_do_exit+0x10/0x10
[  658.358280][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  658.358314][   T31]  do_group_exit+0x22d/0x2f0
[  658.358332][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  658.358471][   T31]  get_signal+0x121b/0x12c0
[  658.358514][   T31]  arch_do_signal_or_restart+0xbb/0x860
[  658.358571][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  658.358596][   T31]  ? kmem_cache_free+0x471/0x650
[  658.358632][   T31]  exit_to_user_mode_loop+0x10e/0x770
[  658.358656][   T31]  ? rcu_is_watching+0x16/0xb0
[  658.358683][   T31]  do_syscall_64+0x328/0x520
[  658.358707][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.358727][   T31]  ? clear_bhb_loop+0x70/0xc0
[  658.358750][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.358769][   T31] RIP: 0033:0x7fa6b1d5e98e
[  658.358786][   T31] RSP: 002b:00007ffe7bc0c148 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  658.358806][   T31] RAX: 0000000000000068 RBX: 0000555567a4e500 RCX: 00007fa6b1d5e98e
[  658.358820][   T31] RDX: 0000000000000068 RSI: 00007fa6b2b54670 RDI: 0000000000000003
[  658.358831][   T31] RBP: 0000000000000001 R08: 00007ffe7bc0c1c4 R09: 000000000000000c
[  658.358844][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  658.358855][   T31] R13: 0000000000000000 R14: 00007fa6b2b54670 R15: 0000000000000000
[  658.358885][   T31]  </TASK>
[  658.358895][   T31] INFO: task syz-executor:16025 blocked for more than 143 seconds.
[  658.358909][   T31]       Not tainted syzkaller #0
[  658.358918][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  658.358927][   T31] task:syz-executor    state:D stack:25576 pid:16025 tgid:16025 ppid:1      task_flags:0x400140 flags:0x00080002
[  658.358977][   T31] Call Trace:
[  658.358984][   T31]  <TASK>
[  658.358995][   T31]  __schedule+0x17d4/0x5820
[  658.359026][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.359047][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.359075][   T31]  ? __pfx___schedule+0x10/0x10
[  658.359106][   T31]  ? schedule+0x90/0x2b0
[  658.359132][   T31]  schedule+0x164/0x2b0
[  658.359155][   T31]  schedule_preempt_disabled+0x13/0x30
[  658.359177][   T31]  __mutex_lock+0x7c1/0x1550
[  658.359206][   T31]  ? __mutex_lock+0x5d4/0x1550
[  658.359233][   T31]  ? ib_get_eth_speed+0x173/0x7f0
[  658.359321][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  658.359353][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[  658.359380][   T31]  ? _raw_spin_unlock+0x28/0x50
[  658.359400][   T31]  ? ib_device_get_netdev+0x220/0x2f0
[  658.359455][   T31]  ib_get_eth_speed+0x173/0x7f0
[  658.359480][   T31]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  658.359513][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[  658.359546][   T31]  ? rxe_query_port+0x6b/0x3d0
[  658.359608][   T31]  rxe_query_port+0x93/0x3d0
[  658.359635][   T31]  ib_query_port+0x16e/0x830
[  658.359662][   T31]  ib_setup_port_attrs+0x294/0x2420
[  658.359694][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.359721][   T31]  ? rcu_is_watching+0x16/0xb0
[  658.359742][   T31]  ? trace_contention_end+0x3d/0x140
[  658.359782][   T31]  ? __pfx_ib_setup_port_attrs+0x10/0x10
[  658.359812][   T31]  ? __mutex_unlock_slowpath+0x731/0x900
[  658.359840][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  658.359865][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  658.359898][   T31]  ? kobject_put+0x50f/0x550
[  658.360000][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[  658.360028][   T31]  ? device_add+0x6f6/0xb80
[  658.360136][   T31]  add_one_compat_dev+0x446/0x650
[  658.360167][   T31]  rdma_dev_init_net+0x243/0x2f0
[  658.360192][   T31]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  658.360217][   T31]  ? __kmalloc_noprof+0x1ab/0x720
[  658.360243][   T31]  ? ops_init+0x7b/0x5d0
[  658.360307][   T31]  ops_init+0x35d/0x5d0
[  658.360342][   T31]  setup_net+0x118/0x350
[  658.360370][   T31]  ? __pfx_setup_net+0x10/0x10
[  658.360395][   T31]  ? down_read_killable+0x1bb/0x3b0
[  658.360422][   T31]  ? __ns_common_init+0x2fc/0x4a0
[  658.360455][   T31]  copy_net_ns+0x53b/0x780
[  658.360484][   T31]  create_new_namespaces+0x3f0/0x6b0
[  658.360521][   T31]  unshare_nsproxy_namespaces+0x149/0x190
[  658.360556][   T31]  ksys_unshare+0x5a7/0x950
[  658.360601][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  658.360641][   T31]  __x64_sys_unshare+0x38/0x50
[  658.360666][   T31]  do_syscall_64+0x166/0x520
[  658.360690][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.360709][   T31]  ? clear_bhb_loop+0x70/0xc0
[  658.360733][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.360751][   T31] RIP: 0033:0x7f078739f427
[  658.360768][   T31] RSP: 002b:00007ffe4c6731d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  658.360787][   T31] RAX: ffffffffffffffda RBX: 00007f0787625f40 RCX: 00007f078739f427
[  658.360801][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  658.360812][   T31] RBP: 00007f07876267b8 R08: 0000000000000000 R09: 0000000000000000
[  658.360822][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  658.360833][   T31] R13: 0000000000000003 R14: 00007ffe4c673418 R15: 0000000000000000
[  658.360862][   T31]  </TASK>
[  658.360871][   T31] INFO: task syz-executor:16028 blocked for more than 143 seconds.
