last executing test programs:

3.138858846s ago: executing program 0 (id=5083):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0xcb0, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc84, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x251}, @TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PRATE64={0xc, 0x5, 0xbb12099432828abe}, @TCA_TBF_RTAB={0x404, 0x2, [0x3, 0xe, 0x9, 0x1, 0x4c7, 0x400, 0x200, 0x8, 0xf, 0x35, 0x1, 0x5, 0x7fff, 0xca, 0x1, 0x8, 0x20, 0xfff, 0x8, 0x7, 0x8, 0x0, 0x5, 0x80000000, 0xb5, 0x4, 0x9, 0x5, 0x1a0, 0x4, 0xe82, 0x7, 0xd, 0xc0000000, 0x2, 0x1, 0x7, 0x3, 0x5, 0x4, 0xfffff001, 0x0, 0x0, 0x0, 0xc, 0x7, 0x6, 0x5, 0x0, 0x7, 0x9, 0x1, 0xb73, 0x6, 0x8, 0x1, 0x10000, 0x8, 0x7, 0x5fb, 0xffffffc7, 0x5f, 0x3, 0x907, 0x80, 0x8, 0x9d02, 0x0, 0x40, 0x5, 0xe25, 0x9, 0x591, 0xe, 0x9, 0x0, 0x1000, 0x7, 0x2, 0x1, 0x7ff, 0x10000, 0x4119, 0x800, 0x3, 0xfffff34e, 0x5, 0x2, 0x4, 0x0, 0x82, 0xb808ee1, 0x155, 0xfffffffb, 0x8, 0x6, 0x0, 0x6, 0x7fffffff, 0x6, 0xf10, 0x81, 0x400, 0xe, 0xa28, 0x100, 0x5, 0x6, 0x8, 0x2, 0x5, 0xffffffff, 0x80000001, 0x6, 0xd, 0x19, 0x7, 0x7f, 0x8, 0x4, 0x1, 0xffffffff, 0xdf2, 0x6a7f74cc, 0x7, 0x0, 0xfffff1e2, 0x800, 0x7, 0x3, 0xf, 0x6, 0x2, 0x0, 0x7, 0x2b, 0x10001, 0x4, 0x0, 0x4, 0x9, 0x6, 0x8, 0x400, 0xd, 0x9, 0x54e, 0x2, 0xfffffffe, 0xec2, 0x8, 0x5, 0x412, 0xeaf, 0x5, 0x1, 0x80, 0x0, 0x9, 0x9, 0x8, 0x3ff, 0x8, 0x0, 0xa8e7, 0xf, 0x3, 0x7, 0x0, 0x800, 0x2, 0xb, 0x7, 0x10000, 0xec, 0x10001, 0x7f, 0x2, 0x54e2, 0x4, 0x3, 0x1, 0x5, 0x9, 0x0, 0x83, 0x400, 0x7, 0x1000000, 0xe, 0x8, 0x229d1b80, 0x2, 0x1ff, 0x7, 0x9, 0x7fffffff, 0xa, 0xfffffffc, 0xfff, 0x1, 0x9, 0x4, 0xa7, 0x40, 0xffff, 0x2, 0x59, 0x11a, 0xddc, 0x80000000, 0x9, 0x57846d65, 0x7, 0x8001, 0xf77, 0x2, 0x9, 0x78, 0x7f, 0x4, 0x4, 0x0, 0x4, 0x8, 0xff, 0xdb, 0x6, 0x8, 0x2, 0x81, 0xffc1, 0x7fffffff, 0xff, 0x8, 0xfffffff9, 0x800, 0x5, 0x3, 0x8, 0x5, 0x0, 0x7, 0xc, 0x61, 0x4, 0x2, 0x4, 0x8, 0x5, 0xba, 0x7, 0x0, 0x9, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x10001, 0xffffffff, 0x1, 0x3, 0x0, 0x9, 0xb, 0xffffff81, 0x9, 0x1, 0x8000, 0xffff, 0xffffffff, 0x80000000, 0x200, 0x11, 0x6, 0x0, 0x6, 0x6, 0x2, 0xfffffffa, 0x6ea0000, 0x4, 0x2, 0xffffffff, 0x1, 0x7fff, 0x1, 0x0, 0x5, 0x6, 0x4, 0x7ff, 0xb, 0x5, 0x1, 0x400, 0x8, 0x7137, 0x2, 0x4, 0x8, 0xe4, 0x1000, 0x3, 0x6, 0x2, 0x5, 0x42, 0x7b, 0x0, 0x8, 0x9d, 0x7, 0x7, 0x7, 0x2, 0x7, 0x7ff, 0x6, 0x7ff, 0x7ff, 0xfffffffc, 0xfffff38f, 0x0, 0x6, 0xaca, 0x8446, 0x1, 0x4, 0x9, 0x6, 0x7, 0xd1f1, 0x15, 0x1, 0x7, 0x9, 0x6, 0x800, 0xff, 0x3, 0xfffffffd, 0x4, 0xfffffffb, 0x4, 0x6, 0x10001, 0xfffffffd, 0xffff, 0xf8, 0x7, 0x7, 0x5, 0x7be, 0x0, 0x4, 0x6, 0x4, 0xfffffff8, 0x6ff9, 0x4, 0x4, 0x8, 0x5, 0x2, 0x42, 0x8, 0x9b, 0x5, 0x9, 0x5, 0x9, 0x7, 0x8f, 0x3ff, 0x40000006, 0xe30, 0x3, 0x5f, 0x1, 0x3ff, 0x5, 0x200, 0x7, 0x855d, 0x80, 0x80000000, 0xa, 0xd11, 0x9, 0xd, 0xe, 0x1000, 0xcd67, 0x7fff, 0x1, 0xffff6b4d, 0xe25d, 0x101, 0x3, 0x1, 0x5e9a, 0x5, 0xffffffcd, 0x1, 0x6, 0x3ff, 0x1, 0x8001, 0x1, 0x1, 0xffffff12, 0x2, 0x85, 0x2, 0x80000001, 0x847, 0x0, 0x2, 0x1, 0x5e, 0x1, 0xfffffffc, 0xf7, 0x3, 0x10000, 0x6, 0x30f, 0x9, 0x2, 0x6, 0x3539, 0x4, 0xc, 0x7, 0x8, 0x8, 0x25f6, 0x3, 0x1ff, 0x8, 0xf924, 0x3, 0x2, 0x10001, 0x0, 0x2, 0x2, 0x401, 0x66, 0x3, 0x8001, 0x4, 0x7fffffff, 0xffffffff, 0xf, 0x3, 0x9, 0x1, 0x101, 0x1800, 0x6e52, 0x7, 0x6e5f, 0x8, 0xfc, 0x2, 0xfffffff1, 0x1ff, 0x0, 0x0, 0x5, 0x401fa03a, 0x80000000, 0xfffffff7, 0x80000000, 0x6, 0x6, 0x9, 0x2, 0x0, 0x4000, 0x3, 0x3, 0xf74, 0x4, 0x5, 0x6, 0x1014, 0x9, 0xc44, 0x1, 0x0, 0x1, 0xe, 0xfffffffb, 0xfffffff8, 0xe, 0x8000, 0x7, 0x4bda, 0x9, 0x8, 0x101, 0x7dc, 0x9, 0x7ff, 0x5, 0x4, 0x7fffffff, 0xffff7fff, 0x2, 0xff]}, @TCA_TBF_RTAB={0x404, 0x2, [0xa, 0xfffffff8, 0x6, 0xffff, 0x2, 0x7, 0x4, 0x81, 0x3a, 0xeef7, 0x1, 0x5242, 0x2, 0x6, 0x9, 0x8, 0x7ff, 0xc, 0x5f8f, 0xb993, 0x1, 0xfbc3cab5, 0xb4, 0xfff, 0x7, 0xa, 0x4, 0x4, 0x7, 0x200, 0x2, 0x7, 0x1, 0xb, 0x0, 0xc, 0x0, 0x5, 0x400, 0xa7e, 0x80, 0xffff, 0x7, 0x5, 0xc, 0xc4, 0x8, 0x3, 0x8, 0xaa, 0x6, 0x1, 0x9, 0x0, 0x6, 0x7f693eda, 0x80, 0x80000001, 0x7, 0x2, 0x8, 0x7, 0x7fffffff, 0x2, 0x20, 0x0, 0x3, 0xa6, 0x300, 0x6, 0x7d, 0x40, 0x86, 0x4, 0x5, 0xe, 0x100, 0xd2c, 0x4262f96f, 0x40, 0xa, 0x949, 0xfffffffa, 0x4, 0x1, 0x3, 0x9, 0x7, 0x800, 0xfff, 0x1, 0x7f, 0x3, 0x33, 0x4, 0x3, 0x3, 0xfffffffe, 0x5, 0xb78, 0x8, 0xb, 0x1, 0xc, 0x4, 0x7, 0x1000, 0x3, 0x200, 0x2, 0x1081, 0x1, 0x4, 0x2, 0xb5, 0x81, 0x9, 0x2, 0x101, 0x9, 0x757, 0x9, 0x3, 0x5, 0x2, 0x3ea, 0x5, 0x3, 0x4, 0xa, 0x1, 0x3, 0xf, 0x1, 0x4, 0x48, 0xffffffff, 0x8, 0x9, 0x7bdd, 0x100, 0xff, 0xff, 0x5, 0x6, 0x6, 0x0, 0x3ff, 0x3, 0x607, 0x6, 0x10001, 0x6, 0x9, 0x200, 0x6, 0x6, 0x3, 0x8, 0x8, 0xf5b, 0x0, 0x8, 0x21d2, 0x5, 0x7, 0x3, 0x8001, 0x101, 0x81, 0x8001, 0x8001, 0x74, 0x100, 0x2, 0x101, 0x5, 0x8, 0x4, 0x3ff, 0x4, 0x7fff, 0x3, 0x0, 0x2043, 0x81, 0x1, 0x8, 0x6, 0x7, 0x6000, 0x2, 0x3ff, 0x2, 0x7fffffff, 0x10008000, 0x6, 0x7, 0x75e, 0x4, 0xfffffff8, 0x3, 0x3, 0x7, 0x4, 0x400, 0x1, 0x6, 0x9, 0x12f44bab, 0x9, 0x400, 0x1, 0x1000, 0xf, 0x8, 0x4, 0x8, 0x4, 0x80, 0x8, 0x7, 0x99b8, 0xb06a, 0x2, 0x0, 0x8, 0x6, 0x8, 0x40, 0x8, 0x43f94ea8, 0x5, 0x10000, 0x2, 0x8, 0x7, 0x2, 0x4, 0x344, 0x9, 0x2, 0x1, 0x5, 0x80000001, 0x4800000, 0xffffffff, 0x4, 0xe482, 0xfffffffa, 0x80000001, 0x7, 0x305a36, 0x6, 0xfffffffc, 0x6866]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x9, 0x2, 0x2, 0x112}, {0x8, 0x0, 0x5, 0x7, 0xfff, 0x6}, 0x1000, 0x1, 0xa56}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0x81, 0x0, 0x0, 0x1}, {0x9, 0x2, 0x1000, 0x0, 0x9, 0x100}, 0x2, 0x71a, 0x17c9}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1165}]}}]}, 0xcb0}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000140)=0x81, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "b75221664c963957", "ce6e2c200be0e99b9308768feb497e19f9ac8c85c35d198d79fb7fa2b06ddf42", "7da3c3f4", "ca409f890596242e"}, 0x38)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f9, &(0x7f0000000480)={'ip6_vti0\x00', 0x0})
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r13)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7f, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x400d800)
ioctl$SIOCSIFHWADDR(r13, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.446274318s ago: executing program 0 (id=5093):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendfile(r1, r0, &(0x7f0000000000)=0xec, 0x3)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@initdev, @multicast2, <r4=>0x0}, &(0x7f0000000100)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x240018c4}, 0x8000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x0, 0x2, 0x6a, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, 0x8000, 0x7800, 0x3bc, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000380)={'gre0\x00', <r9=>0x0, 0x7800, 0x7, 0x5, 0x1ff, {{0x32, 0x4, 0x0, 0x9, 0xc8, 0x64, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@cipso={0x86, 0x45, 0x3, [{0x7, 0x7, "ae52130fd7"}, {0x0, 0x9, "2179f72c7e16a8"}, {0x7, 0xb, "c8541e8f7ed2fb0feb"}, {0x2, 0xd, "ecc6026cb02957b26b93fd"}, {0x1, 0x7, "977835d7d6"}, {0x5, 0xa, "e3dd2095b2506002"}, {0x1, 0x4, "08bf"}, {0x0, 0x2}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x46, 0x3, [{0x5, 0x9, "707fcbdf0e800b"}, {0x5, 0x3, '{'}, {0x6, 0x9, "52c72345d644c6"}, {0x5, 0xd, "1b1c22e10333021fa772ee"}, {0x2, 0x3, "7f"}, {0x0, 0x11, "844ee69506ac926c708b15ecae47a4"}, {0x7, 0xa, "c49e10580b36e052"}]}, @timestamp_prespec={0x44, 0x24, 0x7a, 0x3, 0xc, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x14}}, {@rand_addr=0x64010100, 0x8000}, {@private=0xa010101, 0xfff}]}]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=<r10=>0x0, &(0x7f0000000500)=0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13}}, 0x18}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', <r14=>0x0, 0x49c2d2cde42e5152, 0xe, 0x1, 0x7, 0x51, @remote, @mcast2, 0x10, 0x80, 0xfffffff9, 0x1f0}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r15=>0x0, 0x29, 0x3, 0x2, 0x7, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x8000, 0x80000000, 0x1}})
r16 = socket$nl_route(0x10, 0x3, 0x0)
r17 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r18=>0x0})
sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r18}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000006c0)={@private, @multicast1, <r19=>0x0}, &(0x7f0000000700)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', <r20=>0x0, 0x4, 0x2, 0x3, 0x4, 0xc, @private1, @rand_addr=' \x01\x00', 0x80, 0x7800, 0x5, 0x3}})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000001340)={0x690, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r13}, {0x274, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xaa, 0x3, 0xc, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x690}, 0x1, 0x0, 0x0, 0x8000080}, 0x40040040)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000008c0)=ANY=[@ANYRES32=r1, @ANYBLOB="f8fe455afaff0a35127b019e0bbcded2d61b7439b57e0ca9d569910082ccc759142c"])

2.288164541s ago: executing program 1 (id=5096):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x200408a4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r2, 0x101, 0x0, 0x27dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x88c0)

2.156626408s ago: executing program 1 (id=5099):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x1, 0x1000000, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async, rerun: 32)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448cb, &(0x7f00000012c0)) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
socket$phonet_pipe(0x23, 0x5, 0x2)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r6) (async, rerun: 32)
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbdf250900000008000100010000000500070005000000"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x402c001) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000ffffffff0700000040"], 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe}}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$nl_route_sched(r7, 0x0, 0x200c8000) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x0, 0x0)

2.086400281s ago: executing program 0 (id=5100):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030b0000000000000000098000005037d1b87415480028195892d9f009fe7a96cdacb1e6cc4deb283b6933fbd1f5aed229bb2fa3ed440206964507cec243a80b678654569cf9d46c6627077ddcb147af6c893394277187f52a1716ef0a0802e00ecaff9fc3af59860b8937189b71c0a7f40b6eb26c7b90ffc495420f4af614383244126b9cfcec230c17c4ecd50a43c79db5eecfb730fa06a5c5d2b690ac09724279bc682b5db33100511bee655c794a8dda0a75f6ef16b941be33c09c98a80e3239a2672a957951718b9c4e2ace8b5d7865470ac193be23465584d0e2d6d4a69c9604d1"], 0x18}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20008c4}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2d8900, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000580)='\x00!', 0x2}, {&(0x7f0000000bc0)="002a70b6ec10e6992287b7bc6c7786d0b33c73d2972a70474ec79dc63931218ae6b16fd70142de8c06ccfad4e8b42746c4c3702b0af1a834b6542ab3b8e54e9050d82d3327e6e9d0d90d8a161b8b4eb1e8408c4e0f4b5681dc68a9b983ba4f5814bc1fecd9c08fcba780fe5cf3192e50eb8397c1c2f58a1acece332b395e7dab3649a0f09b1bf9038cb7ccdd0f3886ccf334df0078f971a4a3e6abc38cbee92f1a3b848b7d2d7d17958395f8f9c91dcdf4081ec8d7836304c1296e00f1c39cfcf42fd15fc7e09e6dad627ce4dcd19f5ba191edceda040527a4c83845095fc93f9a30ed69fc7e7e6cd3389138a9c6f06d3d2486132705721043578d7ba678207b31f2391edc17ea912ff47854e517a86e54523e622d2d4f4b9892b3675f6d51891467b2c5f948f760ee8f317aede5d225a4a1c6a2afe1f9c9054ccf9056c22e464631d8f06247c5050b592470c87a64405f36c1a910d3484c1b712dca92c02a3c93d04d0d42a4a567ddf982f0871fdfd2aeb28b302ed0a99eac41397856decaa3608fc5d044a6facf6d65763d40a340", 0x18f}, {&(0x7f0000000380)="a8e40b2e", 0x4}], 0x10000000000000b0, 0x7, 0xffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r6, &(0x7f0000000400), 0x0}, 0x20)
r7 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r7, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRES16=r4], 0x0, 0x32}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b9050000000000006110000063013800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r10=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000003c0)={r10, 0xcb}, 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r11, 0xc0, &(0x7f0000000640)={0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r12}, 0x4)

2.014268143s ago: executing program 0 (id=5102):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25041100800c0002"], 0x114}], 0x1}, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$netlink(0x10, 0x3, 0x6)
listen(r0, 0x0)
r2 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

1.846349542s ago: executing program 0 (id=5103):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000"], 0x8c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40042, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 64)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1bc}}, 0x1)
close(r5)
r7 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={<r12=>0xffffffffffffffff}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r13, @ANYBLOB="28005080140001004abee33957edf8aaae14574df400000005000200070000000800030006ac0f"], 0x44}}, 0x0) (async)
sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020007bd7000fddbdf256904000008000300", @ANYRES32=r13, @ANYBLOB="0600d400010000000600d400faff00000600d4000f0000000a000600ffffffffffff00000600d400040000000500d200000000000600d4000b000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x2000c041)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f00000006c0)={0x0, 0x7, 0xd7, "ab543a3a13d92abb5951d53e196c4b19cb8d18cc25993879f292ad1762790a28812652a4bf3822842d457415df0f2777478951d45b68700dda494b6ed9f399434a789de70e6c1fa36d734c2fb9bdda91802510a505e36b4b23121237ff2c2cd7241a47c2cff4f07139e37db38c0f00a2e739b3e734d151f52b7fd03ba57e681948321597098efdfffb9c8b079338b02f487b530776e82420766c3ef82a7dfa0f168afe7017840b4425fc3a9b088d13c5c198fb2213917a697206bb81982e8ffee4661b9f812a03108ff2da90ade00b4eb5e71a13f0f1b6"}, 0xdf)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0x10002, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x7, 0xfffffdfd, 0x200006}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0x2}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 64)

