last executing test programs:

2m35.903580553s ago: executing program 3 (id=5565):
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x8c, 0x30, 0x3, 0x70bd2b, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x0, 0x0, 0x3, 0x86}, {0x5, 0x1, 0x6, 0x5, 0x7f, 0x2}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44e26a9689047dc810523bb6cb646edac69057131e1be7162eed1f07ba5e28f6fe1cb93967ef2f0ef2d0df01ab65f8f730d2851251b7cda33d6e3116f566927744a6e23559db48c03d567c61c68d4095f639c7ddaa0d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80001, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket(0x10, 0x803, 0x0)

2m35.753068844s ago: executing program 3 (id=5567):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400"/20], 0x14}, 0x1, 0x0, 0x0, 0x4004885}, 0x0)

2m35.492388833s ago: executing program 3 (id=5570):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010800000000000000000100000405000100070000000900020073797a32124000000001050004000000000010000300686173683a69702c6d616300050005000a0000001dc40e4445b93d037d2f0b49f86183c9f8afe4d0fcce4d2fbefc1ca3d730242fbe6db6d583e9a0950872df3805f103603b33d0d530f84a43f2e8db40634c462eb1a2abc2d21fbbd153a2"], 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)

2m35.349676366s ago: executing program 3 (id=5571):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x118}], 0x1, 0x0, 0x0, 0x40}, 0x0)

2m35.241116979s ago: executing program 3 (id=5573):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) (async)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="38000000010001", 0x7) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0d0000000600000004000000098cc49992000000ce41d9357d1bfbfef14d0d1e174f4ad136c20bb974a27060c7e188a1fc461674b9ccf02af29c6a7097371f1a98c1bde304d490ab5a6e069724d977e9f87cc6f54c7d2034b9be6f04cda310d8bea236f87739e5abda89ec6d988e85c9c002107c668addae484d59872d40e8b8d748b18cd9f52011597db9dcb77f365ad65caf95aa1101ec52c3f52a63dbb859291e23a642e227be41fce6c275d363d8396e044855d79cd48ebb309f4de0535479d702c32ac64de571968b51d0acd5ab59ba6a947b7e9ed6481257605fe8", @ANYRES32=r3, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20) (async)
close(0x3) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f0000000400)}, 0x20)

2m35.075364015s ago: executing program 3 (id=5578):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
socket(0x10, 0x3, 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_buf(r1, 0x0, 0x18, 0x0, &(0x7f00000010c0))
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
accept4(r3, &(0x7f0000000180)=@qipcrtr, &(0x7f0000000100)=0x80, 0x800)
socket(0x27, 0x80001, 0x0)
socket(0x1c, 0x4, 0x0)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000)
socket(0x14, 0x4, 0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000)
listen(r0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)

2m19.99160363s ago: executing program 32 (id=5578):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
socket(0x10, 0x3, 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_buf(r1, 0x0, 0x18, 0x0, &(0x7f00000010c0))
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
accept4(r3, &(0x7f0000000180)=@qipcrtr, &(0x7f0000000100)=0x80, 0x800)
socket(0x27, 0x80001, 0x0)
socket(0x1c, 0x4, 0x0)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000)
socket(0x14, 0x4, 0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000)
listen(r0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)

2.675632684s ago: executing program 1 (id=6859):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000001c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00'})
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
close(r2)
connect$inet(r3, &(0x7f0000000fc0)={0x2, 0x4e22, @private=0xa010101}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x100}]}, 0xfffffffffffffe59}}, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000500)={0x40000000})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0)

2.584884683s ago: executing program 2 (id=6860):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=<r3=>0x0)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, r3, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000005c0)=@newae={0x64, 0x1e, 0x705, 0x0, 0x0, {{@in=@local}, @in=@broadcast}, [@lifetime_val={0x24}]}, 0x64}}, 0x0)
close(r2)

2.237610027s ago: executing program 1 (id=6863):
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @bcast}, [@netrom, @netrom, @null, @null, @netrom, @default, @netrom, @rose]}, &(0x7f00000000c0)=0x48)
mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x3000019, 0x30, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008b000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000200000008500000086000000bf090000000000005509010000000000950000000000000018010000786c6c2500000000002020407b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0300008500000006004a0018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000005bf91000000000000b702000000000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)

2.181669697s ago: executing program 2 (id=6865):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x5}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'cryptd(sha256-ce)\x00'}}}]}, 0x1a0}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110)
ioctl$int_out(r0, 0x2, &(0x7f0000000000))

2.073483436s ago: executing program 1 (id=6868):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0xfffffffd}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x3, 0x0, 0x49, 0x0, 0x3c876ec0}]}]}, 0xfc}}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x363c02, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x13, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x4)
write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000300800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001055d4732d4fac1000000000000002e000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d069a2dfc8bbd4353b45c731f11c2e6f8dd3b5f737ff1a6"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
close(r2)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8001, {0x0, 0x0, 0x0, r10, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r8)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r12 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2000000, 0xfffffffffffffffc}]}, 0x108)
r13 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r13, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x2f, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e)