[  658.360884][   T31]       Not tainted syzkaller #0
[  658.360894][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  658.360902][   T31] task:syz-executor    state:D stack:22504 pid:16028 tgid:16028 ppid:1      task_flags:0x400140 flags:0x00080002
[  658.360951][   T31] Call Trace:
[  658.360957][   T31]  <TASK>
[  658.360968][   T31]  __schedule+0x17d4/0x5820
[  658.361019][   T31]  ? __pfx___schedule+0x10/0x10
[  658.361049][   T31]  ? schedule+0x90/0x2b0
[  658.361075][   T31]  schedule+0x164/0x2b0
[  658.361098][   T31]  schedule_preempt_disabled+0x13/0x30
[  658.361120][   T31]  __mutex_lock+0x7c1/0x1550
[  658.361150][   T31]  ? __mutex_lock+0x5d4/0x1550
[  658.361177][   T31]  ? rtnl_newlink+0xc10/0x1c30
[  658.361206][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  658.361240][   T31]  ? ns_capable+0x89/0xe0
[  658.361265][   T31]  ? rtnl_nets_add+0x16c/0x300
[  658.361281][   T31]  ? refcount_inc+0x46/0x70
[  658.361307][   T31]  rtnl_newlink+0xc10/0x1c30
[  658.361333][   T31]  ? rtnl_newlink+0x8f1/0x1c30
[  658.361368][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  658.361395][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.361421][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.361454][   T31]  ? lock_acquire+0x115/0x350
[  658.361480][   T31]  ? lock_acquire+0x115/0x350
[  658.361507][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  658.361542][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.361563][   T31]  ? kernel_text_address+0xa5/0xe0
[  658.361585][   T31]  ? __kernel_text_address+0xd/0x30
[  658.361604][   T31]  ? unwind_get_return_address+0x4d/0x90
[  658.361626][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  658.361654][   T31]  ? arch_stack_walk+0xfb/0x150
[  658.361687][   T31]  ? lock_acquire+0x115/0x350
[  658.361719][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  658.361745][   T31]  rtnetlink_rcv_msg+0x802/0xc00
[  658.361769][   T31]  ? netlink_sendmsg+0x5d4/0xb40
[  658.361793][   T31]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  658.361827][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  658.361854][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.361886][   T31]  netlink_rcv_skb+0x226/0x4a0
[  658.361908][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  658.361936][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  658.361970][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  658.361990][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  658.362012][   T31]  netlink_unicast+0x7bd/0x940
[  658.362041][   T31]  netlink_sendmsg+0x813/0xb40
[  658.362077][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  658.362106][   T31]  ? apparmor_socket_sendmsg+0x98/0x360
[  658.362135][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  658.362155][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  658.362181][   T31]  __sys_sendto+0x408/0x5a0
[  658.362250][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  658.362274][   T31]  ? kvm_sched_clock_read+0x11/0x20
[  658.362307][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[  658.362345][   T31]  ? rcu_is_watching+0x16/0xb0
[  658.362373][   T31]  __x64_sys_sendto+0xde/0x100
[  658.362403][   T31]  do_syscall_64+0x166/0x520
[  658.362427][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.362450][   T31]  ? clear_bhb_loop+0x70/0xc0
[  658.362471][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.362494][   T31] RIP: 0033:0x7fe20f35e98e
[  658.362511][   T31] RSP: 002b:00007ffeff4bc618 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  658.362536][   T31] RAX: ffffffffffffffda RBX: 00005555812a0500 RCX: 00007fe20f35e98e
[  658.362550][   T31] RDX: 000000000000004c RSI: 00007fe210154670 RDI: 0000000000000003
[  658.362562][   T31] RBP: 0000000000000001 R08: 00007ffeff4bc694 R09: 000000000000000c
[  658.362574][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  658.362586][   T31] R13: 0000000000000000 R14: 00007fe210154670 R15: 0000000000000000
[  658.362615][   T31]  </TASK>
[  658.362623][   T31] INFO: task syz-executor:16031 blocked for more than 143 seconds.
[  658.362636][   T31]       Not tainted syzkaller #0
[  658.362645][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  658.362653][   T31] task:syz-executor    state:D stack:25768 pid:16031 tgid:16031 ppid:1      task_flags:0x400140 flags:0x00080002
[  658.362704][   T31] Call Trace:
[  658.362710][   T31]  <TASK>
[  658.362722][   T31]  __schedule+0x17d4/0x5820
[  658.362754][   T31]  ? _raw_spin_unlock_irq_enable+0x4f/0xa0
[  658.362781][   T31]  ? try_to_wake_up+0x8b6/0x14d0
[  658.362811][   T31]  ? __pfx___schedule+0x10/0x10
[  658.362842][   T31]  ? schedule+0x90/0x2b0
[  658.362867][   T31]  schedule+0x164/0x2b0
[  658.362891][   T31]  schedule_preempt_disabled+0x13/0x30
[  658.362913][   T31]  __mutex_lock+0x7c1/0x1550
[  658.362941][   T31]  ? __mutex_lock+0x5d4/0x1550
[  658.362968][   T31]  ? ib_get_eth_speed+0x173/0x7f0
[  658.362992][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  658.363023][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[  658.363050][   T31]  ? _raw_spin_unlock+0x28/0x50
[  658.363070][   T31]  ? ib_device_get_netdev+0x220/0x2f0
[  658.363096][   T31]  ib_get_eth_speed+0x173/0x7f0
[  658.363120][   T31]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  658.363139][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  658.363172][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[  658.363200][   T31]  ? _raw_spin_unlock+0x28/0x50
[  658.363226][   T31]  siw_query_port+0x3c/0x4a0
[  658.363455][   T31]  ib_setup_port_attrs+0x294/0x2420
[  658.363482][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.363505][   T31]  ? rcu_is_watching+0x16/0xb0
[  658.363548][   T31]  ? trace_contention_end+0x3d/0x140
[  658.363587][   T31]  ? __pfx_ib_setup_port_attrs+0x10/0x10
[  658.363612][   T31]  ? __mutex_unlock_slowpath+0x731/0x900
[  658.363641][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  658.363665][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  658.363698][   T31]  ? kobject_put+0x50f/0x550
[  658.363728][   T31]  ? do_raw_spin_unlock+0xf5/0x200
[  658.363757][   T31]  ? device_add+0x6f6/0xb80