1.835373355s ago: executing program 1 (id=5105):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a40)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x20, r4, 0x231, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048004}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x20, r4, 0x231, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) (async)

1.766556217s ago: executing program 4 (id=5106):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffefffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0xa, 0xa, 0x7, 0x20, 0xffffffffffffffff}, @ldst={0x0, 0x1, 0x0, 0x9, 0xb, 0x100, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

1.686984208s ago: executing program 4 (id=5108):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r1=>0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r2, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)

1.566852785s ago: executing program 1 (id=5110):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="35b5063d774995dd03cf8be2a28fe546", 0x10) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r1, 0x100, 0x0, 0xfffffffd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f0000000080)={0x6, 0x1, 0xe2, 0x4, 0xcf0, 0x5, 0x0, 0x5}, &(0x7f0000000140)={0xe, 0xaf, 0x1, 0x2, 0x6, 0x81, 0x6, 0x8000000000000001}, &(0x7f0000000180)={0x7, 0x49d, 0x1, 0x7fffffff, 0x58db25e4, 0x9, 0x5cdd, 0x800}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x6]}, 0x8}) (rerun: 32)

1.481905369s ago: executing program 0 (id=5111):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xc, 0x4, 0x4, 0x9}, 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
write$tun(r0, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000e40)={0x30, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x40084) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000e40)={0x30, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x40084)

1.242456149s ago: executing program 1 (id=5114):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff)
syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x70, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x10, 0x6071, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0xc, 0xf989, "bffe6b8f9370e6ec"}, @sack={0x5, 0x6, [0x5]}, @timestamp={0x8, 0xa, 0x4, 0x98}, @sack={0x5, 0x1a, [0x0, 0x17bff99f, 0x3ff, 0x6, 0x3, 0x6]}, @mptcp=@synack={0x1e, 0x10, 0x8, 0x2, 0x9, 0x1a8}]}}}}}}}, 0x0)

1.210344818s ago: executing program 3 (id=5116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000007040)=ANY=[@ANYBLOB="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"], 0x3828}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x180, r2, 0x108, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef44}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x20000004)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0)

1.034612625s ago: executing program 3 (id=5118):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x7, 0x800, 0x10001}, 0x10, 0x0, 0x0, 0xffffffffffffff2b, &(0x7f0000000140)=[r1, r1, r2, r0, r0, r0, r1], 0x0, 0x10, 0x7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20)

964.187458ms ago: executing program 3 (id=5120):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3}, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="1100000000681923", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES8], 0x38}}, 0x4000000) (async)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r3 = socket(0x15, 0x800, 0x169) (async)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10) (async, rerun: 64)
bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4}, 0x10) (rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r6, 0x6, 0xd, 0x0, &(0x7f0000000200)) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="082327bd7000fd5bdf250300000008002b00ff03000008003b000300000008007d62f26a6400"], 0x2c}, 0x1, 0x0, 0x0, 0x4091}, 0x4)
r7 = accept4$phonet_pipe(r4, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800) (async)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0xea1b, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)=ANY=[@ANYBLOB="25060047", @ANYRES16=r8, @ANYBLOB="0d022bbd7000fedbdf2501000000050005000400000008000400ffff000008000300060000000500060002000000"], 0x34}}, 0x4000) (async)
bind$phonet(r7, &(0x7f0000000340)={0x23, 0x3, 0xfa, 0xfa}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="360a000040000000611058000000000095000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r10 = socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r11=>0x0, 0x4, 0x8, 0xff, 0xf3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8, 0x8000, 0xc, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', r11, 0x7800, 0x10, 0xb, 0x9, {{0x2c, 0x4, 0x2, 0x7, 0xb0, 0x68, 0x0, 0x81, 0x0, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@noop, @noop, @generic={0x89, 0x3, "1c"}, @end, @timestamp_prespec={0x44, 0x34, 0xa0, 0x3, 0x1, [{@local, 0x80}, {@remote, 0x800}, {@local, 0x8}, {@multicast2, 0xc}, {@multicast1, 0xd}, {@loopback, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0xc, 0x3, 0x2, [{@empty, 0x4}]}, @timestamp_addr={0x44, 0xc, 0x65, 0x1, 0xf, [{@broadcast, 0x8}]}, @cipso={0x86, 0x18, 0x3, [{0x7, 0x12, "fc30a11732f48c7e42324c2e0e2391aa"}]}, @ssrr={0x89, 0x2b, 0x86, [@empty, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @remote, @broadcast, @private=0xa010102, @remote, @rand_addr=0x64010101, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x4, 0x34, 0x3, 0x1}]}}}}})

838.471531ms ago: executing program 2 (id=5121):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x2}, 0x10}, 0x94)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8045}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000400)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x4c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10)

783.37007ms ago: executing program 3 (id=5122):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="e1fa921aab5e2a705aa315c9f4577985", 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x10cc, 0x4)

769.267781ms ago: executing program 2 (id=5123):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000006180)='ns/pid_for_children\x00')
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "337675ac997f041fc8dd74f8aa7e8aaf"})
syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, ';.;S'}]}}}}}}}}, 0x0)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0)

658.600783ms ago: executing program 2 (id=5124):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000340000000000100000a00000000"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000008010100000000000000000000000705000300840000000900010073797a30000000000c00048008000140000022d606000240dada00008a54106b659c546f5afaecbdcf62e7b559b5cabd91851932794d10f4d3fe1c65adc92ca91759b802135cb04a5b5bc1f6b3a68efb12cd68bd9510e2a42d1298b909239aa27948143908ebc04eef536fe2"], 0x3c}}, 0x0)

657.650016ms ago: executing program 4 (id=5125):
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000008b000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48)

613.318153ms ago: executing program 4 (id=5126):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x43, 0x300, 0x0, 0x4, {0x3}}, 0x14}}, 0x24000044)
r1 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x6, 0x9, 0x8, 0x1, @loopback, @rand_addr=' \x01\x00', 0x1, 0x10, 0x4, 0x1800}})
r3 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000100)={&(0x7f0000000340)={0x2d, 0x0, 0x1f, 0x40000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001080090076657468030000000400028008000a0000001f1048bb4d3a76a6bdba63a66168936b4aa5b646b3cd97027adcf79db442e54e645276b40cb07f0045cfcdbe47b4049779863d8e48e5c1a35413137c8c98a6e0eef869efbd07180878d2ed4533064b482934b42c92db91a7f8c6f2d7cc23dc79c09ec42a020bae234915c92a73ed9c59076a5e32b9e8e03d1896af1fbd190e6b3e1c9d856e2b1c26d101733456433c4ffd7418b057cdd568aa3928079a1f6d2e1aa7d86c11a96f2b3536e6015a258bc39f30475299f63883a05c12ce259d48cda41afff04cfe3d26736bb3278e5d99b39901181d3694", @ANYRES32=r13, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e00)={<r14=>0x0, @empty, @multicast2}, &(0x7f0000000e40)=0xc)
sendmmsg$inet(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="367aa7ded676c4821f58c340f1329b2a1dad9057", 0x14}, {&(0x7f0000000340)="ed6ca6ae89c81048a8319bf456421e9fec39c8a96476551268a44b26fb5a8b34a3cb4e4ca1afbb6d417c42e333c9c79345502788927a87cf1e09be162064ca38ecfc07dc6bb0243cc4e4e21aed19c6cefdf52d33a4f90caadef0363e3d9a04c832a2ccc47fe29dc2991c1b13914b4348e5204196dc5125ea52d7a23a8052bdb2e9f4edda54815c1e48ad7a07", 0x8c}], 0x2, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@generic={0x44, 0xc, "1480a007e1ab2486b793"}, @end, @ssrr={0x89, 0x13, 0xca, [@multicast1, @private=0xa010100, @rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x3d, 0x1, 0x2, [{@multicast2, 0x6}, {@multicast2, 0x5}, {@broadcast, 0x3}, {@multicast1, 0x10}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xb5, 0x3, 0x2, [{@multicast2, 0x5}]}, @generic={0x82, 0x3, '\v'}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @loopback, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800000}}], 0x130}}, {{&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000680)="80679266b45cd85d924c88e7294b177d3dc029cc3e45bedad2100cd92788d3c9c1733fc157f65e11194e51", 0x2b}, {&(0x7f00000006c0)="956f630984e74155810a38d6e83011b57f87f35023ad2b931fc29d784e11a67b988aaa86bae9246f863dbd71333da5f24837a3b59524606a59293b66509c734a83f5d86f932ba0bbf826215ad1690f124d40e9888339a07a3b94a9f355b0c9e7ae080e05ddb4717f21bbe208657f66411f1c76c81560724bea125033ecb738ade747e775152548dab5284d247efdc48295edce647be87065b1bc7b", 0x9b}, {&(0x7f0000000780)="e8599dad74f9e7cbc6a6f8ac338151e65288673d85b768d7fde17f411a0a2114e466fe030a361c0144ebf9f6f9f6d35f4041fc7bb9ce9326d3a538cef07b82ff1751756ed2105a833fdb9e3f362c8376f361ffda5dee651f9b8cc00e19e6d4872d6bb4b0a5393daa3c1c603b98c5866d4833e3291234d12d4ec38079e2bb276cc05c849544d93131fe9f301bbf0b739872484b0be821dbb674f885a78ae1653a52b16e244b31cf3364af1f66709897e16d0f6192f40c6305eb9ff07d3531c655d4f8ee6eb4b6f6a77c32a8f7c2912d9d338436c51303bcf82ec84e1f0d2fa5a8e267643aa7c1207f0a3a3343", 0xec}, {&(0x7f0000000880)="304db2c4ae6ad2b68636e7b4e8775a5f1cc328d9663d68cde4ba04c21fb3532ea57df3f7cef7e6c396ca435866018269f35d3db1a7e7141514aac31102d99e8acc7e65c58255ef2136e3ef56d3e49c0c76c56158934a4ce4b4a65c098c5c5af9bfcdec002833", 0x66}, {&(0x7f0000000900)="dc57273ac0142b281d488c37a341cdaf0d1b834fa4c777473e42443415a75b028cc03907390f8da40b848edebf2aad0aeb41585f90538c848a968705fdd73fe68dd7fdc26747f39ce489c688cb11ee19fb32d358b897bb8cc3257b2f978af2262ac3c038b4c2c98c7d027ec49b79f4a55b6ca928541e62d70a547fe1bed863213a9bf5467010a3d319cb0fe14ccdede167b4050c91406c4a9b2a9e08ef3ce681ea64636faaf815d97bd1a79d1efefe5742", 0xb1}, {&(0x7f00000009c0)="4349c46f2e1068c3efc0a16e5ef6996c130903f88c2bfb06d3d59a3516ecff3a6e6701cf347d5a276ffc74876094d66135c656c27a65acadf86b146a109918a3f7639ad1f95a4f27f7c5345419581985651547e1186a9a75211b24d158d4035abb11fb7eb1848612ee0b19ca918c5c9d5ac5dc5bae3d464e6a31a99fed85b633fd0d6fcee507ff48ac535081b0241049da1352a4d600055a15585a7ec12b1633efebbee6fde3632377313089a6bc41ec3e8d1fe8f877d62169d5352f438aff58fe3a2f12bf602c91f96da64268dbe68ce47c8a2233", 0xd5}, {&(0x7f0000000ac0)="bbf00a62c16bb6b452e3a9151c64d6f702278461d9ed5c90edf77bbefc094fe939be6f4b3109cad40741da82e9dd639ba98204eaf733ad4207099f99671c7f1c79e5681da007ee5bfe40a7377dc3f10f0a90cdc9fe640b0c69140fe43698b701e98f7c7fc294d77dda9cf7a3753f141780aef24b51c58190fe577f5df9d2c18c8fc5aaef58dc77ccd994bac4d51038925be5b1ef14b13a05dc250459bc632b6e260420c38ea28e363be5925ac073bf9b3e8c688c8f43599bd00a8434303d9b49949007f7", 0xc4}, {&(0x7f0000000bc0)="6ca3d4d21f90d62839b3200a36d6e966d6481a14db2f8a1a066444e13ea4290ce5b4b5d45e2b3dacebc8c5d7c1ef7c9138688cde3b964e3febbba7789284c13b76df700015b8ba94e79bfad69739be2e1efc457f8d9ee2eda208f0417f94ac461428a8843ee47739e7742ce5990ef1427e97d1ce578567a2ff149d275f57a05b026069e0aaede7fe3df5dd06a3b8964d5e6ca114c0038ca53ddcf771357e04719d4dd55eaa0ed5a1a73ecf1167e3260381", 0xb1}, {&(0x7f0000000c80)="72741cdc32157e06357b5e9ac4d9c3c6ad6d6196b04d303308e5f2498bd5dd8d47f0d1170b67f61ac7db13eba96cdef539d6168a9b6b9a8c80576403c4fd91a80dc06d21b70753f67925a7e751fe6adb7d8f7f64920fc9e5214ff63f1781eab6eb8a2b4c4954d8f1620bda4322e84398c660b59c09", 0x75}, {&(0x7f0000000d00)="72ca01c667ab9011829b728b171d", 0xe}], 0xa, &(0x7f0000000e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @empty, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x18, 0x3, 0x5, [{@remote, 0x5}, {@multicast1, 0x6}, {@empty, 0x7f}, {@multicast2, 0x8}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@empty, 0x40}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0xf6, 0x3, 0x6, [{@rand_addr=0x64010100, 0x7fffffff}, {@rand_addr=0x64010101, 0xffffff33}, {@rand_addr=0x64010101}, {@loopback, 0x89a}, {@multicast2, 0x8000}, {@empty, 0x4}, {@multicast2, 0x7bd5}, {@empty, 0x2}, {@broadcast, 0x1000}]}, @end, @timestamp_addr={0x44, 0x2c, 0x6f, 0x1, 0xf, [{@multicast2}, {@private=0xa010102, 0x2}, {@multicast1, 0x4}, {@multicast1, 0x7}, {@private=0xa010101, 0x83f}]}, @ssrr={0x89, 0xf, 0x53, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x118}}], 0x2, 0x8000)
socket$inet_mptcp(0x2, 0x1, 0x106)
r15 = socket$packet(0x11, 0x2, 0x300)
r16 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r16, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="4ba1bcac382ac44c0f7ed1e4f611a4961be8b8274220d6b067de4cf8412f467ac3d2ce59b3f154458c8a285b451072e3dbc06a0e04f95c8c3e3ec5551603e477fe3e2d9c5ac9795b9802113f1556187750c6138d1dc491ee91059996be326b9101dd62736c377ff5e659bf1e60aabf8e4488036db4fecb04a9ee97c35c20c18258722e656876", @ANYRESHEX=r1, @ANYRESOCT=r13, @ANYRES16=r3, @ANYRESOCT=r15, @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)

596.542127ms ago: executing program 3 (id=5127):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x28002000) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) (rerun: 32)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)

529.500519ms ago: executing program 2 (id=5128):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffff, 0xa000, @dev={0xfe, 0x80, '\x00', 0xff}, 0xf}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304, 0x38}, "c832a0000000ffff", "82d7773879241628cb2d7129d5a01853", '\x00 \x00', "614db5b3ffffffff"}, 0x28) (async, rerun: 32)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) (async)
write$cgroup_pid(r0, &(0x7f0000000340), 0x12) (async)
r3 = socket(0x1, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40}, 0x10}, 0x94) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) (async)
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64)
sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async, rerun: 64)
recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) (async)
r6 = socket(0x1, 0x803, 0x0)
sendto$unix(r6, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64)
openat$cgroup_ro(r0, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (rerun: 64)

422.146915ms ago: executing program 3 (id=5129):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8844)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xc, 0xfff1}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40010)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {@in6=@remote, 0x0, 0x32}, @in=@private=0xa010101, {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0xfffffffd}, 0x30bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x20000001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x3fff, 0x0, 0x0, {{0xb}, {0x4}, {0x13, 0x6, "1c2648ad597613e420f6d677f94d47"}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x58}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@RTM_NEWMDB={0x18, 0x54, 0x400, 0x70bd30, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x20000044}, 0x400c000)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001400000"], 0x110}}, 0x40040)
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x114, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x114}}, 0x40040)
socket$nl_netfilter(0x10, 0x3, 0xc)

359.066604ms ago: executing program 1 (id=5130):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x7}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r5=>0x0})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r8=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x2, r8}, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@rand_addr, <r9=>0x0}, &(0x7f0000000180)=0x14)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b933, 0x80000, {0x0, 0x0, 0x0, r12, {0x8}, {0x2, 0xb}, {0xb, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x58c0)
getsockname$packet(r14, &(0x7f0000000140)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r15, @ANYRES32=r8], 0x34}}, 0x40)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x10}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x48}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0xe0}}, 0x20004080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000007e635f48bfa2000000000000079bf400f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94)

282.810568ms ago: executing program 2 (id=5131):
socketpair(0x2b, 0xa, 0x9a25, &(0x7f0000000040)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x1, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64)
sendmsg$kcm(r0, 0x0, 0x0) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000640)="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", 0x102}], 0x1}}], 0x1, 0x4000040)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) (async, rerun: 32)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32)

206.573844ms ago: executing program 4 (id=5132):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xe, 0xfd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)

26.021174ms ago: executing program 4 (id=5133):
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x38, r3, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x44b, 0xfffffffe, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14}]}, 0x48}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000a33553df177fe3a2000000080004000500000034000100240001006270445f686173685f66756e6300000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', <r8=>0x0, 0x8, 0x700, 0x8, 0x200, {{0x1b, 0x4, 0x0, 0x3f, 0x6c, 0x2, 0x0, 0x4, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x35}, {[@generic={0x4f, 0x8, "e741bcff6914"}, @cipso={0x86, 0x18, 0x2, [{0x0, 0x12, "aa812720bb53a41aee24982577bf88b1"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x33, 0x3, [{0x7, 0xf, "eb00ca7f07dea6dee1bf5d1f20"}, {0x6, 0xf, "2fbe42a479a8958b38859c2bed"}, {0x1, 0xf, "b90caee46dcddd64a07ef2a8a3"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x5}]}}]}]}, 0x34}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r14=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', <r15=>0x0, 0x29, 0x7, 0xe, 0x2, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0x7, 0xb0, 0xffff}})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x13c, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20e}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044010)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x31)

