last executing test programs:

4.910125497s ago: executing program 3 (id=1290):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x0, 0x8000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r7, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044)
sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x50881}, 0x44040)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r8, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4)

3.925158252s ago: executing program 0 (id=1300):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
socket$l2tp(0x2, 0x2, 0x73)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
sendfile(r0, r2, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000033, 0x0)

3.355968734s ago: executing program 1 (id=1306):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newqdisc={0x168, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0xa40e, 0xa, 0x2, 0x242, 0x2000000, 0x9}}, {0x16, 0x2, [0x1, 0x2, 0x4, 0x5, 0x10, 0x80, 0x5, 0x0, 0x2]}}, {{0x1c, 0x1, {0xd, 0xd, 0x81, 0x1, 0x0, 0x7, 0x80000001, 0x8}}, {0x14, 0x2, [0x6, 0x2, 0x525c, 0x82db, 0x9, 0x7ff, 0xd, 0xb]}}, {{0x1c, 0x1, {0x8, 0x9, 0x7, 0x7, 0x0, 0xd5e, 0x0, 0x7}}, {0x12, 0x2, [0x5, 0xc, 0x5093, 0xfff, 0x100, 0x4, 0x9]}}, {{0x1c, 0x1, {0x7, 0xd8, 0x9, 0x28800, 0x1, 0x6, 0x0, 0x1}}, {0x6, 0x2, [0x40]}}, {{0x1c, 0x1, {0xab, 0x9, 0x5, 0xfff, 0x0, 0x1, 0x0, 0x9}}, {0x16, 0x2, [0x5, 0xfffd, 0x8, 0x401, 0x4, 0x4, 0xff81, 0x2, 0xaf8a]}}, {{0x1c, 0x1, {0x2, 0x4, 0x6, 0x8000, 0x1, 0x3, 0x40000000, 0x4}}, {0xc, 0x2, [0x5, 0x0, 0xff, 0x3]}}, {{0x1c, 0x1, {0x1, 0x0, 0x0, 0x2, 0x0, 0x2, 0x4, 0x6}}, {0x10, 0x2, [0x8, 0x1, 0xa4f, 0x1, 0x10, 0x4]}}]}]}, 0x168}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010065727386616e30000000000000000000140000001100010000000000000000000000000a"], 0x84}}, 0x24040884)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0xfffffffffffffffc, &(0x7f0000000040))
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x8, 0x4)

3.011399434s ago: executing program 1 (id=1308):
ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000940)={0x2, 0x2, 0xffff, 0x7, 0x4, 0x2})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r4, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0xcc, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040080}, 0x1)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x10040)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='NLBL_UNLBL\x00', 0x20000, &(0x7f0000000040)={@align, {0x81, 0x51d6, 0x4, 0xffffffffffff7c7f}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1}, {[0x3, 0x2, 0xffffffff, 0x6]}, 0x2, 0x17, &(0x7f0000000100)=""/23})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x60, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8b6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8d}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000081}, 0xc0000)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r5, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r8)
socket$nl_generic(0x10, 0x3, 0x10)

2.789103562s ago: executing program 0 (id=1311):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000ec0000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051413030076657468315f6d6163767461700000000900010073797a310000000058000000050a03000000000000000000010020000900030073797a31000000000900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050b00070066696c7465"], 0xf4}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001480)={0x20, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x8000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0) (rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000003c0)=0xc) (async, rerun: 64)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000014000000080016000700020018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080014"], 0x4c}}, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r8=>0x0}) (rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'macvlan0\x00', <r10=>0x0}) (async)
r11 = gettid() (async)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x403, 0xf7fffff9, 0x25dfdbfb, {0x0, 0x0, 0x74, r10, 0x59808, 0x35004}, [@IFLA_NET_NS_PID={0x8, 0x13, r11}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_MAP={0x24, 0xe, {0x2, 0x5, 0x6, 0x7, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4802}, 0x4000050)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x430, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "a582b7664573855b4d22eb751dd6748110918590fe0f4bc692cfba60f3298b8db6a6f0dbcbd65e5f62668536c2e49722edf65a2b7dc0cb5fcd2a26d2697da282d53edf4b170f86cf50a62085074cb08ef71be57a86f7c3b7f310503404e252f4a0696823ca69a0e28b440fce5bb3e6a1e0639e3e56096564cb2aafaf4b6c119ee18c22e913e94cc9238460712b65a1efeab016c3fce9a204b661e7c5a17ab29a43895709152f04f4611f6538"}, @ETHTOOL_A_BITSET_BITS={0x1f8, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x2f, 0x2, '/sys/kernel/debug/bluetooth/6lowpan_enable\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x2f, 0x2, '/sys/kernel/debug/bluetooth/6lowpan_enable\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.]%#,]\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x2f, 0x2, '/sys/kernel/debug/bluetooth/6lowpan_enable\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff1}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x22, 0x4, "57d45d930a387cc9119643a01e78d0b62c14cd3ddfc702d6f1a90d8c6565"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5d, 0x4, "c0557b0605bf9ba7db96adbd23da84dd41bfd631930b7cf955ae2cacb1b40eac40e8608dd4fd78a5b48ca39c79c807db42f89131ea51de9d640fdb9f6617db6ea2504cea7cf40f3fa1d9987dec40398960d1c158469aa4aeb9"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5a7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x1000) (async)
read(r3, &(0x7f0000000240)=""/214, 0xd6)

2.67734355s ago: executing program 3 (id=1313):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000100)="93d90400040300", 0x7}], 0x1)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000005e0000009500000000000000a30b406b5a2bc8900d74868f5f4d1098c19588a23d7ae496951cac6cba4fd5c344499902356fe555b769ad074a9c8526831ea54da16a35cf6ba9"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00"})
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029e46053"], 0x18}, 0x40e0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff9085000000710000001811", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r9, 0x107, 0x9, 0x0, &(0x7f00000000c0))
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'nicvf0\x00', 0x400})

2.368614882s ago: executing program 0 (id=1318):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_emit_ethernet(0xae, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800783a0120010000000000000000000000000002fe8000000000000000000000000000aa030290780000000060d8000200001100fe8000000000000000000000000000aaff020000000000000000000000000001000000000046080cc81993f1d37d12228d000000880009386700000033060403f208b60bfe8000000000000000000000000000aa00000000000000000000000000000001fe800000"], 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0)
write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @loopback}}}}, 0x3e)

2.117406957s ago: executing program 3 (id=1321):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800800}, 0xfffffffffffffdf2, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30023)
r9 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, 0x0)
sendmsg$kcm(r9, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000200012800b00010067656e6576650000100002800800010003000600"], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
listen(r5, 0x3)
sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1)
writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

2.115754209s ago: executing program 0 (id=1322):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000005c0)=0x474c, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r1, &(0x7f00000023c0)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000000c0)=0x8001, 0x4)
recvmmsg(r1, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x45833af92e4b39ff, 0x0)

2.014198253s ago: executing program 1 (id=1323):
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)

1.976250777s ago: executing program 0 (id=1324):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r1=>0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x4938e000)
r2 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x20000881)

1.767279959s ago: executing program 1 (id=1326):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) (async)
connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async)
sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) (async)
sendto$inet6(r2, &(0x7f00000000c0)="d9d5753a3dea7ee069a432391068f870f57865ead1d68f077cfa", 0x1a, 0x3b00, 0x0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00020001000000000000000a1400000003000000000050080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="0600150000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048854)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000040)={'full', 0x20, 0xfd6, 0x20, 0xfffffffffffffff7}, 0x2f)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x50, 0x24, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff}, {0xfff1, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7, 0x100, 0x8}}}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000480)={r6, &(0x7f00000000c0)='*{)*$})\x00', 0x250800, &(0x7f00000001c0)={@_ha_fsid={[0x80000000, 0x8]}, {0x74fb, 0xb55, 0x11, 0x9}}, 0x6, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000440)=0xfffffc78})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x3dc, 0x25, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x2, 0xc}, {0x2, 0xd}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x8, 0x9, 0x5, 0x7ff, 0x4, 0x0, 0xf, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x10}}, @qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_LIMIT={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x9}, @TCA_PIE_TARGET={0x8, 0x1, 0x4}, @TCA_PIE_BETA={0x8, 0x5, 0x7}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7}, @TCA_PIE_BETA={0x8, 0x5, 0x17}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_choke={{0xa}, {0x324, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "5976ef1fce6c4fca6eb4ef143db5178613b3174d631be06e4f32201d6de868217b8e07f13d3b12a68446d88dee265d3e51be4a584816dc19d09c5145ed940b87de6e42047a85662936febbe4d206c59a1cd8cfc5e717360731ed6b1e22506fa4ab96e571b811055ccbd5ce2714a15cdeef5c3d780b518c1a67198f5c39ab5a13b7680575adb2a8af81e19c4d0d3035f3df8e3e60d0a2e49084fe2d4ae0399320b190237d4138447870c7b1e565644b7ba78db79d4fec6f6581d2bfcb7ddf59edd5639f1ad773e963cf06779c0b0d1ef494faae27f59017bd002988343007afb7afc574c7bd8c7b8492f2cfc6480aa1b49b2179872748f000081aa9e848fa64e4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x200, 0xac, 0x4, 0x6, 0x10, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "7bde3f214d7e59982fd5ae9d4201f31113d387c627ad45040df03efdc83982a160b1856ca7a886f9e34d963991cd57c16aae5eaa47b6b8949ca4bd2edafdb6eec92b4457763adf52cdc26f81ac871f60ca93828877c946228c5a6d68133e008db7efe05ee2aaf8e9c06295d5734b785a59ea66f6aa188e05edecc202c61a1fbd0c74cfe4956f1eba0ba490c6623bbf9b19de2bcb14f760262b7cc412f479d20a542ac262b8685bcfb016712452976bdc1090c7c91fead664d5f495c619dba6ab9c966aafad0a7d03047669f79034c46f30db87202395d5b8a5c9e3f8a5ce377bac7cc480d187b2402e377d0a29a9ae888a63a0bedd88bed8ad187e1965c886e4"}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'vxcan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r9], 0x7c}, 0x1, 0x0, 0x0, 0x48041}, 0x0) (async)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r8, @ANYRESHEX=r11, @ANYRES16=r10, @ANYRESOCT=r4], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10)

1.728607588s ago: executing program 4 (id=1327):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000180)="478716b68e3f8ce6c46cf32d0e5c684c105674ebb6feb834e523032c63e71d2258f1db50848055d2d18b5ef0ba72d5eed212e7efa57c08b0bf", 0x39}, {&(0x7f00000007c0)="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", 0xfa}, {&(0x7f00000008c0)="79c3ad56cca4c9a985c169d72b4b7650670cc30e4e9fb081b53dc10389f087a3aab9fb9f833d6c31ebe6c89e6f4eb4ca016e8b3f987ab68901bbd848b0f2cdf5f759904f75b261c1c58d92b800b2ae62539eea142b0c05d5d2fb8a637997666b6884e7c3cd47bfe718f8b84b90054815d54a2ca1fdc8c34047c2121661f443", 0x7f}, {&(0x7f0000000940)="b136235b356b6bd4f3b941fb89e2e30dc28c2551f3c4a477096cc2a849af833d56d7d5be4a943c75aeefbcd9f9353f9f872af89d228f08a7586fded7579754be14a1386c2f6f619f43aeb328256b38a6f2f52ee0c8274dc8becab990819d35e3f936a83e486da6251aa376c163", 0x6d}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="5966855f5e798583251163afa89ca6cec957374b19552fb8e3e49eb166ad50e0bf5a417f23d8920cdcaab5687387e737976bcb00906fb5f396d7c75707cf4ec2a6d69dc756a333d7cd2dd1735cbad2a765523f", 0x53}, {&(0x7f0000000ac0)="c35954e7140325648573a9b4330ec1b171cb9e4d4960bd91e4fceb3d6c146cbbf369b2cb49a969f9839cd49e467fb26ff23d1690a6043fc5e421423039aa6956b99c7b3cabea0bd6791b49c77f9130c5837ed6fb0ad8ff9ad6827b7a5ca6d4d2b13e91fd49470bab9952caa0bddd954b693f3e8fe6ca14f63559ba645f670cf23e3b", 0x82}], 0x8}, 0x4040c40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x38, 0x68, 0x1, 0x100004, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01080000000000000000010000000900030073797a32000000000900010073797a3000000000485f0000060a01f002008000408000000100000208000b40000000000900010073797a302800048024000180090001006d6574610000000014000280080001400000000c080002400000000314000000110001000a000000000e00"/164], 0xa4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000a, 0x6e073, 0xffffffffffffffff, 0x0)
r4 = socket(0x1f, 0x5732baeac21d3df1, 0xf)
getsockopt(r4, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x2, 0x20000002, 0x100000001)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'geneve0\x00', @multicast})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000080))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000190001000000000c000000008020"], 0x24}}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
r9 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x16ca02ff3f875350)
sendmmsg$alg(r9, &(0x7f0000002180), 0x0, 0x2004c000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="290000000e8d22fac4f13b75acb9b4c7e3cfffabf40ba14b9fe1d7189dbf332f00000080e5d2f3dfb40f7d8781a5d24058583d3f61a986374f661131f3bab2af82e885cf6da0a7ef8814a228071add46aa9917667e604eb6b33bbd7bc605af09db1821874c8a843ca218c2e55cd65f395a7a0133003eea37798c0ea7a7b35c561438ddcaa9f5fc2df692614d6cd48d94faff5b5e900549c1568c0f82bb07b61a923087460423", @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="08000500060000001c00e700675bc5fa594702a13ee93d9872c87ab4705e53cb9985fce70800178004000300"], 0x48}, 0x1, 0x0, 0x0, 0x408d1}, 0x40)
close(r0)

1.285062121s ago: executing program 2 (id=1331):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="29000000140005b7ff000000040860eb0101b6ff02159f026ed638eeb738256e06a40e07fff0797e2a", 0x29)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r6, 0xf5f)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='1\x00'/14], 0x14}}, 0xc0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40804)
unshare(0x2c020400)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
socket$netlink(0x10, 0x3, 0xc)

1.240028777s ago: executing program 1 (id=1332):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000001180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b703000000000100850000008e00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0xc, 0x2005, 0x7, 0xc1, 0xffffffffffffffff, 0x5}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = accept(r2, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20)
close(r4)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f00000004c0)=""/227, 0xe3, <r6=>0x0, &(0x7f00000005c0)=""/110, 0x6e}}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x3, 0x226d26db, 0x10128, 0x1, 0x2814, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0x6}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={<r8=>r0, 0xc8a, 0x4, 0x8})
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x3, 0x1, 0x80000001, 0x22, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x5}, 0x50)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, <r12=>0xffffffffffffffff}, 0x4)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x1, 0x18}, 0xc)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000e218110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000240)={0x2, 0x2, 0x5, 0x6, 0x7, 0x401})
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1d, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5547}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4557}}, @exit, @generic={0x4, 0x6, 0x3, 0x6, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0x1, 0xf, 0x4, 0x1, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0xfffffff8, 0xc5, &(0x7f0000000300)=""/197, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xb, r5, 0x8, &(0x7f0000000440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x5, 0x1000, 0x2}, 0x10, r6, r0, 0x2, &(0x7f0000000980)=[r7, r8, r9, r10, r11, r12, r13, r0, r14], &(0x7f00000009c0)=[{0x0, 0x5, 0xe, 0x2}, {0x0, 0x1, 0xa, 0x8}], 0x10, 0x80000001}, 0x94)

1.139937877s ago: executing program 4 (id=1333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001000000000000000020"], 0x60}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
listen(r3, 0x3) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x20000840) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) (async)
socket$inet(0x10, 0x3, 0x0)

1.106249066s ago: executing program 3 (id=1334):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={<r3=>0x0, 0xa88b, 0x0, 0x4, 0xffffffffffffffff}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x48c}}, 0x4, 0x8, 0x0, 0x5, 0x0, 0x10000, 0x8}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}}}, 0x9, 0xa, 0x8001, 0x7, 0x40, 0x9}, 0x9c)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="016f080001000000000020000000411800540064000005219078ac14143dffffffff94040100442c85d1ac1414bbffffff456401010200000007ac1414aa00000007ac1e01010000000564010101000000024e224e2304f1906d2e14657b0b6af46f"], 0x62)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)=0x1)