[  658.363783][   T31]  add_one_compat_dev+0x446/0x650
[  658.363814][   T31]  rdma_dev_init_net+0x243/0x2f0
[  658.363839][   T31]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  658.363864][   T31]  ? __kmalloc_noprof+0x1ab/0x720
[  658.363890][   T31]  ? ops_init+0x7b/0x5d0
[  658.363920][   T31]  ops_init+0x35d/0x5d0
[  658.363955][   T31]  setup_net+0x118/0x350
[  658.363982][   T31]  ? __pfx_setup_net+0x10/0x10
[  658.364007][   T31]  ? down_read_killable+0x1bb/0x3b0
[  658.364034][   T31]  ? __ns_common_init+0x2fc/0x4a0
[  658.364063][   T31]  copy_net_ns+0x53b/0x780
[  658.364091][   T31]  create_new_namespaces+0x3f0/0x6b0
[  658.364118][   T31]  ? security_capable+0x7e/0x2c0
[  658.364153][   T31]  unshare_nsproxy_namespaces+0x149/0x190
[  658.364180][   T31]  ksys_unshare+0x5a7/0x950
[  658.364212][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  658.364416][   T31]  __x64_sys_unshare+0x38/0x50
[  658.364442][   T31]  do_syscall_64+0x166/0x520
[  658.364465][   T31]  ? trace_irq_disable+0x3b/0x140
[  658.364483][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.364501][   T31]  ? clear_bhb_loop+0x70/0xc0
[  658.364530][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.364549][   T31] RIP: 0033:0x7fdc9f19f427
[  658.364569][   T31] RSP: 002b:00007ffea6453548 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  658.364588][   T31] RAX: ffffffffffffffda RBX: 00007fdc9f425f40 RCX: 00007fdc9f19f427
[  658.364602][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  658.364618][   T31] RBP: 00007fdc9f4267b8 R08: 0000000000000000 R09: 0000000000000000
[  658.364630][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  658.364641][   T31] R13: 0000000000000003 R14: 00007ffea6453788 R15: 0000000000000000
[  658.364671][   T31]  </TASK>
[  658.364679][   T31] INFO: task syz-executor:16089 blocked for more than 143 seconds.
[  658.364693][   T31]       Not tainted syzkaller #0
[  658.364702][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  658.364710][   T31] task:syz-executor    state:D stack:26616 pid:16089 tgid:16089 ppid:1      task_flags:0x400140 flags:0x00080002
[  658.364761][   T31] Call Trace:
[  658.364768][   T31]  <TASK>
[  658.364779][   T31]  __schedule+0x17d4/0x5820
[  658.364829][   T31]  ? __pfx___schedule+0x10/0x10
[  658.364859][   T31]  ? schedule+0x90/0x2b0
[  658.364885][   T31]  schedule+0x164/0x2b0
[  658.364909][   T31]  schedule_preempt_disabled+0x13/0x30
[  658.364931][   T31]  __mutex_lock+0x7c1/0x1550
[  658.364961][   T31]  ? __mutex_lock+0x5d4/0x1550
[  658.364988][   T31]  ? rtnl_newlink+0xc10/0x1c30
[  658.365016][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  658.365050][   T31]  ? ns_capable+0x89/0xe0
[  658.365075][   T31]  ? rtnl_nets_add+0x16c/0x300
[  658.365090][   T31]  ? rtnl_newlink+0x905/0x1c30
[  658.365118][   T31]  rtnl_newlink+0xc10/0x1c30
[  658.365156][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  658.365183][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.977038][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.977790][   T31]  ? lock_acquire+0x115/0x350
[  658.978052][   T31]  ? lock_acquire+0x115/0x350
[  658.979206][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  658.979730][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.979982][   T31]  ? kernel_text_address+0xa5/0xe0
[  658.980255][   T31]  ? __kernel_text_address+0xd/0x30
[  658.980514][   T31]  ? unwind_get_return_address+0x4d/0x90
[  658.980767][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  658.981254][   T31]  ? arch_stack_walk+0xfb/0x150
[  658.981531][   T31]  ? lock_acquire+0x115/0x350
[  658.981785][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  658.982054][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  658.982307][   T31]  rtnetlink_rcv_msg+0x802/0xc00
[  658.982538][   T31]  ? netlink_sendmsg+0x5d4/0xb40
[  658.983038][   T31]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  658.983291][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  658.984021][   T31]  ? __lock_acquire+0x6df/0x2e50
[  658.985521][   T31]  netlink_rcv_skb+0x226/0x4a0
[  658.985781][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  658.986252][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  658.986810][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  658.987124][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  658.987726][   T31]  netlink_unicast+0x7bd/0x940
[  658.989152][   T31]  netlink_sendmsg+0x813/0xb40
[  658.989467][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  658.989790][   T31]  ? apparmor_socket_sendmsg+0x98/0x360
[  658.990110][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  658.990412][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  658.991557][   T31]  __sys_sendto+0x408/0x5a0
[  658.991886][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  658.992427][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[  658.992736][   T31]  ? fput_close_sync+0x11f/0x240
[  658.992991][   T31]  ? kmem_cache_free+0x471/0x650
[  659.076787][   T31]  ? __pfx_fput_close_sync+0x10/0x10
[  659.076829][   T31]  __x64_sys_sendto+0xde/0x100
[  659.076861][   T31]  do_syscall_64+0x166/0x520
[  659.076887][   T31]  ? trace_irq_disable+0x3b/0x140
[  659.076905][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
** replaying previous printk message **
[  659.076905][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.076925][   T31]  ? clear_bhb_loop+0x70/0xc0
[  659.076949][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.076968][   T31] RIP: 0033:0x7f525155e98e
[  659.076986][   T31] RSP: 002b:00007ffd66b5b958 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  659.077011][   T31] RAX: ffffffffffffffda RBX: 000055555bbbc500 RCX: 00007f525155e98e
[  659.077025][   T31] RDX: 000000000000002c RSI: 00007f5252354670 RDI: 0000000000000003
[  659.077038][   T31] RBP: 0000000000000001 R08: 00007ffd66b5b9d4 R09: 000000000000000c
[  659.077050][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  659.077061][   T31] R13: 0000000000000000 R14: 00007f5252354670 R15: 0000000000000000
[  659.077089][   T31]  </TASK>
[  659.092734][   T31] INFO: task syz.4.2315:16108 blocked for more than 144 seconds.