0s ago: executing program 2 (id=5134):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000600)="a7", 0x1}], 0x1, 0x8)
splice(r2, 0x0, r1, 0x0, 0x8000, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4068, 0xfe4}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000100)=""/29, 0x1d}], 0x3}, 0x12100)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x7}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
write$bt_hci(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)
bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_timeval(r8, 0x1, 0x2, &(0x7f0000000040), 0x10)
r9 = socket(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0)
r10 = accept4(r4, 0x0, 0x0, 0x80000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r12, 0x1, 0x70bd2c, 0x700, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07}, 0x2000000)
sendmmsg$alg(r10, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800)
recvmsg$unix(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/120, 0x46}], 0x1}, 0x40)
socket$inet6_mptcp(0xa, 0x1, 0x106)

kernel console output (not intermixed with test programs):

ready exists in 'hsr'
[  369.126358][T19444] Cannot create hsr debugfs directory
[  369.239249][T19718] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3087'.
[  369.266594][T19722] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  369.585134][T19727] netlink: 'syz.2.3090': attribute type 12 has an invalid length.
[  369.752334][T19738]  speed is unknown, defaulting to 1000
[  369.865621][T19742] netlink: 'syz.3.3094': attribute type 1 has an invalid length.
[  369.890940][T19742] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3094'.
[  370.261578][T18586] IPVS: stop unused estimator thread 0...
[  370.606277][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3104'.
[  370.672988][T19780] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3105'.
[  371.030706][   T55] block nbd0: Possible stuck request ffff8880252f7000: control (read@0,1024B). Runtime 150 seconds
[  371.042735][   T55] block nbd0: Possible stuck request ffff8880252f71c0: control (read@1024,1024B). Runtime 150 seconds
[  371.057405][   T55] block nbd0: Possible stuck request ffff8880252f7380: control (read@2048,1024B). Runtime 150 seconds
[  371.068800][   T55] block nbd0: Possible stuck request ffff8880252f7540: control (read@3072,1024B). Runtime 150 seconds
[  371.187077][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'.
[  371.232053][T19802] netlink: 'syz.0.3112': attribute type 1 has an invalid length.
[  371.267797][T19802] netlink: 'syz.0.3112': attribute type 2 has an invalid length.
[  371.464265][T19809] netlink: 'syz.0.3115': attribute type 29 has an invalid length.
[  371.558603][T19809] netlink: 'syz.0.3115': attribute type 29 has an invalid length.
[  371.909399][T19822] netlink: 'syz.3.3119': attribute type 26 has an invalid length.
[  371.925235][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'.
[  371.974087][T19822] netlink: 'syz.3.3119': attribute type 26 has an invalid length.
[  371.985089][T19444] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  371.999626][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'.
[  372.014595][T19444] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  372.032706][T19824] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3120'.
[  372.043791][T19444] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  372.082922][T19444] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  372.227095][T19837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3123'.
[  372.375942][T19444] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.424968][T19444] 8021q: adding VLAN 0 to HW filter on device team0
[  372.426493][T19853] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.3128'.
[  372.449032][T18586] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.456210][T18586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.495320][T13303] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.502541][T13303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.863099][T19444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.515076][T19444] veth0_vlan: entered promiscuous mode
[  373.642434][T19444] veth1_vlan: entered promiscuous mode
[  373.775506][T19444] veth0_macvtap: entered promiscuous mode
[  373.821290][T19444] veth1_macvtap: entered promiscuous mode
[  373.897939][T19928] netlink: 'syz.0.3145': attribute type 1 has an invalid length.
[  373.918177][T19928] NCSI netlink: No device for ifindex 65612
[  373.932361][T19444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.941043][T19928] netlink: 'syz.0.3145': attribute type 1 has an invalid length.
[  373.955163][T19444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.965067][T19927]  speed is unknown, defaulting to 1000
[  373.971945][T19928] NCSI netlink: No device for ifindex 65612
[  373.990679][T13285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.023486][T19931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  374.035429][T13285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.069241][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.110985][T19931] syzkaller0: entered promiscuous mode
[  374.150342][T19931] syzkaller0: entered allmulticast mode
[  374.157331][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.182972][T19936] tipc: Resetting bearer <eth:syzkaller0>
[  374.221821][T19930] tipc: Resetting bearer <eth:syzkaller0>
[  374.281740][T19930] tipc: Disabling bearer <eth:syzkaller0>
[  374.493265][T19948] __nla_validate_parse: 5 callbacks suppressed
[  374.493283][T19948] netlink: 808 bytes leftover after parsing attributes in process `syz.2.3150'.
[  374.520607][T13280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.540400][T19949] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3150'.
[  374.557207][T13280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.560149][T19949] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3150'.
[  374.697570][T19956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3152'.
[  374.709255][T13301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.721054][T13301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.947885][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3154'.
[  374.984128][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3154'.
[  375.222199][T19987] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002
[  375.390455][T19999] openvswitch: netlink: Key type 29 is not supported
[  375.810610][T13287] nci: nci_rsp_packet: unknown rsp opcode 0x221
[  376.168072][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'.
[  376.267397][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.278768][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.290141][T20028] bridge_slave_1: left allmulticast mode
[  376.328405][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.338235][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.338721][T20028] bridge_slave_1: left promiscuous mode
[  376.354733][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.385159][T20028] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.425277][T20028] bridge_slave_0: left allmulticast mode
[  376.432205][T20028] bridge_slave_0: left promiscuous mode
[  376.451790][T20028] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.804144][T20030]  speed is unknown, defaulting to 1000
[  377.021554][ T5870] Bluetooth: hci3: command tx timeout
[  377.422436][T20070] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  378.016717][T20100] netlink: 'syz.4.3185': attribute type 25 has an invalid length.
[  378.035299][T20102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3184'.
[  378.458783][ T5870] Bluetooth: hci4: command tx timeout
[  378.724358][T20030] chnl_net:caif_netlink_parms(): no params data found
[  378.845664][T20132] netlink: 'syz.2.3188': attribute type 4 has an invalid length.
[  378.871169][T20135] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222)
[  379.012129][T20030] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.022645][T20030] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.030478][T20030] bridge_slave_0: entered allmulticast mode
[  379.039013][T20030] bridge_slave_0: entered promiscuous mode
[  379.048150][T20030] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.055512][T20030] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.064931][T20030] bridge_slave_1: entered allmulticast mode
[  379.074379][T20030] bridge_slave_1: entered promiscuous mode
[  379.169654][T20030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.206492][T20030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.245070][T20150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3193'.
[  379.353300][T20030] team0: Port device team_slave_0 added
[  379.364929][T20030] team0: Port device team_slave_1 added
[  379.510592][T20030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.523310][T20030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.564018][T20163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3196'.
[  379.584360][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'.
[  379.595067][T20030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.608868][T20030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.615846][T20030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.643709][T20030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.668361][T20171] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3198'.
[  379.921903][T20184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3201'.
[  379.938802][T20030] hsr_slave_0: entered promiscuous mode
[  379.950138][T20030] hsr_slave_1: entered promiscuous mode
[  379.956699][T20030] debugfs: 'hsr0' already exists in 'hsr'
[  379.962658][T20030] Cannot create hsr debugfs directory
[  379.980266][T20173] pim6reg1: entered promiscuous mode
[  379.991864][T20173] pim6reg1: entered allmulticast mode
[  380.032693][T20190] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  380.248788][T20198] netlink: 'syz.2.3207': attribute type 1 has an invalid length.
[  380.402780][T20198] 8021q: adding VLAN 0 to HW filter on device bond1
[  380.433580][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'.
[  380.449698][T20199] veth3: entered promiscuous mode
[  380.458938][T20199] bond1: (slave veth3): Enslaving as an active interface with an up link
[  380.484420][T20214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3211'.
[  380.538215][ T5186] Bluetooth: hci4: command tx timeout
[  380.641733][   T43] IPVS: starting estimator thread 0...
[  380.658745][T20221] netlink: 'syz.4.3213': attribute type 32 has an invalid length.
[  380.748458][T20222] IPVS: using max 37 ests per chain, 88800 per kthread
[  380.758299][T20030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.787772][T20030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.852500][T20239] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3216'.
[  380.869331][T20236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  380.902855][T20231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  380.918609][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'.
[  380.973976][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3217'.
[  381.285955][T20239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  381.313588][T20239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.337119][T20239] bond0 (unregistering): Released all slaves
[  381.371549][T20030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  381.382874][T20030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.403341][T20254] netlink: 'syz.3.3217': attribute type 4 has an invalid length.
[  381.535652][T20030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  381.572256][T20030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.611489][T20269] netlink: 'syz.2.3220': attribute type 2 has an invalid length.
[  381.620996][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'.
[  381.626202][T20273] netlink: 'syz.4.3222': attribute type 2 has an invalid length.
[  381.671678][T20273] netlink: 'syz.4.3222': attribute type 1 has an invalid length.
[  381.713938][T20273] netlink: 'syz.4.3222': attribute type 1 has an invalid length.
[  381.760750][T20030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  381.791307][T20030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.290840][T20030] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  382.345957][T20030] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  382.376530][T20030] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  382.407627][T20030] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  382.618320][ T5186] Bluetooth: hci4: command 0x040f tx timeout
[  382.681504][T20030] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.703714][T20330] vlan2: entered promiscuous mode
[  382.718190][T20330] vlan2: entered allmulticast mode
[  382.725287][T20330] hsr_slave_1: entered allmulticast mode
[  382.822124][T20030] 8021q: adding VLAN 0 to HW filter on device team0
[  382.872613][T18588] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.879849][T18588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.945158][T13303] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.952420][T13303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.283340][T20030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.330581][T20030] veth0_vlan: entered promiscuous mode
[  383.342425][T20030] veth1_vlan: entered promiscuous mode
[  383.376236][T20030] veth0_macvtap: entered promiscuous mode
[  383.387500][T20030] veth1_macvtap: entered promiscuous mode
[  383.409061][T20030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.425122][T20030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.442499][T18586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.452709][T18588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.464640][T18588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.476504][T18588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.552620][T13285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.572203][T13285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.605851][T13303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.615792][T13303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.670016][T20354] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004
[  384.698388][ T5870] Bluetooth: hci4: command 0x040f tx timeout
[  386.778858][ T5870] Bluetooth: hci4: command 0x040f tx timeout
[  390.862598][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  401.099891][   T55] block nbd0: Possible stuck request ffff8880252f7000: control (read@0,1024B). Runtime 180 seconds
[  401.111840][   T55] block nbd0: Possible stuck request ffff8880252f71c0: control (read@1024,1024B). Runtime 180 seconds
[  401.123154][   T55] block nbd0: Possible stuck request ffff8880252f7380: control (read@2048,1024B). Runtime 180 seconds
[  401.135200][   T55] block nbd0: Possible stuck request ffff8880252f7540: control (read@3072,1024B). Runtime 180 seconds
[  401.606221][ T5236] udevd[5236]: worker [10663] /devices/virtual/block/nbd0 timeout; kill it
[  401.615176][ T5236] udevd[5236]: seq 13850 '/devices/virtual/block/nbd0' killed
[  420.833192][T20377] netlink: 'syz.0.3247': attribute type 21 has an invalid length.
[  420.848163][T20380] __nla_validate_parse: 3 callbacks suppressed
[  420.848183][T20380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3246'.
[  420.880377][T20377] netlink: 'syz.0.3247': attribute type 1 has an invalid length.
[  421.102195][T20390] syz_tun: entered allmulticast mode
[  421.123728][T20386] syz_tun: left allmulticast mode
[  421.334571][T20401] netlink: 'syz.2.3253': attribute type 18 has an invalid length.
[  421.368190][T20401] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3253'.
[  421.609290][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'.
[  421.653502][ T5186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  421.668631][T20411] netlink: 'syz.2.3257': attribute type 1 has an invalid length.
[  421.680065][ T5186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  421.689757][ T5186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  421.700751][ T5186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  421.708755][ T5186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  421.722400][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'.
[  421.923401][T20437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3263'.
[  421.955741][T20413]  speed is unknown, defaulting to 1000
[  421.962281][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'.
[  422.421283][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3270'.
[  423.116537][T20497] netlink: 'syz.4.3277': attribute type 1 has an invalid length.
[  423.166014][T20497] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3277'.
[  423.738406][ T5186] Bluetooth: hci2: command tx timeout
[  423.804628][T13285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.815542][T13285] bond0 (unregistering): Released all slaves
[  423.833038][T13285] bond1 (unregistering): Released all slaves
[  423.847435][T13285] bond2 (unregistering): Released all slaves
[  423.867097][T13285] bond3 (unregistering): Released all slaves
[  423.989500][T13285] bond4 (unregistering): Released all slaves
[  424.004599][T20487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3277'.
[  424.155661][T13285] : left promiscuous mode
[  424.203479][T20512] sctp: [Deprecated]: syz.4.3279 (pid 20512) Use of struct sctp_assoc_value in delayed_ack socket option.
[  424.203479][T20512] Use struct sctp_sack_info instead
[  424.326082][T20516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3281'.
[  424.363897][T20516] hsr_slave_0: left promiscuous mode
[  424.378741][T20518] netlink: 'syz.2.3283': attribute type 2 has an invalid length.
[  424.415356][T20516] hsr_slave_1: left promiscuous mode
[  424.422838][T20521] netlink: 'syz.2.3283': attribute type 2 has an invalid length.
[  424.539276][T13285] tipc: Disabling bearer <udp:s>
[  424.559577][T13285] tipc: Left network mode
[  424.749189][T20533] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  424.758286][ T6003] IPVS: starting estimator thread 0...
[  424.898549][T20536] IPVS: using max 31 ests per chain, 74400 per kthread
[  425.264725][T20561] gtp0: entered promiscuous mode
[  425.270656][T20561] gtp0: entered allmulticast mode
[  425.582867][T20413] chnl_net:caif_netlink_parms(): no params data found
[  425.833401][ T5186] Bluetooth: hci2: command tx timeout
[  425.939613][T20592] tipc: Can't bind to reserved service type 2
[  426.051610][T20585] tipc: Started in network mode
[  426.057428][T20585] tipc: Node identity a2c92330e347, cluster identity 4711
[  426.080566][T20585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  426.088527][T20591] syzkaller0: entered promiscuous mode
[  426.098009][T20591] syzkaller0: entered allmulticast mode
[  426.194698][T20603] netlink: 'syz.0.3299': attribute type 10 has an invalid length.
[  426.296554][T20585] tipc: Resetting bearer <eth:syzkaller0>
[  426.343379][T20576] tipc: Resetting bearer <eth:syzkaller0>
[  426.440597][T20576] tipc: Disabling bearer <eth:syzkaller0>
[  426.463854][T20607] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  426.816962][T20413] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.833271][T20413] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.856960][T20413] bridge_slave_0: entered allmulticast mode
[  426.878793][T20623] nbd: couldn't find a device at index -373156329
[  426.887257][T20413] bridge_slave_0: entered promiscuous mode
[  426.908711][T20624] __nla_validate_parse: 1 callbacks suppressed
[  426.908729][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3307'.
[  426.940072][T13285] hsr_slave_0: left promiscuous mode
[  426.947123][T13285] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.948303][T20627] Bluetooth: MGMT ver 1.23
[  426.961624][T13285] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.970624][T13285] batman_adv: batadv0: Interface deactivated: team0
[  426.977302][T13285] batman_adv: batadv0: Removing interface: team0
[  427.429540][    C0] vcan0: j1939_tp_rxtimer: 0xffff888058aa4c00: rx timeout, send abort
[  427.438362][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058aa4c00: 0x2f002: (3) A timeout occurred and this is the connection abort to close the session.
[  427.655797][T13285] team0 (unregistering): Port device team_slave_1 removed
[  427.723664][T13285] team0 (unregistering): Port device team_slave_0 removed
[  427.744948][T13280] smc: removing ib device !yz!
[  427.912290][ T5186] Bluetooth: hci2: command tx timeout
[  428.076842][T20413] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.084772][T20413] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.092654][T20413] bridge_slave_1: entered allmulticast mode
[  428.102900][T20413] bridge_slave_1: entered promiscuous mode
[  428.420750][T20413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.439158][T20654] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3314'.
[  428.450469][T20413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.716733][T20666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'.