979.636201ms ago: executing program 2 (id=1335):
syz_emit_ethernet(0x8a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff8eff80ec003108004500007c00000000080190780a010101ac1414aa0400907800000000480000000000000000110000ffff480000000000109e0cec69d2dae06de9173b3f60c80005f34629000b3033a70f1c0f9d1bfd00193aba454f6dc54cc6000bdebbd3e9f1fdeefc2c000591ec9200080683fa3f39cd00"/138], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmmsg(r0, &(0x7f0000008640)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x204}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r4}, 0x20)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x25, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xca}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x2, 0x2, 0x7, 0x7, 0x8, 0x3}, @btf_id={0x18, 0x5a8d8c96a141fd78, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xcd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x400, 0x22, &(0x7f0000000300)=""/34, 0x0, 0x14, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xc}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x4, 0xa, 0x6}, {0x2, 0x2, 0xe, 0x1}, {0x1, 0x5, 0x2, 0xb}, {0x1, 0x5, 0x1, 0x5}, {0x3, 0x4, 0xa}, {0x3, 0x3, 0xf, 0xb}, {0x1, 0x1, 0xd, 0x2}, {0x1, 0x2, 0x9, 0x7}], 0x10, 0x2}, 0x94)

927.94356ms ago: executing program 4 (id=1336):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$caif_stream(0x25, 0x1, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f00000000c0)=0xffff, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, r4, 0x80, 0x1e2, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20025094)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000180)=0x4, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

927.607515ms ago: executing program 0 (id=1337):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='#+\\(\x00', 0x4a8000, 0x0, 0x8, 0x0, 0x0})
close(0x3) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid_for_children\x00') (async)
unshare(0x6a040000)
socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001"], 0x104}}, 0x0) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc055}, 0x1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x20, 0xffffffffffffffff, 0x6}, 0x94) (async)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0)

766.451492ms ago: executing program 2 (id=1338):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x1592e566}], 0x2}, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={<r2=>0x0, 0xd9, "ae3b5d50afd8da4791145e429c49ff430ab53a31fd792694e39ecb01264220cf0965152cf247388c85fd087473fd69aac6d19e79884e9d99aa1850876c743e6bfdc818158bea34e6352bd8e172102f768a09f14a37f00653c35e25eef4a34c503b6869fab97b9facfb0b7f08d30a8c3c39795e165892bbc9bb647dc1d554e0f89f77e472119baa6425cde6d10ee2e6a0f541c6ce406984093040df3777f156b4a7127b219118011d9e7c05a86c6d6c52a5db8597f091714e5f83c7e90952c3939b228f5837a82c0eb22dbe8f5fb2402f20542959aa8e329a0a"}, &(0x7f0000000240)=0xe1)
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000340)=0x3, 0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={r2, 0x49, "0e153f1ef6205da1e45ebf34a5baea06f8597209f8b5c517c9e8acdbf8a7c637dcc4ce4439ae10daaac48d391b0830af686da99f641c2cb5d426508717138c3566d561f1c9ee85f670"}, &(0x7f0000000300)=0x51)

674.710333ms ago: executing program 2 (id=1339):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x200})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080))
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x7}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008000300e0000002060015"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x64, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x90}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffffa}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68000000000101040000000000000000020000002400018006000340000000000c000280050001003a0000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac141423088539400000000004001640"], 0x68}}, 0x0)

548.159465ms ago: executing program 3 (id=1340):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

489.785856ms ago: executing program 3 (id=1341):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xeffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "2a8e27e2fa"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x8010, r1, 0xef801000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) (async)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x40, 0x8, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x40040044) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x9}, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x1, @empty, @mcast2, {[@srh={0x1, 0x0, 0x4, 0x0, 0x80, 0x0, 0x6}]}}}}}, 0x0)

478.39362ms ago: executing program 2 (id=1342):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x1000) (async)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000480)='./file0\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0xc, 0x0, &(0x7f00000001c0)=""/12, 0x6, 0x0, 0x0, 0x88, 0x0, &(0x7f0000000200)="9d7328d6e0eff2079603250dc610ca6b1e5cbe6e2bab081652abe6ac9d23f9372b3b16643a5ea8b7e9a090e414be582a1b9a472e8a007ce3ecfd035ed6a8091d9adb97d6601215cf7ba1e5d41e2619f7727ad88954b2885d5fe237171b99a062625d3d4216b9b30743ac38d9d1350ad13dda19d2a26a8aec386f02c5755bb3d6eb0d99c482bd2c2e", 0x6, 0x0, 0x5}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.controllers\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0xd5e, 0x60}}}}}, 0x28}}, 0x8000)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/103, &(0x7f0000000380)=0x67) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)

368.140415ms ago: executing program 4 (id=1343):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) (fail_nth: 1)

344.682431ms ago: executing program 1 (id=1344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f00000000c0)={0xa3bfa7e0d44e1716, 0x1, 0x3d2, 0x6, 0x10000, 0x2})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) (async)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)

101.00037ms ago: executing program 2 (id=1345):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20008001)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x0, 0x800, 0x5, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xc18b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1151}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3ff}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0xed2, 0x8, 0x6, 0x0, 0x50, 0x7, 0x4, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6de}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x880}, 0x800)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x210, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9a5, 0x7a}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x8800)
socketpair(0x3, 0xa, 0x6, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x228, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x33}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7e2}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x806}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x51c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6865b34a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "cac412381f2b469deddbdca9c9fc213b94129e39e27ee7617789f1f4c8f1e5"}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x8000000}, 0x20080)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000b00)={'ip_vti0\x00', &(0x7f0000000a80)={'erspan0\x00', <r7=>0x0, 0x7800, 0x700, 0x1, 0xfffffffe, {{0x13, 0x4, 0x3, 0x7, 0x4c, 0x67, 0x0, 0x46, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0xe7, [@broadcast, @broadcast]}, @rr={0x7, 0xb, 0x64, [@dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x25}]}, @noop, @rr={0x7, 0x1f, 0xac, [@multicast2, @local, @rand_addr=0x64010100, @loopback, @empty, @local, @loopback]}, @noop]}}}}})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0xf5}, 0xc)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x1b, &(0x7f0000000880)=@raw=[@generic={0xf, 0xa, 0x6, 0x408a, 0x914}, @alu={0x7, 0x1, 0x9, 0x0, 0x2, 0xffffffffffffffe0, 0xffffffffffffffff}, @exit, @generic={0x7, 0x3, 0xf, 0x2, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000980)='GPL\x00', 0x0, 0x92, &(0x7f00000009c0)=""/146, 0x41000, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x44, 0x8, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c40)=[r8, 0xffffffffffffffff, r9], &(0x7f0000000c80)=[{0x1, 0x2, 0x6, 0x4}, {0x4, 0x3, 0x6, 0x6}], 0x10, 0x3}, 0x94)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000011c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000000e00)={0x364, r11, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^^$%$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff54}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x430}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\*&\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffeffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x46, 0x5, "ce5292394252765ddcf546d12a0393a2cacab318829f6f9404264e8f73f036ffd7d79fce3a420f13877776849db37a2ea3279a30dd24f7dce7466c5be80cf5e04859"}]}, @ETHTOOL_A_FEATURES_WANTED={0x204, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '+-$#),(:]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7e, 0x4, "06ee7154dfbf0eca814dc25bdb2ad5c80ed7d9a6938d6aff2656150bbdff5d47d99c6d17124a6548cba5d85d24f07a3ff5e61daa45e4fc82d69dc52ec43bee2b557f430e52631c3ec42e7439a7cedf0da5d550c1217f6ba4b5d85ea10d5c3cb66ca30982a9d09b63147c649cffa16de04cc33a5ae0e941a1f7d4"}, @ETHTOOL_A_BITSET_VALUE={0xf5, 0x4, "ca396061c1b371a4a5bb8cc219000927791e0a6af77ba42bc54606066e8796ea945b05e5a36c556071b6be12c5afee8a04abb434b12ac6d36e80fad9b0496db32186d4ee524cec258e94c6e1f7ca31c0275c2acf91399b675d3d4a9fe84153bed5044b809e8551e0333fe3ddeb496501deaf2cae4df76d27d99f0013f784aab70526a34bdbb31a4f4d34c294ceb74042fb2e57250cd3ae3904f48806767156313dcf38ccc97ef0a6fa4de7c14476c30a5fa8b114ab2917d5d041a0ae03458b2fdc918b0c0237a5ad971a89c1abb479011be9b706ea116a100a771fd092beddf36547e4a24cc02d4a983b1131efee7296a3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x80}, 0x48804)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r12, &(0x7f00000012c0)={&(0x7f0000001200), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x34}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000)
r13 = socket$inet6(0xa, 0xa, 0x5)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000013c0)=@get={0x1, &(0x7f0000001300)=""/160, 0xa3})
accept4$llc(r3, &(0x7f0000001400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001440)=0x10, 0x80800)
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000001480)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f00000014c0)={<r14=>0x0, 0x8}, &(0x7f0000001500)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001540)={r14, 0xbe70}, 0x8)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r4, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001680)=r10, 0x4)
socket$inet6(0xa, 0x1, 0x7f)
bind$inet(r3, &(0x7f00000016c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x8c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004010}, 0x2000c890)

100.653731ms ago: executing program 4 (id=1346):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000))
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="00aaa953059aee236b68387b55d87d0df4b4f1db35a401cd888610e75a815c2206c02ad4465c1e9c69ff68da6bba73e37fa758cedcdd5eb6126af54fa2476a23a98415e14889cead56c785f7e5aa9617406cc0610346a66a9ee4a98780fc42b2b9f6b27ec4f800e434a5b3f0da1be441b7288b4ccb2a972244ea8c0600ab9f944258efa64ba72e7f485c054129c334621f80663ddcfd9311c2ac1d508488e93b8eef5e373013df3c9a480ea8cc33974381375643", 0xb4}, {&(0x7f0000003480)="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", 0xdbc}], 0x2, 0x0, 0x0, 0x81}], 0x1, 0x24041410)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4080, 0xff0}], 0x1}, 0x40012143)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 4 (id=1347):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688140032000103000aff3f000057fc5ad90200bb6a88003cd6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5f7", 0xb8)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

kernel console output (not intermixed with test programs):