2.001382616s ago: executing program 2 (id=6870):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x5}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000007}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006080)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xb9, 0x3, 0xa01, 0x7, 0x7, {0xd, 0x1, 0x18, 0x7fff, 0x6, 0x3}, {0x6, 0x0, 0x40, 0x0, 0x0, 0x1ff}, 0x8, 0x6496921f, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x37, 0x2, 0x5, 0x2, 0x0, 0x0, 0x7, 0x80000001, 0x3, 0x2, 0x6, 0x3, 0x81, 0x5, 0x0, 0x401, 0x4, 0x8aad, 0x5585, 0x0, 0xffffb331, 0x2, 0xf2, 0x6, 0x1, 0x81, 0x7fffffff, 0x8, 0x7, 0xfff, 0x8, 0xde9a, 0x10, 0x6, 0x0, 0x8, 0x8, 0x6, 0x218, 0xf, 0x2, 0xd, 0x10001, 0x10, 0x1, 0x0, 0x7b9, 0xffffffff, 0x4, 0x8, 0x5, 0xb, 0xc3, 0x55df3b9f, 0x398, 0x401, 0x8, 0x2, 0x3, 0x8, 0x79ff, 0x8, 0x80000000, 0x9, 0x6a95, 0xf5f, 0x4, 0x7, 0x9, 0x4, 0x4, 0x8d6, 0x5, 0x401, 0xbdb2, 0xa, 0x1, 0x4, 0xe1, 0x3d2, 0xd4e9, 0x942, 0x6, 0x1000000, 0x7, 0x2, 0x7, 0x9, 0x27, 0x1, 0x2, 0xd6f4, 0x3, 0xfffffffd, 0x3, 0x235, 0x75d, 0x1, 0x0, 0x5, 0x97e00000, 0x3, 0x0, 0x1, 0xf780, 0x3, 0x10001, 0xf63, 0xd, 0x2, 0x4, 0x3, 0x1, 0x2, 0x3e, 0x80, 0x138, 0x6, 0x2, 0x8, 0xffff, 0x8, 0x5, 0x5, 0x5, 0x4b, 0x0, 0x800, 0x7ff, 0x2, 0x10, 0x7d76, 0xfffffff9, 0x7, 0x9, 0x6, 0x5, 0x81, 0x40563f31, 0x7fffffff, 0x5, 0x5, 0xe70, 0xd, 0x719, 0xd, 0x5, 0x5, 0xa, 0x6, 0x3, 0x0, 0x9, 0x800000, 0x22bb, 0x1, 0x7, 0xfbfc, 0x1ff, 0xad2, 0x1, 0x7, 0x400, 0x9, 0xfffffeff, 0x3ff, 0x0, 0x2, 0x6, 0xff, 0xf, 0x2, 0x8000, 0x4, 0x8, 0x4, 0x9, 0x4, 0xbdb, 0x5, 0x0, 0x2, 0x70000000, 0x8000, 0xffffff89, 0x4, 0x3a4b, 0x6, 0x8, 0x1, 0x1, 0x7aa8, 0x3, 0x1, 0x5e0, 0x7fffffff, 0x7fffffff, 0x9, 0xffffffff, 0xfffffff9, 0x3, 0x6, 0x9, 0x4, 0x2, 0x606193b0, 0x9, 0x2, 0x1, 0xcc6, 0x0, 0x81, 0x0, 0x6, 0x5, 0x6, 0x0, 0x9, 0x1, 0x3, 0x8001, 0xc, 0x40, 0xd062, 0x7f, 0xb, 0x0, 0x7, 0x8000, 0x9f5, 0xa, 0x900, 0xffffffff, 0x2724, 0x6, 0x3279, 0x7fffffff, 0x1, 0x2, 0x200, 0x3, 0xa66, 0x5, 0x7, 0x9, 0x7f, 0x99f, 0xdc, 0x9f, 0x3, 0xffff, 0x5, 0x80000000, 0x7ee, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x4, 0x9, 0x5, 0x1, 0x8, 0x0, 0x9, 0x5, 0x296, 0x5, 0x2, 0xe, 0x0, 0x1, 0x40, 0x4, 0xbf64, 0x8, 0x15e, 0x0, 0x94b, 0x2, 0x9, 0x1, 0x9, 0x7ff, 0x6, 0x5, 0x35af, 0x6, 0x6e, 0x2, 0x6, 0x6a9b0b88, 0xfffffff7, 0x1, 0x6, 0xdb, 0x1, 0x72, 0x1, 0x86, 0x2, 0x2, 0x2682, 0x1cac, 0x7ff, 0x8, 0xe64, 0x4, 0x5, 0x8, 0x20000, 0x7, 0x7, 0x2, 0x2, 0x0, 0x1a41, 0x8, 0xfffffffb, 0xfffffffd, 0x5, 0x4, 0xfffff231, 0x2, 0x5, 0x2, 0x5, 0x7, 0x8001, 0x7, 0x1608, 0x8000, 0x7fff, 0x6, 0x3, 0x9dd5, 0x7fffffff, 0x887, 0x4, 0x0, 0x4, 0x9, 0x87d, 0x8, 0x1, 0x74, 0x0, 0x0, 0x0, 0x2, 0xa, 0x1, 0x0, 0x7fffffff, 0xf1, 0x6, 0x3c75, 0x6, 0x8, 0x1, 0xb45, 0x800, 0x7, 0x3ff, 0x2, 0xa76, 0x2, 0x337e, 0x3000, 0x1, 0x1, 0x0, 0x7, 0x2, 0xd35, 0x5, 0xd, 0x2, 0x4, 0x8, 0x5, 0x10002000, 0xee, 0x8, 0x15d06edb, 0x7ff, 0x8, 0x57413365, 0x0, 0x7, 0x2, 0x9, 0x0, 0x9f9, 0x7, 0x7, 0x101, 0x7fffffff, 0x4945, 0x9, 0x5, 0x7, 0x3, 0x5, 0x5, 0x8a, 0x5, 0x9, 0xf, 0x2, 0xfffffffa, 0x47, 0x0, 0xfffffd0d, 0x9, 0xfffffff5, 0x7, 0x4afa, 0x85, 0x8, 0x0, 0x6d, 0x6, 0x8, 0x8d, 0x0, 0xba, 0x8, 0x8, 0x5, 0x4e1c, 0x2, 0x2, 0x2, 0xff, 0x718b, 0x7ff, 0x5b1, 0xf, 0x6, 0x9, 0x7fff, 0x7fff, 0x1, 0x40, 0x562d, 0x6e, 0x5, 0x2, 0x400, 0x1, 0x81, 0x7fff, 0x7, 0xcc, 0x2, 0x0, 0x9, 0xffff, 0x8, 0x3, 0x95, 0x1, 0x6, 0xffff, 0xda9, 0x10000, 0xd, 0x3, 0x4, 0x3d37fffa, 0x5, 0x2, 0x1, 0x6, 0x2, 0x40, 0x50890da4, 0x7, 0xcd64, 0x6, 0xce05, 0x9, 0x8, 0x10001, 0x64e, 0x2, 0x5, 0x9, 0x5, 0x9, 0x5153, 0x3, 0x87ec, 0x5, 0x9, 0x6, 0xe, 0x1, 0x1000, 0x1b2, 0x5, 0xf76, 0x8, 0x81f, 0xfffffffb, 0x2, 0xffffff80, 0x1, 0xe, 0x0, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0xc858}, 0x80)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r7=>0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000700)=ANY=[], 0x32600)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000086a0000060000008000000091000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0100000000000000050000000900"/28], 0x50)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6}, 0x10)

1.736411189s ago: executing program 2 (id=6874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={<r4=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
close(0x3)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'})
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)

1.461544911s ago: executing program 2 (id=6878):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000000)=@ax25={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="2f91a61a2fdee2c7076c26807e8494c54bf04c5487384092d2352606c61a832e505fdaff20be110053faa37236ad11dba9cf1dd48b4c7a5d6c52c245a711abeeb8023a37c098fe88f1fc14ae409cbbe0eb24cc983dbaeb2ff3c1f9fe7d9994da91df8c28af7cfdadf1c3737e017fd0cd45a838bf0e45d5073930d0f474be2531a590b8d5ed0b26282096ebdfd2bf2ad87e7ae7dcf2737897def1f4da8e736a", 0x9f}], 0x1, &(0x7f0000000180)=[{0x108, 0x113, 0x40, "5009e628d6da228111dbc88be45c43fa22492c4268cef48980000dd53b6ca7c3645b0ef674bbc014f46bb3c8ba06edc4d8148904e0bf09e6df5b537e21e56bc32dc6665690545a44581326a460554383e68d35ea02b72ce75d7cc3063316e2bf308ab5e036f558c453b033edbc5bce933f04be0e685467c8f963ddb2a38c507cedc1eaab61b0f6f209802082dffb5d5fc3714f127dd0943dec2142973d113e860bf1d2581b83bcc29b8613a7f6fee86374713a68ddb6848b207082c4ab82a0d62acdae550178b889de72f044f9f81bf08f634a9b5809b30cb40c0e358d3615777f3637f1c14c0241287e93353d63e62393ffe91fe31ff2"}, {0xc8, 0x10b, 0x8, "20415f8756c13b48378b80bfc049b52648ad29b40ed6d0f725078650657a7204d9e80a44b2c02a32355da3c5ccf29ea6de17e979b764ff172d6c12fb2ac4a626afc3a8e6bab69caf30176bdad9d92375b263d542abea668d947005330fd63551ccf209df292dd878393a4e7c1635412353808b29ff6fd49e94c8ae42bc6561df6b92345f1d69d1a90eed2c25ede80da76f59f23c3ce044bf00b47552847e8ee5928394c1b31a3351f4dbc2eaa086c4263a83"}], 0x1d0}, 0x4044005)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r2)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000500)={<r3=>r1, &(0x7f0000000400)='(\x03)\x00', 0x300, &(0x7f0000000440)={@_ha_fsid={[0x8, 0x1]}, {0x6, 0x7, 0x8, 0xffff}}, 0x3, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x40})
bind$alg(r3, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'})
getsockopt$inet6_buf(r3, 0x29, 0x2f, &(0x7f0000000600)=""/22, &(0x7f0000000640)=0x16)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000880)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000008c0)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000900)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000940)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x4008041)
r12 = socket$tipc(0x1e, 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000a40)='connect aa:aa:aa:aa:aa:11 1', 0x1b)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r2)
r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r6)
sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r13, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d00)={0x1, &(0x7f0000000c00)="7d0a49e49d6c35249c477e07b135762d44ca392917b8e1185752a1db0e4dc4add3e33d", &(0x7f0000000c40)=""/143}, 0x20)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d80), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000dc0)=<r15=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000e00)=<r16=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r14, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20008005)
socket$nl_generic(0x10, 0x3, 0x10)

1.445153571s ago: executing program 5 (id=6879):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

1.325008398s ago: executing program 0 (id=6882):
syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x4d, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e22, 0x4d, 0x0, @opaque="64ebe114f6ff9df4140f23e2ade56a28ace6c0b8bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27bd55e1025c02"}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010)

1.236856913s ago: executing program 2 (id=6883):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x8, 0x80000}, 0x28)
splice(r1, 0x0, r2, 0x0, 0x6, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)=<r4=>0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x1d}}}]}, 0x50}, 0x1, 0x7}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000180)={"602866aa4bd8176b3dad48f2f514433f", 0x0, r4, {0x1, 0x3}, {0x4, 0x4}, 0x1ff, [0x78c07950, 0x7fff, 0x6, 0x24d4628, 0xa, 0x80000001, 0x7f, 0x879c, 0x1, 0x3c3, 0x0, 0x0, 0x8, 0x7, 0x10001, 0x1000]})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x3c, r7, 0x207, 0x0, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdd68815c}]}]}]}, 0x3c}}, 0x800)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', r11, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x3}})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b28, &(0x7f0000000000)={'wlan1\x00', <r13=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r13], 0x48)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x54}}, 0x40000)