[  659.092758][   T31]       Not tainted syzkaller #0
[  659.092768][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  659.092777][   T31] task:syz.4.2315      state:D stack:26960 pid:16108 tgid:16105 ppid:5617   task_flags:0x400140 flags:0x00080002
[  659.092832][   T31] Call Trace:
[  659.092839][   T31]  <TASK>
[  659.092853][   T31]  __schedule+0x17d4/0x5820
[  659.092891][   T31]  ? kasan_save_track+0x4f/0x80
[  659.092914][   T31]  ? ppp_ioctl+0xa89/0x1c00
[  659.093036][   T31]  ? __se_sys_ioctl+0xfc/0x170
[  659.093054][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.093084][   T31]  ? __pfx___schedule+0x10/0x10
[  659.093116][   T31]  ? schedule+0x90/0x2b0
[  659.093149][   T31]  schedule+0x164/0x2b0
[  659.093174][   T31]  schedule_preempt_disabled+0x13/0x30
[  659.093196][   T31]  __mutex_lock+0x7c1/0x1550
[  659.093225][   T31]  ? __mutex_lock+0x5d4/0x1550
[  659.093254][   T31]  ? ppp_ioctl+0xaef/0x1c00
[  659.093276][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  659.093301][   T31]  ? alloc_netdev_mqs+0xd44/0x12a0
[  659.093322][   T31]  ? alloc_netdev_mqs+0xd44/0x12a0
[  659.093350][   T31]  ? alloc_netdev_mqs+0xef9/0x12a0
[  659.093377][   T31]  ppp_ioctl+0xaef/0x1c00
[  659.093404][   T31]  ? __pfx_ppp_ioctl+0x10/0x10
[  659.093428][   T31]  ? __fget_files+0x2a/0x420
[  659.093451][   T31]  ? __fget_files+0x3a2/0x420
[  659.093473][   T31]  ? __fget_files+0x2a/0x420
[  659.093500][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  659.093525][   T31]  ? __pfx_ppp_ioctl+0x10/0x10
[  659.093544][   T31]  __se_sys_ioctl+0xfc/0x170
[  659.093564][   T31]  do_syscall_64+0x166/0x520
[  659.093586][   T31]  ? trace_irq_disable+0x3b/0x140
[  659.093602][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.093618][   T31]  ? clear_bhb_loop+0x70/0xc0
[  659.093641][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.093659][   T31] RIP: 0033:0x7fb82979e159
[  659.093676][   T31] RSP: 002b:00007fb82a65d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  659.093694][   T31] RAX: ffffffffffffffda RBX: 00007fb829a26090 RCX: 00007fb82979e159
[  659.093708][   T31] RDX: 00002000000000c0 RSI: 00000000c004743e RDI: 0000000000000007
[  659.093720][   T31] RBP: 00007fb829835024 R08: 0000000000000000 R09: 0000000000000000
[  659.093732][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.093743][   T31] R13: 00007fb829a26128 R14: 00007fb829a26090 R15: 00007ffed93e5418
[  659.093772][   T31]  </TASK>
[  659.093780][   T31] INFO: task syz.4.2315:16109 blocked for more than 144 seconds.
[  659.093794][   T31]       Not tainted syzkaller #0
[  659.093802][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  659.093811][   T31] task:syz.4.2315      state:D stack:27200 pid:16109 tgid:16105 ppid:5617   task_flags:0x400040 flags:0x00080002
[  659.093860][   T31] Call Trace:
[  659.093866][   T31]  <TASK>
[  659.093877][   T31]  __schedule+0x17d4/0x5820
[  659.093915][   T31]  ? stack_trace_save+0xa9/0x100
[  659.399114][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  659.399161][   T31]  ? __pfx___schedule+0x10/0x10
[  659.399196][   T31]  ? schedule+0x90/0x2b0
[  659.399221][   T31]  schedule+0x164/0x2b0
[  659.399247][   T31]  schedule_preempt_disabled+0x13/0x30
[  659.399269][   T31]  __mutex_lock+0x7c1/0x1550
[  659.399299][   T31]  ? __mutex_lock+0x5d4/0x1550
[  659.399327][   T31]  ? nl80211_dump_wiphy+0x49/0x6b0
[  659.399467][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  659.399500][   T31]  ? rcu_is_watching+0x16/0xb0
[  659.399523][   T31]  ? trace_kmalloc+0x2a/0xf0
[  659.399555][   T31]  nl80211_dump_wiphy+0x49/0x6b0
[  659.399574][   T31]  ? __kmalloc_node_track_caller_noprof+0x2eb/0x720
[  659.399601][   T31]  ? netlink_dump+0x1e7/0xee0
[  659.399620][   T31]  ? netlink_dump+0x1e7/0xee0
[  659.399647][   T31]  genl_dumpit+0x10b/0x1b0
[  659.399676][   T31]  netlink_dump+0x711/0xee0
[  659.399708][   T31]  ? __pfx_netlink_dump+0x10/0x10
[  659.399740][   T31]  ? genl_start+0x497/0x6d0
[  659.399772][   T31]  __netlink_dump_start+0x589/0x7b0
[  659.399800][   T31]  genl_family_rcv_msg_dumpit+0x213/0x310
[  659.399830][   T31]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  659.399854][   T31]  ? genl_get_cmd+0x82f/0x960
[  659.399884][   T31]  ? __pfx_genl_start+0x10/0x10
[  659.399907][   T31]  ? __pfx_genl_dumpit+0x10/0x10
[  659.399930][   T31]  ? __pfx_genl_done+0x10/0x10
[  659.399956][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  659.399987][   T31]  genl_rcv_msg+0x5e1/0x7a0
[  659.400019][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  659.400044][   T31]  ? __pfx_nl80211_dump_wiphy+0x10/0x10
[  659.400062][   T31]  ? __pfx_nl80211_dump_wiphy_done+0x10/0x10
[  659.400083][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  659.400123][   T31]  netlink_rcv_skb+0x226/0x4a0