ing as an active interface with an up link
[   85.010406][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.018489][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.026060][ T5824] bridge_slave_0: entered allmulticast mode
[   85.033704][ T5824] bridge_slave_0: entered promiscuous mode
[   85.062052][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.087645][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.095461][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.103118][ T5824] bridge_slave_1: entered allmulticast mode
[   85.110168][ T5824] bridge_slave_1: entered promiscuous mode
[   85.156760][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.164097][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.171555][ T5826] bridge_slave_0: entered allmulticast mode
[   85.178663][ T5826] bridge_slave_0: entered promiscuous mode
[   85.214800][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.222200][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.229494][ T5836] bridge_slave_0: entered allmulticast mode
[   85.237041][ T5836] bridge_slave_0: entered promiscuous mode
[   85.244933][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.253057][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.260219][ T5826] bridge_slave_1: entered allmulticast mode
[   85.267622][ T5826] bridge_slave_1: entered promiscuous mode
[   85.276776][ T5828] team0: Port device team_slave_0 added
[   85.300263][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.307595][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.315080][ T5836] bridge_slave_1: entered allmulticast mode
[   85.322741][ T5836] bridge_slave_1: entered promiscuous mode
[   85.341074][ T5828] team0: Port device team_slave_1 added
[   85.360535][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.415825][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.439985][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.458578][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.465931][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.474266][ T5823] bridge_slave_0: entered allmulticast mode
[   85.481624][ T5823] bridge_slave_0: entered promiscuous mode
[   85.503590][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.515221][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.526047][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.533515][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.559920][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.572424][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.579879][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.587286][ T5823] bridge_slave_1: entered allmulticast mode
[   85.594464][ T5823] bridge_slave_1: entered promiscuous mode
[   85.616025][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.641387][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.648558][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.674866][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.700377][ T5824] team0: Port device team_slave_0 added
[   85.748372][ T5824] team0: Port device team_slave_1 added
[   85.766697][ T5826] team0: Port device team_slave_0 added
[   85.795656][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.825134][ T5826] team0: Port device team_slave_1 added
[   85.857789][ T5836] team0: Port device team_slave_0 added
[   85.866103][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.872275][ T5843] Bluetooth: hci4: command tx timeout
[   85.881422][ T5830] Bluetooth: hci0: command tx timeout
[   85.881436][ T5846] Bluetooth: hci3: command tx timeout
[   85.881626][ T5846] Bluetooth: hci1: command tx timeout
[   85.899619][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.908114][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.934948][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.951697][ T5846] Bluetooth: hci2: command tx timeout
[   85.976588][ T5828] hsr_slave_0: entered promiscuous mode
[   85.983123][ T5828] hsr_slave_1: entered promiscuous mode
[   85.992953][ T5836] team0: Port device team_slave_1 added
[   86.023347][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.030492][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.057349][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.082249][ T5823] team0: Port device team_slave_0 added
[   86.089208][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.096287][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.122591][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.155583][ T5823] team0: Port device team_slave_1 added
[   86.162013][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.169079][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.196397][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.208412][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.215622][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.241720][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.286154][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.293283][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.320628][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.393015][ T5824] hsr_slave_0: entered promiscuous mode
[   86.399617][ T5824] hsr_slave_1: entered promiscuous mode
[   86.406333][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   86.412642][ T5824] Cannot create hsr debugfs directory
[   86.419044][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.426461][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.453041][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.507334][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.514747][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.541113][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.577628][ T5836] hsr_slave_0: entered promiscuous mode
[   86.584565][ T5836] hsr_slave_1: entered promiscuous mode
[   86.591458][ T5836] debugfs: 'hsr0' already exists in 'hsr'
[   86.597204][ T5836] Cannot create hsr debugfs directory
[   86.662993][ T5826] hsr_slave_0: entered promiscuous mode
[   86.669337][ T5826] hsr_slave_1: entered promiscuous mode
[   86.675747][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   86.681595][ T5826] Cannot create hsr debugfs directory
[   86.836853][ T5823] hsr_slave_0: entered promiscuous mode
[   86.843532][ T5823] hsr_slave_1: entered promiscuous mode
[   86.850148][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   86.856044][ T5823] Cannot create hsr debugfs directory
[   87.292431][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.318521][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.346592][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.382098][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.483468][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.504242][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.526735][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.547407][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   87.624611][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.637078][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.655305][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.665335][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.730709][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.811058][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.842780][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   87.849684][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.872900][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.885922][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.893195][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.929033][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.951513][ T5846] Bluetooth: hci1: command tx timeout
[   87.951694][ T5843] Bluetooth: hci4: command tx timeout
[   87.956973][ T5846] Bluetooth: hci0: command tx timeout
[   87.962579][ T5834] Bluetooth: hci3: command tx timeout
[   87.978914][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.986179][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.029607][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.041349][ T5843] Bluetooth: hci2: command tx timeout
[   88.048375][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.059457][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.079995][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.158280][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.198083][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.220251][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   88.246857][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.254205][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.286268][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   88.332935][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.340737][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.379131][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.386458][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.404494][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.411737][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.606499][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.625733][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.658311][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.684559][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   88.705167][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   88.733993][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.741293][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.757410][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.764668][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.789506][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.796793][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.829800][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.837260][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.030728][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.062986][ T5828] veth0_vlan: entered promiscuous mode
[   89.116187][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.147165][ T5828] veth1_vlan: entered promiscuous mode
[   89.351234][ T5824] veth0_vlan: entered promiscuous mode
[   89.388107][ T5828] veth0_macvtap: entered promiscuous mode
[   89.429364][ T5824] veth1_vlan: entered promiscuous mode
[   89.460338][ T5828] veth1_macvtap: entered promiscuous mode
[   89.546042][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.606133][ T5824] veth0_macvtap: entered promiscuous mode
[   89.627018][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.640633][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.650539][ T5824] veth1_macvtap: entered promiscuous mode
[   89.687623][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.699385][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.723195][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.730973][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.743270][   T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.769543][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.816385][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.845199][   T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.879793][ T5836] veth0_vlan: entered promiscuous mode
[   89.892470][   T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.902092][   T80] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.911073][ T5826] veth0_vlan: entered promiscuous mode
[   89.950577][   T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.967742][ T5826] veth1_vlan: entered promiscuous mode
[   89.986151][ T5836] veth1_vlan: entered promiscuous mode
[   90.014734][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.020531][ T5823] veth0_vlan: entered promiscuous mode
[   90.032732][ T5843] Bluetooth: hci0: command tx timeout
[   90.038378][ T5843] Bluetooth: hci1: command tx timeout
[   90.039782][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.051601][ T5834] Bluetooth: hci4: command tx timeout
[   90.051635][ T5834] Bluetooth: hci3: command tx timeout
[   90.065568][ T5823] veth1_vlan: entered promiscuous mode
[   90.112298][ T5843] Bluetooth: hci2: command tx timeout
[   90.155447][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.164575][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.171837][ T5836] veth0_macvtap: entered promiscuous mode
[   90.204714][ T5836] veth1_macvtap: entered promiscuous mode
[   90.224523][ T5826] veth0_macvtap: entered promiscuous mode
[   90.245495][ T5823] veth0_macvtap: entered promiscuous mode
[   90.274546][ T5826] veth1_macvtap: entered promiscuous mode
[   90.287260][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.294506][ T5823] veth1_macvtap: entered promiscuous mode
[   90.313725][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.333006][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.337426][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.348864][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.392182][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.446163][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.462857][ T1026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.484467][  T391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.503679][  T391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.507287][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.525666][ T1026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.536355][ T1026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.562334][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.571755][ T1026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.642731][ T1104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.659945][ T1104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.669451][ T1104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.700037][ T1104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.713736][ T1104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.791023][ T1104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.800838][ T1104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.813790][ T1104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.007845][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.017313][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.060417][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.089698][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.194885][  T391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.225975][  T391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.245726][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.286066][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.386188][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.414123][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.469506][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   91.498296][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.513687][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   91.527202][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.867460][ T5983] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   91.892916][ T5983] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2'.
[   91.911152][ T5983] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2'.
[   92.111790][ T5843] Bluetooth: hci1: command tx timeout
[   92.117458][ T5843] Bluetooth: hci3: command tx timeout
[   92.123529][ T5830] Bluetooth: hci4: command tx timeout
[   92.129171][ T5830] Bluetooth: hci0: command tx timeout
[   92.192205][ T5843] Bluetooth: hci2: command tx timeout
[   92.202177][ T1209] cfg80211: failed to load regulatory.db
[   92.242639][ T5991] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   92.297777][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'.
[   92.306860][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'.
[   92.306871][ T5991] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   92.329244][ T5991] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   92.408504][ T6007] warning: `syz.4.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.555393][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'.
[   92.567181][ T6019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'.
[   92.650983][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'.
[   92.826853][ T6029] tipc: Started in network mode
[   92.841961][ T6029] tipc: Node identity 32160a17b02d, cluster identity 4711
[   92.878711][ T6029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.927923][ T6031] syzkaller0: entered promiscuous mode
[   92.943760][ T6031] syzkaller0: entered allmulticast mode
[   92.989374][ T6030] tipc: Resetting bearer <eth:syzkaller0>
[   93.003902][ T6028] tipc: Resetting bearer <eth:syzkaller0>
[   93.057137][ T6028] tipc: Disabling bearer <eth:syzkaller0>
[   93.076802][ T6041] Zero length message leads to an empty skb
[   93.146498][ T6037] tipc: Started in network mode
[   93.160320][ T6037] tipc: Node identity d, cluster identity 12
[   93.176948][ T6037] tipc: Node number set to 13
[   93.233735][ T6037] ip6t_rpfilter: unknown options
[   93.553096][ T6050] netlink: 'syz.1.31': attribute type 1 has an invalid length.
[   93.560907][ T6050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.31'.
[   93.634365][ T6060] netlink: 'syz.0.32': attribute type 4 has an invalid length.
[   93.922446][ T6069] netlink: 'syz.2.37': attribute type 1 has an invalid length.
[   93.986549][ T6069] netlink: 'syz.2.37': attribute type 2 has an invalid length.
[   94.023876][ T6069] netlink: 'syz.2.37': attribute type 2 has an invalid length.
[   94.048878][ T6069] netlink: 'syz.2.37': attribute type 2 has an invalid length.
[   94.314758][ T6080] IPVS: Unknown mcast interface: syzkaller0
[   95.498455][ T6128] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET)
[   95.990849][ T6147] bond1: Unable to set down delay as MII monitoring is disabled
[   96.162283][ T6150] nbd0: detected capacity change from 0 to 77309411391
[   96.186366][ T5830] block nbd0: Receive control failed (result -32)
[   96.197547][ T5843] block nbd0: Receive control failed (result -32)
[   96.205183][ T5832] block nbd0: Send control failed (result -32)
[   96.231989][ T5832] block nbd0: Request send failed, requeueing
[   96.252568][   T25] block nbd0: Dead connection, failed to find a fallback
[   96.260108][   T25] block nbd0: shutting down sockets
[   96.267099][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.295085][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[   96.303823][ T5832] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.327983][ T5832] Buffer I/O error on dev nbd0, logical block 1, async page read
[   96.352829][ T5832] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.365034][ T5832] Buffer I/O error on dev nbd0, logical block 2, async page read
[   96.381882][ T5832] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.424825][ T5832] Buffer I/O error on dev nbd0, logical block 3, async page read
[   96.474985][ T5832] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.481143][ T6167] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   96.498162][ T6147] bond1 (unregistering): Released all slaves
[   96.505034][ T5832] Buffer I/O error on dev nbd0, logical block 0, async page read
[   96.521386][ T5832] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.521427][ T6165] __nla_validate_parse: 11 callbacks suppressed
[   96.521441][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   96.541670][ T5832] Buffer I/O error on dev nbd0, logical block 1, async page read
[   96.561839][ T5832] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.586085][ T5832] Buffer I/O error on dev nbd0, logical block 2, async page read
[   96.595572][ T5832] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.625256][ T5832] Buffer I/O error on dev nbd0, logical block 3, async page read
[   96.684139][ T5832] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.723583][ T5832] Buffer I/O error on dev nbd0, logical block 0, async page read
[   96.799382][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'.
[   96.818483][ T5832] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.851501][ T5832] Buffer I/O error on dev nbd0, logical block 1, async page read
[   96.860062][ T5832] ldm_validate_partition_table(): Disk read failed.
[   96.913904][ T5832] Dev nbd0: unable to read RDB block 0
[   96.920131][ T5832]  nbd0: unable to read partition table
[   96.967007][ T5832] ldm_validate_partition_table(): Disk read failed.
[   97.021984][ T5832] Dev nbd0: unable to read RDB block 0
[   97.029954][ T5832]  nbd0: unable to read partition table
[   97.073363][    C1] Illegal XDP return value 16128 on prog  (id 22) dev lo, expect packet loss!
[   97.111534][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'.