1.187320902s ago: executing program 5 (id=6885):
r0 = epoll_create(0x400) (async)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_udp(0xa, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000480)={0x9000000a}) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000003c0)=0x8) (async)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x6, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0x81, 0x40}, 0xffff, [0xffffffffffffffff, 0x8e9, 0x9, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7fffffffffffffff, 0x9, 0x5, 0x6, 0x8, 0x6, 0x2]})
write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000000c080002400000001204000480080006400000ed020900010073797a3000000000140000001100010000000000000000000700000a"], 0x10c}}, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async)
close(r6) (async)
write(r4, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r7, 0x0) (async)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="09002bbd7000ffdbdf256900000008000300", @ANYRES32=r11, @ANYBLOB="0500d300040400000600d400080000000500d30007000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000f21662957febca47ec9d7dc76b12e1fff6de71d2234a733a2d08def293d223fa5ef6f0891fb143f3420ef2c356ad540740e689b4cb485da1d7ed079fdab6804ceea53d9bfc05a579ecd2714199f20a940507cf3fc92ef5a26bf4873c84c9eadb949b2513377a", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf250b00000008003c0050910000080032000000000008000b0002000000050029000000000008003900f908000005002a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x8841}, 0x20000000) (async)
sendmsg$802154_raw(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="98bd80bb49000000000000000699a26abcc9ce1b8e031b", 0x17}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x24040090)

1.100786389s ago: executing program 0 (id=6886):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x180000)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000008c0)=0x14)
sendmsg$inet(r1, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000180)="f09f4e5192f1141e66977d12ef2414baf0cadefef88b75327c0faf74236fd2f56039a62973af7d8ae6dffec17b7f24afa1d8596e15a9589348edde86a053edb28f971a32e4a9b2114c008c6d511477e7719ce2c733e78007cdfd75522dc3ef138bb3048311563efeee99a2c69fd3fa1da0dcb97fe279150553a80a7fe9f50f5effa936f209968ca98067cb5de6aed388f45fc9f13300d1fa5966656353fb74f9498fe26afc4925dce746c65f97f9", 0xae}, {&(0x7f0000000240)="3268a2c86451e7a4a286c948e0845f5ff26e3f042fcffde4dd4f9f26978f6aa490c85ce7dce2e07766ee0c1178461fdfe4c93dc63102e2aaaf6e6faae92c35ee1bcf8af22a35d0c72e5927b7f1dfd219494b64ae2b6d36aff184a345ecce84432f37c7bf101cee8d07e8cc5e448099ecb2cf000a71b0630ca4c5e77a59948a950e7bc64e14fe6af040c42cc58817e434a991da89556a0cf8f0143f1a2a19bf0af52326882ac2b3986d475fd9e047c1b99065f61283c81db6171801f97020ef19b66b2ffd99de55915a095580f2cec421626bcd2be2b456e942b858feb520734a02", 0xe1}, {&(0x7f0000000340)="f41cd08097686729c3b51d64e6b1", 0xe}, {&(0x7f0000000380)="fe02839819cec08ba5b39fcca098eb0ff6188b656972a01a65214d3185b63e48dddb5b74442ead343804ea30b06dda4adb947e764d177a90b5482cff023437c0da93fc529e7b25c00c6c3acf961cdcf3a9b10e89ecf5aa8ec930a5117d6d7901c03a7ba529df8cd3650dd36c7332f9417c2970482ba094c0f5bbba588d7567624134d94166c8181ebae7252f94eb16d297523a3a77378d0713dd65a08b8f1e20bf6855b58ecc5c02076936f8942de30f33e2bede68dc1ea1d80a5e5946b5189c4929", 0xc2}, {&(0x7f0000000480)="3784ee9b388c988e5d8288b5452c668b3c71cc658129c0e0dedf7b24c5348f1c85d5a5a1709c7bd081778375fd44c8c959abeb67b00a6535d994c00568d10d04b97ca0ab27ba47ade5657dc9cbfff9ea4792b09e3166a350b1ef290de5b22d2c09459b3706fe07b16730534d308466f32d23bd9238ae2122ba0367f35cfc49d3", 0x80}, {&(0x7f0000000500)="19a9a7f6f1363408bb34f962b6f1779ab956fb1d3a936501cf90f8d4e884ee78beab630db445d1cbe864dd016f72bf1132c40042ab7761c83e6107bfe75237242a994b83b575524942b99bc84e", 0x4d}, {&(0x7f0000000580)="3d99ccee6c5a1d18b44102a9a92221ba3d02f9342b7db953f18696aedc45bd3cd421b2825c43595045e3d44381aec9ed261c39962106c5358bd63032e1df7b048787ea5b9999cf32ecc2e9f24d06950556fb90a5872ff3dee51406f9bce1", 0x5e}, {&(0x7f0000000600)="d5192d565ad6e28f6dee5807e383c5ab72a52d8cbd0356739dd6186cde9ac36265b71f3dc0682e9a80e218fbe4b7b29fb8e8d2d34d4bce7e9e40bb83adfb145f59686ad5dc49e5aa37723cbef2e34431dc3aa30b30ae1f3774f464b0fdf87b6b7d8f5974eef8320b3fcc1231777d1d4e58229bb625a25c1a5bf66147899e549a0cdce8c4f28eaea644", 0x89}, {&(0x7f00000006c0)="1da6f8151cf4b0af86c13d5dbdd755d761e3ed6d57984eb8ec352ddd3e0c3a4474384dcb7869630a494ec7cac3caef", 0x2f}, {&(0x7f0000000700)="eaebe21377a1a47f7a8d6c2bc08d69192349a88d25b45585d67ab62b00e3166ebea9e174c60c89680769641896fbf9fd36ebacb67f47af6b668526fc6129da0ea9e3bc9b1b34a54fb2473ac994c518e41455c0ceae5b39690ac54e4c563526845ccf0accece3a4594c80beb25650f1cc35fbeefe467dbf481e73c7e66e546cb01c34c979c8b0b3c87094b32e5c4059529d85fbd438eb4c5fbee2ee003b966ade4bf43b426f7c9ff1b3880981f91e2c9e", 0xb0}], 0xa, &(0x7f0000000900)=[@ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x2e, 0x1, 0x5, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@local, 0x9}, {@loopback, 0x100}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x968}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0x2, [{@multicast1, 0x8}, {@remote, 0x3}, {@local, 0xa70}]}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x7e, [@empty, @dev={0xac, 0x14, 0x14, 0x22}]}, @rr={0x7, 0xf, 0x63, [@loopback, @rand_addr=0x64010100, @local]}, @end, @noop, @generic={0x88, 0x10, "3474ea720717c46e00f7a392ad84"}, @noop]}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x15}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x128}, 0x8800)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0)

975.390871ms ago: executing program 1 (id=6887):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYRES8], 0x1c}}, 0x40010)

888.111797ms ago: executing program 0 (id=6889):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100085060000000000b4ab0000000000", @ANYRES32=r2, @ANYBLOB="0100000000000c0012000cdd0100626f6e64000000000c00020008000100058c048dd581f654d1e4e5c83743b3cd3791cd1d3653bbfc2fcda5f99b4b087c91"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)

804.87949ms ago: executing program 1 (id=6890):
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'macvlan1\x00', {0xff}, {}, 0x29, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x19}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x5], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000010000000086000000010000000000000000000000000000000006548295738175c8b446db6d4003c6d4a242604d844d"], 0x48)
r1 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e30, @rand_addr=0x64010102}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x103503}]}, 0x50}, 0x1, 0x7}, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000340)={0x2, 0x28, '\x00', 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0)

686.085216ms ago: executing program 4 (id=6891):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x50, r0, 0x2ab6e000) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
splice(r4, &(0x7f0000000080)=0x100, r0, &(0x7f0000000100)=0x1, 0x3, 0x7) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async)
r6 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000001100)={0xa, 0x20, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6}, 0x18) (async)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r7, 0x401, 0x70bd2b, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

625.570402ms ago: executing program 4 (id=6892):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48081}, 0x400c0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}}}}]}, 0x88}}, 0x0)

620.98427ms ago: executing program 5 (id=6893):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r1, 0x0, 0x2400c000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x20000004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00\x00'], 0x48)
syz_80211_join_ibss(0x0, &(0x7f0000000340)=@default_ibss_ssid, 0x6, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRESOCT=r3, @ANYRES32, @ANYRES16=0x0], 0x30}, 0x1, 0x0, 0x0, 0x240000c5}, 0x20044880)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000440)=@default_ap_ssid, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

608.496787ms ago: executing program 0 (id=6894):
unshare(0x600)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
close(0x3)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r3, 0x0, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, r1}, 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, r1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$l2tp6(0xa, 0x2, 0x73)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x802)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000340)={'ip6tnl0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