[  428.813267][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'.
[  428.852535][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'.
[  428.893478][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'.
[  428.907034][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3318'.
[  428.915073][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'.
[  428.929362][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'.
[  428.946035][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'.
[  429.000208][T20413] team0: Port device team_slave_0 added
[  429.018246][T20413] team0: Port device team_slave_1 added
[  429.316651][T20685] netlink: 'syz.0.3322': attribute type 11 has an invalid length.
[  429.324855][T20685] netlink: 'syz.0.3322': attribute type 11 has an invalid length.
[  429.378595][T20693] netlink: 'syz.0.3322': attribute type 10 has an invalid length.
[  429.425403][T20682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  429.524586][T20413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.533109][T20413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.588417][T20413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.603529][T20413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.620634][T20413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.661550][T20413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.989835][ T5186] Bluetooth: hci2: command tx timeout
[  430.434815][T20717] wg2: entered promiscuous mode
[  430.495209][T20717] wg2: entered allmulticast mode
[  430.739693][T20728] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  430.751567][T20731] netlink: 'syz.2.3336': attribute type 5 has an invalid length.
[  430.792435][T20732] openvswitch: netlink: VXLAN extension 47 out of range max 1
[  430.801634][T20413] hsr_slave_0: entered promiscuous mode
[  430.898731][T20413] hsr_slave_1: entered promiscuous mode
[  430.939821][T20413] debugfs: 'hsr0' already exists in 'hsr'
[  430.962512][T20413] Cannot create hsr debugfs directory
[  431.074163][T20741] gre1: entered promiscuous mode
[  431.103589][T20741] gre1: entered allmulticast mode
[  431.201164][   T55] block nbd0: Possible stuck request ffff8880252f7000: control (read@0,1024B). Runtime 210 seconds
[  431.212765][   T55] block nbd0: Possible stuck request ffff8880252f71c0: control (read@1024,1024B). Runtime 210 seconds
[  431.226238][   T55] block nbd0: Possible stuck request ffff8880252f7380: control (read@2048,1024B). Runtime 210 seconds
[  431.252196][   T55] block nbd0: Possible stuck request ffff8880252f7540: control (read@3072,1024B). Runtime 210 seconds
[  431.428141][T13285] IPVS: stop unused estimator thread 0...
[  432.009845][T20796] 
: renamed from bridge_slave_0 (while UP)
[  432.071205][T20798] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  432.485851][T20824] __nla_validate_parse: 64 callbacks suppressed
[  432.485870][T20824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3358'.
[  432.660851][T20834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3360'.
[  432.692840][T20841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3363'.
[  432.703246][T20841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3363'.
[  432.782233][T20413] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  432.823837][T20413] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  432.843974][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3364'.
[  432.863605][T20413] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  432.895718][T20845] bridge_slave_1: left allmulticast mode
[  432.913665][T20845] bridge_slave_1: left promiscuous mode
[  432.929259][T20845] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.950300][T20845] bridge_slave_0: left allmulticast mode
[  432.956156][T20845] bridge_slave_0: left promiscuous mode
[  432.962142][T20848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3364'.
[  432.971834][T20845] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.030108][T20413] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  433.065880][T20853] netlink: 'syz.2.3366': attribute type 1 has an invalid length.
[  433.090665][T20853] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3366'.
[  433.194845][T20866] team0: entered promiscuous mode
[  433.208579][T20866] team_slave_0: entered promiscuous mode
[  433.214738][T20866] team_slave_1: entered promiscuous mode
[  433.276517][T20872] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜�zR3âëp(@Ož>ÆÀ–PÛÊ¡RaGùͽ'
[  433.293328][T20872] CPU: 1 UID: 0 PID: 20872 Comm: syz.0.3370 Not tainted syzkaller #0 PREEMPT(full) 
[  433.293356][T20872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  433.293373][T20872] Call Trace:
[  433.293380][T20872]  <TASK>
[  433.293389][T20872]  dump_stack_lvl+0x189/0x250
[  433.293420][T20872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  433.293441][T20872]  ? __pfx__printk+0x10/0x10
[  433.293471][T20872]  ? kernfs_path_from_node+0x2f/0x290
[  433.293490][T20872]  ? kernfs_path_from_node+0x250/0x290
[  433.293507][T20872]  ? kernfs_path_from_node+0x2f/0x290
[  433.293531][T20872]  sysfs_warn_dup+0x8e/0xa0
[  433.293569][T20872]  sysfs_do_create_link_sd+0xc0/0x110
[  433.293588][T20872]  device_add_class_symlinks+0x1cf/0x240
[  433.293611][T20872]  device_add+0x475/0xb50
[  433.293634][T20872]  wiphy_register+0x1ba6/0x28d0
[  433.293669][T20872]  ? __pfx_wiphy_register+0x10/0x10
[  433.293686][T20872]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  433.293717][T20872]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  433.293748][T20872]  ieee80211_register_hw+0x3484/0x4100
[  433.293787][T20872]  ? ieee80211_register_hw+0x1411/0x4100
[  433.293820][T20872]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  433.293846][T20872]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  433.293889][T20872]  ? __hrtimer_setup+0x187/0x210
[  433.293905][T20872]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  433.293926][T20872]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  433.293981][T20872]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  433.294003][T20872]  ? trace_kmalloc+0x1f/0xd0
[  433.294022][T20872]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  433.294045][T20872]  ? kstrndup+0xbf/0x160
[  433.294076][T20872]  hwsim_new_radio_nl+0xea4/0x1b10
[  433.294102][T20872]  ? __pfx___nla_validate_parse+0x10/0x10
[  433.294136][T20872]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  433.294176][T20872]  ? __nla_parse+0x40/0x60
[  433.294197][T20872]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  433.294228][T20872]  genl_family_rcv_msg_doit+0x215/0x300
[  433.294258][T20872]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  433.294296][T20872]  ? bpf_lsm_capable+0x9/0x20
[  433.294317][T20872]  ? security_capable+0x7e/0x2e0
[  433.294349][T20872]  genl_rcv_msg+0x60e/0x790
[  433.294380][T20872]  ? __pfx_genl_rcv_msg+0x10/0x10
[  433.294401][T20872]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  433.294440][T20872]  netlink_rcv_skb+0x205/0x470
[  433.294457][T20872]  ? __lock_acquire+0xab9/0xd20
[  433.294481][T20872]  ? __pfx_genl_rcv_msg+0x10/0x10
[  433.294505][T20872]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  433.294546][T20872]  ? down_read+0x1ad/0x2e0
[  433.294569][T20872]  genl_rcv+0x28/0x40
[  433.294588][T20872]  netlink_unicast+0x82f/0x9e0
[  433.294623][T20872]  ? __pfx_netlink_unicast+0x10/0x10
[  433.294649][T20872]  ? netlink_sendmsg+0x642/0xb30
[  433.294666][T20872]  ? skb_put+0x11b/0x210
[  433.294691][T20872]  netlink_sendmsg+0x805/0xb30
[  433.294721][T20872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  433.294744][T20872]  ? aa_sock_msg_perm+0xf1/0x1d0
[  433.294765][T20872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  433.294784][T20872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  433.294805][T20872]  __sock_sendmsg+0x219/0x270
[  433.294834][T20872]  ____sys_sendmsg+0x505/0x830
[  433.294863][T20872]  ? __pfx_____sys_sendmsg+0x10/0x10
[  433.294903][T20872]  ? import_iovec+0x74/0xa0
[  433.294931][T20872]  ___sys_sendmsg+0x21f/0x2a0
[  433.294957][T20872]  ? __pfx____sys_sendmsg+0x10/0x10
[  433.295021][T20872]  ? __fget_files+0x2a/0x420
[  433.295037][T20872]  ? __fget_files+0x3a0/0x420
[  433.295067][T20872]  __x64_sys_sendmsg+0x19b/0x260
[  433.295092][T20872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  433.295124][T20872]  ? rcu_is_watching+0x15/0xb0
[  433.295149][T20872]  ? do_syscall_64+0xbe/0x3b0
[  433.295173][T20872]  do_syscall_64+0xfa/0x3b0
[  433.295191][T20872]  ? lockdep_hardirqs_on+0x9c/0x150
[  433.295209][T20872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.295225][T20872]  ? clear_bhb_loop+0x60/0xb0
[  433.295248][T20872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.295273][T20872] RIP: 0033:0x7fbea518eec9
[  433.295290][T20872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  433.295306][T20872] RSP: 002b:00007fbea5fca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  433.295326][T20872] RAX: ffffffffffffffda RBX: 00007fbea53e5fa0 RCX: 00007fbea518eec9
[  433.295339][T20872] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  433.295351][T20872] RBP: 00007fbea5211f91 R08: 0000000000000000 R09: 0000000000000000
[  433.295363][T20872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  433.295374][T20872] R13: 00007fbea53e6038 R14: 00007fbea53e5fa0 R15: 00007ffdc6a76a68
[  433.295404][T20872]  </TASK>
[  433.811638][T20413] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.891607][T20413] 8021q: adding VLAN 0 to HW filter on device team0
[  433.914151][T13303] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.921339][T13303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.954183][T13303] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.961399][T13303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.999198][T20413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  434.009637][T20413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.261235][T20892] tipc: Started in network mode
[  434.266153][T20892] tipc: Node identity 828f684ed1fe, cluster identity 4711
[  434.271870][T20895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3376'.
[  434.290955][T20892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.342176][T20413] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.401279][T20890] tipc: Disabling bearer <eth:syzkaller0>
[  434.455596][T20908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3379'.
[  434.471910][T20907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3379'.
[  434.555575][T20413] veth0_vlan: entered promiscuous mode
[  434.614489][T20413] veth1_vlan: entered promiscuous mode
[  434.727157][T20413] veth0_macvtap: entered promiscuous mode
[  434.761784][T20413] veth1_macvtap: entered promiscuous mode
[  434.790125][T20413] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.825833][T20413] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.870202][T13303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.886501][T13303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.901935][T13303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.926762][T13303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.065568][T13280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.104161][T13280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.119107][T20933] netlink: 'syz.1.3385': attribute type 1 has an invalid length.
[  435.191998][T13280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.212355][T20937] tipc: Started in network mode
[  435.217306][T13280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.218737][T20937] tipc: Node identity 063fde44ca26, cluster identity 4711
[  435.232188][T20937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.332273][T20937] tipc: Disabling bearer <eth:syzkaller0>
[  435.451063][T20947] tipc: Started in network mode
[  435.456056][T20947] tipc: Node identity d68ae962f64c, cluster identity 4711
[  435.463904][T20947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.504799][T20947] syzkaller0: entered promiscuous mode
[  435.518153][T20947] syzkaller0: entered allmulticast mode
[  435.621703][T20947] tipc: Resetting bearer <eth:syzkaller0>
[  435.655466][T20946] tipc: Resetting bearer <eth:syzkaller0>
[  435.702931][T20946] tipc: Disabling bearer <eth:syzkaller0>
[  435.728360][T20954] tipc: Started in network mode
[  435.733846][T20954] tipc: Node identity ae2dd552df74, cluster identity 4711
[  435.741657][T20954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.853088][T20956] tipc: Disabling bearer <eth:syzkaller0>
[  436.021870][T20973] sctp: [Deprecated]: syz.3.3396 (pid 20973) Use of struct sctp_assoc_value in delayed_ack socket option.
[  436.021870][T20973] Use struct sctp_sack_info instead
[  436.244647][T20983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.358629][T20997] netlink: 'syz.2.3400': attribute type 21 has an invalid length.
[  436.417162][T20983] syzkaller0: entered promiscuous mode
[  436.423507][T20983] syzkaller0: entered allmulticast mode
[  436.430366][T20983] tipc: Resetting bearer <eth:syzkaller0>
[  436.458696][ T5870] Bluetooth: hci2: command 0x0405 tx timeout
[  436.564344][T20981] tipc: Resetting bearer <eth:syzkaller0>
[  437.143600][T21029] netlink: 'syz.4.3411': attribute type 1 has an invalid length.
[  437.269047][T17739] tipc: Node number set to 1901712722
[  437.739553][T21032] "syz.1.3412" (21032) uses obsolete ecb(arc4) skcipher
[  437.748225][T21032] __nla_validate_parse: 11 callbacks suppressed
[  437.748243][T21032] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3412'.
[  437.764780][T21032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3412'.
[  438.686538][T20981] tipc: Disabling bearer <eth:syzkaller0>
[  438.792888][T21032] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  439.012432][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3417'.
[  439.087387][T21050] syzkaller0: entered promiscuous mode
[  439.114930][T21050] syzkaller0: entered allmulticast mode
[  439.142047][T21045] geneve2: entered promiscuous mode
[  439.151868][T21045] geneve2: entered allmulticast mode
[  439.161068][T13285] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  439.188968][T21053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  439.243516][T13285] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  439.276094][T13287] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  439.285594][T13287] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  439.602912][T21070] netlink: 'syz.2.3424': attribute type 2 has an invalid length.
[  440.127149][T21110] netlink: 'syz.2.3435': attribute type 13 has an invalid length.
[  440.406914][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'.
[  440.641232][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3444'.
[  440.711211][T21145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  440.726806][T21145] syzkaller0: entered promiscuous mode
[  440.734551][T21145] syzkaller0: entered allmulticast mode
[  440.909006][T21158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3445'.
[  440.931710][T21145] tipc: Resetting bearer <eth:syzkaller0>
[  441.035775][T21143] tipc: Resetting bearer <eth:syzkaller0>
[  441.060661][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'.
[  441.145360][T21143] tipc: Disabling bearer <eth:syzkaller0>
[  441.448104][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3455'.
[  441.497208][T21185] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3455'.
[  441.553251][T21192] netlink: 'syz.4.3457': attribute type 29 has an invalid length.
[  441.598199][T21192] netlink: 'syz.4.3457': attribute type 29 has an invalid length.
[  441.627387][T21192] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3457'.
[  442.022328][T21206] netlink: 'syz.3.3463': attribute type 12 has an invalid length.
[  442.046287][T21209] netlink: 'syz.3.3463': attribute type 12 has an invalid length.
[  442.325050][T21230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  442.332375][T21230] IPv6: NLM_F_CREATE should be set when creating new route
[  442.339649][T21230] IPv6: NLM_F_CREATE should be set when creating new route
[  442.437147][T21240] netlink: 'syz.3.3475': attribute type 10 has an invalid length.
[  442.481490][T21240] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  442.495359][T21244] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001
[  442.536154][T21244] veth1_macvtap: left promiscuous mode
[  442.721624][T21257] veth0: entered promiscuous mode
[  442.902473][T21257] __nla_validate_parse: 6 callbacks suppressed
[  442.902495][T21257] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3479'.
[  443.062073][T21255] veth0: left promiscuous mode
[  443.201960][T21283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3485'.
[  443.346416][T21290] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  443.443621][T21300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3490'.
[  443.464604][T21300] syz_tun: entered promiscuous mode
[  443.470775][T21300] macvtap1: entered promiscuous mode
[  443.477141][T21300] macvtap1: entered allmulticast mode
[  443.484260][T21300] syz_tun: entered allmulticast mode
[  443.498901][T21300] syz_tun: left allmulticast mode
[  443.504466][T21300] syz_tun: left promiscuous mode
[  443.734689][T21314] º
: renamed from veth1_vlan (while UP)
[  444.076636][T21337] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3503'.
[  444.099175][T21337] netlink: 'syz.4.3503': attribute type 4 has an invalid length.
[  444.109432][T21337] openvswitch: netlink: IPv4 tun info is not correct
[  444.257662][T21341] netlink: 'syz.3.3505': attribute type 1 has an invalid length.
[  444.275209][T21341] netlink: 'syz.3.3505': attribute type 3 has an invalid length.
[  444.393752][T21353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3507'.
[  444.448847][T21347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3507'.
[  444.539496][T21358] tipc: Enabling of bearer <idp:syz1> rejected, media not registered
[  444.593953][T21365] syz.0.3512: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  444.696199][T21365] CPU: 1 UID: 0 PID: 21365 Comm: syz.0.3512 Not tainted syzkaller #0 PREEMPT(full) 
[  444.696224][T21365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  444.696234][T21365] Call Trace:
[  444.696241][T21365]  <TASK>
[  444.696248][T21365]  dump_stack_lvl+0x189/0x250
[  444.696275][T21365]  ? __pfx_dump_stack_lvl+0x10/0x10
[  444.696293][T21365]  ? __pfx__printk+0x10/0x10
[  444.696313][T21365]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  444.696333][T21365]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  444.696354][T21365]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  444.696373][T21365]  warn_alloc+0x214/0x310
[  444.696405][T21365]  ? stack_depot_save_flags+0x40/0x860
[  444.696428][T21365]  ? __pfx_warn_alloc+0x10/0x10
[  444.696452][T21365]  ? kasan_save_track+0x4f/0x80
[  444.696473][T21365]  ? xskq_create+0x56/0x170
[  444.696488][T21365]  ? xsk_init_queue+0xb0/0x110
[  444.696501][T21365]  ? xsk_setsockopt+0x4dc/0x8d0
[  444.696522][T21365]  ? do_sock_setsockopt+0x17c/0x1b0
[  444.696540][T21365]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  444.696558][T21365]  ? do_syscall_64+0xfa/0x3b0
[  444.696574][T21365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.696600][T21365]  __vmalloc_node_range_noprof+0x125/0x12f0
[  444.696654][T21365]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  444.696683][T21365]  ? __kasan_kmalloc+0x93/0xb0
[  444.696707][T21365]  vmalloc_user_noprof+0xad/0xf0
[  444.696729][T21365]  ? xskq_create+0xbf/0x170
[  444.696747][T21365]  xskq_create+0xbf/0x170
[  444.696768][T21365]  xsk_init_queue+0xb0/0x110
[  444.696786][T21365]  xsk_setsockopt+0x4dc/0x8d0
[  444.696812][T21365]  ? __pfx_xsk_setsockopt+0x10/0x10
[  444.696835][T21365]  ? __pfx_aa_sk_perm+0x10/0x10
[  444.696863][T21365]  ? aa_sock_opt_perm+0xff/0x1b0
[  444.696883][T21365]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  444.696901][T21365]  ? __pfx_xsk_setsockopt+0x10/0x10
[  444.696924][T21365]  do_sock_setsockopt+0x17c/0x1b0
[  444.696949][T21365]  __x64_sys_setsockopt+0x13f/0x1b0
[  444.696975][T21365]  do_syscall_64+0xfa/0x3b0
[  444.696991][T21365]  ? lockdep_hardirqs_on+0x9c/0x150
[  444.697008][T21365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.697024][T21365]  ? clear_bhb_loop+0x60/0xb0
[  444.697046][T21365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.697062][T21365] RIP: 0033:0x7fbea518eec9
[  444.697078][T21365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.697093][T21365] RSP: 002b:00007fbea5fca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  444.697111][T21365] RAX: ffffffffffffffda RBX: 00007fbea53e5fa0 RCX: 00007fbea518eec9
[  444.697124][T21365] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  444.697134][T21365] RBP: 00007fbea5211f91 R08: 0000000000000004 R09: 0000000000000000
[  444.697145][T21365] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  444.697156][T21365] R13: 00007fbea53e6038 R14: 00007fbea53e5fa0 R15: 00007ffdc6a76a68
[  444.697189][T21365]  </TASK>
[  444.697327][T21365] Mem-Info:
[  445.019366][T21365] active_anon:5367 inactive_anon:0 isolated_anon:0
[  445.019366][T21365]  active_file:2951 inactive_file:40003 isolated_file:0
[  445.019366][T21365]  unevictable:768 dirty:101 writeback:0
[  445.019366][T21365]  slab_reclaimable:12764 slab_unreclaimable:119894
[  445.019366][T21365]  mapped:29115 shmem:1366 pagetables:1167
[  445.019366][T21365]  sec_pagetables:0 bounce:0
[  445.019366][T21365]  kernel_misc_reclaimable:0
[  445.019366][T21365]  free:1302421 free_pcp:14718 free_cma:0
[  445.073557][T21365] Node 0 active_anon:21468kB inactive_anon:0kB active_file:11804kB inactive_file:159808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116460kB dirty:404kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14608kB pagetables:4540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  445.156035][T21365] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  445.192344][T21365] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  445.268880][T21365] lowmem_reserve[]: 0 2497 2499 2499 2499
[  445.274701][T21365] Node 0 DMA32 free:1306448kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21420kB inactive_anon:0kB active_file:11804kB inactive_file:158220kB unevictable:1536kB writepending:404kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:37272kB local_pcp:16416kB free_cma:0kB
[  445.385923][T21365] lowmem_reserve[]: 0 0 1 1 1
[  445.421483][T21365] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  445.461338][T21396] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  445.477273][T21365] lowmem_reserve[]: 0 0 0 0 0
[  445.548077][T21365] Node 1 Normal free:3887748kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22324kB local_pcp:12804kB free_cma:0kB
[  445.626748][T21365] lowmem_reserve[]: 0 0 0 0 0
[  445.642542][T21365] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  445.683677][T21407] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3523'.
[  445.755810][T21365] Node 0 DMA32: 950*4kB (UME) 611*8kB (UME) 210*16kB (UM) 513*32kB (UME) 163*64kB (UM) 110*128kB (UM) 53*256kB (UME) 20*512kB (UM) 9*1024kB (UME) 2*2048kB (ME) 297*4096kB (UM) = 1306608kB
[  445.788113][T21365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  445.828854][T21365] Node 1 Normal: 207*4kB (UE) 45*8kB (UME) 42*16kB (UME) 78*32kB (UME) 22*64kB (UME) 6*128kB (UM) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3887748kB
[  445.852615][T21417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3525'.
[  445.860487][T21365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  445.894881][T21416] pim6reg1: entered promiscuous mode
[  445.911217][T21416] pim6reg1: entered allmulticast mode
[  445.919844][T21365] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  445.953437][T21365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  445.989479][T21365] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  446.030704][T21365] 44319 total pagecache pages
[  446.036005][T21365] 0 pages in swap cache
[  446.041780][T21365] Free swap  = 124996kB
[  446.046320][T21365] Total swap = 124996kB
[  446.064084][T21365] 2097051 pages RAM
[  446.070050][T21365] 0 pages HighMem/MovableOnly
[  446.075004][T21365] 425672 pages reserved
[  446.102049][T21365] 0 pages cma reserved
[  446.223737][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3531'.
[  446.259477][T21433] validate_nla: 1 callbacks suppressed
[  446.259497][T21433] netlink: 'syz.0.3533': attribute type 2 has an invalid length.
[  446.319767][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'.
[  446.483036][T21456] netlink: 'syz.2.3539': attribute type 7 has an invalid length.
[  446.502315][T21456] netlink: 'syz.2.3539': attribute type 8 has an invalid length.
[  446.583772][T21463] netlink: 'syz.1.3542': attribute type 8 has an invalid length.
[  446.857338][T21479] netlink: 'syz.3.3549': attribute type 1 has an invalid length.
[  446.876113][T21479] block nbd1: not configured, cannot reconfigure
[  447.143250][T21497] netlink: 'syz.1.3552': attribute type 1 has an invalid length.
[  447.236650][T21503] netlink: 'syz.0.3554': attribute type 6 has an invalid length.
[  447.296643][T21510] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  447.345671][T21510] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  447.361391][T21510] gretap1: entered promiscuous mode
[  447.386641][T21510] gretap1: entered allmulticast mode
[  447.675048][T21539] netlink: 'syz.1.3559': attribute type 33 has an invalid length.
[  447.684946][T21539] team0: left promiscuous mode
[  447.709734][T21539] team_slave_0: left promiscuous mode
[  447.743731][T21539] team_slave_1: left promiscuous mode
[  447.805070][T21539] netlink: 'syz.1.3559': attribute type 1 has an invalid length.
[  447.864925][T21546] netlink: 'syz.0.3562': attribute type 1 has an invalid length.
[  448.025597][T21556] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  448.456045][T21583] __nla_validate_parse: 5 callbacks suppressed
[  448.456065][T21583] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3572'.
[  448.516262][T21584] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3573'.
[  448.742295][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3577'.
[  448.872167][T21606] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3578'.
[  449.573100][T21633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  449.611261][T21636] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.620360][T21636] syzkaller0: entered promiscuous mode
[  449.625859][T21636] syzkaller0: entered allmulticast mode
[  449.659370][T21636] tipc: Resetting bearer <eth:syzkaller0>
[  449.676400][T21635] tipc: Resetting bearer <eth:syzkaller0>
[  449.703277][T21635] tipc: Disabling bearer <eth:syzkaller0>
[  450.165259][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3598'.
[  450.313732][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'.
[  450.367149][T21677] netlink: zone id is out of range
[  450.418880][T21677] netlink: zone id is out of range
[  450.448606][T21677] netlink: zone id is out of range
[  450.459654][T21677] netlink: zone id is out of range
[  450.471605][T21677] netlink: zone id is out of range
[  450.475670][T21678] bond1: entered allmulticast mode
[  450.489563][T21678] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.500089][T21678] bridge0: port 3(bond1) entered blocking state
[  450.506542][T21677] netlink: zone id is out of range
[  450.506682][T21678] bridge0: port 3(bond1) entered disabled state
[  450.524534][T21677] netlink: zone id is out of range
[  450.529765][T21678] bond1: entered promiscuous mode
[  450.530561][T21678] bridge0: port 3(bond1) entered blocking state
[  450.536942][T21677] netlink: zone id is out of range
[  450.542043][T21678] bridge0: port 3(bond1) entered forwarding state
[  450.566479][T21677] netlink: zone id is out of range
[  450.791307][T21691] lo: Caught tx_queue_len zero misconfig
[  450.835847][T21691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3607'.
[  450.845406][T21691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3607'.
[  450.891496][T21655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  451.012154][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3606'.
[  451.030624][T21705] bond0: entered promiscuous mode
[  451.046059][T21705] bond_slave_0: entered promiscuous mode
[  451.092356][T21705] bond_slave_1: entered promiscuous mode
[  451.153698][T21705] bond0: left promiscuous mode
[  451.187240][T21705] bond_slave_0: left promiscuous mode
[  451.225497][T21705] bond_slave_1: left promiscuous mode
[  451.385862][T21717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3611'.
[  451.473152][T13287] bridge0: port 3(bond1) entered disabled state
[  451.610663][T21731] validate_nla: 6 callbacks suppressed
[  451.610682][T21731] netlink: 'syz.1.3616': attribute type 1 has an invalid length.
[  451.710842][T21738] netlink: 'syz.0.3617': attribute type 8 has an invalid length.
[  452.004132][T21760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.080591][T21760] syzkaller0: entered promiscuous mode
[  452.086755][T21760] syzkaller0: entered allmulticast mode
[  452.095531][T21760] tipc: Resetting bearer <eth:syzkaller0>
[  452.109245][T21758] tipc: Resetting bearer <eth:syzkaller0>
[  452.238321][T21777] netlink: 'syz.4.3628': attribute type 23 has an invalid length.
[  453.088050][    T9] tipc: Node number set to 1399941198
[  454.141410][T21758] tipc: Disabling bearer <eth:syzkaller0>
[  454.164902][T21780] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.176037][T21780] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.188864][T21780] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.196492][T21780] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.609787][T21807] wg1 speed is unknown, defaulting to 1000
[  454.624915][T21807] wg1 speed is unknown, defaulting to 1000
[  454.643124][T21807] wg1 speed is unknown, defaulting to 1000
[  454.696696][T21807] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  454.797190][T21807] wg1 speed is unknown, defaulting to 1000
[  454.817168][T21819] net_ratelimit: 5 callbacks suppressed
[  454.817189][T21819] openvswitch: netlink: Message has 4 unknown bytes.
[  454.833197][T21807] wg1 speed is unknown, defaulting to 1000
[  454.844626][T21819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.863128][T21807] wg1 speed is unknown, defaulting to 1000
[  454.903001][T21807] wg1 speed is unknown, defaulting to 1000
[  454.929887][T21807] wg1 speed is unknown, defaulting to 1000
[  454.951302][T21807] wg1 speed is unknown, defaulting to 1000
[  454.970014][T21807] wg1 speed is unknown, defaulting to 1000
[  455.017924][T21807] wg1 speed is unknown, defaulting to 1000
[  455.141848][T21834] macsec0: entered promiscuous mode
[  455.168002][T21834] macsec0: entered allmulticast mode
[  455.193304][T21834] batadv0: entered promiscuous mode
[  455.239234][T21834] batadv0: entered allmulticast mode
[  455.255103][T21834] macsec0: left promiscuous mode
[  455.276408][T21834] macsec0: left allmulticast mode
[  455.291675][T21834] batadv0: left allmulticast mode
[  455.629745][T21860] __nla_validate_parse: 2 callbacks suppressed
[  455.629763][T21860] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3658'.
[  455.645005][T21857] 
: left allmulticast mode
[  455.645031][T21857] 
: left promiscuous mode
[  455.646423][T21857] bridge0: port 1(
) entered disabled state
[  455.715860][T21857] bridge_slave_1: left allmulticast mode
[  455.722099][T21857] bridge_slave_1: left promiscuous mode
[  455.748489][T21857] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.777504][T21857] bond0: (slave bond_slave_0): Releasing backup interface
[  455.816666][T21857] bond0: (slave bond_slave_1): Releasing backup interface
[  455.858222][T21857] team0: Port device team_slave_0 removed
[  455.904265][T21857] team0: Port device team_slave_1 removed
[  455.915743][T21857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.923649][T21857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.933939][T21857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.941918][T21857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.964671][T21857] bond1: left promiscuous mode
[  455.974131][T21857] bridge0: port 3(bond1) entered disabled state
[  456.179307][T21873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3661'.
[  456.262593][T21879] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  456.300465][T21882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3663'.
[  456.311519][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3663'.
[  456.356751][T21891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3665'.
[  456.367361][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3663'.
[  456.388754][T21881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3663'.
[  456.402677][T21894] delete_channel: no stack
[  456.589002][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3672'.
[  456.608107][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3670'.
[  456.610150][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3672'.
[  456.661057][T21906] netlink: 'syz.3.3672': attribute type 1 has an invalid length.
[  456.685904][T21906] netlink: 'syz.3.3672': attribute type 2 has an invalid length.
[  456.829780][T21923] netlink: 'syz.0.3678': attribute type 1 has an invalid length.
[  456.905515][T21930] netlink: 'syz.2.3676': attribute type 1 has an invalid length.
[  456.913879][T21930] netlink: 'syz.2.3676': attribute type 2 has an invalid length.
[  456.928574][T21930] netlink: 'syz.2.3676': attribute type 1 has an invalid length.
[  456.936343][T21930] netlink: 'syz.2.3676': attribute type 1 has an invalid length.
[  456.979501][T21930] netlink: 'syz.2.3676': attribute type 2 has an invalid length.
[  457.059806][T21942] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  457.147009][T21945] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  457.325106][T21958] netlink: 'syz.1.3688': attribute type 4 has an invalid length.
[  457.344124][T21958] netlink: 'syz.1.3688': attribute type 4 has an invalid length.
[  457.618205][T21970] syzkaller1: entered promiscuous mode
[  457.638637][T21970] syzkaller1: entered allmulticast mode
[  458.033280][T21989] syzkaller1: entered promiscuous mode
[  458.055652][T21989] syzkaller1: entered allmulticast mode
[  458.214644][T21995] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  458.237358][T21995] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  458.249541][T21995] gretap1: entered promiscuous mode
[  458.255573][T21995] gretap1: entered allmulticast mode
[  458.279155][T22002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  458.584666][T22024] tunl0: Caught tx_queue_len zero misconfig
[  458.697516][T13280] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  458.715007][T13280] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  458.718074][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  458.854566][T22035] IPv6: sit1: Disabled Multicast RS
[  458.868947][T22035] sit1: entered allmulticast mode
[  458.888555][ T5868] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  459.068015][T17739] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  459.438969][T22075] veth0: entered promiscuous mode
[  459.477247][T22074] veth0: left promiscuous mode
[  459.667980][T22082] bond0: entered promiscuous mode
[  459.681036][T22082] bond_slave_0: entered promiscuous mode
[  459.696370][T22082] bond_slave_1: entered promiscuous mode
[  459.726088][T22082] bond0: left promiscuous mode
[  459.745200][T22082] bond_slave_0: left promiscuous mode
[  459.765844][T22082] bond_slave_1: left promiscuous mode
[  460.023800][T22104] team0: Device veth1_macvtap failed to register rx_handler
[  460.531357][T22126] 8021q: adding VLAN 0 to HW filter on device bond1
[  460.561618][T22129] vlan2: entered promiscuous mode
[  460.567598][T22129] bond1: entered promiscuous mode
[  460.573099][T22129] vlan2: entered allmulticast mode
[  460.579631][T22129] bond1: entered allmulticast mode
[  460.654810][T22133] bond1: (slave gretap1): making interface the new active one
[  460.682171][T22133] gretap1: entered promiscuous mode
[  460.689176][T22133] gretap1: entered allmulticast mode
[  460.696834][T22133] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  460.740517][T22147] __nla_validate_parse: 25 callbacks suppressed
[  460.740535][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3746'.
[  460.795036][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3746'.
[  460.836265][T22151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3749'.
[  460.853375][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3749'.
[  460.860427][T22147] bridge0: port 1(vlan2) entered blocking state
[  460.894196][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3749'.
[  460.897891][T22147] bridge0: port 1(vlan2) entered disabled state
[  460.927614][T22147] vlan2: entered allmulticast mode
[  460.949711][T22147] bridge0: entered allmulticast mode
[  460.957524][T22147] vlan2: left allmulticast mode
[  460.971460][T22147] bridge0: left allmulticast mode
[  461.106492][T22156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3749'.
[  461.258856][   T55] block nbd0: Possible stuck request ffff8880252f7000: control (read@0,1024B). Runtime 240 seconds
[  461.270102][   T55] block nbd0: Possible stuck request ffff8880252f71c0: control (read@1024,1024B). Runtime 240 seconds
[  461.281808][   T55] block nbd0: Possible stuck request ffff8880252f7380: control (read@2048,1024B). Runtime 240 seconds
[  461.293681][   T55] block nbd0: Possible stuck request ffff8880252f7540: control (read@3072,1024B). Runtime 240 seconds
[  461.634032][T22188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.823135][T22197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3762'.
[  461.843553][T22197] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  461.962069][T22205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3767'.
[  462.015336][T22210] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3766'.
[  462.263567][T22221] delete_channel: no stack
[  462.370050][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3773'.
[  462.594909][T22240] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  462.858073][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  463.105620][T22260] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.113350][T22260] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.202371][T22260] wg2: left promiscuous mode
[  463.207109][T22260] wg2: left allmulticast mode
[  463.250957][T22260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  463.265991][T22260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  463.376221][T22260] gtp0: left promiscuous mode
[  463.382581][T22260] gtp0: left allmulticast mode
[  463.393657][T22260] gretap1: left promiscuous mode
[  463.400607][T22260] gretap1: left allmulticast mode
[  463.534053][T18588] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  463.550287][T18588] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  463.593810][T18588] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  463.611090][T18588] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  463.699643][T22296] netlink: zone id is out of range
[  463.731801][T22296] netlink: zone id is out of range
[  463.778938][T22296] netlink: zone id is out of range
[  463.799415][T22296] netlink: zone id is out of range
[  463.823657][T22296] netlink: zone id is out of range
[  463.837552][T22296] netlink: zone id is out of range
[  463.852316][T22296] netlink: get zone limit has 8 unknown bytes
[  463.868492][T22305] ip6gre1: entered allmulticast mode
[  463.971850][T22305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.998472][T22305] syzkaller0: entered promiscuous mode
[  464.003998][T22305] syzkaller0: entered allmulticast mode
[  464.068527][T22304] tipc: Resetting bearer <eth:syzkaller0>
[  464.114480][T22304] tipc: Disabling bearer <eth:syzkaller0>
[  465.255057][T22398] validate_nla: 6 callbacks suppressed
[  465.255076][T22398] netlink: 'syz.2.3818': attribute type 2 has an invalid length.
[  465.412719][T22406] bond0: Device is already in use.
[  465.466369][T22409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.507254][T22409] tipc: Resetting bearer <eth:syzkaller0>
[  465.560838][T22407] tipc: Disabling bearer <eth:syzkaller0>
[  466.022144][T22449] bridge0: port 1(syz_tun) entered blocking state
[  466.029507][T22449] bridge0: port 1(syz_tun) entered disabled state
[  466.036240][T22449] syz_tun: entered allmulticast mode
[  466.043047][T22451] netlink: 'syz.0.3835': attribute type 10 has an invalid length.
[  466.045609][T22449] syz_tun: entered promiscuous mode
[  466.760577][T22461] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.770192][T22465] netlink: 'syz.1.3839': attribute type 15 has an invalid length.
[  466.794920][T22461] bond0: (slave rose0): Enslaving as an active interface with an up link
[  466.896442][T22475] __nla_validate_parse: 17 callbacks suppressed
[  466.896462][T22475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3841'.
[  466.987325][T22475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3841'.
[  467.238327][T22491] tipc: Invalid UDP bearer configuration
[  467.238385][T22491] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  467.412994][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3847'.
[  467.547613][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3848'.
[  467.644654][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'.
[  469.426041][T22484] wg1 speed is unknown, defaulting to 1000
[  469.631299][T22520] netlink: 'syz.1.3853': attribute type 1 has an invalid length.
[  469.639667][T22520] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3853'.
[  469.850679][T22536] netlink: 'syz.2.3854': attribute type 6 has an invalid length.
[  469.859860][T22531] netlink: 'syz.2.3854': attribute type 5 has an invalid length.
[  469.869941][T22536] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3854'.
[  469.995590][T22548] net_ratelimit: 1 callbacks suppressed
[  469.995609][T22548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  470.293337][T22561] Can't find ip_set type hash:ip