[   97.514183][ T6173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.867495][ T6191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.73'.
[   97.901660][ T6192] netlink: 192 bytes leftover after parsing attributes in process `syz.1.72'.
[   98.386081][ T6208] syzkaller0: entered promiscuous mode
[   98.987530][ T6202] validate_nla: 6 callbacks suppressed
[   98.987575][ T6202] netlink: 'syz.1.75': attribute type 1 has an invalid length.
[  101.138815][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.88'.
[  101.222260][ T6267] xfrm0: entered promiscuous mode
[  101.227854][ T6267] xfrm0: entered allmulticast mode
[  101.656218][ T6284] delete_channel: no stack
[  101.749366][ T6282] netlink: 'syz.4.92': attribute type 4 has an invalid length.
[  101.751926][ T6291] netlink: 9 bytes leftover after parsing attributes in process `syz.3.94'.
[  101.767015][ T6291] .70·: renamed from hsr0 (while UP)
[  101.774806][ T6288] netlink: 'syz.1.95': attribute type 5 has an invalid length.
[  101.784553][ T6291] .70·: entered allmulticast mode
[  101.789907][ T6291] hsr_slave_0: entered allmulticast mode
[  101.815480][ T6291] hsr_slave_1: entered allmulticast mode
[  101.828454][ T6291] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  101.829767][ T6286] netlink: 'syz.4.92': attribute type 4 has an invalid length.
[  102.457112][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.98'.
[  102.834169][ T6302] syz_tun: entered promiscuous mode
[  102.855850][ T6302] syz_tun: entered allmulticast mode
[  103.226983][ T6319] netlink: 'syz.2.102': attribute type 10 has an invalid length.
[  103.286460][ T6319] team0: Port device veth1 added
[  103.317287][ T6323] netlink: 'syz.3.104': attribute type 3 has an invalid length.
[  103.437492][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'.
[  103.489554][ T6326] vlan0: entered promiscuous mode
[  103.635580][ T6338] syzkaller0: entered promiscuous mode
[  103.661021][ T6338] syzkaller0: entered allmulticast mode
[  103.694643][ T6334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.109'.
[  103.933323][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'.
[  103.943865][ T6355] netlink: 80 bytes leftover after parsing attributes in process `syz.1.113'.
[  103.954549][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'.
[  103.963903][ T6351] netlink: 'syz.3.112': attribute type 14 has an invalid length.
[  103.972711][ T6351] netlink: 'syz.3.112': attribute type 11 has an invalid length.
[  104.238005][ T6368] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.117'.
[  104.368855][ T6371] netlink: 52 bytes leftover after parsing attributes in process `syz.0.117'.
[  104.408587][ T6371] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[  104.428479][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'.
[  106.915715][ T6452] __nla_validate_parse: 6 callbacks suppressed
[  106.915734][ T6452] netlink: 84 bytes leftover after parsing attributes in process `syz.4.132'.
[  106.986477][ T6452] netlink: 175 bytes leftover after parsing attributes in process `syz.4.132'.
[  107.954261][ T6493] tc_dump_action: action bad kind
[  107.971908][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.139'.
[  108.206146][ T6504] Bluetooth: MGMT ver 1.23
[  108.252798][ T6502] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.142'.
[  108.358207][ T6502] syzkaller1: entered promiscuous mode
[  108.387202][ T6502] syzkaller1: entered allmulticast mode
[  108.505084][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'.
[  108.563650][ T6514] netlink: 'syz.3.144': attribute type 12 has an invalid length.
[  108.947793][ T6495] netlink: 'syz.2.141': attribute type 5 has an invalid length.
[  108.977151][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'.
[  109.062004][ T6529] 8021q: VLANs not supported on ip6gre0
[  109.221910][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'.
[  109.405972][ T6543] netlink: 116 bytes leftover after parsing attributes in process `syz.4.149'.
[  109.870175][ T6555] syzkaller1: tun_chr_ioctl cmd 1074025677
[  109.911741][ T6555] syzkaller1: linktype set to 825
[  109.965336][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'.
[  110.543756][ T6570] netlink: 32 bytes leftover after parsing attributes in process `syz.2.154'.
[  110.922814][ T6586] netlink: 'syz.0.157': attribute type 27 has an invalid length.
[  111.210347][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.219029][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.400097][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.432716][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.689369][ T6597] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  111.719774][   T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.742177][   T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.796952][   T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.827926][   T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.053103][ T6608] __nla_validate_parse: 1 callbacks suppressed
[  112.053124][ T6608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.163'.
[  112.072976][ T6619] ip6tnl3: entered allmulticast mode
[  112.602619][ T6641] netlink: 7 bytes leftover after parsing attributes in process `syz.0.171'.
[  112.603054][ T6639] netlink: 72 bytes leftover after parsing attributes in process `syz.4.170'.
[  112.651404][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'.
[  112.660939][ T6639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.170'.
[  113.163722][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'.
[  113.237141][ T6661] chnl_net:caif_netlink_parms(): no params data found
[  113.329948][ T6664] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.177'.
[  113.341081][ T6668] syzkaller1: entered promiscuous mode
[  113.370120][ T6668] syzkaller1: entered allmulticast mode
[  114.543439][ T6709] IPVS: set_ctl: invalid protocol: 3 18.2.0.0:768
[  114.596432][ T6714] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[  114.814381][ T6714] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.917832][ T6727] netlink: 'syz.1.192': attribute type 1 has an invalid length.
[  114.999106][ T6714] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[  115.018872][ T6720] bond1: (slave veth3): Enslaving as an active interface with a down link
[  115.061539][ T6727] 8021q: adding VLAN 0 to HW filter on device bond1
[  115.085471][ T6728] bond1: (slave geneve2): making interface the new active one
[  115.097781][ T6728] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  115.133041][ T6714] 8021q: adding VLAN 0 to HW filter on device batadv1
[  115.151905][ T6714] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  115.311167][ T6740] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  115.365078][ T6740] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  115.420233][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'.
[  115.456155][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'.
[  115.523288][ T6744] vlan3: entered promiscuous mode
[  115.528412][ T6744] bridge0: entered promiscuous mode
[  115.560466][ T6749] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  115.669534][ T6755] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  115.692070][ T6755] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  116.577452][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[  116.634445][ T6789] bond0: entered promiscuous mode
[  116.639765][ T6789] bond_slave_0: entered promiscuous mode
[  116.656597][ T6789] bond_slave_1: entered promiscuous mode
[  116.685198][ T6789] batadv_slave_0: entered promiscuous mode
[  116.711712][ T6789] batadv_slave_0: left promiscuous mode
[  116.768193][ T6796] trusted_key: syz.3.207 sent an empty control message without MSG_MORE.
[  116.819585][ T6789] bond0: left promiscuous mode
[  116.825136][ T6789] bond_slave_0: left promiscuous mode
[  116.831015][ T6789] bond_slave_1: left promiscuous mode
[  116.936707][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.944746][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.048995][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.063291][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.127701][ T6815] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96
[  117.234098][ T1026] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.255323][ T1026] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.344188][ T6821] __nla_validate_parse: 2 callbacks suppressed
[  117.344207][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'.
[  117.373050][ T1026] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.383720][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'.
[  117.421543][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'.
[  117.485822][ T1026] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.532067][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'.
[  117.757727][ T6836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.219'.
[  117.872506][ T6848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.906836][ T6847] netlink: 'syz.3.219': attribute type 2 has an invalid length.
[  117.932605][ T6847] netlink: 'syz.3.219': attribute type 1 has an invalid length.
[  117.940570][ T6847] netlink: 152 bytes leftover after parsing attributes in process `syz.3.219'.
[  117.986924][ T6854] Cannot find set identified by id 0 to match
[  118.022578][ T6854] Cannot find set identified by id 0 to match
[  118.151028][ T6859] netlink: 'syz.1.225': attribute type 1 has an invalid length.
[  118.225756][ T6859] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.242462][ T6868] Cannot find add_set index 0 as target
[  118.268496][ T6859] bond2: (slave dummy0): making interface the new active one
[  118.283403][ T6859] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  118.324106][ T6871] netlink: 'syz.3.228': attribute type 11 has an invalid length.
[  118.382681][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'.
[  118.465302][ T6859] bond2 (unregistering): (slave dummy0): Releasing active interface
[  118.500999][ T6859] bond2 (unregistering): Released all slaves
[  118.974755][ T6889] netlink: 'syz.0.233': attribute type 8 has an invalid length.
[  119.076480][ T6892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.152119][ T6896] netlink: 'syz.4.236': attribute type 3 has an invalid length.
[  119.364390][ T6906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.241'.
[  119.451898][ T6913] netlink: 'syz.4.239': attribute type 2 has an invalid length.
[  119.483178][ T6913] veth0_to_batadv: entered promiscuous mode
[  119.489155][ T6913] veth0_to_batadv: entered allmulticast mode
[  119.815722][ T6927] netlink: 72 bytes leftover after parsing attributes in process `syz.4.245'.
[  119.873899][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'.
[  119.892363][ T6939] netlink: Conntrack attr has 4 unknown bytes
[  120.528483][ T6969] netlink: 'syz.2.256': attribute type 10 has an invalid length.
[  120.588545][ T6973] netlink: 'syz.2.256': attribute type 10 has an invalid length.
[  120.615204][ T6969] team0: Port device dummy0 added
[  120.663560][ T6973] team0: Port device dummy0 removed
[  120.703962][ T6973] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  121.468828][ T7015] tipc: Started in network mode
[  121.474435][ T7015] tipc: Node identity , cluster identity 4711
[  121.480665][ T7015] tipc: Failed to obtain node identity
[  121.487127][ T7015] tipc: Enabling of bearer <eth:caif0> rejected, failed to enable media
[  121.527120][ T7021] netlink: 'syz.0.268': attribute type 30 has an invalid length.
[  121.544844][ T7021] netlink: 'syz.0.268': attribute type 3 has an invalid length.
[  122.485929][ T7047] nbd: must specify at least one socket
[  122.623197][ T7054] __nla_validate_parse: 6 callbacks suppressed
[  122.623218][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'.
[  123.047322][ T7044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.362540][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'.
[  123.414929][ T7083] validate_nla: 1 callbacks suppressed
[  123.414950][ T7083] netlink: 'syz.3.283': attribute type 7 has an invalid length.
[  123.442924][ T7077] bridge0: entered allmulticast mode
[  123.579146][ T7083] netlink: 'syz.3.283': attribute type 7 has an invalid length.
[  123.658181][ T7096] openvswitch: netlink: EtherType 50a is less than min 600
[  123.701347][   T80] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.701633][ T7096] openvswitch: netlink: EtherType 50a is less than min 600
[  123.788934][ T7096] openvswitch: netlink: EtherType 50a is less than min 600
[  123.813991][ T7096] openvswitch: netlink: EtherType 50a is less than min 600
[  123.854042][ T7096] openvswitch: netlink: EtherType 50a is less than min 600
[  123.854210][ T7095] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  123.862225][ T7096] openvswitch: netlink: EtherType 50a is less than min 600
[  123.882306][ T7095] bond1 (unregistering): Released all slaves
[  123.914808][   T80] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.924061][   T80] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.990569][   T80] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.387159][ T7129] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  124.400716][ T7129] bond1 (unregistering): Released all slaves
[  124.579485][ T7144] openvswitch: netlink: EtherType 50a is less than min 600
[  124.899189][ T7152] netlink: 'syz.0.299': attribute type 20 has an invalid length.
[  124.926617][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'.
[  124.963668][   T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.991501][   T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.002123][ T7152] netlink: 'syz.0.299': attribute type 20 has an invalid length.
[  125.010082][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'.
[  125.025963][   T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.069218][   T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.173679][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'.
[  125.623488][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'.
[  125.644462][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'.
[  125.669350][ T7194] team0: entered promiscuous mode
[  125.676530][ T7194] team_slave_0: entered promiscuous mode
[  125.683130][ T7194] team_slave_1: entered promiscuous mode
[  125.689254][ T7194] veth1: entered promiscuous mode
[  125.721937][ T7194] team0: left promiscuous mode
[  125.739464][ T7194] team_slave_0: left promiscuous mode
[  125.784044][ T7194] team_slave_1: left promiscuous mode
[  125.821643][ T7194] veth1: left promiscuous mode
[  126.241045][ T7224] syzkaller0: entered promiscuous mode
[  126.247055][ T7224] syzkaller0: entered allmulticast mode
[  126.739724][ T7235] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  126.953334][ T7239] macsec1: entered promiscuous mode
[  127.232647][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.391565][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.405961][ T7266] netlink: 'syz.0.321': attribute type 13 has an invalid length.
[  127.551487][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'.
[  127.574515][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'.
[  127.818188][ T7281] Cannot find add_set index 0 as target
[  127.975279][ T7285] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  128.201742][ T7296] netlink: 52 bytes leftover after parsing attributes in process `syz.4.330'.
[  128.221513][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.329'.
[  128.230466][ T7297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.329'.
[  128.397651][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[  128.437321][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[  128.468167][ T7301] x_tables: duplicate underflow at hook 3
[  128.724612][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[  128.750042][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.338'.
[  128.790651][ T7321] netlink: 48 bytes leftover after parsing attributes in process `syz.2.339'.
[  128.805402][ T7315] team0: Port device team_slave_0 removed
[  128.844519][ T7318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.338'.
[  129.048667][ T7327] ip6tnl0: Caught tx_queue_len zero misconfig
[  129.102359][ T7329] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[  129.110218][ T7329] netlink: 'syz.1.342': attribute type 2 has an invalid length.
[  129.292238][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'.
[  129.328059][ T5843] Bluetooth: hci2: link tx timeout
[  129.334731][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.375608][ T7309] --map-set only usable from mangle table
[  129.467135][ T7349] netlink: 'syz.3.347': attribute type 29 has an invalid length.
[  129.501848][ T7349] netlink: 'syz.3.347': attribute type 29 has an invalid length.
[  129.515152][ T7349] unsupported nla_type 58
[  130.104992][ T7376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.169650][ T7382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.220707][ T7377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.249035][ T7359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.687180][ T7409] netlink: 'syz.0.360': attribute type 1 has an invalid length.
[  130.715997][ T7409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.758813][ T7409] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.871429][ T7419] ip6gre0: entered promiscuous mode
[  131.330984][ T5830] Bluetooth: hci2: link tx timeout
[  131.336682][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.363366][   T24] tipc: Node number set to 2184907287
[  131.391423][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  132.266590][ T7490] delete_channel: no stack
[  132.368782][ T7498] team0: Port device syz_tun added
[  132.507349][ T7498] team0: Port device syz_tun removed
[  132.578879][ T7498] bridge_slave_0: left allmulticast mode
[  132.606828][ T7498] bridge_slave_0: left promiscuous mode
[  132.652326][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.722977][ T7498] bridge_slave_1: left allmulticast mode
[  132.731447][ T7498] bridge_slave_1: left promiscuous mode
[  132.755437][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.802767][ T7498] bond0: (slave bond_slave_0): Releasing backup interface
[  132.839554][ T7498] bond0: (slave bond_slave_1): Releasing backup interface
[  132.858609][ T7498] team0: Port device team_slave_0 removed
[  132.870843][ T7498] team0: Port device team_slave_1 removed
[  132.878494][ T7498] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.886865][ T7498] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.899109][ T7498] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.907550][ T7498] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.916354][ T7498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  133.162048][ T7528] syzkaller0: entered promiscuous mode
[  133.165605][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  133.169123][ T7529] netlink: 'syz.1.388': attribute type 5 has an invalid length.
[  133.191417][ T7528] syzkaller0: entered allmulticast mode
[  133.282674][ T7535] __nla_validate_parse: 15 callbacks suppressed
[  133.282694][ T7535] netlink: 92 bytes leftover after parsing attributes in process `syz.3.391'.
[  133.285242][ T7536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.387'.
[  133.346090][ T7538] lo: Caught tx_queue_len zero misconfig
[  133.374981][ T7525] delete_channel: no stack
[  133.608345][ T7542] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.817655][ T7565] pim6reg: entered allmulticast mode
[  133.842546][ T7566] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.399'.
[  133.846626][ T7565] pim6reg: left allmulticast mode
[  133.901851][ T7576] netlink: 'syz.3.403': attribute type 10 has an invalid length.
[  133.923439][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'.
[  133.929506][ T7576] team0: Port device dummy0 added
[  133.944033][ T7576] netlink: 'syz.3.403': attribute type 10 has an invalid length.
[  133.973853][ T7576] team0: Port device dummy0 removed
[  133.989897][ T7576] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  134.298831][ T7590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'.
[  134.479959][ T7595] bond1 (unregistering): Released all slaves
[  134.490231][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.410'.
[  134.816639][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'.
[  134.932282][ T7617] netlink: 44 bytes leftover after parsing attributes in process `syz.4.417'.
[  134.962897][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.417'.
[  135.001836][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'.
[  137.106596][ T7728] dvmrp1: entered allmulticast mode
[  137.390964][ T7745] gre1: entered promiscuous mode