517.595253ms ago: executing program 1 (id=6895):
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x11, 0xffffffffffffffff, &(0x7f0000000000)=0x5e) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, 0xffffffffffffffff, &(0x7f0000000000)=0x5e)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x2, 0x4})
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)

517.260342ms ago: executing program 4 (id=6896):
r0 = socket(0x2b, 0x80801, 0x1)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x6}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', <r2=>0x0, 0x80, 0x7, 0x8a38, 0x1, {{0x21, 0x4, 0x3, 0xa, 0x84, 0x68, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x8b, 0x3, 0x0, [{@broadcast, 0x1}, {@multicast2, 0x2}, {@empty, 0x1}, {@multicast1, 0xaf}, {@remote}, {@local, 0x8001}]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x0, 0x8, "6dcfc707ba02"}, {0x7, 0x3, "10"}, {0x5, 0xf, "d48c1d9efbf8cc1efcbf0af5a2"}, {0x7, 0x7, "68df279bba"}, {0x1, 0x11, "b47979828d6e3d0a84746c608eec02"}]}]}}}}})
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080))
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newnexthop={0x64, 0x68, 0x0, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x3, 0x0, 0x1}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x10, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xa, 0x2, '#)-\',\x00'}}}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_FDB={0x4}]}, 0x64}}, 0x0)
listen(r0, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6b5bec", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0)

472.887171ms ago: executing program 0 (id=6897):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, 0x0, 0x2d, 0x10, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1)
sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92d", 0x4}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x11, 0x70bd2b, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
socket(0x5, 0x800, 0x100)

386.308051ms ago: executing program 5 (id=6898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xb, 0x3}, {0xd, 0x1}, {0x9, 0x1}, {0x4, 0x1}, {0xe, 0x4}, {0x7, 0x5}]}]}, {0x0, [0x61, 0x0, 0x30, 0x30, 0x0]}}, &(0x7f00000001c0)=""/75, 0x73, 0x4b, 0x1, 0x4000000, 0x10000}, 0x28)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xa, 0x9a, 0x4, 0x1481d, r2, 0xffffeff9, '\x00', 0x0, r3, 0x2, 0x3, 0x5, 0xb, @void, @value, @value=r4}, 0x50)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000800004"], 0x94}}, 0x0)

293.089773ms ago: executing program 4 (id=6899):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000010000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000868000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003f1d831d850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000440)="8e36154f8822595e1a377524ad5f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x28)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f00000000c0)={'dummy0\x00', @local})

262.696171ms ago: executing program 5 (id=6900):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000140)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x5)
pselect6(0x40, &(0x7f00000000c0)={0x3, 0x8, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6e3]}, 0x8})
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffffffffffffff, "21cb5d054e4da13cb7b5cc37483b6d856871f1fcb283269cc61c3b8d84cc907d", 0x4, 0x6, 0x80, 0x4}, 0x3c)

197.660178ms ago: executing program 4 (id=6901):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200008000000000493ca915abfc962b8c55c5095967cbc0ecfc8b00bc316cfe9497fcd4285a7c9564c6508bb01a011f0780a62f31d656ac4ed26577ce158a42fc0e2d13a7b6ba5bcb37a6e5469d009969695b6bae63e49fcc727bc09b4222dd876ca93ccf188f6f1c00117d2336b0e97602f67f52a2432d2065367a99736483edc614bef0b5448ea425334689e015c4ccf1452f8d61a45f1c909f61579a6fe68d8a40ce855732cedef53b1a5ee6a1ff83bb2aae727d6fae475006a6ecb298a2339fe676808d886ff5fb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYBLOB="1c121513ddc4974e7383586ba93b81cf20b5a61a10b7ea43af69da34f7d73e442e5a32c937985779915e3e243d26008b317a00d8c8f21e2c4c4eb5f6178d7e4346724cf10a879e33613d90ca2c4a6f84905f043b9711dab74fb1eb60826b003c20e73d60c7c1a4e5640b7805ba2290f424bebff9b9a74957dd6cbd6218ca073cbd2cd0a107f0be54ed30ee2b6ffe5feef1114e", @ANYRESHEX=r2], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0xf, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x10, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=@getsa={0x114, 0x12, 0x20, 0x70bd26, 0x25dfdbfe, {@in=@local, 0x4d4, 0x0, 0xc3}, [@replay_val={0x10, 0xa, {0x70bd2d, 0x70bd29, 0xe11d}}, @coaddr={0x14, 0xe, @in=@broadcast}, @tfcpad={0x8, 0x16, 0x1}, @algo_auth_trunc={0x62, 0x14, {{'sha3-256\x00'}, 0xb0, 0x0, "cb38d7aabe0de5bb6d88f7d7886b4d61cc1b487d4565"}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e23, @in=@broadcast}}, @policy_type={0xa}, @lastused={0xc, 0xf, 0x9}, @address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x30}, @in=@multicast1, 0xa, 0x8, 0x2}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r7], 0x40}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000080), &(0x7f0000000a40)=@udp=r7}, 0x20)

124.814406ms ago: executing program 0 (id=6902):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}, ','}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r11}, 0x38)
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x4c050)
write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0xc}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0x6e)

124.078287ms ago: executing program 5 (id=6903):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5b8ab39ed912c8f9cc8b8312105c496e9ede19", 0x13}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf7}}], 0x18}, 0x4041)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (rerun: 32)

0s ago: executing program 4 (id=6904):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

kernel console output (not intermixed with test programs):