[  659.400144][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  659.400175][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  659.400211][   T31]  ? down_read+0x2be/0x330
[  659.400245][   T31]  genl_rcv+0x28/0x40
[  659.400268][   T31]  netlink_unicast+0x7bd/0x940
[  659.400298][   T31]  netlink_sendmsg+0x813/0xb40
[  659.400329][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.400358][   T31]  ? apparmor_socket_sendmsg+0x98/0x360
[  659.400387][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.400408][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  659.400441][   T31]  ____sys_sendmsg+0x54e/0x850
[  659.400466][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  659.400493][   T31]  ? import_iovec+0x73/0xa0
[  659.597213][   T31]  ___sys_sendmsg+0x2a5/0x360
[  659.597245][   T31]  ? __lock_acquire+0x6df/0x2e50
[  659.597271][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  659.597294][   T31]  ? futex_wait+0x2a2/0x390
[  659.597390][   T31]  ? __fget_files+0x2a/0x420
[  659.597413][   T31]  ? __fget_files+0x3a2/0x420
[  659.597445][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  659.597467][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  659.597507][   T31]  do_syscall_64+0x166/0x520
[  659.597531][   T31]  ? trace_irq_disable+0x3b/0x140
[  659.597550][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.597569][   T31]  ? clear_bhb_loop+0x70/0xc0
[  659.597592][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.597612][   T31] RIP: 0033:0x7fb82979e159
[  659.597629][   T31] RSP: 002b:00007fb82a63c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  659.597651][   T31] RAX: ffffffffffffffda RBX: 00007fb829a26180 RCX: 00007fb82979e159
[  659.597665][   T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  659.597677][   T31] RBP: 00007fb829835024 R08: 0000000000000000 R09: 0000000000000000
[  659.597689][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.597701][   T31] R13: 00007fb829a26218 R14: 00007fb829a26180 R15: 00007ffed93e5418
[  659.597732][   T31]  </TASK>
[  659.597740][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  659.597765][   T31] INFO: task syz.4.2315:16112 blocked for more than 144 seconds.
[  659.597780][   T31]       Not tainted syzkaller #0
[  659.597789][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  659.597799][   T31] task:syz.4.2315      state:D stack:26624 pid:16112 tgid:16105 ppid:5617   task_flags:0x400040 flags:0x00080002
[  659.597854][   T31] Call Trace:
[  659.597861][   T31]  <TASK>
[  659.597872][   T31]  __schedule+0x17d4/0x5820
[  659.597913][   T31]  ? is_bpf_text_address+0x292/0x2b0
[  659.597950][   T31]  ? __pfx___schedule+0x10/0x10
[  659.597981][   T31]  ? schedule+0x90/0x2b0
[  659.598006][   T31]  schedule+0x164/0x2b0
[  659.598030][   T31]  schedule_preempt_disabled+0x13/0x30
[  659.598052][   T31]  __mutex_lock+0x7c1/0x1550
[  659.598082][   T31]  ? __mutex_lock+0x5d4/0x1550
[  659.598110][   T31]  ? netlink_dump+0xe7/0xee0
[  659.598132][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  659.598155][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.598194][   T31]  netlink_dump+0xe7/0xee0
[  659.598226][   T31]  ? __pfx_netlink_dump+0x10/0x10
[  659.598258][   T31]  ? netlink_recvmsg+0x5bf/0xa50
[  659.598277][   T31]  ? kmem_cache_free+0x182/0x650
[  659.598303][   T31]  netlink_recvmsg+0x683/0xa50
[  659.598334][   T31]  ? __pfx_netlink_recvmsg+0x10/0x10
[  659.598363][   T31]  ? aa_sock_msg_perm+0x144/0x210
[  659.598396][   T31]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  659.598418][   T31]  ? security_socket_recvmsg+0x7e/0x2c0
[  659.598527][   T31]  ? __pfx_netlink_recvmsg+0x10/0x10
[  659.598549][   T31]  sock_recvmsg+0x196/0x1e0
[  659.598576][   T31]  __sys_recvfrom+0x231/0x3a0
[  659.598609][   T31]  ? __pfx___sys_recvfrom+0x10/0x10
[  659.598664][   T31]  ? do_user_addr_fault+0xc4c/0x1340
[  659.598689][   T31]  __x64_sys_recvfrom+0xde/0x100
[  659.598719][   T31]  do_syscall_64+0x166/0x520
[  659.598742][   T31]  ? trace_irq_disable+0x3b/0x140
[  659.762026][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.762939][   T31]  ? clear_bhb_loop+0x70/0xc0
[  659.763264][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.763859][   T31] RIP: 0033:0x7fb82975e98e
[  659.764186][   T31] RSP: 002b:00007fb82a619e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  659.764475][   T31] RAX: ffffffffffffffda RBX: 00007fb82a61b6c0 RCX: 00007fb82975e98e
[  659.764776][   T31] RDX: 0000000000001000 RSI: 00007fb82a61a000 RDI: 0000000000000008
[  659.765092][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  659.765104][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  659.765236][   T31] R13: 00007fb82a619f58 R14: 00007fb82a61a000 R15: 0000000000000000
[  659.765820][   T31]  </TASK>
[  659.766699][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  659.767024][   T31] INFO: task syz.4.2315:16113 blocked for more than 144 seconds.