[  470.383565][T22572] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3867'.
[  470.507864][T22577] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3869'.
[  470.766796][T22598] netlink: 'syz.0.3877': attribute type 1 has an invalid length.
[  470.819917][T22598] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  471.266389][T22633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3886'.
[  471.497886][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  471.555487][T22648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.570267][T22650] netlink: 'syz.2.3891': attribute type 1 has an invalid length.
[  471.580423][T22646] syzkaller0: entered promiscuous mode
[  471.585949][T22646] syzkaller0: entered allmulticast mode
[  471.696364][T22663] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  471.742824][T22646] tipc: Resetting bearer <eth:syzkaller0>
[  471.768115][T22645] tipc: Resetting bearer <eth:syzkaller0>
[  471.849106][T22674] netlink: 'syz.2.3897': attribute type 1 has an invalid length.
[  471.868559][T22645] tipc: Disabling bearer <eth:syzkaller0>
[  472.005219][T22682] netlink: 'syz.4.3900': attribute type 1 has an invalid length.
[  472.026905][T22682] __nla_validate_parse: 3 callbacks suppressed
[  472.026925][T22682] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3900'.
[  472.089094][T22682] nbd: couldn't find device at index 1048576
[  472.279064][T22708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3906'.
[  472.435294][T22720] netlink: 173196 bytes leftover after parsing attributes in process `syz.1.3911'.
[  472.601025][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3913'.
[  472.660809][T22731] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3915'.
[  472.692147][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3912'.
[  472.742348][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3912'.
[  472.804934][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3916'.
[  472.820861][T22736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3916'.
[  472.831590][T22736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3916'.
[  472.835852][T22745] syz_tun: entered allmulticast mode
[  472.938228][ T5870] Bluetooth: hci1: command 0x0406 tx timeout
[  472.970711][T22745] syz_tun: left allmulticast mode
[  473.395828][T22776] C: renamed from lo (while UP)
[  473.398853][T22775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.413551][T22776] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  473.466811][T22778] netlink: 'syz.0.3930': attribute type 2 has an invalid length.
[  473.493406][T22778] nbd: must specify a device to reconfigure
[  473.527460][T22782] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  473.870601][T22802] !
: renamed from dummy0
[  474.410749][T22829] netlink: 'syz.4.3946': attribute type 1 has an invalid length.
[  474.667948][T22846] netlink: 'syz.2.3950': attribute type 4 has an invalid length.
[  474.702241][T22852] nbd: must specify at least one socket
[  474.739636][T22850] nbd: must specify at least one socket
[  475.232434][T22888] netlink: 'syz.2.3961': attribute type 10 has an invalid length.
[  475.345076][T22892] netlink: 'syz.1.3963': attribute type 5 has an invalid length.
[  475.350763][T22882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.361443][T22882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.371011][T22882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.388085][T22882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.923085][T22930] netlink: 'syz.3.3972': attribute type 10 has an invalid length.
[  475.985982][T22930] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.021596][T22930] bridge_slave_1: left allmulticast mode
[  476.027523][T22930] bridge_slave_1: left promiscuous mode
[  476.037639][T22930] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.055435][T22930] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  476.155536][T22946] netlink: 'syz.2.3976': attribute type 1 has an invalid length.
[  476.180820][T22946] netlink: 'syz.2.3976': attribute type 11 has an invalid length.
[  476.275432][T22955] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  477.077232][T23005] netlink: 'syz.2.3991': attribute type 83 has an invalid length.
[  477.662148][T10389] IPVS: starting estimator thread 0...
[  477.758205][T23044] IPVS: using max 32 ests per chain, 76800 per kthread
[  478.074610][T23063] __nla_validate_parse: 18 callbacks suppressed
[  478.074630][T23063] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4011'.
[  478.115089][T23061] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  478.118060][T23064] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4011'.
[  478.352590][T23084] netlink: 'syz.4.4018': attribute type 1 has an invalid length.
[  478.481084][T23094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4018'.
[  478.540545][T23100] netlink: 'syz.1.4020': attribute type 21 has an invalid length.
[  478.577346][T23100] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4020'.
[  479.076936][T23126] netlink: 'syz.1.4026': attribute type 1 has an invalid length.
[  479.102901][T23124] netlink: 'syz.3.4025': attribute type 1 has an invalid length.
[  479.111128][T23124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4025'.
[  479.126475][T23124] block nbd1: not configured, cannot reconfigure
[  479.143934][T23126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'.
[  479.170112][T23126] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  479.187824][   T43] IPVS: starting estimator thread 0...
[  479.207448][T23133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4025'.
[  479.276399][T23134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.288118][T23130] IPVS: using max 32 ests per chain, 76800 per kthread
[  479.296162][T23134] syzkaller0: entered promiscuous mode
[  479.306257][T23134] syzkaller0: entered allmulticast mode
[  479.465354][T23134] tipc: Resetting bearer <eth:syzkaller0>
[  479.618611][T23144] tipc: Resetting bearer <eth:syzkaller0>
[  479.687193][T23144] tipc: Disabling bearer <eth:syzkaller0>
[  479.793640][T23164] pim6reg1: entered promiscuous mode
[  479.806204][T23164] pim6reg1: entered allmulticast mode
[  479.813233][T23168] netlink: 'syz.1.4038': attribute type 21 has an invalid length.
[  479.848649][T23168] netlink: 'syz.1.4038': attribute type 6 has an invalid length.
[  479.856435][T23168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4038'.
[  480.086208][T23186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4044'.
[  480.103162][T23185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4044'.
[  480.438214][T23203] veth0: entered promiscuous mode
[  480.458314][T23203] veth0: left promiscuous mode
[  480.686103][T23218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.723508][T23218] syzkaller0: entered promiscuous mode
[  480.768839][T23218] syzkaller0: entered allmulticast mode
[  480.842784][T23218] tipc: Resetting bearer <eth:syzkaller0>
[  480.884593][T23217] tipc: Resetting bearer <eth:syzkaller0>
[  480.957479][T23217] tipc: Disabling bearer <eth:syzkaller0>
[  481.287093][T23255] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.327865][T23263] bridge3: entered promiscuous mode
[  481.556507][T23283] validate_nla: 3 callbacks suppressed
[  481.556525][T23283] netlink: 'syz.4.4073': attribute type 1 has an invalid length.
[  481.618017][T23284] netlink: 'syz.2.4075': attribute type 1 has an invalid length.
[  481.756568][T23292] netlink: 'syz.4.4078': attribute type 22 has an invalid length.
[  481.780307][T13287] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  481.794766][T23292] netlink: 'syz.4.4078': attribute type 22 has an invalid length.
[  481.814484][T13287] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  481.834726][T13287] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  481.895751][T13287] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  481.920294][T23305] netlink: 'syz.0.4081': attribute type 1 has an invalid length.
[  481.978621][T23305] rdma_rxe: rxe_newlink: failed to add vxcan1
[  482.093787][T23311] veth1_vlan: entered allmulticast mode
[  482.387451][T23323] openvswitch: netlink: IP tunnel dst address not specified
[  482.622004][T23346] netlink: 'syz.4.4093': attribute type 1 has an invalid length.
[  482.642741][T23346] nbd: illegal input index 1048576
[  482.674802][T23352] netlink: 'syz.2.4095': attribute type 1 has an invalid length.
[  482.726561][T23352] 8021q: adding VLAN 0 to HW filter on device bond2
[  482.769164][T23360] bond2: (slave gretap2): making interface the new active one
[  482.781063][T23360] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  482.832961][T23352] vlan2: entered allmulticast mode
[  482.841392][T23352] bond2: entered allmulticast mode
[  482.849408][T23352] gretap2: entered allmulticast mode
[  482.856740][T23352] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  483.106811][T23378] bond3: entered promiscuous mode
[  483.112865][T23378] bond3: entered allmulticast mode
[  483.127679][T23378] 8021q: adding VLAN 0 to HW filter on device bond3
[  483.176271][T23383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.900967][T23420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.944955][T23424] __nla_validate_parse: 16 callbacks suppressed
[  483.944973][T23424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'.
[  483.962214][T23420] delete_channel: no stack
[  484.024163][T23424] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  484.051418][T23424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  484.247435][T23434] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  484.281164][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4118'.
[  484.287804][T23434] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  484.451189][T23448] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  485.018037][ T5870] Bluetooth: hci2: command 0x0405 tx timeout
[  485.578078][T23515] IPVS: Unknown mcast interface: vcan0
[  485.849037][T23533] sctp: [Deprecated]: syz.0.4146 (pid 23533) Use of struct sctp_assoc_value in delayed_ack socket option.
[  485.849037][T23533] Use struct sctp_sack_info instead
[  485.965060][T23545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  485.986168][T23545] syzkaller0: entered promiscuous mode
[  486.008065][T23545] syzkaller0: entered allmulticast mode
[  486.090368][T23549] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4152'.
[  486.124219][T23550] tipc: Resetting bearer <eth:syzkaller0>
[  486.173096][T23552] netlink: 'syz.0.4153': attribute type 1 has an invalid length.
[  486.185492][T23544] tipc: Resetting bearer <eth:syzkaller0>
[  486.203028][T23554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4152'.
[  486.288501][T23544] tipc: Disabling bearer <eth:syzkaller0>
[  486.792206][T23525] wg1 speed is unknown, defaulting to 1000
[  486.799684][T23584] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  486.854784][T23582] syzkaller1: entered promiscuous mode
[  486.862011][T23582] syzkaller1: entered allmulticast mode
[  486.986923][T23534] netlink: 'syz.4.4143': attribute type 13 has an invalid length.
[  487.003634][T23534] netlink: 'syz.4.4143': attribute type 17 has an invalid length.
[  487.194250][T23612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4167'.
[  487.231074][T23534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  487.524480][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4173'.
[  487.696708][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'.
[  487.730298][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'.
[  488.138099][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  488.357580][T23657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.486097][T23667] "syz.1.4185" (23667) uses obsolete ecb(arc4) skcipher
[  488.493648][T23666] netlink: 'syz.2.4186': attribute type 6 has an invalid length.
[  488.537644][T23672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4189'.
[  488.572185][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4187'.
[  488.613857][T23675] hsr_slave_0: left promiscuous mode
[  488.620330][T23675] hsr_slave_1: left promiscuous mode
[  489.005676][T23687] syzkaller0: entered promiscuous mode
[  489.017657][T23687] syzkaller0: entered allmulticast mode
[  489.038167][T23697] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  489.090129][T23686] tipc: Resetting bearer <eth:syzkaller0>
[  490.077636][T23716] __nla_validate_parse: 4 callbacks suppressed
[  490.077656][T23716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4201'.
[  490.093084][ T6003] tipc: Node number set to 1099834160
[  491.056853][T23686] tipc: Disabling bearer <eth:syzkaller0>
[  491.084145][T23716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4201'.
[  491.089664][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  491.112623][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  491.126458][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  491.189316][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  491.306797][T23726] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4204'.
[  491.358495][   T55] block nbd0: Possible stuck request ffff8880252f7000: control (read@0,1024B). Runtime 270 seconds
[  491.370900][   T55] block nbd0: Possible stuck request ffff8880252f71c0: control (read@1024,1024B). Runtime 270 seconds
[  491.374934][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4207'.
[  491.382056][   T55] block nbd0: Possible stuck request ffff8880252f7380: control (read@2048,1024B). Runtime 270 seconds
[  491.401840][T23735] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  491.402430][   T55] block nbd0: Possible stuck request ffff8880252f7540: control (read@3072,1024B). Runtime 270 seconds
[  491.463457][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4204'.
[  491.504935][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4204'.
[  491.550383][T23734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4204'.
[  491.654867][T13285] veth0_to_bridge: left allmulticast mode
[  491.680237][T13285] veth0_to_bridge: left promiscuous mode
[  491.699763][T13285] bridge0: port 1(veth0_to_bridge) entered disabled state
[  491.799463][T13285] bond_slave_0: left promiscuous mode
[  491.805316][T13285] bond_slave_1: left promiscuous mode
[  493.554488][T13285] dvmrp0 (unregistering): left allmulticast mode
[  493.581139][T13285] dvmrp1 (unregistering): left allmulticast mode
[  494.292729][T13285] bond4 (unregistering): (slave macvlan3): Removing an active aggregator
[  494.302190][T13285] bond4 (unregistering): (slave macvlan3): Releasing backup interface
[  494.316883][T13285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  494.333298][T13285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  494.344118][T13285] bond0 (unregistering): Released all slaves
[  494.360965][T13285] bond1 (unregistering): Released all slaves
[  494.377119][T13285] bond2 (unregistering): Released all slaves
[  494.507480][T13285] bond3 (unregistering): Released all slaves
[  494.635133][T13285] bond4 (unregistering): Released all slaves
[  494.647925][T13285] bond5 (unregistering): Released all slaves
[  494.661192][T13285] bond6 (unregistering): Released all slaves
[  494.678977][T13285] bond7 (unregistering): Released all slaves
[  494.697521][   T43] syz0: Port: 1 Link DOWN
[  494.872845][T23763] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4212'.
[  494.907958][T13285] tipc: Disabling bearer <udp:syz2>
[  494.928173][T13285] tipc: Left network mode
[  495.020932][T13285] IPVS: stopping master sync thread 17299 ...
[  495.476786][T23800] netlink: 512 bytes leftover after parsing attributes in process `syz.2.4222'.
[  495.514935][T23805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4221'.
[  495.957076][T23825] netlink: 'syz.2.4231': attribute type 6 has an invalid length.
[  496.016618][T13285] hsr_slave_0: left promiscuous mode
[  496.042177][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  496.057858][T13285] batman_adv: batadv0: Removing interface: batadv_slave_0
[  496.070275][T13285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  496.097774][T13285] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.156910][T13285] veth1_macvtap: left promiscuous mode
[  496.162672][T13285] veth1_vlan: left promiscuous mode
[  496.229890][T23850] netlink: 'syz.4.4233': attribute type 11 has an invalid length.
[  496.980663][T13285] team0 (unregistering): Port device team_slave_1 removed
[  497.030528][T13285] team0 (unregistering): Port device team_slave_0 removed
[  497.118253][T13287] smc: removing ib device syz0
[  497.327569][T23872] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  497.635629][T13285] vcan0 (unregistering): left allmulticast mode
[  497.877634][T23837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  498.033693][T23846] syzkaller0: entered promiscuous mode
[  498.041367][T23846] syzkaller0: entered allmulticast mode
[  498.049759][T23846] tipc: Resetting bearer <eth:syzkaller0>
[  498.064105][T23863] syzkaller0: entered promiscuous mode
[  498.080548][T23863] syzkaller0: entered allmulticast mode
[  498.221563][T13303] tipc: Resetting bearer <eth:syzkaller0>
[  498.326781][T23827] tipc: Resetting bearer <eth:syzkaller0>
[  498.544679][T23862] Bluetooth: hci4: command 0x040f tx timeout
[  498.551405][T23862] Bluetooth: hci3: command 0x0406 tx timeout
[  500.334301][T23827] tipc: Disabling bearer <eth:syzkaller0>
[  500.454413][T23878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  500.555676][T13285] IPVS: stop unused estimator thread 0...
[  500.571126][T23883] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4241'.
[  501.013265][T23911] netlink: 'syz.4.4251': attribute type 18 has an invalid length.
[  501.058256][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4253'.
[  501.093157][T23915] netlink: 'syz.1.4254': attribute type 10 has an invalid length.
[  501.121743][T23921] netlink: 'syz.3.4253': attribute type 42 has an invalid length.
[  501.180124][T23923] netlink: 'syz.2.4256': attribute type 1 has an invalid length.
[  501.439410][T23930] netlink: 'syz.4.4258': attribute type 1 has an invalid length.
[  501.493506][T23946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4263'.
[  501.497535][T23947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4263'.
[  501.527788][T23946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4263'.
[  501.536884][T23946] netlink: 'syz.2.4263': attribute type 7 has an invalid length.
[  501.560409][T23946] netlink: 'syz.2.4263': attribute type 8 has an invalid length.
[  501.571693][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4263'.
[  501.665747][T23952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4266'.
[  501.767252][T23956] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0
[  501.958715][T23976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4272'.
[  502.051772][T23985] sctp: [Deprecated]: syz.0.4275 (pid 23985) Use of struct sctp_assoc_value in delayed_ack socket option.
[  502.051772][T23985] Use struct sctp_sack_info instead
[  502.162379][T23995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4278'.
[  502.220564][T23997] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  502.228917][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'.
[  502.398205][T24004] mac80211_hwsim hwsim36 wlan1: Caught tx_queue_len zero misconfig
[  502.409661][T24004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  502.704943][T24020] bridge_slave_0: left allmulticast mode
[  502.715640][T24020] bridge_slave_0: left promiscuous mode
[  502.723160][T24020] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.738951][T24020] bridge_slave_1: left allmulticast mode
[  502.756989][T24020] bridge_slave_1: left promiscuous mode
[  502.766290][T24020] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.808461][T24020] bond0: (slave bond_slave_0): Releasing backup interface
[  502.825833][T24020] bond0: (slave bond_slave_1): Releasing backup interface
[  502.845709][T24020] team0: Port device team_slave_0 removed
[  502.856390][T24020] team0: Port device team_slave_1 removed
[  502.863971][T24020] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.983362][T24032] netlink: 'syz.0.4288': attribute type 2 has an invalid length.
[  503.668943][T24076] netlink: 'syz.0.4301': attribute type 18 has an invalid length.
[  503.790467][T24082] syzkaller0: entered promiscuous mode
[  503.795982][T24082] syzkaller0: entered allmulticast mode
[  504.063419][T24101] vlan2: entered promiscuous mode
[  504.098841][T24101] vlan2: entered allmulticast mode
[  504.104002][T24101] hsr_slave_1: entered allmulticast mode
[  504.123075][T24105] netlink: 'syz.1.4313': attribute type 1 has an invalid length.
[  504.678666][T24135] wg1 speed is unknown, defaulting to 1000
[  505.101208][T24144] syzkaller1: entered promiscuous mode
[  505.127141][T24144] syzkaller1: entered allmulticast mode
[  505.444250][    T9] IPVS: starting estimator thread 0...
[  505.494241][T24166] tipc: Enabled bearer <udp:s>, priority 10