757424][T26912] veth1_to_hsr: entered promiscuous mode
[  682.777305][T26915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5520'.
[  682.797760][T26912] macvtap1: entered promiscuous mode
[  682.831040][T26912] macvtap1: entered allmulticast mode
[  682.847612][T26912] veth1_to_hsr: entered allmulticast mode
[  682.943508][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5522'.
[  683.127305][T26931] netlink: 'syz.4.5524': attribute type 16 has an invalid length.
[  683.200335][T26934] netlink: 'syz.3.5525': attribute type 1 has an invalid length.
[  683.537647][T26949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5531'.
[  683.571304][T26949] openvswitch: netlink: Flow actions attr not present in new flow.
[  684.019173][T26985] ip6tnl2: entered allmulticast mode
[  684.040159][T26988] gretap3: entered promiscuous mode
[  684.560349][T27009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5547'.
[  684.703880][T27025] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5553'.
[  685.005677][T27030] hsr_slave_1 (unregistering): left promiscuous mode
[  685.024902][T27040] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv
[  685.129194][T25773] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  685.144946][T25773] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  685.218067][T25773] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  685.271971][T25773] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  685.461447][T27056] 8021q: adding VLAN 0 to HW filter on device bond0
[  685.497236][T27056] 8021q: adding VLAN 0 to HW filter on device team0
[  685.576414][T27056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  685.683552][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  685.765744][T27079] netlink: 'syz.4.5569': attribute type 11 has an invalid length.
[  686.137153][T27104] lo speed is unknown, defaulting to 1000
[  686.145748][T27104] lo speed is unknown, defaulting to 1000
[  686.219976][T27105] lo speed is unknown, defaulting to 1000
[  686.289440][T27114] netlink: 'syz.3.5578': attribute type 16 has an invalid length.
[  686.328948][T27114] netlink: 'syz.3.5578': attribute type 17 has an invalid length.
[  686.495541][T27114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  686.715115][T27128] __nla_validate_parse: 14 callbacks suppressed
[  686.715136][T27128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5581'.
[  686.769368][T27104] wlan1 speed is unknown, defaulting to 1000
[  686.777202][T27104] lo speed is unknown, defaulting to 1000
[  686.797227][T27105] lo speed is unknown, defaulting to 1000
[  686.963554][T27101] atm:sigd_close: closing with requests pending
[  686.973253][T27134] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5583'.
[  687.377277][T27105] wlan1 speed is unknown, defaulting to 1000
[  687.384347][T27105] lo speed is unknown, defaulting to 1000
[  687.857069][T27166] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5590'.
[  687.976901][T27171] netlink: 'syz.1.5591': attribute type 298 has an invalid length.
[  688.704096][T25849] IPVS: starting estimator thread 0...
[  688.797669][T27182] IPVS: using max 28 ests per chain, 67200 per kthread
[  688.864656][T27186] netlink: 'syz.1.5595': attribute type 1 has an invalid length.
[  689.009703][T27186] 8021q: adding VLAN 0 to HW filter on device bond7
[  689.112949][T27194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5597'.
[  689.323913][T27207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5600'.
[  689.644029][T27228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5607'.
[  689.665691][T27228] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5607'.
[  689.692939][T27228] vlan2: entered promiscuous mode
[  689.712343][T27228] geneve1: entered promiscuous mode
[  689.726184][T27228] vlan2: entered allmulticast mode
[  689.731345][T27228] geneve1: entered allmulticast mode
[  689.808352][T27235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  689.816209][T27235] syzkaller0: entered promiscuous mode
[  689.831741][T27235] syzkaller0: entered allmulticast mode
[  689.882643][T27242] IPVS: Error connecting to the multicast addr
[  689.973368][T27245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5613'.
[  689.976486][T27235] tipc: Resetting bearer <eth:syzkaller0>
[  690.018671][T27234] tipc: Resetting bearer <eth:syzkaller0>
[  690.061716][T27234] tipc: Disabling bearer <eth:syzkaller0>
[  690.260623][T27270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5615'.
[  690.312801][T27272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5620'.
[  690.640421][T27295] veth0_to_bridge: entered promiscuous mode
[  690.748632][T27291] veth0_to_bridge: left promiscuous mode
[  690.795998][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms
[  690.804071][    C0] lec:lec_tx_timeout: lec0
[  690.898840][T27306] lo speed is unknown, defaulting to 1000
[  690.914283][T27306] lo speed is unknown, defaulting to 1000
[  691.059326][T27321] netlink: 'syz.4.5634': attribute type 2 has an invalid length.
[  691.270510][T27330] netlink: 'syz.1.5637': attribute type 2 has an invalid length.
[  691.581866][T27306] wlan1 speed is unknown, defaulting to 1000
[  691.603119][T27306] lo speed is unknown, defaulting to 1000
[  692.303165][T27369] netlink: 'syz.4.5646': attribute type 1 has an invalid length.
[  692.433913][T27372] bond7: (slave bridge7): making interface the new active one
[  692.448741][T27372] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  692.470623][T27377] netlink: 'syz.1.5648': attribute type 1 has an invalid length.
[  692.473044][T27371] lo speed is unknown, defaulting to 1000
[  692.528868][T27371] lo speed is unknown, defaulting to 1000
[  692.827867][T27371] wlan1 speed is unknown, defaulting to 1000
[  692.841604][T27371] lo speed is unknown, defaulting to 1000
[  692.844635][T27391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  692.861798][T27391] syzkaller0: entered promiscuous mode
[  692.880995][T27391] syzkaller0: entered allmulticast mode
[  692.937589][T27391] tipc: Resetting bearer <eth:syzkaller0>
[  692.950271][T27390] tipc: Resetting bearer <eth:syzkaller0>
[  692.977732][T27390] tipc: Disabling bearer <eth:syzkaller0>
[  693.121228][T27399] __nla_validate_parse: 10 callbacks suppressed
[  693.121248][T27399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5655'.
[  693.123954][T27401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5654'.
[  693.489276][T27407] lo speed is unknown, defaulting to 1000
[  693.505617][T27407] lo speed is unknown, defaulting to 1000
[  693.790543][T27432] ip6tnl6: entered allmulticast mode
[  693.896773][T27407] wlan1 speed is unknown, defaulting to 1000
[  693.928255][T27407] lo speed is unknown, defaulting to 1000
[  694.130015][T27444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5667'.
[  694.141720][T27444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5667'.
[  694.375440][T27449] netlink: zone id is out of range
[  694.402898][T27449] netlink: zone id is out of range
[  694.408305][T27451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5669'.
[  694.408378][T27451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5669'.
[  694.408397][T27451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5669'.
[  694.408416][T27451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5669'.
[  694.408432][T27451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5669'.
[  694.408450][T27451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5669'.
[  694.472405][T27449] netlink: zone id is out of range
[  694.487934][T27449] netlink: zone id is out of range
[  694.498592][T27449] netlink: zone id is out of range
[  694.513157][T27449] netlink: zone id is out of range
[  695.031125][T27465] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  695.071604][T27465] bond7 (unregistering): Released all slaves
[  695.891703][T27505] syzkaller1: entered promiscuous mode
[  695.903947][T27505] syzkaller1: entered allmulticast mode
[  696.627771][T27530] siw: device registration error -23
[  696.924923][T25850] IPVS: starting estimator thread 0...
[  697.045992][T27551] IPVS: using max 32 ests per chain, 76800 per kthread
[  697.128497][T27565] lo speed is unknown, defaulting to 1000
[  697.156889][T27565] lo speed is unknown, defaulting to 1000
[  697.808655][T27565] wlan1 speed is unknown, defaulting to 1000
[  697.830188][T27565] lo speed is unknown, defaulting to 1000
[  697.890546][T27580] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  697.947067][T27585] ksmbd: Unknown IPC event: 1, ignore.
[  698.132290][T27593] __nla_validate_parse: 286 callbacks suppressed
[  698.132310][T27593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5703'.
[  698.287539][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5705'.
[  698.300290][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5705'.
[  698.488831][T27609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5706'.
[  698.511713][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5706'.
[  698.930448][T27609] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5706'.
[  698.941408][T27609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5706'.
[  699.570529][T27631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5713'.
[  700.003122][T27661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5721'.
[  700.031529][T27661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5721'.
[  700.571792][T27687] ip6t_srh: unknown srh invflags BA61
[  701.259257][T27704] lo speed is unknown, defaulting to 1000
[  701.274364][T27704] lo speed is unknown, defaulting to 1000
[  701.367662][T27710] lo speed is unknown, defaulting to 1000
[  701.440384][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  701.450618][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  701.460993][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  701.472166][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  701.483493][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  701.529536][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  701.551898][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  701.559821][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  701.579405][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  701.589253][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  701.697976][T27717] lo speed is unknown, defaulting to 1000
[  701.794663][T27710] lo speed is unknown, defaulting to 1000
[  701.801036][T27704] wlan1 speed is unknown, defaulting to 1000
[  701.832972][T27704] lo speed is unknown, defaulting to 1000
[  702.012363][T27737] netlink: 'syz.0.5738': attribute type 64 has an invalid length.
[  702.107110][   T35] bond6: (slave bridge6): link status up again after 0 ms
[  702.118464][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  702.164356][T27744] xt_TPROXY: Can be used only with -p tcp or -p udp
[  702.292672][T27746] tipc: Invalid UDP bearer configuration
[  702.292734][T27746] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  702.333959][T27746] openvswitch: netlink: Missing key (keys=40, expected=80)
[  702.341666][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  702.359363][T27710] wlan1 speed is unknown, defaulting to 1000
[  702.376993][T27717] lo speed is unknown, defaulting to 1000
[  702.387346][T27710] lo speed is unknown, defaulting to 1000
[  702.455964][T25792] bond6: (slave bridge6): failed to get link speed/duplex
[  702.580320][T25792] bond6: (slave bridge6): failed to get link speed/duplex
[  702.705999][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  702.816788][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  702.830386][T27717] wlan1 speed is unknown, defaulting to 1000