[  138.523552][ T7810] __nla_validate_parse: 6 callbacks suppressed
[  138.523571][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[  138.604336][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[  139.531147][ T7847] openvswitch: netlink: EtherType 50a is less than min 600
[  139.634479][ T7847] syz.4.479 uses old SIOCAX25GETINFO
[  139.940400][ T7851] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  139.985647][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'.
[  140.680422][ T7899] bond2: option packets_per_slave: invalid value (1048582)
[  140.717573][ T7899] bond2: option packets_per_slave: allowed values 0 - 65535
[  140.757540][ T7899] bond2 (unregistering): Released all slaves
[  140.884112][ T7916] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  141.392145][ T7930] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[  141.412222][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'.
[  141.440932][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'.
[  141.487486][ T7934] netlink: 48 bytes leftover after parsing attributes in process `syz.4.492'.
[  141.509040][ T7935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.491'.
[  141.518425][ T7934] netlink: 'syz.4.492': attribute type 1 has an invalid length.
[  141.544933][ T7930] 8021q: adding VLAN 0 to HW filter on device bond3
[  141.553818][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.492'.
[  141.574180][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'.
[  141.617806][ T7930] bond3 (unregistering): Released all slaves
[  141.764419][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[  141.997727][ T7956] xt_bpf: check failed: parse error
[  142.063924][ T7956] lo speed is unknown, defaulting to 1000
[  142.112371][ T7965] netlink: 'syz.2.499': attribute type 8 has an invalid length.
[  142.137479][ T5489] veth1_macvtap: left promiscuous mode
[  142.176524][ T7956] lo speed is unknown, defaulting to 1000
[  142.231871][ T7966] pim6reg1: entered allmulticast mode
[  142.260241][ T7956] lo speed is unknown, defaulting to 1000
[  142.290907][ T7956] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  142.363358][ T7956] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  142.510312][ T7956] lo speed is unknown, defaulting to 1000
[  142.522532][ T7956] lo speed is unknown, defaulting to 1000
[  142.531501][ T7956] lo speed is unknown, defaulting to 1000
[  142.549934][ T7956] lo speed is unknown, defaulting to 1000
[  142.570821][ T7956] lo speed is unknown, defaulting to 1000
[  143.190686][ T7997] syz_tun: left promiscuous mode
[  143.209192][ T7997] syz_tun: left allmulticast mode
[  143.283006][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.290847][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.688009][ T7997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.739478][ T7997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.809524][ T8034] __nla_validate_parse: 11 callbacks suppressed
[  143.809546][ T8034] netlink: 14 bytes leftover after parsing attributes in process `syz.0.516'.
[  143.830540][ T5902] IPVS: starting estimator thread 0...
[  143.934452][ T8036] IPVS: using max 25 ests per chain, 60000 per kthread
[  144.209501][ T8034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.223812][ T8034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.250374][ T8034] bond0 (unregistering): Released all slaves
[  144.297898][ T7879] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.314064][ T7879] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.345135][ T7879] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.365902][ T7879] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.439996][ T8055] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.518'.
[  144.456469][ T8055] openvswitch: netlink: EtherType 0 is less than min 600
[  144.475525][ T8028] lo speed is unknown, defaulting to 1000
[  144.490051][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'.
[  144.665078][ T8055] xt_CT: No such helper "syz0"
[  144.735321][ T8070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'.
[  145.319943][ T8079] netlink: 'syz.1.523': attribute type 2 has an invalid length.
[  145.564713][ T8088] netlink: 68 bytes leftover after parsing attributes in process `syz.1.525'.
[  145.689274][ T7879] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.698174][ T7879] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.707691][ T7879] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.718689][ T7879] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.082408][ T8045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  147.341486][ T8098] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  147.356475][ T8098] bond1 (unregistering): Released all slaves
[  147.820683][ T8132] netlink: 80 bytes leftover after parsing attributes in process `syz.4.533'.
[  147.830589][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'.
[  147.934150][ T8138] bridge0: entered allmulticast mode
[  148.000366][ T8143] netlink: 'syz.2.536': attribute type 142 has an invalid length.
[  148.095447][ T8146] netlink: 'syz.4.537': attribute type 3 has an invalid length.
[  148.103421][ T8146] netlink: 'syz.4.537': attribute type 3 has an invalid length.
[  148.114198][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'.
[  148.182550][ T8149] lo speed is unknown, defaulting to 1000
[  148.483210][ T8160] lo speed is unknown, defaulting to 1000
[  148.612409][ T8174] xt_connbytes: Forcing CT accounting to be enabled
[  148.620440][ T8174] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[  148.787561][ T8178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.546'.
[  149.147097][ T8197] sch_fq: defrate 4294967293 ignored.
[  149.203395][ T8199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.552'.
[  149.225890][ T8198] sch_fq: defrate 4294967293 ignored.
[  149.242603][ T8199] netlink: 'syz.2.552': attribute type 1 has an invalid length.
[  149.245912][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'.
[  149.274150][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'.
[  149.328046][ T8207] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  149.694744][ T8230] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  149.775001][ T5945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  149.921459][ T5945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  149.945148][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'.
[  149.991597][ T8240] netlink: 261 bytes leftover after parsing attributes in process `syz.4.565'.
[  150.075857][ T8246] Bluetooth: MGMT ver 1.23
[  150.154209][ T8252] syz_tun: entered promiscuous mode
[  150.159777][ T8252] syz_tun: entered allmulticast mode
[  150.195589][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.565'.
[  150.221695][ T7876] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  150.422108][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'.
[  150.446466][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'.
[  150.819296][ T8290] netlink: 104 bytes leftover after parsing attributes in process `syz.0.578'.
[  150.982394][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'.
[  151.091971][ T8296] netlink: 'syz.4.580': attribute type 2 has an invalid length.
[  151.099162][ T8298] lo speed is unknown, defaulting to 1000
[  151.241036][ T7881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  151.255456][ T7881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  151.723881][ T8327] tun0: tun_chr_ioctl cmd 1074025672
[  151.731466][ T5902] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  151.753748][ T8327] tun0: ignored: set checksum disabled
[  151.857149][ T8338] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  152.010747][ T8344] bridge0: left allmulticast mode
[  152.030583][ T8344] veth0_to_batadv: left promiscuous mode
[  152.039344][ T8344] veth0_to_batadv: left allmulticast mode
[  152.057130][ T8344] xfrm0: left promiscuous mode
[  152.063432][ T8344] xfrm0: left allmulticast mode
[  152.128963][ T8320] netlink: 'syz.1.587': attribute type 1 has an invalid length.
[  152.229388][ T8354] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  152.383766][ T8358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.467567][ T8404] nbd1: detected capacity change from 0 to 63
[  153.482562][ T5843] block nbd1: Receive control failed (result -104)
[  153.486083][ T8417] ip6gre1: entered promiscuous mode
[  153.491102][ T5830] block nbd1: Receive control failed (result -32)
[  153.521454][ T8417] ip6gre1: entered allmulticast mode
[  153.538826][   T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  153.567693][ T5825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  153.577060][   T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  153.612677][ T8423] netlink: 'syz.4.618': attribute type 2 has an invalid length.
[  153.672906][ T8423] netlink: 'syz.4.618': attribute type 1 has an invalid length.
[  153.680615][ T8423] netlink: 'syz.4.618': attribute type 2 has an invalid length.
[  153.711724][ T8423] netlink: 'syz.4.618': attribute type 2 has an invalid length.
[  153.735505][ T8423] netlink: 'syz.4.618': attribute type 1 has an invalid length.
[  153.773889][ T8423] netlink: 'syz.4.618': attribute type 2 has an invalid length.
[  153.881913][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  154.354485][ T8468] __nla_validate_parse: 10 callbacks suppressed
[  154.354507][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'.
[  154.382642][ T8463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.626'.
[  154.595021][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.631'.
[  154.896139][ T8502] block nbd2: Unsupported socket: should be TCP or UNIX.
[  155.092709][ T8513] openvswitch: netlink: Missing valid actions attribute.
[  155.099836][ T8513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.151032][ T8515] dvmrp0: entered allmulticast mode
[  155.156669][    C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  155.156689][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  155.209819][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'.
[  155.264674][ T8518] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  155.349584][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'.
[  155.428023][ T8530] netlink: 'syz.0.647': attribute type 3 has an invalid length.
[  155.443196][ T8528] bridge2: port 1(erspan0) entered blocking state
[  155.450041][ T8528] bridge2: port 1(erspan0) entered disabled state
[  155.463476][ T8528] erspan0: entered allmulticast mode
[  155.476130][ T8528] erspan0: entered promiscuous mode
[  155.481625][ T8534] sctp: [Deprecated]: syz.3.648 (pid 8534) Use of struct sctp_assoc_value in delayed_ack socket option.
[  155.481625][ T8534] Use struct sctp_sack_info instead
[  155.506973][ T8528] bridge2: port 1(erspan0) entered blocking state
[  155.513829][ T8528] bridge2: port 1(erspan0) entered forwarding state
[  155.548485][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'.
[  155.589121][ T8537] lo speed is unknown, defaulting to 1000
[  155.613755][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'.
[  155.674856][ T8544] bridge2: port 2(bond2) entered blocking state
[  155.736553][ T8544] bridge2: port 2(bond2) entered disabled state
[  155.783118][ T8544] bond2: entered allmulticast mode
[  155.804533][ T8544] bond2: entered promiscuous mode
[  155.863512][ T5825] IPVS: starting estimator thread 0...
[  155.926345][ T8537] lo speed is unknown, defaulting to 1000
[  155.942106][ T8537] lo speed is unknown, defaulting to 1000
[  155.977786][ T8572] IPVS: using max 32 ests per chain, 76800 per kthread
[  156.030670][ T8567] lo speed is unknown, defaulting to 1000
[  156.669752][ T8537] infiniband syz0: set down
[  156.677909][ T5945] lo speed is unknown, defaulting to 1000
[  156.695081][ T8537] infiniband syz0: added lo
[  156.705819][ T8537] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  156.709958][ T8537] infiniband syz0: Couldn't open port 1
[  156.799713][ T8601] netlink: 380 bytes leftover after parsing attributes in process `syz.1.659'.
[  156.819505][ T8537] RDS/IB: syz0: added
[  156.833854][ T8537] smc: adding ib device syz0 with port count 1
[  156.848834][ T8537] smc:    ib device syz0 port 1 has no pnetid
[  156.863486][ T8601] netlink: 'syz.1.659': attribute type 1 has an invalid length.
[  156.867144][ T5945] lo speed is unknown, defaulting to 1000
[  156.890947][ T8537] lo speed is unknown, defaulting to 1000
[  156.951600][ T8601] nbd: error processing sock list
[  157.043588][ T8608] netlink: 72 bytes leftover after parsing attributes in process `syz.1.659'.
[  157.311657][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  157.557258][ T8537] lo speed is unknown, defaulting to 1000
[  157.913056][ T8648] netlink: 220 bytes leftover after parsing attributes in process `syz.3.672'.
[  158.304331][ T8537] lo speed is unknown, defaulting to 1000
[  158.818450][ T8537] lo speed is unknown, defaulting to 1000
[  158.928697][ T8681] xfrm0: entered allmulticast mode
[  158.946492][ T8681] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  159.067860][ T8684] lo speed is unknown, defaulting to 1000
[  159.572191][ T8715] __nla_validate_parse: 2 callbacks suppressed
[  159.572213][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'.
[  159.971956][ T8537] lo speed is unknown, defaulting to 1000
[  160.149762][ T8732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.687'.
[  160.171700][ T8732] netem: change failed
[  160.377896][ T8736] lo speed is unknown, defaulting to 1000
[  160.393190][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'.
[  160.461537][ T8684] lo speed is unknown, defaulting to 1000
[  160.511978][ T8743] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.723416][ T8747] lo speed is unknown, defaulting to 1000
[  160.724297][ T8736] lo speed is unknown, defaulting to 1000
[  161.059567][ T8537] lo speed is unknown, defaulting to 1000
[  161.385536][ T8763] netlink: 'syz.1.695': attribute type 1 has an invalid length.
[  161.428271][ T8763] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  161.648569][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'.
[  161.687006][ T8770] IPVS: Scheduler module ip_vs_ not found
[  161.704195][ T8773] IPVS: length: 24 != 73752
[  161.818916][ T8777] netlink: 'syz.4.698': attribute type 2 has an invalid length.
[  162.029384][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'.
[  162.150427][ T8790] gtp0: entered promiscuous mode
[  162.155753][ T8790] gtp0: entered allmulticast mode
[  162.177688][ T8791] : entered promiscuous mode
[  162.210046][ T8784] lo speed is unknown, defaulting to 1000
[  162.228962][ T8784] lo speed is unknown, defaulting to 1000
[  162.450845][ T8799] netlink: 'syz.4.705': attribute type 29 has an invalid length.
[  162.459479][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'.
[  162.476450][ T8799] netlink: 'syz.4.705': attribute type 29 has an invalid length.
[  162.484704][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'.
[  162.644540][ T8803] netlink: 76 bytes leftover after parsing attributes in process `syz.0.707'.
[  162.959270][ T8812] netlink: 64 bytes leftover after parsing attributes in process `syz.3.711'.
[  163.053684][ T8820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.134192][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'.
[  163.231425][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  163.249555][ T5830] block nbd2: Receive control failed (result -32)
[  163.405650][ T8832] vlan4: entered promiscuous mode
[  163.411028][ T8832] batadv_slave_1: entered promiscuous mode
[  163.595988][ T8837] syzkaller1: entered promiscuous mode
[  163.616477][ T8837] syzkaller1: entered allmulticast mode
[  163.936045][ T8850] lo speed is unknown, defaulting to 1000
[  163.944231][ T8850] lo speed is unknown, defaulting to 1000
[  164.304719][ T8865] lo speed is unknown, defaulting to 1000
[  164.351651][    T9] IPVS: starting estimator thread 0...
[  164.451327][ T8867] IPVS: using max 29 ests per chain, 69600 per kthread
[  164.520297][ T8865] lo speed is unknown, defaulting to 1000
[  164.870839][ T8886] __nla_validate_parse: 6 callbacks suppressed
[  164.870859][ T8886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.735'.
[  165.161524][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  165.221936][ T8909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.739'.
[  165.440302][ T8913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.740'.
[  165.954545][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  166.085174][ T8948] xt_CT: No such helper "syz1"
[  166.113585][ T8953] netlink: 'syz.3.751': attribute type 4 has an invalid length.
[  166.398117][ T8947] lo speed is unknown, defaulting to 1000
[  166.435318][ T8962] veth1_macvtap: left promiscuous mode
[  166.445345][ T8962] macsec0: entered promiscuous mode
[  166.466549][ T8965] veth1_macvtap: entered promiscuous mode
[  166.489522][ T8965] macsec0: left promiscuous mode
[  166.511902][ T8947] lo speed is unknown, defaulting to 1000
[  166.995890][ T8975] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  167.198630][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'.
[  167.231381][ T8985] netlink: 144 bytes leftover after parsing attributes in process `syz.3.758'.
[  167.258204][ T8988] Cannot find del_set index 2 as target
[  167.345456][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'.
[  167.507381][ T8993] netlink: 3 bytes leftover after parsing attributes in process `syz.4.761'.
[  167.536049][ T9001] netlink: 'syz.1.763': attribute type 32 has an invalid length.
[  167.569246][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'.
[  167.785962][ T9001] bond3: Setting coupled_control to off (0)
[  168.341638][ T9017] lo speed is unknown, defaulting to 1000
[  168.366382][ T9029] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  168.396791][ T9017] lo speed is unknown, defaulting to 1000
[  168.505607][ T9038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.566106][ T9041] netlink: 'syz.3.771': attribute type 32 has an invalid length.
[  168.750328][ T9048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.772'.
[  168.781337][ T9048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.772'.
[  168.876583][ T9055] syzkaller0: entered promiscuous mode
[  168.895730][ T9055] syzkaller0: entered allmulticast mode
[  169.818007][ T9084] bridge2: port 1(erspan0) entered disabled state
[  169.862469][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.870324][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.048805][ T9098] openvswitch: netlink: EtherType 50a is less than min 600
[  170.051434][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.112374][ T9084] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.284200][ T9092] syzkaller0: entered promiscuous mode
[  170.301980][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.335538][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.371318][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.380259][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.505730][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.521462][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.529293][ T9109] __nla_validate_parse: 6 callbacks suppressed
[  170.529311][ T9109] netlink: 36 bytes leftover after parsing attributes in process `syz.2.783'.
[  170.545933][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.545996][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.052826][ T9126] netlink: 924 bytes leftover after parsing attributes in process `syz.1.787'.
[  171.068313][ T9125] IPVS: Error connecting to the multicast addr
[  171.297568][ T9137] syzkaller0: entered promiscuous mode
[  171.311669][ T9137] syzkaller0: entered allmulticast mode
[  171.360844][ T9137] xfrm1: entered allmulticast mode
[  171.404635][ T9141] openvswitch: netlink: EtherType 50a is less than min 600
[  172.054861][ T9168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.802'.
[  172.207293][ T9174] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  172.310134][ T9178] netlink: 'syz.2.804': attribute type 9 has an invalid length.
[  172.371274][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'.
[  172.620708][ T9190] openvswitch: netlink: EtherType 50a is less than min 600
[  173.035274][ T9201] openvswitch: netlink: IP tunnel TTL not specified.
[  173.048066][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'.
[  174.640307][ T9239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.649614][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.713411][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'.
[  174.887622][ T9243] lo speed is unknown, defaulting to 1000
[  174.895758][ T9243] lo speed is unknown, defaulting to 1000