[  505.559625][T24171] IPVS: using max 27 ests per chain, 64800 per kthread
[  505.788558][T24190] __nla_validate_parse: 15 callbacks suppressed
[  505.788577][T24190] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4334'.
[  505.805332][T24193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4333'.
[  505.837540][T24192] macvtap1: entered allmulticast mode
[  505.869099][T24192] veth0_macvtap: entered allmulticast mode
[  505.929647][T24197] macvtap2: entered allmulticast mode
[  505.953701][T24203] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2
[  505.967897][T24203] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€
[  506.023870][T24206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4337'.
[  506.033294][T24206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4337'.
[  506.191044][T24214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  506.198872][T24214] syzkaller0: entered promiscuous mode
[  506.204370][T24214] syzkaller0: entered allmulticast mode
[  506.213669][T24214] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  506.246597][T24214] tipc: Resetting bearer <eth:syzkaller0>
[  506.262444][T24213] tipc: Resetting bearer <eth:syzkaller0>
[  506.344015][T24213] tipc: Disabling bearer <eth:syzkaller0>
[  506.538971][T13298] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  506.551972][T24236] validate_nla: 4 callbacks suppressed
[  506.551992][T24236] netlink: 'syz.2.4343': attribute type 6 has an invalid length.
[  506.565687][T24236] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4343'.
[  506.748697][T24248] bond0: Error: Cannot enslave bond to itself.
[  506.846933][T24256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4349'.
[  506.866835][T24256] netlink: 'syz.2.4349': attribute type 7 has an invalid length.
[  506.875034][T24255] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  506.875781][T24256] netlink: 'syz.2.4349': attribute type 8 has an invalid length.
[  506.889793][T24255] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  506.896207][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4349'.
[  507.033452][T24262] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4353'.
[  507.056485][T24262] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4353'.
[  507.242598][T24273] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4355'.
[  508.003730][T24308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  508.033185][T24308] syzkaller0: entered promiscuous mode
[  508.057357][T24308] syzkaller0: entered allmulticast mode
[  508.230316][T24325] tipc: Resetting bearer <eth:syzkaller0>
[  508.250750][T24324] netlink: 'syz.2.4368': attribute type 3 has an invalid length.
[  508.256115][T24328] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  508.276473][T24327] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  508.312789][T24330] netlink: 'syz.3.4370': attribute type 2 has an invalid length.
[  508.804498][T24307] tipc: Resetting bearer <eth:syzkaller0>
[  508.837656][T24307] tipc: Disabling bearer <eth:syzkaller0>
[  509.279359][T24395] netlink: zone id is out of range
[  509.284562][T24395] netlink: zone id is out of range
[  509.295654][T24395] netlink: zone id is out of range
[  509.305432][T24395] netlink: zone id is out of range
[  509.312007][T24395] netlink: zone id is out of range
[  509.339469][T24395] netlink: get zone limit has 8 unknown bytes
[  509.359525][T24395] netlink: 'syz.3.4385': attribute type 5 has an invalid length.
[  509.969423][T24437] netlink: 'syz.2.4396': attribute type 27 has an invalid length.
[  510.158725][T24444] netlink: 'syz.0.4398': attribute type 12 has an invalid length.
[  510.574590][T24466] veth1: Caught tx_queue_len zero misconfig
[  510.649037][T24457] netlink: 'syz.0.4401': attribute type 5 has an invalid length.
[  510.854117][T24475] netlink: 'syz.0.4405': attribute type 1 has an invalid length.
[  510.863807][T24477] __nla_validate_parse: 15 callbacks suppressed
[  510.863826][T24477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4406'.
[  510.933619][T24483] bond1: (slave gretap1): making interface the new active one
[  510.942340][T24483] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  511.068788][T24489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4411'.
[  511.080829][T24489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4411'.
[  511.213440][T24497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  511.223040][T24497] syzkaller0: entered promiscuous mode
[  511.229043][T24497] syzkaller0: entered allmulticast mode
[  511.405835][T24503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4415'.
[  511.407180][T24497] tipc: Resetting bearer <eth:syzkaller0>
[  511.436879][T24496] tipc: Resetting bearer <eth:syzkaller0>
[  511.472281][T24496] tipc: Disabling bearer <eth:syzkaller0>
[  511.643599][T24514] xt_l2tp: unknown flags: 10
[  511.674019][T24514] sch_fq: defrate 0 ignored.
[  511.744870][T24516] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  511.872409][T24526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4420'.
[  511.884596][T24523] openvswitch: netlink: Message has 4 unknown bytes.
[  511.890560][T24526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4420'.
[  512.035526][T24529] netlink: 'syz.1.4425': attribute type 12 has an invalid length.
[  512.108641][T24536] netlink: 'syz.4.4426': attribute type 12 has an invalid length.
[  512.137831][T24532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4424'.
[  512.317396][T24545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4428'.
[  512.385935][T24545] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4428'.
[  512.902818][T24583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4436'.
[  513.659850][T24624] tipc: New replicast peer: 255.255.255.255
[  513.684589][T24624] tipc: Enabled bearer <udp:syz2>, priority 10
[  513.700782][T24625] 8021q: VLANs not supported on ip6_vti0
[  513.961942][T24645] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  514.549580][T24675] veth1_to_batadv: entered allmulticast mode
[  514.556132][T24675] veth1_to_batadv: left allmulticast mode
[  514.706906][T24688] tipc: Enabled bearer <udp:syz1>, priority 10
[  514.873348][T24698] syzkaller1: entered promiscuous mode
[  514.889581][T24698] syzkaller1: entered allmulticast mode
[  515.086839][T24712] syzkaller0: entered promiscuous mode
[  515.099017][T24712] syzkaller0: entered allmulticast mode
[  515.156916][T24716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  515.172100][T24712] net_ratelimit: 2 callbacks suppressed
[  515.172117][T24712] syzkaller0: mtu less than device minimum
[  515.184808][T24722] IPVS: Unknown mcast interface: veth0_virt_wifi
[  515.195039][T24716] syzkaller0: entered promiscuous mode
[  515.203073][T24716] syzkaller0: entered allmulticast mode
[  515.274429][T24723] IPVS: Unknown mcast interface: veth0_virt_wifi
[  515.295011][T24719] tipc: Resetting bearer <eth:syzkaller0>
[  515.439511][T24719] tipc: Disabling bearer <eth:syzkaller0>
[  515.502164][T24743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  515.616186][T24749] nbd: must specify an index to disconnect
[  515.820465][ T6003] tipc: Node number set to 3424247364
[  515.889233][T24760] netlink: 'syz.0.4488': attribute type 21 has an invalid length.
[  515.910829][T24760] netlink: 'syz.0.4488': attribute type 1 has an invalid length.
[  515.947587][T24767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.955760][T24763] __nla_validate_parse: 19 callbacks suppressed
[  515.955778][T24763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4490'.
[  515.978451][T24763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  515.985897][T24763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.044654][T24763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  516.056069][T24763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.177634][T24773] wg1 speed is unknown, defaulting to 1000
[  516.832211][ T5984] IPVS: starting estimator thread 0...
[  516.942606][T24818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4502'.
[  516.967969][T24814] IPVS: using max 29 ests per chain, 69600 per kthread
[  517.132851][T24823] veth3: entered promiscuous mode
[  517.345492][T13298] IPVS: stop unused estimator thread 0...
[  517.469619][T24848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4509'.
[  517.501822][T24849] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  517.692795][T24862] openvswitch: netlink: Key type 85 is out of range max 32
[  518.068262][T24880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4517'.
[  518.191317][T24885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  518.306606][T24885] syzkaller0: entered promiscuous mode
[  518.313389][T24885] syzkaller0: entered allmulticast mode
[  518.322150][T24885] tipc: Resetting bearer <eth:syzkaller0>
[  518.348419][T24890] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4519'.
[  518.380954][T24890] netem: invalid attributes len -24
[  518.386263][T24890] netem: change failed
[  518.442401][T24883] tipc: Resetting bearer <eth:syzkaller0>
[  518.625332][T24919] netlink: 'syz.1.4528': attribute type 10 has an invalid length.
[  520.392252][T24883] tipc: Disabling bearer <eth:syzkaller0>
[  520.401121][T24912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4526'.
[  520.466455][T24919] team0: Port device 
0!
 added
[  520.607530][T24930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4532'.
[  520.610096][T24936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4533'.
[  520.633592][T24930] tc_dump_action: action bad kind
[  520.789436][T24930] nft_compat: unsupported protocol 1
[  520.896464][T24953] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4537'.
[  520.930433][T24953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4537'.
[  521.145357][T24973] netlink: 'syz.1.4545': attribute type 1 has an invalid length.
[  521.192356][T24972] IPVS: stopping master sync thread 24976 ...
[  521.418064][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  521.426963][   T55] block nbd0: Possible stuck request ffff8880252f7000: control (read@0,1024B). Runtime 300 seconds
[  521.437936][   T55] block nbd0: Possible stuck request ffff8880252f71c0: control (read@1024,1024B). Runtime 300 seconds
[  521.450550][   T55] block nbd0: Possible stuck request ffff8880252f7380: control (read@2048,1024B). Runtime 300 seconds
[  521.461735][   T55] block nbd0: Possible stuck request ffff8880252f7540: control (read@3072,1024B). Runtime 300 seconds
[  521.843587][T25025] netlink: 'syz.1.4557': attribute type 1 has an invalid length.
[  521.914578][T25028] openvswitch: netlink: Actions may not be safe on all matching packets
[  521.956180][T25028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4558'.
[  522.265278][T25054] netlink: 'syz.4.4568': attribute type 12 has an invalid length.
[  522.336067][T25061] veth5: entered allmulticast mode
[  522.347421][T25056] IPv6: sit1: Disabled Multicast RS
[  522.354948][T25056] sit1: entered allmulticast mode
[  522.624696][T25081] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4575'.
[  524.429623][T25081] gretap0: entered promiscuous mode
[  524.762025][T25107] can: request_module (can-proto-0) failed.
[  524.784552][T25119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4586'.
[  524.909732][T25119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'.
[  524.939591][T25125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4588'.
[  524.949324][T25125] openvswitch: netlink: Missing key (keys=40, expected=80)
[  525.083149][T25132] netlink: 'syz.3.4590': attribute type 4 has an invalid length.
[  525.094481][T25132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4590'.
[  525.113124][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4591'.
[  525.142120][T25132] netlink: 'syz.3.4590': attribute type 4 has an invalid length.
[  525.177963][T25138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4590'.
[  525.210067][T25134] netlink: 'syz.0.4591': attribute type 4 has an invalid length.
[  525.263907][T25142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4594'.
[  525.278508][T25142] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4594'.
[  526.333362][T25193] netlink: 'syz.0.4610': attribute type 1 has an invalid length.
[  526.598290][T25208] netlink: 'syz.2.4613': attribute type 11 has an invalid length.
[  526.620550][T25208] netlink: 'syz.2.4613': attribute type 11 has an invalid length.
[  526.799184][T25218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  526.817126][T25218] syzkaller0: entered promiscuous mode
[  526.834803][T25218] syzkaller0: entered allmulticast mode
[  526.862090][T25218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.898316][T25218] tipc: Resetting bearer <eth:syzkaller0>
[  526.906816][T25216] tipc: Resetting bearer <eth:syzkaller0>
[  526.948714][T25216] tipc: Disabling bearer <eth:syzkaller0>
[  527.342677][T25242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  527.377161][T25242] syzkaller0: entered promiscuous mode
[  527.388717][T25245] __nla_validate_parse: 8 callbacks suppressed
[  527.388737][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4625'.
[  527.396351][T25242] syzkaller0: entered allmulticast mode
[  527.501333][T25242] tipc: Resetting bearer <eth:syzkaller0>
[  527.545376][T25241] tipc: Resetting bearer <eth:syzkaller0>
[  527.609315][T25259] nftables ruleset with unbound chain
[  527.674598][T25241] tipc: Disabling bearer <eth:syzkaller0>
[  527.739396][T25263] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4630'.
[  527.759742][T25263] netem: invalid attributes len -24
[  527.765803][T25263] netem: change failed
[  527.852040][T25268] netlink: 'syz.3.4632': attribute type 10 has an invalid length.
[  527.885708][T25274] netlink: 'syz.4.4633': attribute type 83 has an invalid length.
[  528.050205][T25277] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  528.205675][T25287] team0: Port device geneve3 added
[  528.218312][T13303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0
[  528.237387][T13303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0
[  528.262197][T13303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0
[  528.294187][T13285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0
[  528.340894][T25301] netlink: 'syz.3.4641': attribute type 1 has an invalid length.
[  528.401801][T25307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4641'.
[  528.440621][T25306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  528.449988][T25306] syzkaller0: entered promiscuous mode
[  528.455497][T25306] syzkaller0: entered allmulticast mode
[  528.523471][T25306] tipc: Resetting bearer <eth:syzkaller0>
[  528.536064][T25305] tipc: Resetting bearer <eth:syzkaller0>
[  528.558486][T25305] tipc: Disabling bearer <eth:syzkaller0>
[  528.608166][T25317] wg1 speed is unknown, defaulting to 1000
[  528.750173][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4651'.
[  528.855683][T25342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4655'.
[  528.876061][T25340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4654'.
[  528.932530][ T5186] Bluetooth: hci2: link tx timeout
[  528.939516][ T5186] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  528.981606][T25348] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  529.132826][T25357] netlink: 'syz.4.4659': attribute type 1 has an invalid length.
[  529.158765][T25357] netlink: 'syz.4.4659': attribute type 15 has an invalid length.
[  529.203494][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4662'.
[  529.247041][T25369] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4664'.
[  529.298759][T25372] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4661'.
[  529.314888][T25372] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4661'.
[  529.570290][T25391] bridge5: port 1(veth3) entered blocking state
[  529.576688][T25391] bridge5: port 1(veth3) entered disabled state
[  529.587986][T25391] veth3: entered allmulticast mode
[  529.595912][T25391] veth3: entered promiscuous mode
[  530.555707][T25457] ip6tnl0: Caught tx_queue_len zero misconfig
[  530.606331][T25461] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  530.840386][T25483] netlink: 'syz.1.4698': attribute type 14 has an invalid length.
[  530.987355][T25490] openvswitch: netlink: Message has 12 unknown bytes.
[  531.018211][ T5186] Bluetooth: hci0: command tx timeout
[  531.020839][T23876] Bluetooth: hci2: command 0x0405 tx timeout
[  531.090109][T25498] netlink: 'syz.0.4703': attribute type 29 has an invalid length.
[  531.101244][T25498] netlink: 'syz.0.4703': attribute type 29 has an invalid length.
[  531.825942][T25521] netlink: 'syz.4.4712': attribute type 10 has an invalid length.
[  531.835268][T25521] bridge0: port 1(team0) entered blocking state
[  531.843236][T25521] bridge0: port 1(team0) entered disabled state
[  531.850268][T25521] team0: entered allmulticast mode
[  531.858353][T25521] team0: entered promiscuous mode
[  531.930889][T13280] tipc: Subscription rejected, illegal request
[  531.993509][T25535] bond0: Caught tx_queue_len zero misconfig
[  532.394295][T25558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.437482][T25558] tipc: Resetting bearer <eth:syzkaller0>
[  532.464997][T25560] netlink: 'syz.2.4724': attribute type 1 has an invalid length.
[  532.476668][T25560] netlink: 'syz.2.4724': attribute type 11 has an invalid length.
[  532.485251][T25560] __nla_validate_parse: 11 callbacks suppressed
[  532.485277][T25560] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4724'.
[  532.542509][T25557] tipc: Disabling bearer <eth:syzkaller0>
[  532.853987][T25587] netlink: 'syz.1.4730': attribute type 4 has an invalid length.
[  532.905705][T25589] netlink: 'syz.1.4730': attribute type 4 has an invalid length.
[  532.964529][T25594] tls_set_device_offload_rx: netdev not found
[  533.053861][T25596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4733'.
[  533.308969][T25616] netlink: 'syz.2.4738': attribute type 3 has an invalid length.
[  533.319339][T25614] unsupported nla_type 65288
[  533.327820][T25616] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4738'.
[  533.403526][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4739'.
[  533.420300][T25618] pim6reg: entered allmulticast mode
[  533.438146][T25618] pim6reg: left allmulticast mode
[  533.859937][T25647] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4749'.
[  533.898027][T25647] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4749'.
[  533.910307][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4751'.
[  534.236206][T25681] smc: net device erspan0 erased user defined pnetid SYZ0
[  534.255440][T25671] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  534.700123][T25716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4762'.
[  534.715030][T25717] netlink: 'syz.3.4761': attribute type 3 has an invalid length.
[  534.796828][T25725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4765'.
[  534.824536][T25717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4761'.
[  535.378989][T25760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.596184][T25763] wg1 speed is unknown, defaulting to 1000
[  535.612341][T25764] wg1 speed is unknown, defaulting to 1000
[  536.007654][T25746] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  536.815885][T25829] TCP: TCP_TX_DELAY enabled
[  536.978829][T25842] validate_nla: 2 callbacks suppressed
[  536.978849][T25842] netlink: 'syz.4.4796': attribute type 2 has an invalid length.
[  537.263819][ T5870] Bluetooth: hci1: command 0x0406 tx timeout
[  537.287073][T25852] netlink: 'syz.4.4797': attribute type 13 has an invalid length.
[  537.496461][T25856] __nla_validate_parse: 9 callbacks suppressed
[  537.496481][T25856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4799'.
[  537.514022][T25856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4799'.
[  537.579425][T25857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4799'.
[  537.926592][T25851] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4798'.
[  538.112417][T25866] netlink: 'syz.0.4801': attribute type 178 has an invalid length.
[  538.363311][T25870] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  538.500486][T25886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4809'.
[  538.582790][T25890] syz.0.4811 uses old SIOCAX25GETINFO
[  538.766979][T25901] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.4814'.
[  539.113678][T25916] netlink: 'syz.0.4820': attribute type 11 has an invalid length.
[  539.169101][T25916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4820'.
[  539.173296][T25921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4823'.
[  539.204825][T25918] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4821'.
[  539.555874][T25939] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  540.051564][T25964] lo: Caught tx_queue_len zero misconfig
[  540.154940][T25969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4831'.
[  540.224902][T25961] delete_channel: no stack