[  702.891042][T27717] lo speed is unknown, defaulting to 1000
[  703.276016][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  703.411670][ T8508] lec:lec_start_xmit: lec0:No lecd attached
[  703.506028][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  703.568049][T27781] __nla_validate_parse: 7 callbacks suppressed
[  703.568069][T27781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5749'.
[  703.677318][ T5828] Bluetooth: hci3: command tx timeout
[  704.464556][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5755'.
[  704.494852][   T29] audit: type=1804 audit(1772968370.398:14): pid=27806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5756" name="/newroot/526/cgroup.controllers" dev="tmpfs" ino=2701 res=1 errno=0
[  704.532272][T27803] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5755'.
[  704.542511][   T29] audit: type=1800 audit(1772968370.398:15): pid=27806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5756" name="cgroup.controllers" dev="tmpfs" ino=2701 res=0 errno=0
[  704.558428][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5755'.
[  704.641123][T27809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5757'.
[  704.663691][   T29] audit: type=1804 audit(1772968370.578:16): pid=27811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5758" name="/newroot/542/cgroup.controllers" dev="tmpfs" ino=2788 res=1 errno=0
[  704.739411][   T29] audit: type=1800 audit(1772968370.608:17): pid=27811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5758" name="cgroup.controllers" dev="tmpfs" ino=2788 res=0 errno=0
[  704.811234][   T29] audit: type=1800 audit(1772968370.618:18): pid=27811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5758" name="cgroup.controllers" dev="tmpfs" ino=2788 res=0 errno=0
[  704.835502][T27798] lo speed is unknown, defaulting to 1000
[  704.886033][T27798] lo speed is unknown, defaulting to 1000
[  704.945485][T27819] netlink: 20012 bytes leftover after parsing attributes in process `syz.0.5759'.
[  705.041681][T27717] chnl_net:caif_netlink_parms(): no params data found
[  705.195524][T27831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5763'.
[  705.239661][T27831] bond0: entered promiscuous mode
[  705.252359][T27831] debugfs: 'hsr1' already exists in 'hsr'
[  705.269860][T27831] Cannot create hsr debugfs directory
[  705.285352][T27831] hsr1: entered promiscuous mode
[  705.355484][T27717] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.363328][T27717] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.371107][T27717] bridge_slave_0: entered allmulticast mode
[  705.380032][T27717] bridge_slave_0: entered promiscuous mode
[  705.391789][T27717] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.399409][T27717] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.408756][T27717] bridge_slave_1: entered allmulticast mode
[  705.417515][T27717] bridge_slave_1: entered promiscuous mode
[  705.465266][T27717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.478656][T27717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.519183][T27717] team0: Port device team_slave_0 added
[  705.529116][T27717] team0: Port device team_slave_1 added
[  705.534802][T27798] wlan1 speed is unknown, defaulting to 1000
[  705.562819][T27717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.571772][T27717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.599090][T27717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.616792][T27798] lo speed is unknown, defaulting to 1000
[  705.643460][T27845] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  705.664082][T27717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  705.680368][T27717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.708071][T27717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.756927][ T5828] Bluetooth: hci3: command tx timeout
[  705.804557][T27717] hsr_slave_0: entered promiscuous mode
[  705.811598][T27717] hsr_slave_1: entered promiscuous mode
[  705.929940][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ebb5400: rx timeout, send abort
[  706.059859][T27717] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  706.071271][T27717] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  706.082909][T27717] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  706.098328][T27717] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  706.135637][T27846] lo speed is unknown, defaulting to 1000
[  706.154263][T27846] lo speed is unknown, defaulting to 1000
[  706.277971][T27717] 8021q: adding VLAN 0 to HW filter on device bond0
[  706.298487][T27717] 8021q: adding VLAN 0 to HW filter on device team0
[  706.341461][T27717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  706.352649][T27717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  706.403822][T27846] wlan1 speed is unknown, defaulting to 1000
[  706.411834][T27846] lo speed is unknown, defaulting to 1000
[  706.439546][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ebb5400: abort rx timeout. Force session deactivation
[  706.509008][T25778] bridge0: port 1(bridge_slave_0) entered blocking state
[  706.516237][T25778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  706.535158][T25778] bridge0: port 2(bridge_slave_1) entered blocking state
[  706.542360][T25778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  706.644480][T27717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.868342][T27818] rdma_rxe: rxe_newlink: failed to add wg1
[  707.212439][T25793] net_ratelimit: 17 callbacks suppressed
[  707.212460][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  707.260633][T27717] veth0_vlan: entered promiscuous mode
[  707.317604][T27717] veth1_vlan: entered promiscuous mode
[  707.343975][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  707.429220][T27717] veth0_macvtap: entered promiscuous mode
[  707.460352][T27717] veth1_macvtap: entered promiscuous mode
[  707.510854][T27890] IPVS: Error connecting to the multicast addr
[  707.525969][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  707.575640][T27717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.604670][T27717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.643377][T25773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.656702][T25773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.684707][T27893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5774'.
[  707.690461][T25773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.703973][T25773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.775999][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  707.838357][ T5828] Bluetooth: hci3: command tx timeout
[  707.878459][T27896] vlan0: entered promiscuous mode
[  707.957971][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  707.977645][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  707.997078][T25773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.004942][T25773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.020060][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  708.030934][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  708.039802][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  708.101903][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  708.110272][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  708.140960][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  708.204677][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  708.229871][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  708.238452][T25778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.247187][T25778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.262514][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  708.272926][T27902] netlink: 'syz.2.5776': attribute type 10 has an invalid length.
[  708.278179][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  708.465941][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  708.700884][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  708.796021][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5380 ms
[  708.804117][    C0] lec:lec_tx_timeout: lec0
[  708.856662][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  708.895634][T27933] xt_socket: unknown flags 0x50
[  709.013005][T27938] syzkaller1: entered promiscuous mode
[  709.019258][T27938] syzkaller1: entered allmulticast mode
[  709.108606][T27946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  709.118930][T27946] syzkaller0: entered promiscuous mode
[  709.124427][T27946] syzkaller0: entered allmulticast mode
[  709.171914][T27946] FAULT_INJECTION: forcing a failure.
[  709.171914][T27946] name failslab, interval 1, probability 0, space 0, times 0
[  709.187850][T27946] CPU: 0 UID: 0 PID: 27946 Comm: syz.4.5788 Not tainted syzkaller #0 PREEMPT(full) 
[  709.187876][T27946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  709.187888][T27946] Call Trace:
[  709.187896][T27946]  <TASK>
[  709.187904][T27946]  dump_stack_lvl+0xe8/0x150
[  709.187935][T27946]  should_fail_ex+0x412/0x560
[  709.187964][T27946]  should_failslab+0xa8/0x100
[  709.187987][T27946]  __kmalloc_noprof+0xe8/0x760
[  709.188007][T27946]  ? tomoyo_encode+0x28b/0x550
[  709.188145][T27946]  tomoyo_encode+0x28b/0x550
[  709.188170][T27946]  tomoyo_realpath_from_path+0x58d/0x5d0
[  709.188201][T27946]  ? tomoyo_path_number_perm+0x219/0x630
[  709.188221][T27946]  tomoyo_path_number_perm+0x246/0x630
[  709.188242][T27946]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  709.188265][T27946]  ? __lock_acquire+0x6b5/0x2cf0
[  709.188298][T27946]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  709.188332][T27946]  ? __fget_files+0x2a/0x420
[  709.188358][T27946]  ? __fget_files+0x2a/0x420
[  709.188379][T27946]  ? __fget_files+0x3a0/0x420
[  709.188400][T27946]  ? __fget_files+0x2a/0x420
[  709.188427][T27946]  security_file_ioctl+0xc3/0x2a0
[  709.188482][T27946]  __se_sys_ioctl+0x47/0x170
[  709.188512][T27946]  do_syscall_64+0x14d/0xf80
[  709.188529][T27946]  ? trace_irq_disable+0x3b/0x150
[  709.188552][T27946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.188571][T27946]  ? clear_bhb_loop+0x40/0x90
[  709.188593][T27946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.188610][T27946] RIP: 0033:0x7ff8bd59c799
[  709.188627][T27946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.188643][T27946] RSP: 002b:00007ff8be3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  709.188662][T27946] RAX: ffffffffffffffda RBX: 00007ff8bd815fa0 RCX: 00007ff8bd59c799
[  709.188675][T27946] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000004
[  709.188686][T27946] RBP: 00007ff8be3e3090 R08: 0000000000000000 R09: 0000000000000000
[  709.188698][T27946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.188708][T27946] R13: 00007ff8bd816038 R14: 00007ff8bd815fa0 R15: 00007ffe989258b8
[  709.188735][T27946]  </TASK>
[  709.188755][T27946] ERROR: Out of memory at tomoyo_realpath_from_path.
[  709.296164][T27950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5790'.
[  709.311094][T27946] tipc: Resetting bearer <eth:syzkaller0>
[  709.719937][T27967] ipt_ECN: cannot use operation on non-tcp rule
[  709.781779][T27980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5794'.
[  709.916729][ T5828] Bluetooth: hci3: command tx timeout
[  712.152238][T27945] tipc: Resetting bearer <eth:syzkaller0>
[  712.182958][T27945] tipc: Disabling bearer <eth:syzkaller0>
[  712.227983][T25773] net_ratelimit: 3 callbacks suppressed