[  175.504438][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'.
[  175.521374][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'.
[  175.548070][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'.
[  176.265697][ T9277] syzkaller0: entered promiscuous mode
[  176.301836][ T9277] syzkaller0: entered allmulticast mode
[  177.679286][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'.
[  177.820419][ T9313] netlink: 76 bytes leftover after parsing attributes in process `syz.2.838'.
[  178.544400][ T9366] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.591376][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  178.605568][ T9367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.854'.
[  178.614954][ T9367] unsupported nlmsg_type 40
[  178.692366][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[  178.701968][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'.
[  178.710951][ T9373] netlink: 'syz.1.857': attribute type 18 has an invalid length.
[  178.863798][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'.
[  178.911929][ T5917] lo speed is unknown, defaulting to 1000
[  178.927858][ T5917] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.072429][ T5917] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.162596][ T9389] pimreg: tun_chr_ioctl cmd 2147767520
[  179.168350][ T9357] syz.4.851 (9357) used greatest stack depth: 17472 bytes left
[  179.558407][ T9411] netlink: 'syz.2.867': attribute type 1 has an invalid length.
[  179.799657][ T9416] syzkaller0: entered promiscuous mode
[  179.807440][ T9416] syzkaller0: entered allmulticast mode
[  179.871517][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.982775][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'.
[  180.010661][ T9421] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  180.342324][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.875'.
[  180.735753][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'.
[  180.767470][   T30] audit: type=1800 audit(1775288778.660:2): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.881" name="memory.events" dev="tmpfs" ino=1004 res=0 errno=0
[  180.915650][ T9471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'.
[  181.151796][ T9485] syzkaller1: entered promiscuous mode
[  181.173584][ T9485] syzkaller1: entered allmulticast mode
[  181.354664][ T9497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.892'.
[  181.378936][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'.
[  181.394114][ T5830] Bluetooth: hci2: link tx timeout
[  181.399379][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  181.506163][ T9506] netlink: 'syz.3.893': attribute type 11 has an invalid length.
[  181.532342][ T9506] netlink: 'syz.3.893': attribute type 23 has an invalid length.
[  181.559594][ T9506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.893'.
[  181.576022][ T9510] syzkaller0: entered promiscuous mode
[  181.583771][ T9510] syzkaller0: entered allmulticast mode
[  181.591103][ T9509] tipc: Started in network mode
[  181.598370][ T9509] tipc: Node identity 7699b3566a95, cluster identity 4711
[  181.606504][ T9509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.676212][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'.
[  181.681220][ T9506] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  181.685543][ T9520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.893'.
[  181.723221][ T9509] tipc: Resetting bearer <eth:syzkaller0>
[  181.739030][ T9509] tipc: Disabling bearer <eth:syzkaller0>
[  181.754777][ T9520] gretap1: entered promiscuous mode
[  182.089500][ T9531] netlink: 7 bytes leftover after parsing attributes in process `syz.2.900'.
[  182.106451][ T9531] netlink: 7 bytes leftover after parsing attributes in process `syz.2.900'.
[  182.457444][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'.
[  182.682506][ T9561] netlink: 'syz.4.910': attribute type 3 has an invalid length.
[  182.712699][ T9561] netlink: 'syz.4.910': attribute type 1 has an invalid length.
[  182.739735][ T9561] NCSI netlink: No device for ifindex 813332851
[  183.010244][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.036405][ T9573] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.313610][ T9579] netlink: 'syz.4.916': attribute type 22 has an invalid length.
[  183.355890][ T9579] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  183.402307][ T9580] bridge4: entered promiscuous mode
[  183.409830][ T9580] bridge4: port 1(macvtap1) entered blocking state
[  183.421802][ T9580] bridge4: port 1(macvtap1) entered disabled state
[  183.429015][ T9580] macvtap1: entered allmulticast mode
[  183.436062][ T9580] bridge4: entered allmulticast mode
[  183.464243][ T9580] macvtap1: left allmulticast mode
[  183.469514][ T9580] bridge4: left allmulticast mode
[  183.480796][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  183.561681][ T9580] bridge4: left promiscuous mode
[  183.678347][ T9581] bridge4: entered promiscuous mode
[  183.686947][ T9581] bridge4: port 1(macvtap1) entered blocking state
[  183.694492][ T9581] bridge4: port 1(macvtap1) entered disabled state
[  183.701795][ T9581] macvtap1: entered allmulticast mode
[  183.707231][ T9581] bridge4: entered allmulticast mode
[  183.720554][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  183.738419][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  183.748821][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  183.756180][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  183.763868][   T11] block nbd1: Dead connection, failed to find a fallback
[  183.767387][ T9581] macvtap1: left allmulticast mode
[  183.771089][   T11] block nbd1: shutting down sockets
[  183.782810][   T11] blk_print_req_error: 123 callbacks suppressed
[  183.782830][   T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.799248][   T11] buffer_io_error: 122 callbacks suppressed
[  183.799265][   T11] Buffer I/O error on dev nbd1, logical block 3, async page read
[  183.813240][   T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.823298][   T11] Buffer I/O error on dev nbd1, logical block 2, async page read
[  183.831406][   T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.841083][   T11] Buffer I/O error on dev nbd1, logical block 1, async page read
[  183.849168][   T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.858885][   T11] Buffer I/O error on dev nbd1, logical block 0, async page read
[  183.868028][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.879229][ T9581] bridge4: left allmulticast mode
[  183.879423][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read
[  183.892864][ T5832] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.902691][ T5832] Buffer I/O error on dev nbd1, logical block 1, async page read
[  183.910535][ T5832] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.920102][ T5832] Buffer I/O error on dev nbd1, logical block 2, async page read
[  183.929269][ T5832] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.938851][ T5832] Buffer I/O error on dev nbd1, logical block 3, async page read
[  183.939198][ T9581] bridge4: left promiscuous mode
[  183.946726][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.946754][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read
[  183.969647][ T5832] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  183.979336][ T5832] Buffer I/O error on dev nbd1, logical block 1, async page read
[  183.987870][ T5832] ldm_validate_partition_table(): Disk read failed.
[  183.995017][ T5832] Dev nbd1: unable to read RDB block 0
[  184.001305][ T5832]  nbd1: unable to read partition table
[  184.011902][ T5832] ldm_validate_partition_table(): Disk read failed.
[  184.023768][ T5832] Dev nbd1: unable to read RDB block 0
[  184.029932][ T5832]  nbd1: unable to read partition table
[  184.445624][ T9609] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  184.545179][ T9609] bond0 (unregistering): Released all slaves
[  184.624735][ T9627] nbd: must specify at least one socket
[  184.673833][ T9620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.723359][ T9620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.755660][ T9620] bond0 (unregistering): Released all slaves
[  184.870536][ T9637] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.245833][ T9657] netlink: 'syz.0.931': attribute type 1 has an invalid length.
[  185.260065][ T9654] syzkaller0: entered promiscuous mode
[  185.276206][ T9657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.306602][ T9654] syzkaller0: entered allmulticast mode
[  186.367315][ T9719] __nla_validate_parse: 14 callbacks suppressed
[  186.367338][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'.
[  186.717030][ T9725] lo: entered allmulticast mode
[  186.722556][ T9725] tunl0: entered allmulticast mode
[  186.728155][ T9725] gre0: entered allmulticast mode
[  186.733678][ T9725] gretap0: entered allmulticast mode
[  186.739328][ T9725] erspan0: entered allmulticast mode
[  186.751640][ T9725] ip_vti0: entered allmulticast mode
[  186.756020][ T9739] netlink: 'syz.3.948': attribute type 5 has an invalid length.
[  186.758110][ T9725] ip6_vti0: entered allmulticast mode
[  186.784855][ T9725] sit0: entered allmulticast mode
[  186.813847][ T9725] ip6tnl0: entered allmulticast mode
[  186.826077][ T9725] ip6gre0: left promiscuous mode
[  186.851685][ T9725] ip6gre0: entered allmulticast mode
[  186.883321][ T9725] syz_tun: left promiscuous mode
[  186.943416][ T9725] ip6gretap0: entered allmulticast mode
[  186.950061][ T9725] vcan0: entered allmulticast mode
[  186.963799][ T9725] team0: entered allmulticast mode
[  186.987171][ T9725] team_slave_1: entered allmulticast mode
[  187.002522][ T9725] dummy0: entered allmulticast mode
[  187.036223][ T9725] nlmon0: entered allmulticast mode
[  187.066056][ T9725] caif0: entered allmulticast mode
[  187.090160][ T9725] batadv0: entered allmulticast mode
[  187.105953][ T9725] vxcan0: entered allmulticast mode
[  187.119341][ T9725] vxcan1: entered allmulticast mode
[  187.143973][ T9725] veth0: entered allmulticast mode
[  187.157219][ T9725] veth1: entered allmulticast mode
[  187.171456][ T9725] wg0: entered allmulticast mode
[  187.185664][ T9725] wg1: entered allmulticast mode
[  187.198815][ T9725] wg2: entered allmulticast mode
[  187.214365][ T9725] veth0_to_bridge: entered allmulticast mode
[  187.234633][ T9725] veth1_to_bridge: entered allmulticast mode
[  187.252826][ T9725] veth0_to_bond: entered allmulticast mode
[  187.273443][ T9725] bond_slave_0: entered allmulticast mode
[  187.295358][ T9725] veth1_to_bond: entered allmulticast mode
[  187.305149][ T9725] bond_slave_1: entered allmulticast mode
[  187.329451][ T9725] veth1_to_team: entered allmulticast mode
[  187.363033][ T9725] veth1_to_batadv: entered allmulticast mode
[  187.369757][ T9725] batadv_slave_1: entered allmulticast mode
[  187.389875][ T9725] xfrm0: entered allmulticast mode
[  187.401564][ T9725] veth0_to_hsr: entered allmulticast mode
[  187.407537][ T9725] hsr_slave_0: entered allmulticast mode
[  187.443054][ T9725] veth1_to_hsr: entered allmulticast mode
[  187.462170][ T9725] hsr_slave_1: entered allmulticast mode
[  187.487822][ T9725] hsr0: entered allmulticast mode
[  187.495257][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'.
[  187.504752][ T9725] veth1_virt_wifi: entered allmulticast mode
[  187.511022][ T9725] veth0_virt_wifi: entered allmulticast mode
[  187.531797][ T9725] veth1_vlan: entered allmulticast mode
[  187.537588][ T9725] veth0_vlan: entered allmulticast mode
[  187.552533][ T9725] vlan0: entered allmulticast mode
[  187.562654][ T9725] vlan1: entered allmulticast mode
[  187.578358][ T9725] macvlan0: entered allmulticast mode
[  187.593481][ T9725] macvlan1: entered allmulticast mode
[  187.622560][ T9725] ipvlan0: entered allmulticast mode
[  187.628172][ T9725] ipvlan1: entered allmulticast mode
[  187.639352][ T9725] veth1_macvtap: entered allmulticast mode
[  187.652268][ T9725] veth0_macvtap: entered allmulticast mode
[  187.668605][ T9725] macvtap0: entered allmulticast mode
[  187.683076][ T9725] macsec0: entered allmulticast mode
[  187.698893][ T9725] geneve0: entered allmulticast mode
[  187.713807][ T9725] geneve1: entered allmulticast mode
[  187.729717][ T9725] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  187.742312][ T9725] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  187.756032][ T9725] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  187.777902][ T9725] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  187.798182][ T9725] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  187.821602][ T9725] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  187.839332][ T9725] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode
[  187.858830][ T9725] bridge1: entered allmulticast mode
[  187.875909][ T9725] mac80211_hwsim hwsim14 wlan3: entered allmulticast mode
[  187.901761][ T9725] mac80211_hwsim hwsim15 wlan4: entered allmulticast mode
[  187.919411][ T9725] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  187.929560][ T9725] syztnl1: entered allmulticast mode
[  187.944287][ T9725] ip6tnl1: entered allmulticast mode
[  187.949969][ T9725] bond1: entered allmulticast mode
[  187.955909][ T9725] veth2: entered allmulticast mode
[  187.961779][ T9725] veth3: entered allmulticast mode
[  187.967852][ T9725] @: entered allmulticast mode
[  187.984089][ T9725] syztnl2: entered allmulticast mode
[  187.992931][ T9725] bond2: entered allmulticast mode
[  188.010116][ T9725] ip6tnl2: entered allmulticast mode
[  188.022172][ T9725] bridge2: entered allmulticast mode
[  188.028416][ T9725] ip6erspan0: entered allmulticast mode
[  188.044963][ T9725] macsec0.0: entered allmulticast mode
[  188.051001][ T9725] bridge3: entered allmulticast mode
[  188.077517][ T9725] bridge4: entered allmulticast mode
[  188.087622][ T9725] syztnl0: entered allmulticast mode
[  190.071008][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.112598][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.161501][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.203037][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.242745][ T9794] netlink: 'syz.2.956': attribute type 1 has an invalid length.
[  190.250452][ T9794] netlink: 'syz.2.956': attribute type 2 has an invalid length.
[  190.317681][ T9800] openvswitch: netlink: EtherType 50a is less than min 600
[  190.367465][ T9799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.869139][ T9829] openvswitch: netlink: ERSPAN option length err (len 4112, max 255).
[  190.882517][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  190.891587][ T9826] netlink: 152 bytes leftover after parsing attributes in process `syz.2.964'.
[  190.900655][ T9826] netlink: 72 bytes leftover after parsing attributes in process `syz.2.964'.
[  190.983404][ T9830] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000
[  191.219689][ T9826] syzkaller0: entered promiscuous mode
[  191.225872][ T9826] syzkaller0: entered allmulticast mode
[  191.352886][ T9845] sctp: [Deprecated]: syz.1.969 (pid 9845) Use of int in maxseg socket option.
[  191.352886][ T9845] Use struct sctp_assoc_value instead
[  191.432507][ T9844] geneve0: Caught tx_queue_len zero misconfig
[  191.460177][ T9845] ip6tnl0: Caught tx_queue_len zero misconfig
[  191.491899][ T9845] netlink: 72 bytes leftover after parsing attributes in process `syz.1.969'.
[  191.757052][ T9854] netlink: 'syz.1.972': attribute type 3 has an invalid length.
[  191.837823][ T9856] openvswitch: netlink: EtherType 50a is less than min 600
[  191.860805][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'.
[  191.932956][ T9864] FAULT_INJECTION: forcing a failure.
[  191.932956][ T9864] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  191.977908][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.3.974 Not tainted syzkaller #0 PREEMPT(full) 
[  191.977935][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  191.977946][ T9864] Call Trace:
[  191.977954][ T9864]  <TASK>
[  191.977964][ T9864]  dump_stack_lvl+0xe8/0x150
[  191.977997][ T9864]  should_fail_ex+0x412/0x560
[  191.978029][ T9864]  _copy_to_user+0x31/0xb0
[  191.978055][ T9864]  simple_read_from_buffer+0xe1/0x170
[  191.978097][ T9864]  proc_fail_nth_read+0x1bb/0x230
[  191.978126][ T9864]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  191.978154][ T9864]  ? rw_verify_area+0x2a6/0x4d0
[  191.978173][ T9864]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  191.978199][ T9864]  vfs_read+0x20c/0xa70
[  191.978217][ T9864]  ? fdget_pos+0x246/0x320
[  191.978237][ T9864]  ? __pfx___mutex_lock+0x10/0x10
[  191.978261][ T9864]  ? __pfx_vfs_read+0x10/0x10
[  191.978281][ T9864]  ? __fget_files+0x2a/0x420
[  191.978302][ T9864]  ? __fget_files+0x3a0/0x420
[  191.978318][ T9864]  ? __fget_files+0x2a/0x420
[  191.978343][ T9864]  ksys_read+0x150/0x270
[  191.978365][ T9864]  ? __pfx_ksys_read+0x10/0x10
[  191.978396][ T9864]  do_syscall_64+0x14d/0xf80
[  191.978418][ T9864]  ? trace_irq_disable+0x3b/0x150
[  191.978433][ T9864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.978451][ T9864]  ? clear_bhb_loop+0x40/0x90
[  191.978471][ T9864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.978489][ T9864] RIP: 0033:0x7f057ab5d04e
[  191.978507][ T9864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  191.978520][ T9864] RSP: 002b:00007f0578df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  191.978539][ T9864] RAX: ffffffffffffffda RBX: 00007f0578df66c0 RCX: 00007f057ab5d04e
[  191.978551][ T9864] RDX: 000000000000000f RSI: 00007f0578df60a0 RDI: 0000000000000003
[  191.978561][ T9864] RBP: 00007f0578df6090 R08: 0000000000000000 R09: 0000000000000000
[  191.978571][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.978580][ T9864] R13: 00007f057ae16128 R14: 00007f057ae16090 R15: 00007ffd84cb7b08
[  191.978609][ T9864]  </TASK>
[  192.387697][ T9869] netlink: 68 bytes leftover after parsing attributes in process `syz.3.975'.
[  194.595956][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.605134][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  195.349986][ T9934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.467965][ T9942] openvswitch: netlink: EtherType 50a is less than min 600
[  195.579038][ T9950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.988'.
[  195.598668][ T9950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.988'.
[  195.656738][ T9950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.988'.
[  195.665920][ T9950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.988'.
[  195.784652][ T9959] netlink: zone id is out of range
[  195.790445][ T9959] netlink: zone id is out of range
[  195.829359][ T9959] netlink: zone id is out of range
[  195.852131][ T9959] netlink: zone id is out of range
[  195.883576][ T9959] netlink: zone id is out of range
[  195.888780][ T9959] netlink: zone id is out of range
[  195.907686][ T9959] netlink: zone id is out of range
[  195.925800][ T9959] netlink: zone id is out of range
[  195.961673][ T9959] netlink: zone id is out of range
[  196.084288][ T9089] IPVS: starting estimator thread 0...
[  196.137023][   T30] audit: type=1804 audit(1775288794.030:3): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.995" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1043 res=1 errno=0
[  196.191695][ T9983] IPVS: using max 25 ests per chain, 60000 per kthread
[  196.210141][ T9965] lo speed is unknown, defaulting to 1000
[  196.269239][   T30] audit: type=1800 audit(1775288794.030:4): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.995" name="cgroup.controllers" dev="tmpfs" ino=1043 res=0 errno=0
[  196.310318][ T9965] lo speed is unknown, defaulting to 1000
[  196.341907][   T30] audit: type=1800 audit(1775288794.060:5): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.995" name="cgroup.controllers" dev="tmpfs" ino=1043 res=0 errno=0
[  196.421776][   T30] audit: type=1800 audit(1775288794.150:6): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.987" name="memory.events" dev="tmpfs" ino=1084 res=0 errno=0
[  196.866120][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'.
[  196.901471][T10006] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1003'.
[  196.910588][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'.
[  197.167431][T10030] netlink: 'syz.0.1010': attribute type 10 has an invalid length.
[  197.191491][T10030] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1010'.
[  197.226382][T10030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  197.279328][T10030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.311009][T10030] hsr0: entered promiscuous mode
[  197.319595][T10030] bridge0: port 3(hsr0) entered blocking state
[  197.327337][T10030] bridge0: port 3(hsr0) entered disabled state