[  659.767040][   T31]       Not tainted syzkaller #0
[  659.767318][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  659.767331][   T31] task:syz.4.2315      state:D stack:28360 pid:16113 tgid:16105 ppid:5617   task_flags:0x400040 flags:0x00080002
[  659.768533][   T31] Call Trace:
[  659.768540][   T31]  <TASK>
[  659.769682][   T31]  __schedule+0x17d4/0x5820
[  659.770301][   T31]  ? is_bpf_text_address+0x292/0x2b0
[  659.770610][   T31]  ? __pfx___schedule+0x10/0x10
[  659.770967][   T31]  ? schedule+0x90/0x2b0
[  659.771291][   T31]  schedule+0x164/0x2b0
[  659.772802][   T31]  schedule_preempt_disabled+0x13/0x30
[  659.773124][   T31]  __mutex_lock+0x7c1/0x1550
[  659.773716][   T31]  ? __mutex_lock+0x5d4/0x1550
[  659.774013][   T31]  ? netlink_dump+0xe7/0xee0
[  659.774860][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  659.777197][   T31]  ? __x64_sys_recvmmsg+0x198/0x250
[  659.777816][   T31]  netlink_dump+0xe7/0xee0
[  659.778699][   T31]  ? __pfx_netlink_dump+0x10/0x10
[  659.779587][   T31]  ? netlink_recvmsg+0x5bf/0xa50
[  659.780201][   T31]  ? kmem_cache_free+0x182/0x650
[  659.780501][   T31]  netlink_recvmsg+0x683/0xa50
[  659.890315][   T31]  ? __pfx_netlink_recvmsg+0x10/0x10
[  659.890596][   T31]  ? lock_acquire+0x115/0x350
[  659.891299][   T31]  ? aa_sock_msg_perm+0x144/0x210
[  659.891550][   T31]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  659.891778][   T31]  ? security_socket_recvmsg+0x7e/0x2c0
[  659.892053][   T31]  ? __pfx_netlink_recvmsg+0x10/0x10
[  659.892314][   T31]  sock_recvmsg+0x196/0x1e0
[  659.892773][   T31]  ____sys_recvmsg+0x1e6/0x4a0
[  659.893033][   T31]  ? __pfx_____sys_recvmsg+0x10/0x10
[  659.893526][   T31]  ? import_iovec+0x73/0xa0
[  659.893811][   T31]  ___sys_recvmsg+0x213/0x5a0
[  659.894510][   T31]  ? __pfx____sys_recvmsg+0x10/0x10
[  659.894765][   T31]  ? lock_acquire+0x115/0x350
[  659.896040][   T31]  ? __fget_files+0x3a2/0x420
[  659.896308][   T31]  do_recvmmsg+0x31a/0x7f0
[  659.897293][   T31]  ? __pfx_do_recvmmsg+0x10/0x10
[  659.897980][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  659.898246][   T31]  ? __fget_files+0x3a2/0x420
[  659.898965][   T31]  __x64_sys_recvmmsg+0x198/0x250
[  659.899673][   T31]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  659.899946][   T31]  do_syscall_64+0x166/0x520
[  659.900213][   T31]  ? trace_irq_disable+0x3b/0x140
[  659.900461][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.900721][   T31]  ? clear_bhb_loop+0x70/0xc0
[  659.901211][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.901456][   T31] RIP: 0033:0x7fb82979e159
[  659.901707][   T31] RSP: 002b:00007fb82a5fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  659.901947][   T31] RAX: ffffffffffffffda RBX: 00007fb829a26360 RCX: 00007fb82979e159
[  659.902195][   T31] RDX: 0000000000000005 RSI: 0000200000003c80 RDI: 0000000000000008
[  659.902207][   T31] RBP: 00007fb82a5fa090 R08: 0000000000000000 R09: 0000000000000000
[  659.902439][   T31] R10: 0000000000020000 R11: 0000000000000246 R12: 0000000000000002
[  659.902669][   T31] R13: 00007fb829a263f8 R14: 00007fb829a26360 R15: 00007ffed93e5418
[  659.903422][   T31]  </TASK>
[  659.904108][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  659.904587][   T31] INFO: task syz.4.2315:16114 blocked for more than 145 seconds.
[  659.904603][   T31]       Not tainted syzkaller #0
[  659.905081][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  659.905090][   T31] task:syz.4.2315      state:D stack:26456 pid:16114 tgid:16105 ppid:5617   task_flags:0x400140 flags:0x00080002
[  660.122206][   T31] Call Trace:
[  660.122214][   T31]  <TASK>
[  660.122227][   T31]  __schedule+0x17d4/0x5820
[  660.122284][   T31]  ? __pfx___schedule+0x10/0x10
[  660.122316][   T31]  ? schedule+0x90/0x2b0
[  660.122341][   T31]  schedule+0x164/0x2b0
[  660.122365][   T31]  schedule_preempt_disabled+0x13/0x30
[  660.122387][   T31]  __mutex_lock+0x7c1/0x1550
[  660.122417][   T31]  ? __mutex_lock+0x5d4/0x1550
[  660.122444][   T31]  ? ppp_ioctl+0xdf/0x1c00
[  660.122468][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  660.122500][   T31]  ? hook_file_ioctl+0x1f2/0x600
[  660.122537][   T31]  ppp_ioctl+0xdf/0x1c00
[  660.122564][   T31]  ? __pfx_ppp_ioctl+0x10/0x10
[  660.122596][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  660.122622][   T31]  ? __pfx_ppp_ioctl+0x10/0x10
[  660.122642][   T31]  __se_sys_ioctl+0xfc/0x170
[  660.122665][   T31]  do_syscall_64+0x166/0x520
[  660.122690][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.122710][   T31]  ? clear_bhb_loop+0x70/0xc0
[  660.122732][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.122752][   T31] RIP: 0033:0x7fb82979e159
[  660.122769][   T31] RSP: 002b:00007fb82a5d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  660.122788][   T31] RAX: ffffffffffffffda RBX: 00007fb829a26450 RCX: 00007fb82979e159
[  660.122802][   T31] RDX: 0000200000000080 RSI: 000000004010744d RDI: 0000000000000007
[  660.122815][   T31] RBP: 00007fb829835024 R08: 0000000000000000 R09: 0000000000000000
[  660.122827][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  660.122838][   T31] R13: 00007fb829a264e8 R14: 00007fb829a26450 R15: 00007ffed93e5418
[  660.122876][   T31]  </TASK>
[  660.122884][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  660.122930][   T31] 
[  660.122930][   T31] Showing all locks held in the system:
[  660.122940][   T31] locks held by kworker/0:1/10: 3, on CPU#0:
[  660.122954][   T31]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.123006][   T31]  #1: ffffc900000f7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.123055][   T31]  #2: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770
[  660.123162][   T31] locks held by pr/ttyS0/16: 1, last CPU#0:
[  660.123175][   T31]  #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  660.123223][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[  660.123236][   T31]  #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  660.123299][   T31] locks held by kworker/u8:5/117: 3, last CPU#1:
[  660.123312][   T31]  #0: ffff888032045940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.123376][   T31]  #1: ffffc900026e7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.123425][   T31]  #2: ffff8880b8728298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10