[  712.228004][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  712.265325][T27980] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  712.291604][ T5885] tipc: Node number set to 2882446539
[  712.343469][T27971] lo speed is unknown, defaulting to 1000
[  712.366132][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  712.367354][T27993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5800'.
[  712.411393][T27981] lo speed is unknown, defaulting to 1000
[  712.441345][T27993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5800'.
[  712.443647][T27971] lo speed is unknown, defaulting to 1000
[  712.535013][T28009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5800'.
[  712.562001][T27993] 8021q: adding VLAN 0 to HW filter on device bond7
[  712.575336][T28008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5804'.
[  712.756856][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  712.867249][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  712.940341][T27981] lo speed is unknown, defaulting to 1000
[  712.953648][T27971] wlan1 speed is unknown, defaulting to 1000
[  712.976044][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  713.002239][T27971] lo speed is unknown, defaulting to 1000
[  713.101389][T28041] ip6erspan0: entered allmulticast mode
[  713.217566][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  713.259143][T28044] validate_nla: 59 callbacks suppressed
[  713.259163][T28044] netlink: 'syz.4.5813': attribute type 1 has an invalid length.
[  713.327552][T28044] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5813'.
[  713.346147][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  713.367188][T28044] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5813'.
[  713.378964][T28044] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5813'.
[  713.586313][T25790] bond6: (slave bridge6): failed to get link speed/duplex
[  713.725958][T25790] bond6: (slave bridge6): failed to get link speed/duplex
[  713.771119][T28058] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5817'.
[  713.796210][T28058] .70·: renamed from hsr0
[  713.810350][T28058] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  713.833394][T28058] .70·: entered allmulticast mode
[  713.842546][T28058] hsr_slave_0: entered allmulticast mode
[  713.880009][T28058] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  713.897434][T27981] wlan1 speed is unknown, defaulting to 1000
[  713.965663][T27981] lo speed is unknown, defaulting to 1000
[  714.013198][T28064] lo speed is unknown, defaulting to 1000
[  714.215496][T28064] lo speed is unknown, defaulting to 1000
[  714.369772][T28086] __nla_validate_parse: 1 callbacks suppressed
[  714.369793][T28086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5824'.
[  714.429961][T28089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  714.845383][T28098] netlink: 'syz.4.5827': attribute type 11 has an invalid length.
[  714.898449][T28098] netlink: 'syz.4.5827': attribute type 23 has an invalid length.
[  714.916619][T28098] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5827'.
[  715.097961][T28064] wlan1 speed is unknown, defaulting to 1000
[  715.155697][T28064] lo speed is unknown, defaulting to 1000
[  715.718016][T28144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5837'.
[  716.079957][T28155] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5840'.
[  716.267937][T28159] netlink: 'syz.4.5842': attribute type 3 has an invalid length.
[  716.277393][T28159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5842'.
[  716.334418][T28160] netlink: 'syz.4.5842': attribute type 1 has an invalid length.
[  716.849262][T28149] lo speed is unknown, defaulting to 1000
[  716.861714][T28149] lo speed is unknown, defaulting to 1000
[  716.991638][T28165] syzkaller1: entered promiscuous mode
[  716.999209][T28165] syzkaller1: entered allmulticast mode
[  717.225357][T28168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5844'.
[  717.335376][T25777] net_ratelimit: 20 callbacks suppressed
[  717.335391][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  717.409486][T28149] wlan1 speed is unknown, defaulting to 1000
[  717.457389][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  717.477303][T28149] lo speed is unknown, defaulting to 1000
[  717.551290][T28182] netlink: 203080 bytes leftover after parsing attributes in process `syz.1.5847'.
[  717.576673][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  717.686519][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  717.809173][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  717.930334][T25790] bond6: (slave bridge6): failed to get link speed/duplex
[  718.056670][T25790] bond6: (slave bridge6): failed to get link speed/duplex
[  718.166045][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  718.276714][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  718.396739][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  718.968042][T28214] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5858'.
[  719.043840][T28216] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5859'.
[  719.058476][T28216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5859'.
[  719.324323][T28222] vlan5: entered promiscuous mode
[  719.362330][T28222] geneve1: entered promiscuous mode
[  719.375331][T28222] vlan5: entered allmulticast mode
[  719.384763][T28226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5863'.
[  719.394496][T28222] geneve1: entered allmulticast mode
[  719.701187][T28236] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5866'.
[  719.790467][T28239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5866'.
[  720.053470][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  720.064826][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  720.091920][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  720.100572][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  720.114643][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  720.292138][T28240] lo speed is unknown, defaulting to 1000
[  720.422231][T28240] lo speed is unknown, defaulting to 1000
[  720.784927][T28264] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5875'.
[  721.054287][T25790] bridge_slave_1: left allmulticast mode
[  721.061624][T25790] bridge_slave_1: left promiscuous mode
[  721.083846][T25790] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.098613][T25790] bridge_slave_0: left allmulticast mode
[  721.114527][T25790] bridge_slave_0: left promiscuous mode
[  721.126292][T25790] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.164997][T28281] netlink: 'syz.5.5877': attribute type 11 has an invalid length.
[  721.555098][T25790] bond3 (unregistering): (slave bridge2): Releasing active interface
[  721.704754][T25790] bond6 (unregistering): (slave bridge5): Releasing active interface
[  721.780565][T25790] bond6 (unregistering): (slave bridge6): Releasing active interface
[  722.026724][T25790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  722.037018][T25790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  722.047086][T25790] bond0 (unregistering): Released all slaves
[  722.060188][T25790] bond1 (unregistering): Released all slaves
[  722.074602][T25790] bond2 (unregistering): Released all slaves
[  722.088111][T25790] bond3 (unregistering): Released all slaves
[  722.112643][T25790] bond4 (unregistering): (slave lo): Releasing backup interface
[  722.121740][T25790] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  722.133723][T25790] bond4 (unregistering): Released all slaves
[  722.146374][T25790] bond5 (unregistering): Released all slaves
[  722.160567][T25790] bond6 (unregistering): Released all slaves
[  722.173639][T25790] bond7 (unregistering): Released all slaves
[  722.185622][T28240] wlan1 speed is unknown, defaulting to 1000
[  722.195069][T28260] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5873'.
[  722.236171][ T5828] Bluetooth: hci6: command tx timeout
[  722.254018][T28274] lo speed is unknown, defaulting to 1000
[  722.259984][T28240] lo speed is unknown, defaulting to 1000
[  722.287930][T28274] lo speed is unknown, defaulting to 1000
[  722.356021][T25779] net_ratelimit: 16 callbacks suppressed
[  722.356042][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  722.448943][T25790] tipc: Left network mode
[  722.525755][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  722.676279][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  722.805946][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  723.049022][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  723.236646][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  723.249926][T28274] wlan1 speed is unknown, defaulting to 1000
[  723.315614][T28344] lo speed is unknown, defaulting to 1000
[  723.333673][T28274] lo speed is unknown, defaulting to 1000
[  723.346427][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  723.406844][T28344] lo speed is unknown, defaulting to 1000
[  723.413336][T28343] lo speed is unknown, defaulting to 1000
[  723.457944][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  723.578559][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  723.696457][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  724.142493][T28343] lo speed is unknown, defaulting to 1000
[  724.317561][ T5828] Bluetooth: hci6: command tx timeout
[  724.464424][T28377] nbd: socks must be embedded in a SOCK_ITEM attr
[  724.517963][T28240] chnl_net:caif_netlink_parms(): no params data found
[  724.694799][T28240] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.702298][T28240] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.709751][T28240] bridge_slave_0: entered allmulticast mode
[  724.717756][T28240] bridge_slave_0: entered promiscuous mode
[  724.730231][T28240] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.737664][T28240] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.745049][T28240] bridge_slave_1: entered allmulticast mode
[  724.753383][T28240] bridge_slave_1: entered promiscuous mode
[  724.753591][T28388] netlink: 'syz.0.5895': attribute type 3 has an invalid length.
[  724.803168][T28344] wlan1 speed is unknown, defaulting to 1000
[  724.834746][T28240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  724.941559][T28343] wlan1 speed is unknown, defaulting to 1000
[  724.951852][T28240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  725.075355][T28344] lo speed is unknown, defaulting to 1000
[  725.185661][T28240] team0: Port device team_slave_0 added
[  725.236380][T28240] team0: Port device team_slave_1 added
[  725.305256][T28396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5897'.
[  725.350981][T28240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  725.373849][T28240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  725.415960][T28240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  725.461996][T28240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  725.486356][T28240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  725.526749][T28240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  725.697532][T28240] hsr_slave_0: entered promiscuous mode
[  725.704310][T28240] hsr_slave_1: entered promiscuous mode
[  725.711969][T28240] debugfs: 'hsr0' already exists in 'hsr'
[  725.726432][T28240] Cannot create hsr debugfs directory
[  725.738560][T28343] lo speed is unknown, defaulting to 1000
[  726.213576][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5901'.
[  726.396126][ T5828] Bluetooth: hci6: command tx timeout
[  727.062900][T28434] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.5903'.
[  727.251731][T28439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5905'.