[  197.593644][T10053] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1016'.
[  197.807546][T10053] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.1016'.
[  197.817138][T10053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  197.837537][T10053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  197.847411][T10059] bridge: RTM_NEWNEIGH with invalid state 0x0
[  197.857471][T10062] netlink: 'syz.0.1017': attribute type 1 has an invalid length.
[  197.871327][T10062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1017'.
[  197.880408][T10062] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1017'.
[  197.913222][T10062] netlink: 'syz.0.1017': attribute type 1 has an invalid length.
[  197.942688][T10062] netlink: 'syz.0.1017': attribute type 8 has an invalid length.
[  198.207965][T10071] netlink: 'syz.0.1019': attribute type 1 has an invalid length.
[  198.247367][T10073] lo speed is unknown, defaulting to 1000
[  198.283933][T10073] lo speed is unknown, defaulting to 1000
[  198.914347][T10104] syzkaller0: entered promiscuous mode
[  198.919978][T10104] syzkaller0: entered allmulticast mode
[  199.076418][T10106] netlink: 'syz.3.1026': attribute type 1 has an invalid length.
[  201.280647][T10078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  201.556347][T10122] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  201.727831][T10129] : entered promiscuous mode
[  201.792964][T10129] openvswitch: : Dropping previously announced user features
[  204.741961][T10135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  204.761759][T10153] __nla_validate_parse: 7 callbacks suppressed
[  204.761778][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'.
[  206.917777][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  206.924185][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  206.931716][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[  209.311435][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  209.311435][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  230.097982][T10175] x_tables: duplicate underflow at hook 2
[  230.145072][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'.
[  230.211945][T10175] hsr_slave_0: left promiscuous mode
[  230.252364][T10175] hsr_slave_1: left promiscuous mode
[  230.319537][T10185] gtp0: entered promiscuous mode
[  230.372844][T10185] gtp0: entered allmulticast mode
[  230.603997][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'.
[  230.721932][T10205] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1051'.
[  230.897944][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'.
[  231.025543][T10223] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1053'.
[  231.169740][T10229] net_ratelimit: 9 callbacks suppressed
[  231.169762][T10229] openvswitch: netlink: Unknown key attributes 2
[  231.553109][T10243] syzkaller0: entered promiscuous mode
[  231.558971][T10243] syzkaller0: entered allmulticast mode
[  231.798920][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'.
[  231.961875][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'.
[  232.006932][T10257] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1065'.
[  232.072768][T10265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1067'.
[  232.087160][T10255] netlink: 'syz.4.1066': attribute type 1 has an invalid length.
[  232.119904][T10265] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1067'.
[  232.144356][T10265] netlink: 'syz.3.1067': attribute type 5 has an invalid length.
[  232.455491][T10291] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  232.477677][T10290] netlink: 'syz.2.1072': attribute type 17 has an invalid length.
[  232.853703][T10311] netlink: 'syz.3.1078': attribute type 9 has an invalid length.
[  232.990110][T10316] netlink: 'syz.0.1081': attribute type 8 has an invalid length.
[  233.138465][T10311] netlink: 'syz.3.1078': attribute type 11 has an invalid length.
[  233.478672][T10335] lo speed is unknown, defaulting to 1000
[  233.497427][T10330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.506003][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.552372][T10335] lo speed is unknown, defaulting to 1000
[  233.975836][T10350] lo speed is unknown, defaulting to 1000
[  234.333024][T10350] lo speed is unknown, defaulting to 1000
[  235.451057][T10384] __nla_validate_parse: 6 callbacks suppressed
[  235.451079][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1097'.
[  235.487035][T10384] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1097'.
[  235.578368][T10386] ªªªªªª: renamed from bond_slave_0
[  235.740701][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'.
[  235.801556][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'.
[  235.822579][T10394] tipc: Started in network mode
[  235.838124][T10394] tipc: Node identity 4e50d326bcb6, cluster identity 4711
[  235.851043][T10394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.881707][T10394] syzkaller0: entered promiscuous mode
[  235.896435][T10394] syzkaller0: entered allmulticast mode
[  235.958289][T10393] tipc: Resetting bearer <eth:syzkaller0>
[  236.013177][T10393] tipc: Disabling bearer <eth:syzkaller0>
[  236.170832][T10409] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1105'.
[  236.190262][T10411] netlink: 'syz.2.1106': attribute type 30 has an invalid length.
[  236.224236][T10407] lo speed is unknown, defaulting to 1000
[  236.233439][T10407] lo speed is unknown, defaulting to 1000
[  236.289300][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[  236.318638][T10420] sctp: [Deprecated]: syz.3.1105 (pid 10420) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.318638][T10420] Use struct sctp_sack_info instead
[  236.792437][T10435] netlink: 'syz.2.1110': attribute type 32 has an invalid length.
[  236.801707][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'.
[  236.907828][T10435] bond3: option coupled_control: invalid value (12)
[  236.934799][T10435] bond3 (unregistering): Released all slaves
[  237.451819][T10468] x_tables: duplicate underflow at hook 1
[  238.078209][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'.
[  238.098846][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'.
[  238.134686][T10486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.322595][T10491] Cannot find del_set index 1536 as target
[  238.441613][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.543844][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'.
[  238.581569][T10503] Cannot find del_set index 1536 as target
[  238.590008][T10499] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  238.631861][T10499] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  239.300065][T10540] netlink: 'syz.0.1139': attribute type 10 has an invalid length.
[  239.311238][T10540] team0: left allmulticast mode
[  239.497695][T10552] netlink: 'syz.1.1141': attribute type 1 has an invalid length.
[  239.558133][T10552] 8021q: adding VLAN 0 to HW filter on device bond4
[  239.729228][T10561] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  240.455274][T10609] __nla_validate_parse: 3 callbacks suppressed
[  240.455296][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1158'.
[  240.767349][T10629] x_tables: duplicate underflow at hook 1
[  240.837854][T10633] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1164'.
[  241.210483][T10647] syzkaller0: entered promiscuous mode
[  241.232593][T10647] syzkaller0: entered allmulticast mode
[  241.774817][T10661] netlink: 'syz.4.1173': attribute type 1 has an invalid length.
[  241.795208][T10661] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1173'.
[  241.836731][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'.
[  241.903790][T10667] veth3: entered allmulticast mode
[  241.916406][T10667] bond3: (slave veth3): Enslaving as an active interface with an up link
[  241.950187][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'.
[  241.966829][T10674] GUP no longer grows the stack in syz.0.1174 (10674): 200000003000-20000000a000 (200000001000)
[  241.978653][T10674] CPU: 1 UID: 0 PID: 10674 Comm: syz.0.1174 Not tainted syzkaller #0 PREEMPT(full) 
[  241.978682][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  241.978693][T10674] Call Trace:
[  241.978701][T10674]  <TASK>
[  241.978709][T10674]  dump_stack_lvl+0xe8/0x150
[  241.978758][T10674]  __get_user_pages+0x2453/0x29d0
[  241.978787][T10674]  ? __lock_acquire+0x6b5/0x2cf0
[  241.978831][T10674]  ? __gup_longterm_locked+0xc4e/0x1630
[  241.978862][T10674]  ? down_read_killable+0x1bb/0x340
[  241.978896][T10674]  __gup_longterm_locked+0xdcf/0x1630
[  241.978949][T10674]  gup_fast_fallback+0x1d82/0x22e0
[  241.979008][T10674]  ? __pfx_gup_fast_fallback+0x10/0x10
[  241.979039][T10674]  ? is_valid_gup_args+0x11f/0x200
[  241.979069][T10674]  ? get_user_pages_fast+0x4d/0xb0
[  241.979103][T10674]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  241.979137][T10674]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  241.979164][T10674]  iov_iter_get_pages2+0x5e/0xa0
[  241.979192][T10674]  __se_sys_vmsplice+0x7b3/0x1490
[  241.979235][T10674]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  241.979259][T10674]  ? __pfx_futex_wake+0x10/0x10
[  241.979299][T10674]  ? lockdep_hardirqs_on+0x7a/0x110
[  241.979392][T10674]  do_syscall_64+0x14d/0xf80
[  241.979419][T10674]  ? trace_irq_disable+0x3b/0x150
[  241.979437][T10674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.979457][T10674]  ? clear_bhb_loop+0x40/0x90
[  241.979483][T10674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.979503][T10674] RIP: 0033:0x7fa3af99c819
[  241.979524][T10674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.979540][T10674] RSP: 002b:00007fa3b0878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  241.979563][T10674] RAX: ffffffffffffffda RBX: 00007fa3afc16180 RCX: 00007fa3af99c819
[  241.979578][T10674] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  241.979590][T10674] RBP: 00007fa3afa32c91 R08: 0000000000000000 R09: 0000000000000000
[  241.979602][T10674] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  241.979613][T10674] R13: 00007fa3afc16218 R14: 00007fa3afc16180 R15: 00007fffa4181a98
[  241.979649][T10674]  </TASK>
[  242.418317][T10689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1181'.
[  242.438337][T10686] Unknown metaid 0 dlen 28
[  242.446766][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'.
[  242.536023][T10693] netlink: 'syz.4.1183': attribute type 1 has an invalid length.
[  242.558371][T10696] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  242.672059][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'.
[  242.916825][T10713] siw: device registration error -23
[  243.579614][T10732] tunl0: Caught tx_queue_len zero misconfig
[  243.604472][T10732] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) !
[  243.914894][T10740] netlink: 'syz.2.1197': attribute type 21 has an invalid length.
[  243.937202][T10747] Cannot find set identified by id 65534 to match
[  243.981388][T10742] netlink: 'syz.2.1197': attribute type 1 has an invalid length.
[  243.999528][T10754] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  244.012307][T10742] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1197'.
[  244.035784][T10754] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1200'.
[  244.089425][T10754] openvswitch: netlink: Key type 769 is out of range max 32
[  244.339435][T10768] xfrm2: entered promiscuous mode
[  244.348233][T10768] xfrm2: entered allmulticast mode
[  244.365550][T10768] bridge_slave_0 (unregistering): left allmulticast mode
[  244.385572][T10768] bridge_slave_0 (unregistering): left promiscuous mode
[  244.418375][T10768] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.654842][T10781] tipc: Can't bind to reserved service type 2
[  246.141272][T10788] tap0: tun_chr_ioctl cmd 1074025677
[  246.146791][T10788] tap0: linktype set to 778
[  246.185862][T10798] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up
[  246.449018][T10808] lo: entered allmulticast mode
[  246.492659][T10813] vlan6: entered promiscuous mode
[  246.497871][T10813] team0: entered promiscuous mode
[  246.503215][T10813] team_slave_0: entered promiscuous mode
[  246.509289][T10813] team_slave_1: entered promiscuous mode
[  246.606393][T10819] netlink: 'syz.3.1220': attribute type 2 has an invalid length.
[  247.187553][T10851] __nla_validate_parse: 2 callbacks suppressed
[  247.187575][T10851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'.
[  247.348627][T10859] netlink: 876 bytes leftover after parsing attributes in process `syz.3.1230'.
[  247.372039][T10861] netlink: 'syz.0.1231': attribute type 1 has an invalid length.
[  247.379267][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'.
[  247.415550][T10861] bond0: entered promiscuous mode
[  247.421719][T10861] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.439908][T10864] bond0: entered promiscuous mode
[  247.445657][T10864] dummy0: entered promiscuous mode
[  247.454084][T10864] batadv0: entered promiscuous mode
[  247.460594][T10864] debugfs: 'hsr0' already exists in 'hsr'
[  247.466638][T10864] Cannot create hsr debugfs directory
[  247.473508][T10864] 8021q: adding VLAN 0 to HW filter on device hsr0
[  247.483603][T10864] bond0: left promiscuous mode
[  247.489589][T10864] dummy0: left promiscuous mode
[  247.496225][T10864] batadv0: left promiscuous mode
[  247.527905][T10866] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.536815][T10866] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  247.548067][T10866] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  247.567247][T10866] bond0: (slave vti0): making interface the new active one
[  247.574712][T10866] vti0: entered promiscuous mode
[  247.581715][T10866] bond0: (slave vti0): Enslaving as an active interface with an up link
[  247.796088][T10876] netlink: 'syz.0.1233': attribute type 1 has an invalid length.
[  247.835809][T10875] netlink: 'syz.2.1235': attribute type 2 has an invalid length.
[  247.847304][T10875] tipc: Cannot configure node identity twice
[  247.960608][T10886] sctp: [Deprecated]: syz.0.1238 (pid 10886) Use of int in maxseg socket option.
[  247.960608][T10886] Use struct sctp_assoc_value instead
[  248.008594][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'.
[  248.018210][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'.
[  248.094293][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'.
[  248.111329][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'.
[  248.120768][T10901] netlink: 'syz.2.1237': attribute type 3 has an invalid length.
[  248.317218][T10912] xt_hashlimit: overflow, try lower: 0/0
[  248.477058][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'.
[  248.656697][T10930] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1248'.
[  248.672423][T10931] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1248'.
[  248.683734][T10931] openvswitch: netlink: EtherType 0 is less than min 600
[  248.700786][T10930] openvswitch: netlink: EtherType 0 is less than min 600
[  248.798109][ T1209] IPVS: starting estimator thread 0...
[  248.902306][T10937] IPVS: using max 26 ests per chain, 62400 per kthread
[  248.915666][T10935] lo speed is unknown, defaulting to 1000
[  249.189998][T10952] x_tables: duplicate underflow at hook 1
[  249.403643][T10959] netlink: 'syz.3.1255': attribute type 1 has an invalid length.
[  249.436183][T10961] netlink: 'syz.2.1257': attribute type 3 has an invalid length.
[  249.464878][T10961] netlink: 'syz.2.1257': attribute type 1 has an invalid length.
[  249.515026][T10969] netlink: 'syz.0.1258': attribute type 2 has an invalid length.
[  249.670910][T10976] netlink: 'syz.3.1261': attribute type 23 has an invalid length.
[  249.915265][T10987] syzkaller0: entered promiscuous mode
[  249.961625][T10987] syzkaller0: entered allmulticast mode
[  250.151476][T11001] lo speed is unknown, defaulting to 1000
[  252.853845][T10987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  252.876012][T11041] __nla_validate_parse: 8 callbacks suppressed
[  252.876035][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1274'.
[  253.298385][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'.
[  253.448511][T11083] macsec0: entered promiscuous mode
[  253.454251][T11081] validate_nla: 1 callbacks suppressed
[  253.454270][T11081] netlink: 'syz.2.1287': attribute type 2 has an invalid length.
[  253.470740][T11088] macsec0: left promiscuous mode
[  253.499090][T11081] netlink: 'syz.2.1287': attribute type 2 has an invalid length.
[  253.510092][T11081] netlink: 'syz.2.1287': attribute type 2 has an invalid length.
[  253.533954][T11081] netlink: 'syz.2.1287': attribute type 2 has an invalid length.
[  253.664868][T11102] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1291'.
[  253.693616][T11094] lo speed is unknown, defaulting to 1000
[  253.713151][T11090] netlink: 'syz.3.1290': attribute type 3 has an invalid length.
[  253.815532][T11104] syz.1.1293: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  253.864733][T11104] CPU: 0 UID: 0 PID: 11104 Comm: syz.1.1293 Not tainted syzkaller #0 PREEMPT(full) 
[  253.864761][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  253.864771][T11104] Call Trace:
[  253.864779][T11104]  <TASK>
[  253.864788][T11104]  dump_stack_lvl+0xe8/0x150
[  253.864838][T11104]  warn_alloc+0x249/0x340
[  253.864862][T11104]  ? stack_trace_save+0xa9/0x100
[  253.864887][T11104]  ? __pfx_warn_alloc+0x10/0x10
[  253.864918][T11104]  ? kasan_save_track+0x4f/0x80
[  253.864938][T11104]  ? kasan_save_track+0x3e/0x80
[  253.864956][T11104]  ? __kasan_kmalloc+0x93/0xb0
[  253.864976][T11104]  ? __kmalloc_cache_noprof+0x31c/0x660
[  253.864997][T11104]  ? xskq_create+0x56/0x170
[  253.865018][T11104]  ? xsk_setsockopt+0x54c/0x990
[  253.865036][T11104]  ? do_sock_setsockopt+0x17c/0x1b0
[  253.865057][T11104]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  253.865079][T11104]  ? do_syscall_64+0x14d/0xf80
[  253.865108][T11104]  __vmalloc_node_range_noprof+0x132/0x1730
[  253.865165][T11104]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  253.865196][T11104]  ? __kasan_kmalloc+0x93/0xb0
[  253.865224][T11104]  vmalloc_user_noprof+0xad/0xe0
[  253.865245][T11104]  ? xskq_create+0xbf/0x170
[  253.865265][T11104]  xskq_create+0xbf/0x170
[  253.865290][T11104]  xsk_init_queue+0x8a/0xe0
[  253.865315][T11104]  xsk_setsockopt+0x54c/0x990
[  253.865338][T11104]  ? __pfx_xsk_setsockopt+0x10/0x10
[  253.865360][T11104]  ? __pfx_aa_sk_perm+0x10/0x10
[  253.865392][T11104]  ? aa_sock_opt_perm+0xff/0x1a0
[  253.865414][T11104]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  253.865435][T11104]  ? __pfx_xsk_setsockopt+0x10/0x10
[  253.865458][T11104]  do_sock_setsockopt+0x17c/0x1b0
[  253.865487][T11104]  __x64_sys_setsockopt+0x13d/0x1b0
[  253.865517][T11104]  do_syscall_64+0x14d/0xf80
[  253.865541][T11104]  ? trace_irq_disable+0x3b/0x150
[  253.865557][T11104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.865576][T11104]  ? clear_bhb_loop+0x40/0x90
[  253.865600][T11104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.865620][T11104] RIP: 0033:0x7f7abdf9c819
[  253.865639][T11104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.865652][T11104] RSP: 002b:00007f7abeda8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  253.865674][T11104] RAX: ffffffffffffffda RBX: 00007f7abe215fa0 RCX: 00007f7abdf9c819
[  253.865686][T11104] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  253.865698][T11104] RBP: 00007f7abe032c91 R08: 0000000000000004 R09: 0000000000000000
[  253.865708][T11104] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.865719][T11104] R13: 00007f7abe216038 R14: 00007f7abe215fa0 R15: 00007ffd14a38a78
[  253.865751][T11104]  </TASK>
[  253.867206][T11104] Mem-Info:
[  254.150983][T11104] active_anon:9068 inactive_anon:6 isolated_anon:0
[  254.150983][T11104]  active_file:2831 inactive_file:40310 isolated_file:0
[  254.150983][T11104]  unevictable:768 dirty:222 writeback:0
[  254.150983][T11104]  slab_reclaimable:11601 slab_unreclaimable:106836
[  254.150983][T11104]  mapped:29422 shmem:1360 pagetables:1496
[  254.150983][T11104]  sec_pagetables:0 bounce:0
[  254.150983][T11104]  kernel_misc_reclaimable:0
[  254.150983][T11104]  free:1316873 free_pcp:8681 free_cma:0
[  254.210180][T11104] Node 0 active_anon:36144kB inactive_anon:24kB active_file:11324kB inactive_file:161040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117780kB dirty:900kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13256kB pagetables:5724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  254.268739][T11104] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  254.300470][T11104] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  254.331316][T11104] lowmem_reserve[]: 0 2492 2493 2493 2493