[  660.123479][   T31] locks held by kworker/0:2/985: 3, on CPU#0:
[  660.123492][   T31]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.123539][   T31]  #1: ffffc90004c5fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.123588][   T31]  #2: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  660.123863][   T31] locks held by dhcpcd/5278: 1, on CPU#0:
[  660.227695][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50
[  660.228677][   T31] locks held by getty/5370: 2, on CPU#0:
[  660.228904][   T31]  #0: ffff888035fa60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  660.229769][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  660.230786][   T31] locks held by syz-executor/5600: 1, last CPU#0:
[  660.231244][   T31]  #0: ffff888031875cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0
[  660.231960][   T31] locks held by kworker/u8:24/7054: 3, on CPU#0:
[  660.232193][   T31]  #0: ffff88803239f140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.233161][   T31]  #1: ffffc90003647c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.233656][   T31]  #2: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  660.234606][   T31] locks held by kworker/u8:43/9153: 2, last CPU#0:
[  660.234621][   T31]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.235914][   T31]  #1: ffffc9000716fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.236639][   T31] locks held by kworker/u8:78/9193: 4, last CPU#0:
[  660.236655][   T31]  #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.237403][   T31]  #1: ffffc9000932fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.238811][   T31]  #2: ffffffff902414c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  660.239956][   T31]  #3: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0
[  660.241159][   T31] locks held by kworker/u8:82/9198: 4, last CPU#0:
[  660.241174][   T31]  #0: ffff888057adc140 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.242338][   T31]  #1: ffffc9000936fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.243235][   T31]  #2: ffff88805abc9280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  660.244206][   T31]  #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560
[  660.244829][   T31] locks held by kworker/u8:83/9199: 3, on CPU#0:
[  660.244842][   T31]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.370429][   T31]  #1: ffffc900097e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  660.371231][   T31]  #2: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  660.371952][   T31] locks held by syz-executor/15809: 1, on CPU#0:
[  660.372165][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  660.372679][   T31] locks held by syz-executor/16025: 6, on CPU#0:
[  660.372925][   T31]  #0: ffffffff902414c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780
[  660.373444][   T31]  #1: ffffffff8ff9cea8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0
[  660.374149][   T31]  #2: ffffffff8ff9d068 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0
[  660.375133][   T31]  #3: ffff888022f01020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650
[  660.378622][   T31]  #4: ffff888022f01310 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0
[  660.379360][   T31]  #5: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0
[  660.380102][   T31] locks held by syz-executor/16028: 1, on CPU#0:
[  660.380359][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  660.380884][   T31] locks held by syz-executor/16031: 5, on CPU#0:
[  660.380898][   T31]  #0: ffffffff902414c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780
[  660.381619][   T31]  #1: ffffffff8ff9cea8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0
[  660.383290][   T31]  #2: ffffffff8ff9d068 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0
[  660.384501][   T31]  #3: ffff88805519d020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650
[  660.385311][   T31]  #4: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0
[  660.385685][   T31] locks held by syz-executor/16089: 1, on CPU#0:
[  660.386130][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  660.387181][   T31] locks held by syz.4.2315/16108: 2, on CPU#0:
[  660.387421][   T31]  #0: ffffffff8fa084c0 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00
[  660.388163][   T31]  #1: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xaef/0x1c00
[  660.451109][   T31] locks held by syz.4.2315/16109: 3, on CPU#0:
[  660.451369][   T31]  #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  660.451927][   T31]  #1: ffff88807fc616e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[  660.452415][   T31]  #2: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x49/0x6b0
[  660.452914][   T31] locks held by syz.4.2315/16112: 1, on CPU#0:
[  660.452930][   T31]  #0: ffff88807fc616e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0
[  660.454528][   T31] locks held by syz.4.2315/16113: 1, on CPU#0:
[  660.454760][   T31]  #0: ffff88807fc616e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0
[  660.458396][   T31] locks held by syz.4.2315/16114: 1, on CPU#1:
[  660.458648][   T31]  #0: ffffffff8fa084c0 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00
[  660.459841][   T31] locks held by syz-executor/16126: 1, on CPU#0:
[  660.460067][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.460812][   T31] locks held by syz-executor/16134: 1, on CPU#0:
[  660.460825][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.462688][   T31] locks held by syz-executor/16142: 1, on CPU#0:
[  660.462909][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.464150][   T31] locks held by syz-executor/16144: 1, on CPU#0:
[  660.464163][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.465396][   T31] locks held by syz-executor/16152: 1, on CPU#1:
[  660.465410][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.466819][   T31] locks held by syz-executor/16160: 1, on CPU#0:
[  660.467037][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.467965][   T31] locks held by syz-executor/16168: 1, on CPU#0:
[  660.468193][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.469112][   T31] locks held by syz-executor/16174: 1, on CPU#0:
[  660.469359][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.470066][   T31] locks held by syz-executor/16176: 1, on CPU#0:
[  660.718071][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.718136][   T31] locks held by syz-executor/16188: 1, on CPU#0:
[  660.718150][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.718197][   T31] locks held by syz-executor/16196: 1, on CPU#0:
[  660.718210][   T31]  #0: ffffffff9024fd40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  660.718277][   T31] 
[  660.718283][   T31] =============================================
[  660.718283][   T31] 
[  660.718318][   T31] NMI backtrace for cpu 0
[  660.718331][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  660.718352][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  660.718363][   T31] Call Trace:
[  660.718371][   T31]  <TASK>
[  660.718379][   T31]  dump_stack_lvl+0xe8/0x150
[  660.718408][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  660.718512][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  660.718553][   T31]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  660.718580][   T31]  sys_info+0x135/0x170
[  660.718597][   T31]  watchdog+0xfd7/0x1030
[  660.718622][   T31]  ? watchdog+0x1c7/0x1030
[  660.718646][   T31]  kthread+0x38b/0x480
[  660.718665][   T31]  ? __pfx_watchdog+0x10/0x10
[  660.718680][   T31]  ? __pfx_kthread+0x10/0x10
[  660.718698][   T31]  ret_from_fork+0x514/0xb70
[  660.718728][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  660.718756][   T31]  ? __switch_to+0xc89/0x1420
[  660.718783][   T31]  ? __pfx_kthread+0x10/0x10
[  660.718801][   T31]  ret_from_fork_asm+0x1a/0x30
[  660.718842][   T31]  </TASK>
[  660.718849][   T31] Sending NMI from CPU 0 to CPUs 1:
[  660.718878][    C1] NMI backtrace for cpu 1
[  660.718893][    C1] CPU: 1 UID: 0 PID: 9194 Comm: kworker/u8:79 Not tainted syzkaller #0 PREEMPT(full) 
[  660.718916][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  660.718928][    C1] Workqueue: bat_events batadv_tt_purge
[  660.719002][    C1] RIP: 0010:trace_hardirqs_on+0x23/0x40
[  660.719023][    C1] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 9d 1c c5 11 85 c0 74 14 48 8b 3c 24 e8 98 fe ff ff 65 c7 05 85 1c c5 11 00 00 00 00 <e8> 58 09 d3 ff 48 8b 3c 24 e9 ff fc 12 0a 66 66 66 66 66 66 2e 0f
[  660.719041][    C1] RSP: 0018:ffffc90000a18da0 EFLAGS: 00000002
[  660.719057][    C1] RAX: 0000000000000001 RBX: ffffffff9aa18748 RCX: 8000000000000103
[  660.719071][    C1] RDX: 0000000000000000 RSI: ffffffff8c6d8b60 RDI: ffffffff8c6d8b20
[  660.719085][    C1] RBP: 00000062871e680b R08: ffffffff907a027f R09: 1ffffffff20f404f
[  660.719100][    C1] R10: dffffc0000000000 R11: fffffbfff20f4050 R12: ffff888078eba718
[  660.719115][    C1] R13: ffff88802ac800b0 R14: ffffffff81b47735 R15: 0000000000000200
[  660.719129][    C1] FS:  0000000000000000(0000) GS:ffff888124de0000(0000) knlGS:0000000000000000
[  660.719146][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  660.719160][    C1] CR2: 00007ffda15efc7c CR3: 000000000eb48000 CR4: 00000000003526f0
[  660.719176][    C1] Call Trace:
[  660.719183][    C1]  <IRQ>
[  660.719190][    C1]  seqcount_lockdep_reader_access+0xa9/0x100
[  660.719212][    C1]  ktime_get+0x45/0x220
[  660.719230][    C1]  gate_timer_func+0x1dc/0x450
[  660.719315][    C1]  ? __pfx_gate_timer_func+0x10/0x10
[  660.719335][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  660.719371][    C1]  hrtimer_run_softirq+0x1e3/0x2e0
[  660.719402][    C1]  handle_softirqs+0x226/0x860
[  660.719430][    C1]  ? do_softirq+0x77/0xd0
[  660.719457][    C1]  ? process_scheduled_works+0x97a/0x1630
[  660.719482][    C1]  ? batadv_tt_local_purge+0x2c1/0x340
[  660.719503][    C1]  do_softirq+0x77/0xd0
[  660.719528][    C1]  </IRQ>
[  660.719534][    C1]  <TASK>
[  660.719541][    C1]  __local_bh_enable_ip+0x100/0x140
[  660.719566][    C1]  batadv_tt_local_purge+0x2c1/0x340
[  660.719591][    C1]  ? process_scheduled_works+0x97a/0x1630
[  660.719616][    C1]  batadv_tt_purge+0x35/0xa10
[  660.719637][    C1]  ? rcu_is_watching+0x16/0xb0
[  660.719660][    C1]  ? process_scheduled_works+0x97a/0x1630
[  660.719685][    C1]  process_scheduled_works+0xc3d/0x1630
[  660.719735][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  660.719764][    C1]  ? assign_work+0x3cf/0x5d0
[  660.719795][    C1]  worker_thread+0xa47/0xfb0
[  660.719835][    C1]  kthread+0x38b/0x480
[  660.719853][    C1]  ? __pfx_worker_thread+0x10/0x10
[  660.719878][    C1]  ? __pfx_kthread+0x10/0x10
[  660.719896][    C1]  ret_from_fork+0x514/0xb70
[  660.719928][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  660.719957][    C1]  ? __switch_to+0xc89/0x1420
[  660.719987][    C1]  ? __pfx_kthread+0x10/0x10
[  660.720006][    C1]  ret_from_fork_asm+0x1a/0x30
[  660.720043][    C1]  </TASK>
[  661.135554][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  663.876415][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  663.885522][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  663.895564][   T31] Call Trace:
[  663.898828][   T31]  <TASK>
[  663.901749][   T31]  vpanic+0x56d/0xa60
[  663.905730][   T31]  ? __pfx___schedule+0x10/0x10
[  663.910572][   T31]  ? __pfx_vpanic+0x10/0x10
[  663.915074][   T31]  panic+0xc5/0xd0
[  663.918788][   T31]  ? __pfx_panic+0x10/0x10
[  663.923194][   T31]  ? preempt_schedule_common+0x7f/0xd0
[  663.928642][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  663.934001][   T31]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  663.940148][   T31]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  663.946289][   T31]  watchdog+0x1030/0x1030
[  663.950615][   T31]  ? watchdog+0x1c7/0x1030
[  663.955022][   T31]  kthread+0x38b/0x480
[  663.959081][   T31]  ? __pfx_watchdog+0x10/0x10
[  663.963740][   T31]  ? __pfx_kthread+0x10/0x10
[  663.968318][   T31]  ret_from_fork+0x514/0xb70
[  663.972902][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  663.978008][   T31]  ? __switch_to+0xc89/0x1420
[  663.982695][   T31]  ? __pfx_kthread+0x10/0x10
[  663.987287][   T31]  ret_from_fork_asm+0x1a/0x30
[  663.992079][   T31]  </TASK>
[  663.995365][   T31] Kernel Offset: disabled
[  663.999677][   T31] Rebooting in 86400 seconds..