[  540.256582][T25969] bond0: (slave wlan1): Releasing backup interface
[  540.627403][T25987] netlink: 'syz.2.4837': attribute type 39 has an invalid length.
[  541.730981][T26033] netlink: 'syz.3.4851': attribute type 32 has an invalid length.
[  542.086975][T26048] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  542.089576][T26042] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  542.322815][T26053] bond4 (unregistering): Released all slaves
[  542.703446][T26076] __nla_validate_parse: 1 callbacks suppressed
[  542.703465][T26076] netlink: 54 bytes leftover after parsing attributes in process `syz.2.4860'.
[  542.813201][T26081] pim6reg: entered allmulticast mode
[  542.833899][T26081] pim6reg: left allmulticast mode
[  542.880572][T26083] syzkaller0: entered promiscuous mode
[  542.886120][T26083] syzkaller0: entered allmulticast mode
[  542.900857][T26092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4863'.
[  542.945100][T26087] team0: Device wireguard0 is of different type
[  543.055459][T26083] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  543.087396][T26095] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  543.101195][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4866'.
[  543.215442][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4866'.
[  543.247230][T18588] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  543.264413][T18588] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  543.273784][T18588] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  543.347254][T18588] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  543.403562][T26122] tipc: Enabled bearer <udp:s>, priority 10
[  543.829033][T26146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.851594][T26146] tipc: Resetting bearer <eth:syzkaller0>
[  543.888424][T26145] tipc: Disabling bearer <eth:syzkaller0>
[  544.025890][T26152] syzkaller0: entered promiscuous mode
[  544.038313][T26152] syzkaller0: entered allmulticast mode
[  544.073004][T26150] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4878'.
[  544.441894][T26173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4886'.
[  544.491593][T26179] netlink: 'syz.2.4888': attribute type 83 has an invalid length.
[  544.518323][T17742] tipc: Node number set to 549906786
[  545.253421][T26228] nbd: must specify a size in bytes for the device
[  545.271142][T26228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4901'.
[  545.573553][T26243] syzkaller1: entered allmulticast mode
[  545.596389][T26243] netlink: 'syz.3.4904': attribute type 2 has an invalid length.
[  545.625677][T26243] netlink: 'syz.3.4904': attribute type 2 has an invalid length.
[  545.626111][T15474] udevd[15474]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  545.746385][T26255] netlink: 'syz.2.4908': attribute type 3 has an invalid length.
[  546.026497][T26281] sock: sock_timestamping_bind_phc: sock not bind to device
[  546.219269][T26294] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4915'.
[  546.263884][T26290] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4915'.
[  546.432778][T26314] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4921'.
[  546.548583][T26322] 8021q: adding VLAN 0 to HW filter on device bond4
[  546.575546][T26302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  546.631031][T26322] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  547.378122][T26380] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  547.746296][T26397] IPVS: Unknown mcast interface: vcan0
[  547.880203][T26399] syzkaller0: entered allmulticast mode
[  547.892137][T26408] netlink: 'syz.4.4944': attribute type 1 has an invalid length.
[  547.984794][T26412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  547.991572][T26408] 8021q: adding VLAN 0 to HW filter on device bond5
[  547.992126][T26412] IPv6: NLM_F_CREATE should be set when creating new route
[  548.095123][T26410] bond5: (slave ip6erspan0): making interface the new active one
[  548.143780][T26410] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[  548.223870][T26422] __nla_validate_parse: 4 callbacks suppressed
[  548.223891][T26422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4950'.
[  548.266007][T26422] netlink: 'syz.0.4950': attribute type 1 has an invalid length.
[  548.525581][T26451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4957'.
[  548.556332][T26451] netlink: 'syz.1.4957': attribute type 1 has an invalid length.
[  548.579797][T26451] netlink: 'syz.1.4957': attribute type 1 has an invalid length.
[  548.598154][T26451] netlink: 'syz.1.4957': attribute type 2 has an invalid length.
[  548.619649][T26451] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4957'.
[  548.682104][T26461] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4961'.
[  548.779596][T26467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4963'.
[  548.832308][T26468] !
: renamed from dummy0
[  549.015788][T26487] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4968'.
[  549.218622][T26498] netlink: 'syz.4.4974': attribute type 1 has an invalid length.
[  549.226731][T26498] netlink: 5300 bytes leftover after parsing attributes in process `syz.4.4974'.
[  549.522739][T26510] netlink: 'syz.2.4978': attribute type 8 has an invalid length.
[  549.531710][T26511] netlink: 'syz.2.4978': attribute type 8 has an invalid length.
[  549.691875][T26517] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4980'.
[  549.711425][T26521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4981'.
[  549.804573][T26525] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.4982'.
[  550.431661][T26561] netlink: 'syz.3.4993': attribute type 4 has an invalid length.
[  550.467404][T26566] openvswitch: netlink: Actions may not be safe on all matching packets
[  550.514020][T26565] netlink: 'syz.4.4994': attribute type 1 has an invalid length.
[  551.515621][   T55] block nbd0: Possible stuck request ffff8880252f7000: control (read@0,1024B). Runtime 330 seconds
[  551.527339][   T55] block nbd0: Possible stuck request ffff8880252f71c0: control (read@1024,1024B). Runtime 330 seconds
[  551.539800][   T55] block nbd0: Possible stuck request ffff8880252f7380: control (read@2048,1024B). Runtime 330 seconds
[  551.551691][   T55] block nbd0: Possible stuck request ffff8880252f7540: control (read@3072,1024B). Runtime 330 seconds
[  551.928945][T26646] netlink: 'syz.4.5015': attribute type 4 has an invalid length.
[  552.878109][T13301] veth9: left allmulticast mode
[  552.883037][T13301] veth9: left promiscuous mode
[  552.939006][T13301] bridge7: port 2(veth9) entered disabled state
[  552.973064][T13301] veth7: left allmulticast mode
[  552.997843][T13301] veth7: left promiscuous mode
[  553.002855][T13301] bridge7: port 1(veth7) entered disabled state
[  554.399762][T13301] dvmrp0 (unregistering): left allmulticast mode
[  554.885354][T13301] team0: Port device geneve0 removed
[  555.439020][T26674] netlink: 'syz.0.5025': attribute type 2 has an invalid length.
[  555.446890][T26674] __nla_validate_parse: 4 callbacks suppressed
[  555.446909][T26674] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5025'.
[  555.459904][T26677] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  555.822077][T13301] bond0 (unregistering): Released all slaves
[  555.835251][T13301] bond1 (unregistering): Released all slaves
[  555.852052][T13301] bond2 (unregistering): Released all slaves
[  555.867051][T13301] bond3 (unregistering): Released all slaves
[  555.884414][T13301] bond4 (unregistering): Released all slaves
[  556.030781][T13301] bond5 (unregistering): Released all slaves
[  556.171496][T13301] bond6 (unregistering): Released all slaves
[  556.185625][T13301] bond7 (unregistering): Released all slaves
[  556.201795][T13301] bond8 (unregistering): Released all slaves
[  556.214585][T13301] bond9 (unregistering): Released all slaves
[  556.349987][T13301] bond10 (unregistering): Released all slaves
[  556.365213][T26674] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5025'.
[  556.374664][T26674] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5025'.
[  556.547536][T26705] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  556.702949][T26718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5034'.
[  556.847456][T26729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5036'.
[  557.503299][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5047'.
[  557.527228][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5047'.
[  557.550757][T26737] netlink: 'syz.4.5039': attribute type 3 has an invalid length.
[  557.991145][T13301] : left promiscuous mode
[  558.055693][T13301] tipc: Left network mode
[  558.620572][T26811] netlink: 'syz.4.5060': attribute type 58 has an invalid length.
[  558.628737][T26811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5060'.
[  558.661237][T26815] pim6reg: entered allmulticast mode
[  558.677323][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5062'.
[  558.754114][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5061'.
[  559.003323][T26842] netlink: 'syz.3.5068': attribute type 1 has an invalid length.
[  559.076818][T13301] macvlan0: left promiscuous mode
[  559.104021][T13301] hsr_slave_0: left promiscuous mode
[  559.114683][T13301] hsr_slave_1: left promiscuous mode
[  559.411264][T13301] pim6reg (unregistering): left allmulticast mode
[  560.172455][T26842] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  560.486459][T26894] __nla_validate_parse: 1 callbacks suppressed
[  560.486479][T26894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5081'.
[  560.529180][T26893] dvmrp0: entered allmulticast mode
[  560.572895][T26890] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  560.743830][T26905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.781500][T26905] syzkaller0: entered promiscuous mode
[  560.810491][T26905] syzkaller0: entered allmulticast mode
[  560.845337][T26910] tipc: Enabling of bearer <eth:vlan1> rejected, failed to enable media
[  560.883888][T26914] netlink: 'syz.3.5086': attribute type 12 has an invalid length.
[  560.965584][T26905] tipc: Resetting bearer <eth:syzkaller0>
[  560.991314][T26901] tipc: Resetting bearer <eth:syzkaller0>
[  561.051528][T26901] tipc: Disabling bearer <eth:syzkaller0>
[  561.133921][T13301] IPVS: stop unused estimator thread 0...
[  561.598387][T26955] netlink: 'syz.0.5100': attribute type 75 has an invalid length.
[  561.725082][T26965] netlink: 'syz.0.5102': attribute type 2 has an invalid length.
[  561.733077][T26965] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5102'.
[  561.902530][T26971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5103'.
[  561.968314][T26971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5103'.
[  562.556236][T27013] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.5116'.
[  562.801625][T27024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'.
[  563.086196][T27037] netlink: 'syz.2.5124': attribute type 5 has an invalid length.
[  563.224475][T27044] netlink: 'syz.4.5126': attribute type 16 has an invalid length.
[  563.242886][T27044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5126'.
[  563.430569][T27057] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5129'.
[  563.442911][T27057] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5129'.
[  563.510433][T27063] bond0: Caught tx_queue_len zero misconfig
[  563.658533][   T31] INFO: task udevd:10663 blocked for more than 143 seconds.
[  563.676454][   T31]       Not tainted syzkaller #0
[  563.680849][T27056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5130'.
[  563.696235][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  563.743521][   T31] task:udevd           state:D stack:21928 pid:10663 tgid:10663 ppid:5236   task_flags:0x400140 flags:0x00004006
[  563.765409][   T31] Call Trace:
[  563.774944][   T31]  <TASK>
[  563.782463][   T31]  __schedule+0x1798/0x4cc0
[  563.800955][   T31]  ? __pfx___schedule+0x10/0x10
[  563.814978][   T31]  ? schedule+0x91/0x360
[  563.822959][   T31]  schedule+0x165/0x360
[  563.827274][   T31]  io_schedule+0x80/0xd0
[  563.834919][   T31]  folio_wait_bit_common+0x6b0/0xb90
[  563.841861][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  563.851445][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  563.859831][   T31]  ? __filemap_get_folio+0x760/0xaf0
[  563.865358][   T31]  ? do_read_cache_folio+0x4e9/0x590
[  563.870886][   T31]  do_read_cache_folio+0x1aa/0x590
[  563.876396][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  563.882154][   T31]  read_part_sector+0xb6/0x2b0
[  563.887165][   T31]  adfspart_check_POWERTEC+0x8c/0xf30
[  563.893337][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  563.899171][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  563.905336][   T31]  bdev_disk_changed+0x75f/0x14b0
[  563.910578][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  563.916139][   T31]  ? wait_on_inode+0xc0/0x230
[  563.921574][   T31]  blkdev_get_whole+0x380/0x510
[  563.926530][   T31]  bdev_open+0x31e/0xd30
[  563.931013][   T31]  blkdev_open+0x457/0x600
[  563.935568][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  563.941680][   T31]  do_dentry_open+0x950/0x13f0
[  563.946594][   T31]  vfs_open+0x3b/0x340
[  563.951286][   T31]  ? path_openat+0x2ecd/0x3830
[  563.956150][   T31]  path_openat+0x2ee5/0x3830
[  563.960973][   T31]  ? arch_stack_walk+0xfc/0x150
[  563.965892][   T31]  ? stack_depot_save_flags+0x40/0x860
[  563.971541][   T31]  ? __pfx_path_openat+0x10/0x10
[  563.976625][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.983717][   T31]  do_filp_open+0x1fa/0x410
[  563.988559][   T31]  ? __lock_acquire+0xab9/0xd20
[  563.993535][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  564.000134][   T31]  ? _raw_spin_unlock+0x28/0x50
[  564.005056][   T31]  ? alloc_fd+0x64c/0x6c0
[  564.009565][   T31]  do_sys_openat2+0x121/0x1c0
[  564.014275][   T31]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  564.019847][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  564.025070][   T31]  ? rcu_is_watching+0x15/0xb0
[  564.030068][   T31]  __x64_sys_openat+0x138/0x170
[  564.034942][   T31]  do_syscall_64+0xfa/0x3b0
[  564.039730][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.045845][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  564.052052][   T31]  ? clear_bhb_loop+0x60/0xb0
[  564.056736][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.062872][   T31] RIP: 0033:0x7f215e2a7407
[  564.067322][   T31] RSP: 002b:00007fff7da1aff0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  564.075892][   T31] RAX: ffffffffffffffda RBX: 00007f215e98e880 RCX: 00007f215e2a7407
[  564.084142][   T31] RDX: 00000000000a0800 RSI: 0000557e50ff7dd0 RDI: ffffffffffffff9c
[  564.092345][   T31] RBP: 0000557e50fb7910 R08: 0000000000000000 R09: 0000000000000000
[  564.101097][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557e50fda4d0
[  564.109184][   T31] R13: 0000557e50fc5190 R14: 0000000000000000 R15: 0000557e50fda4d0
[  564.117196][   T31]  </TASK>
[  564.139884][   T31] 
[  564.139884][   T31] Showing all locks held in the system:
[  564.147656][   T31] 3 locks held by kworker/u8:0/12:
[  564.153222][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  564.169658][   T31]  #1: ffffc90000117bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  564.181722][   T31]  #2: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  564.191930][   T31] 1 lock held by khungtaskd/31:
[  564.196796][   T31]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  564.207510][   T31] 2 locks held by getty/5629:
[  564.212550][   T31]  #0: ffff88814e15d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  564.222638][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  564.233416][   T31] 1 lock held by udevd/10663:
[  564.238655][   T31]  #0: ffff8880251ce358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  564.248082][   T31] 1 lock held by syz.2.5134/27073:
[  564.253202][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  564.263848][   T31] 
[  564.266210][   T31] =============================================
[  564.266210][   T31] 
[  564.281667][   T31] NMI backtrace for cpu 1
[  564.281693][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  564.281713][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  564.281722][   T31] Call Trace:
[  564.281729][   T31]  <TASK>
[  564.281736][   T31]  dump_stack_lvl+0x189/0x250
[  564.281764][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.281784][   T31]  ? __pfx__printk+0x10/0x10
[  564.281818][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  564.281845][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  564.281870][   T31]  ? __pfx__printk+0x10/0x10
[  564.281902][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  564.281938][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  564.281962][   T31]  watchdog+0xf93/0xfe0
[  564.281989][   T31]  ? watchdog+0x1de/0xfe0
[  564.282015][   T31]  kthread+0x70e/0x8a0
[  564.282038][   T31]  ? __pfx_watchdog+0x10/0x10
[  564.282059][   T31]  ? __pfx_kthread+0x10/0x10
[  564.282078][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  564.282093][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.282107][   T31]  ? __pfx_kthread+0x10/0x10
[  564.282125][   T31]  ret_from_fork+0x439/0x7d0
[  564.282144][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  564.282166][   T31]  ? __switch_to_asm+0x39/0x70
[  564.282183][   T31]  ? __switch_to_asm+0x33/0x70
[  564.282200][   T31]  ? __pfx_kthread+0x10/0x10
[  564.282219][   T31]  ret_from_fork_asm+0x1a/0x30
[  564.282254][   T31]  </TASK>
[  564.282260][   T31] Sending NMI from CPU 1 to CPUs 0:
[  564.430787][    C0] NMI backtrace for cpu 0
[  564.430809][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  564.430826][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  564.430835][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  564.430857][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  564.430870][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  564.430885][    C0] RAX: 352165ecb8913a00 RBX: ffffffff819683f8 RCX: 352165ecb8913a00
[  564.430897][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba39a RDI: ffffffff8be33f00
[  564.430907][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  564.430919][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a630
[  564.430930][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  564.430940][    C0] FS:  0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000
[  564.430952][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  564.430963][    C0] CR2: 00007ffd8ef45c38 CR3: 0000000068ba4000 CR4: 00000000003526f0
[  564.430977][    C0] Call Trace:
[  564.430984][    C0]  <TASK>
[  564.430990][    C0]  default_idle+0x13/0x20
[  564.431007][    C0]  default_idle_call+0x74/0xb0
[  564.431024][    C0]  do_idle+0x1e8/0x510
[  564.431042][    C0]  ? __pfx_do_idle+0x10/0x10
[  564.431065][    C0]  cpu_startup_entry+0x44/0x60
[  564.431079][    C0]  rest_init+0x2de/0x300
[  564.431097][    C0]  start_kernel+0x3a9/0x410
[  564.431115][    C0]  x86_64_start_reservations+0x24/0x30
[  564.431134][    C0]  x86_64_start_kernel+0x143/0x1c0
[  564.431152][    C0]  common_startup_64+0x13e/0x147
[  564.431178][    C0]  </TASK>
[  564.432730][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  564.612954][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  564.622067][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  564.632127][   T31] Call Trace:
[  564.635393][   T31]  <TASK>
[  564.638308][   T31]  dump_stack_lvl+0x99/0x250
[  564.642889][   T31]  ? __asan_memcpy+0x40/0x70
[  564.647485][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.652690][   T31]  ? __pfx__printk+0x10/0x10
[  564.657271][   T31]  vpanic+0x281/0x750
[  564.661237][   T31]  ? __pfx_vpanic+0x10/0x10
[  564.665723][   T31]  ? preempt_schedule+0xae/0xc0
[  564.670557][   T31]  ? preempt_schedule_common+0x83/0xd0
[  564.676024][   T31]  panic+0xb9/0xc0
[  564.679770][   T31]  ? __pfx_panic+0x10/0x10
[  564.684168][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  564.689530][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  564.695673][   T31]  watchdog+0xfd2/0xfe0
[  564.699818][   T31]  ? watchdog+0x1de/0xfe0
[  564.704136][   T31]  kthread+0x70e/0x8a0
[  564.708194][   T31]  ? __pfx_watchdog+0x10/0x10
[  564.712855][   T31]  ? __pfx_kthread+0x10/0x10
[  564.717431][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  564.722612][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.727795][   T31]  ? __pfx_kthread+0x10/0x10
[  564.732392][   T31]  ret_from_fork+0x439/0x7d0
[  564.736965][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  564.742058][   T31]  ? __switch_to_asm+0x39/0x70
[  564.746808][   T31]  ? __switch_to_asm+0x33/0x70
[  564.751553][   T31]  ? __pfx_kthread+0x10/0x10
[  564.756127][   T31]  ret_from_fork_asm+0x1a/0x30
[  564.760886][   T31]  </TASK>
[  564.764218][   T31] Kernel Offset: disabled
[  564.768558][   T31] Rebooting in 86400 seconds..