[  254.337216][T11104] Node 0 DMA32 free:1311164kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36044kB inactive_anon:24kB active_file:11324kB inactive_file:161040kB unevictable:1536kB writepending:900kB zspages:0kB present:3129332kB managed:2552320kB mlocked:0kB bounce:0kB free_pcp:35580kB local_pcp:16048kB free_cma:0kB
[  254.391670][T11122] netlink: 'syz.4.1299': attribute type 15 has an invalid length.
[  254.393184][T11104] lowmem_reserve[]: 0 0 0 0 0
[  254.403869][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1299'.
[  254.406312][T11104] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  254.466248][T11104] lowmem_reserve[]: 0 0 0 0 0
[  254.471048][T11104] Node 1 Normal free:3940904kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  254.571654][T11104] lowmem_reserve[]: 0 0 0 0 0
[  254.576467][T11104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  254.588646][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1301'.
[  254.609804][T11104] Node 0 DMA32: 3279*4kB (UME) 3084*8kB (UM) 1808*16kB (UME) 550*32kB (UM) 529*64kB (UME) 650*128kB (UME) 461*256kB (UM) 373*512kB (UME) 240*1024kB (UME) 119*2048kB (UM) 76*4096kB (UM) = 1311132kB
[  254.631035][T11132] netlink: 'syz.2.1302': attribute type 15 has an invalid length.
[  254.650515][T11104] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  254.660135][T11132] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1302'.
[  254.680528][T11104] Node 1 Normal: 0*4kB 3*8kB (UM) 15*16kB (UM) 11*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940904kB
[  254.721329][T11104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  254.742125][T11104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  254.751848][T11104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  254.762930][T11104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  254.773415][T11104] 45324 total pagecache pages
[  254.778664][T11104] 0 pages in swap cache
[  254.783010][T11104] Free swap  = 124996kB
[  254.787285][T11104] Total swap = 124996kB
[  254.791506][T11104] 2097051 pages RAM
[  254.795338][T11104] 0 pages HighMem/MovableOnly
[  254.800118][T11104] 427137 pages reserved
[  254.804334][T11104] 0 pages cma reserved
[  255.107330][   T55] lo speed is unknown, defaulting to 1000
[  255.122316][   T55] syz0: Port: 1 Link ACTIVE
[  255.141365][T11152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1305'.
[  255.166051][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'.
[  255.174521][T11152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1305'.
[  255.185803][ T9089] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.216378][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'.
[  255.235891][   T55] lo speed is unknown, defaulting to 1000
[  255.258177][ T9281] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.561506][ T9085] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.640056][T11168] gre0: entered promiscuous mode
[  255.845693][T11182] mac80211_hwsim hwsim4 ªªªªª;: renamed from wlan0
[  255.942258][T11187] netlink: 'syz.2.1316': attribute type 1 has an invalid length.
[  256.039288][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.048289][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  256.091520][T11194] syzkaller1: entered promiscuous mode
[  256.097229][T11194] syzkaller1: entered allmulticast mode
[  256.271701][ T9281] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  256.301596][ T9281] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  256.318806][T11196] can: request_module (can-proto-5) failed.
[  256.359066][ T5843] block nbd3: Receive control failed (result -1)
[  256.461409][ T9085] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  256.540645][T11204] geneve2: entered promiscuous mode
[  256.849073][T11225] bond0: option min_links: invalid value (18446744073709551612)
[  256.893448][T11225] bond0: option min_links: allowed values 0 - 2147483647
[  256.920113][T11225] bond0 (unregistering): Released all slaves
[  257.330212][T11243] tipc: Invalid UDP bearer configuration
[  257.330273][T11243] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  257.580385][T11253] lo speed is unknown, defaulting to 1000
[  257.707559][T11260] erspan0: entered promiscuous mode
[  257.735937][T11260] vlan6: entered promiscuous mode
[  257.832071][T11265] ip6t_REJECT: ECHOREPLY is not supported
[  258.008282][T11275] FAULT_INJECTION: forcing a failure.
[  258.008282][T11275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.051526][T11275] CPU: 1 UID: 0 PID: 11275 Comm: syz.4.1343 Not tainted syzkaller #0 PREEMPT(full) 
[  258.051555][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  258.051566][T11275] Call Trace:
[  258.051574][T11275]  <TASK>
[  258.051583][T11275]  dump_stack_lvl+0xe8/0x150
[  258.051616][T11275]  should_fail_ex+0x412/0x560
[  258.051651][T11275]  _copy_from_user+0x2d/0xb0
[  258.051675][T11275]  ___sys_sendmsg+0x1c6/0x360
[  258.051709][T11275]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.051773][T11275]  ? __fget_files+0x2a/0x420
[  258.051791][T11275]  ? __fget_files+0x3a0/0x420
[  258.051820][T11275]  __x64_sys_sendmsg+0x1bd/0x2a0
[  258.051849][T11275]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  258.051886][T11275]  ? __pfx_ksys_write+0x10/0x10
[  258.051922][T11275]  do_syscall_64+0x14d/0xf80
[  258.051946][T11275]  ? trace_irq_disable+0x3b/0x150
[  258.051963][T11275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.051983][T11275]  ? clear_bhb_loop+0x40/0x90
[  258.052007][T11275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.052035][T11275] RIP: 0033:0x7fcff5d9c819
[  258.052054][T11275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.052071][T11275] RSP: 002b:00007fcff6d38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  258.052093][T11275] RAX: ffffffffffffffda RBX: 00007fcff6015fa0 RCX: 00007fcff5d9c819
[  258.052107][T11275] RDX: 0000000000004804 RSI: 0000200000000000 RDI: 0000000000000003
[  258.052119][T11275] RBP: 00007fcff6d38090 R08: 0000000000000000 R09: 0000000000000000
[  258.052131][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.052143][T11275] R13: 00007fcff6016038 R14: 00007fcff6015fa0 R15: 00007ffe380ae318
[  258.052176][T11275]  </TASK>
[  258.423135][T11287] 
[  258.425544][T11287] ======================================================
[  258.432589][T11287] WARNING: possible circular locking dependency detected
[  258.439626][T11287] syzkaller #0 Not tainted
[  258.444046][T11287] ------------------------------------------------------
[  258.451272][T11287] syz.4.1347/11287 is trying to acquire lock:
[  258.457359][T11287] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  258.468108][T11287] 
[  258.468108][T11287] but task is already holding lock:
[  258.475504][T11287] ffff8880322e60e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  258.485359][T11287] 
[  258.485359][T11287] which lock already depends on the new lock.
[  258.485359][T11287] 
[  258.495797][T11287] 
[  258.495797][T11287] the existing dependency chain (in reverse order) is:
[  258.504814][T11287] 
[  258.504814][T11287] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  258.512725][T11287]        lock_sock_nested+0x41/0x100
[  258.518026][T11287]        do_ipv6_setsockopt+0x851/0x3150
[  258.523762][T11287]        ipv6_setsockopt+0x59/0x170
[  258.528971][T11287]        mptcp_setsockopt+0xe7f/0x36a0
[  258.534429][T11287]        do_sock_setsockopt+0x17c/0x1b0
[  258.539982][T11287]        __x64_sys_setsockopt+0x13d/0x1b0
[  258.545709][T11287]        do_syscall_64+0x14d/0xf80
[  258.550853][T11287]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.557271][T11287] 
[  258.557271][T11287] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  258.565035][T11287]        lock_sock_nested+0x41/0x100
[  258.570345][T11287]        inet_shutdown+0x6a/0x390
[  258.575385][T11287]        nbd_mark_nsock_dead+0x2e9/0x560
[  258.581117][T11287]        recv_work+0x1c7f/0x1d90
[  258.586071][T11287]        process_scheduled_works+0xb6e/0x18c0
[  258.592149][T11287]        worker_thread+0xa53/0xfc0
[  258.597267][T11287]        kthread+0x388/0x470
[  258.601860][T11287]        ret_from_fork+0x51e/0xb90
[  258.606977][T11287]        ret_from_fork_asm+0x1a/0x30
[  258.612274][T11287] 
[  258.612274][T11287] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  258.619932][T11287]        __mutex_lock+0x19f/0x1300
[  258.625054][T11287]        nbd_queue_rq+0x37b/0x1100
[  258.630305][T11287]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  258.636400][T11287]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  258.643269][T11287]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  258.649791][T11287]        blk_mq_run_hw_queue+0x348/0x4f0
[  258.655427][T11287]        blk_mq_dispatch_list+0xd16/0xe10
[  258.661164][T11287]        blk_mq_flush_plug_list+0x48d/0x570
[  258.667171][T11287]        __blk_flush_plug+0x3ed/0x4d0
[  258.672548][T11287]        __submit_bio+0x28d/0x580
[  258.677582][T11287]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  258.683854][T11287]        block_read_full_folio+0x599/0x830
[  258.689667][T11287]        filemap_read_folio+0x137/0x3b0
[  258.695228][T11287]        do_read_cache_folio+0x358/0x590
[  258.700890][T11287]        read_part_sector+0xb6/0x2b0
[  258.706287][T11287]        adfspart_check_ICS+0xa5/0xa40
[  258.711850][T11287]        bdev_disk_changed+0x7ba/0x1550
[  258.717400][T11287]        blkdev_get_whole+0x380/0x510
[  258.722805][T11287]        bdev_open+0x31e/0xd30
[  258.727576][T11287]        blkdev_open+0x470/0x610
[  258.732520][T11287]        do_dentry_open+0x785/0x14e0
[  258.737818][T11287]        vfs_open+0x3b/0x340
[  258.742415][T11287]        path_openat+0x2e08/0x3860
[  258.747533][T11287]        do_file_open+0x23e/0x4a0
[  258.752564][T11287]        do_sys_openat2+0x113/0x200
[  258.757774][T11287]        __x64_sys_openat+0x138/0x170
[  258.763156][T11287]        do_syscall_64+0x14d/0xf80
[  258.768447][T11287]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.774920][T11287] 
[  258.774920][T11287] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  258.782148][T11287]        __mutex_lock+0x19f/0x1300
[  258.787273][T11287]        nbd_queue_rq+0xc6/0x1100
[  258.792299][T11287]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  258.798812][T11287]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  258.805745][T11287]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  258.812343][T11287]        blk_mq_run_hw_queue+0x348/0x4f0
[  258.817980][T11287]        blk_mq_dispatch_list+0xd16/0xe10
[  258.823793][T11287]        blk_mq_flush_plug_list+0x48d/0x570
[  258.829700][T11287]        __blk_flush_plug+0x3ed/0x4d0
[  258.835087][T11287]        __submit_bio+0x28d/0x580
[  258.840121][T11287]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  258.846282][T11287]        block_read_full_folio+0x599/0x830
[  258.852096][T11287]        filemap_read_folio+0x137/0x3b0
[  258.857833][T11287]        do_read_cache_folio+0x358/0x590
[  258.863502][T11287]        read_part_sector+0xb6/0x2b0
[  258.868798][T11287]        adfspart_check_ICS+0xa5/0xa40
[  258.874354][T11287]        bdev_disk_changed+0x7ba/0x1550
[  258.879905][T11287]        blkdev_get_whole+0x380/0x510
[  258.885282][T11287]        bdev_open+0x31e/0xd30
[  258.890054][T11287]        blkdev_open+0x470/0x610
[  258.895007][T11287]        do_dentry_open+0x785/0x14e0
[  258.900396][T11287]        vfs_open+0x3b/0x340
[  258.904998][T11287]        path_openat+0x2e08/0x3860
[  258.910286][T11287]        do_file_open+0x23e/0x4a0
[  258.915318][T11287]        do_sys_openat2+0x113/0x200
[  258.920528][T11287]        __x64_sys_openat+0x138/0x170
[  258.925905][T11287]        do_syscall_64+0x14d/0xf80
[  258.931023][T11287]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.937443][T11287] 
[  258.937443][T11287] -> #3 (set->srcu){.+.+}-{0:0}:
[  258.944575][T11287]        __synchronize_srcu+0xca/0x300
[  258.950039][T11287]        elevator_switch+0x1e8/0x7a0
[  258.955327][T11287]        elevator_change+0x2cc/0x450
[  258.960650][T11287]        elevator_set_default+0x36c/0x430
[  258.966376][T11287]        blk_register_queue+0x366/0x430
[  258.971935][T11287]        __add_disk+0x677/0xd50
[  258.976988][T11287]        add_disk_fwnode+0xfb/0x480
[  258.982192][T11287]        nbd_dev_add+0x72c/0xb50
[  258.987131][T11287]        nbd_init+0x168/0x1f0
[  258.991810][T11287]        do_one_initcall+0x250/0x8d0
[  258.997106][T11287]        do_initcall_level+0x104/0x190
[  259.002576][T11287]        do_initcalls+0x59/0xa0
[  259.007431][T11287]        kernel_init_freeable+0x2a6/0x3e0
[  259.013154][T11287]        kernel_init+0x1d/0x1d0
[  259.018005][T11287]        ret_from_fork+0x51e/0xb90
[  259.023129][T11287]        ret_from_fork_asm+0x1a/0x30
[  259.028423][T11287] 
[  259.028423][T11287] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  259.036247][T11287]        __mutex_lock+0x19f/0x1300
[  259.041374][T11287]        elevator_change+0x1b3/0x450
[  259.046676][T11287]        elevator_set_none+0xb5/0x140
[  259.052053][T11287]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  259.058391][T11287]        nbd_start_device+0x17f/0xb10
[  259.063771][T11287]        nbd_genl_connect+0x165b/0x1cf0
[  259.069407][T11287]        genl_family_rcv_msg_doit+0x22a/0x330
[  259.075491][T11287]        genl_rcv_msg+0x61c/0x7a0
[  259.080526][T11287]        netlink_rcv_skb+0x232/0x4b0
[  259.085812][T11287]        genl_rcv+0x28/0x40
[  259.090330][T11287]        netlink_unicast+0x80f/0x9b0
[  259.095641][T11287]        netlink_sendmsg+0x813/0xb40
[  259.100946][T11287]        ____sys_sendmsg+0x972/0x9f0
[  259.106250][T11287]        ___sys_sendmsg+0x2a5/0x360
[  259.111459][T11287]        __x64_sys_sendmsg+0x1bd/0x2a0
[  259.116954][T11287]        do_syscall_64+0x14d/0xf80
[  259.122077][T11287]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.128494][T11287] 
[  259.128494][T11287] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  259.137369][T11287]        blk_alloc_queue+0x546/0x680
[  259.142952][T11287]        __blk_mq_alloc_disk+0x197/0x390
[  259.148603][T11287]        nbd_dev_add+0x499/0xb50
[  259.153554][T11287]        nbd_init+0x168/0x1f0
[  259.158241][T11287]        do_one_initcall+0x250/0x8d0
[  259.163538][T11287]        do_initcall_level+0x104/0x190
[  259.169107][T11287]        do_initcalls+0x59/0xa0
[  259.173995][T11287]        kernel_init_freeable+0x2a6/0x3e0
[  259.179766][T11287]        kernel_init+0x1d/0x1d0
[  259.184637][T11287]        ret_from_fork+0x51e/0xb90
[  259.189762][T11287]        ret_from_fork_asm+0x1a/0x30
[  259.195237][T11287] 
[  259.195237][T11287] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  259.202472][T11287]        __lock_acquire+0x15a5/0x2cf0
[  259.207864][T11287]        lock_acquire+0xf0/0x2e0
[  259.212811][T11287]        fs_reclaim_acquire+0x71/0x100
[  259.218273][T11287]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  259.224633][T11287]        __alloc_skb+0x1d0/0x7d0
[  259.229575][T11287]        tcp_stream_alloc_skb+0x3f/0x580
[  259.235217][T11287]        tcp_connect+0x1567/0x5440
[  259.240334][T11287]        tcp_v4_connect+0x10f7/0x19b0
[  259.245710][T11287]        tcp_v6_connect+0xbbb/0x1b10
[  259.251084][T11287]        __inet_stream_connect+0x25a/0xdd0
[  259.256895][T11287]        inet_stream_connect+0x66/0xa0
[  259.262370][T11287]        kernel_connect+0x141/0x1c0
[  259.267612][T11287]        smc_connect+0x7a5/0xd90
[  259.272662][T11287]        __sys_connect+0x312/0x450
[  259.277795][T11287]        __x64_sys_connect+0x7a/0x90
[  259.283085][T11287]        do_syscall_64+0x14d/0xf80
[  259.288296][T11287]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.294716][T11287] 
[  259.294716][T11287] other info that might help us debug this:
[  259.294716][T11287] 
[  259.305059][T11287] Chain exists of:
[  259.305059][T11287]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  259.305059][T11287] 
[  259.318103][T11287]  Possible unsafe locking scenario:
[  259.318103][T11287] 
[  259.325556][T11287]        CPU0                    CPU1
[  259.330922][T11287]        ----                    ----
[  259.336283][T11287]   lock(k-sk_lock-AF_INET6);
[  259.340963][T11287]                                lock(sk_lock-AF_INET6);
[  259.348006][T11287]                                lock(k-sk_lock-AF_INET6);
[  259.355291][T11287]   lock(fs_reclaim);
[  259.359296][T11287] 
[  259.359296][T11287]  *** DEADLOCK ***
[  259.359296][T11287] 
[  259.367670][T11287] 2 locks held by syz.4.1347/11287:
[  259.372867][T11287]  #0: ffff888076d19b60 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90
[  259.382100][T11287]  #1: ffff8880322e60e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  259.392198][T11287] 
[  259.392198][T11287] stack backtrace:
[  259.398097][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.4.1347 Not tainted syzkaller #0 PREEMPT(full) 
[  259.398115][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  259.398124][T11287] Call Trace:
[  259.398130][T11287]  <TASK>
[  259.398136][T11287]  dump_stack_lvl+0xe8/0x150
[  259.398158][T11287]  print_circular_bug+0x2e1/0x300
[  259.398182][T11287]  check_noncircular+0x12e/0x150
[  259.398206][T11287]  __lock_acquire+0x15a5/0x2cf0
[  259.398226][T11287]  ? inet_sk_rebuild_header+0x93/0x1da0
[  259.398246][T11287]  ? __lock_acquire+0x6b5/0x2cf0
[  259.398266][T11287]  lock_acquire+0xf0/0x2e0
[  259.398283][T11287]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  259.398302][T11287]  fs_reclaim_acquire+0x71/0x100
[  259.398320][T11287]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  259.398335][T11287]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  259.398351][T11287]  ? __alloc_skb+0x1d0/0x7d0
[  259.398368][T11287]  ? ipv4_default_advmss+0x20/0x340
[  259.398387][T11287]  __alloc_skb+0x1d0/0x7d0
[  259.398405][T11287]  tcp_stream_alloc_skb+0x3f/0x580
[  259.398424][T11287]  ? __asan_memset+0x22/0x50
[  259.398440][T11287]  tcp_connect+0x1567/0x5440
[  259.398461][T11287]  ? __local_bh_enable_ip+0xd0/0x130
[  259.398484][T11287]  ? __pfx_tcp_connect+0x10/0x10
[  259.398505][T11287]  ? __asan_memset+0x22/0x50
[  259.398521][T11287]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  259.398541][T11287]  ? secure_tcp_seq_and_ts_off+0xf2/0x1d0
[  259.398561][T11287]  ? sk_setup_caps+0x9ef/0xc40
[  259.398581][T11287]  ? sk_setup_caps+0x29/0xc40
[  259.398599][T11287]  tcp_v4_connect+0x10f7/0x19b0
[  259.398618][T11287]  ? finish_task_switch+0x240/0x920
[  259.398641][T11287]  ? __pfx_tcp_v4_connect+0x10/0x10
[  259.398661][T11287]  ? tcp_v6_connect+0x62d/0x1b10
[  259.398680][T11287]  tcp_v6_connect+0xbbb/0x1b10
[  259.398702][T11287]  ? __pfx_tcp_v6_connect+0x10/0x10
[  259.398721][T11287]  ? futex_unqueue+0x22/0x240
[  259.398739][T11287]  ? futex_unqueue+0x211/0x240
[  259.398755][T11287]  __inet_stream_connect+0x25a/0xdd0
[  259.398773][T11287]  ? do_raw_spin_lock+0x12b/0x2f0
[  259.398789][T11287]  ? __pfx___inet_stream_connect+0x10/0x10
[  259.398807][T11287]  ? inet_stream_connect+0x51/0xa0
[  259.398824][T11287]  ? __local_bh_enable_ip+0xd0/0x130
[  259.398843][T11287]  inet_stream_connect+0x66/0xa0
[  259.398861][T11287]  kernel_connect+0x141/0x1c0
[  259.398883][T11287]  ? __pfx_kernel_connect+0x10/0x10
[  259.398903][T11287]  ? do_raw_spin_lock+0x12b/0x2f0
[  259.398920][T11287]  ? smc_connect+0xbd/0xd90
[  259.398935][T11287]  ? __local_bh_enable_ip+0xd0/0x130
[  259.398954][T11287]  smc_connect+0x7a5/0xd90
[  259.398971][T11287]  __sys_connect+0x312/0x450
[  259.398997][T11287]  ? __pfx___sys_connect+0x10/0x10
[  259.399016][T11287]  ? rcu_is_watching+0x15/0xb0
[  259.399038][T11287]  __x64_sys_connect+0x7a/0x90
[  259.399055][T11287]  do_syscall_64+0x14d/0xf80
[  259.399074][T11287]  ? trace_irq_disable+0x3b/0x150
[  259.399087][T11287]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.399101][T11287]  ? clear_bhb_loop+0x40/0x90
[  259.399117][T11287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.399132][T11287] RIP: 0033:0x7fcff5d9c819
[  259.399146][T11287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.399159][T11287] RSP: 002b:00007fcff6d38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  259.399175][T11287] RAX: ffffffffffffffda RBX: 00007fcff6015fa0 RCX: 00007fcff5d9c819
[  259.399186][T11287] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003
[  259.399196][T11287] RBP: 00007fcff5e32c91 R08: 0000000000000000 R09: 0000000000000000
[  259.399205][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.399214][T11287] R13: 00007fcff6016038 R14: 00007fcff6015fa0 R15: 00007ffe380ae318
[  259.399230][T11287]  </TASK>
[  260.601309][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  266.271443][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!