[  727.478357][T28448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5907'.
[  727.481968][T28449] netlink: 'syz.4.5908': attribute type 4 has an invalid length.
[  727.516822][T28449] netlink: 'syz.4.5908': attribute type 8 has an invalid length.
[  727.524595][T28449] netlink: 'syz.4.5908': attribute type 1 has an invalid length.
[  727.532465][T25777] net_ratelimit: 11 callbacks suppressed
[  727.532483][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  727.548407][T28449] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5908'.
[  727.558866][T28449] NCSI netlink: No device for ifindex 0
[  727.772477][T28453] netlink: 'syz.4.5909': attribute type 1 has an invalid length.
[  727.897922][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  728.035406][T28463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5911'.
[  728.426557][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  728.475971][ T5828] Bluetooth: hci6: command tx timeout
[  728.641479][T28478] lo speed is unknown, defaulting to 1000
[  728.664327][T28478] lo speed is unknown, defaulting to 1000
[  728.925662][T25790] batman_adv: batadv0: Removing interface: batadv_slave_0
[  728.942056][T25790] batman_adv: batadv0: Removing interface: batadv_slave_1
[  729.050475][T28501] netlink: 'syz.0.5919': attribute type 5 has an invalid length.
[  729.121963][T25790] pim6reg (unregistering): left allmulticast mode
[  729.395015][T25790] team0 (unregistering): Port device team_slave_1 removed
[  729.421597][T25790] team0 (unregistering): Port device team_slave_0 removed
[  729.543956][T28478] wlan1 speed is unknown, defaulting to 1000
[  729.633050][T28478] lo speed is unknown, defaulting to 1000
[  729.678325][T28507] dvmrp12: entered allmulticast mode
[  729.692070][T28508] nbd: must specify at least one socket
[  729.698820][T28507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5921'.
[  729.707933][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  729.718906][T28507] nbd: must specify a size in bytes for the device
[  729.780173][T28508] dvmrp12: left allmulticast mode
[  729.825745][T28240] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  729.872414][T28240] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  729.911588][T28240] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  729.962891][T28240] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  730.010190][ T5885] IPVS: starting estimator thread 0...
[  730.046568][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  730.052853][T28524] netlink: 'syz.0.5923': attribute type 1 has an invalid length.
[  730.059750][T25790] IPVS: stop unused estimator thread 0...
[  730.129601][T28519] IPVS: using max 33 ests per chain, 79200 per kthread
[  730.237143][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  730.276032][T28529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5924'.
[  730.339326][T28529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5924'.
[  730.367431][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  730.377394][T28535] Cannot find add_set index 3 as target
[  730.395119][T28240] 8021q: adding VLAN 0 to HW filter on device bond0
[  730.531655][T28240] 8021q: adding VLAN 0 to HW filter on device team0
[  730.577393][T25778] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.584579][T25778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  730.609775][T25778] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.616972][T25778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  730.821476][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  730.970104][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  731.106535][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  731.615632][T28240] 8021q: adding VLAN 0 to HW filter on device batadv0
[  731.640585][T28582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5932'.
[  731.698400][T28587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5933'.
[  731.815597][T28240] veth0_vlan: entered promiscuous mode
[  731.977996][T28240] veth1_vlan: entered promiscuous mode
[  731.985037][T28597] syzkaller1: entered promiscuous mode
[  731.991579][T28597] syzkaller1: entered allmulticast mode
[  732.129285][T28240] veth0_macvtap: entered promiscuous mode
[  732.177432][T28240] veth1_macvtap: entered promiscuous mode
[  732.271001][T28240] batman_adv: batadv0: Interface activated: batadv_slave_0
[  732.359995][T28240] batman_adv: batadv0: Interface activated: batadv_slave_1
[  732.393940][T28613] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5937'.
[  732.439143][T25793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  732.449168][T25793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  732.459983][T25793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  732.474110][T25793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  732.489279][T28613] netlink: 'syz.5.5937': attribute type 1 has an invalid length.
[  732.575975][T28619] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.5937'.
[  732.594346][T28613] macvlan2: entered promiscuous mode
[  732.615121][T28613] macvlan2: entered allmulticast mode
[  732.676054][T25777] net_ratelimit: 5 callbacks suppressed
[  732.676073][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  732.886320][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  733.052318][T25793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.089327][T25793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.166032][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  733.455092][T25793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.463955][T28648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5944'.
[  733.476779][T25774] bond6: (slave bridge6): failed to get link speed/duplex
[  733.493936][T25793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.507271][T28640] lo speed is unknown, defaulting to 1000
[  733.580368][T28640] lo speed is unknown, defaulting to 1000
[  733.597194][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  733.613394][T28646] dvmrp0: entered allmulticast mode
[  733.710932][T25774] bond6: (slave bridge6): failed to get link speed/duplex
[  733.840082][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  733.998478][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  734.008261][T28667] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5947'.
[  734.089976][T28669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5948'.
[  734.109004][T25774] bond6: (slave bridge6): failed to get link speed/duplex
[  734.118753][T28667] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20000
[  734.131360][T28675] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5949'.
[  734.154813][T28675] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5949'.
[  734.192631][T28669] team1: entered promiscuous mode
[  734.198165][T28675] netlink: 'syz.5.5949': attribute type 5 has an invalid length.
[  734.217385][T28669] team1: entered allmulticast mode
[  734.234529][T28669] 8021q: adding VLAN 0 to HW filter on device team1
[  734.296142][T25774] bond6: (slave bridge6): failed to get link speed/duplex
[  734.591525][T28640] wlan1 speed is unknown, defaulting to 1000
[  734.624250][T28640] lo speed is unknown, defaulting to 1000
[  734.688146][T28691] netlink: 'syz.4.5950': attribute type 10 has an invalid length.
[  734.736590][T28700] lo speed is unknown, defaulting to 1000
[  734.750862][T28700] lo speed is unknown, defaulting to 1000
[  735.388540][T28700] wlan1 speed is unknown, defaulting to 1000
[  735.399105][T28700] lo speed is unknown, defaulting to 1000
[  735.459186][T28726] netlink: 'syz.5.5960': attribute type 10 has an invalid length.
[  735.474901][T28727] __nla_validate_parse: 4 callbacks suppressed
[  735.474921][T28727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5961'.
[  735.504704][T28726] team0: Port device dummy0 added
[  736.337880][T28762] netlink: 'syz.1.5969': attribute type 2 has an invalid length.
[  736.345658][T28762] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5969'.
[  736.691169][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  736.705268][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  736.718293][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  736.726902][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  736.734710][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  736.932292][T28766] syzkaller1: entered promiscuous mode
[  736.939477][T28766] syzkaller1: entered allmulticast mode
[  737.076934][T28768] lo speed is unknown, defaulting to 1000
[  737.130188][T28768] lo speed is unknown, defaulting to 1000
[  737.143488][T28784] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5975'.
[  737.305269][T28793] tipc: Started in network mode
[  737.331368][T28793] tipc: Node identity 00000000000001, cluster identity 4711
[  737.339928][T28793] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  737.493312][T28794] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  737.578222][T28784] netlink: 'syz.5.5975': attribute type 11 has an invalid length.
[  737.619629][T28784] netlink: 'syz.5.5975': attribute type 23 has an invalid length.
[  737.669269][T28784] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5975'.
[  737.746406][T25773] net_ratelimit: 86 callbacks suppressed
[  737.746426][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  737.874089][T28810] netlink: 'syz.1.5981': attribute type 9 has an invalid length.
[  737.882691][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  738.039574][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  738.383785][T28820] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5985'.
[  738.439214][T28822] IPv6: NLM_F_CREATE should be specified when creating new route
[  738.442613][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  738.467849][T28822] netlink: 'syz.5.5986': attribute type 1 has an invalid length.
[  738.504501][T28820] netlink: 'syz.1.5985': attribute type 11 has an invalid length.
[  738.523246][T28820] netlink: 'syz.1.5985': attribute type 23 has an invalid length.
[  738.541691][T28820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5985'.
[  738.634915][T28768] wlan1 speed is unknown, defaulting to 1000
[  738.647479][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  738.712056][T28768] lo speed is unknown, defaulting to 1000
[  738.776260][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  738.797114][ T5828] Bluetooth: hci4: command tx timeout
[  738.898290][T28830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5988'.
[  738.916847][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  739.056095][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  739.206121][T25774] bond6: (slave bridge6): failed to get link speed/duplex
[  739.466259][T25779] bond6: (slave bridge6): failed to get link speed/duplex
[  739.668876][T28858] Cannot find del_set index 1 as target
[  740.881044][ T5828] Bluetooth: hci4: command tx timeout
[  741.371046][T28858] tipc: Started in network mode
[  741.386364][T28858] tipc: Node identity ac14140f, cluster identity 4711
[  741.394871][T28858] tipc: New replicast peer: 255.255.255.255
[  741.403578][T28858] tipc: Enabled bearer <udp:syz2>, priority 10
[  741.431020][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5995'.
[  741.443548][T28862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5996'.
[  741.467868][T28860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5995'.
[  741.491846][T28868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5996'.
[  741.501010][T28862] n: the hash_elasticity option has been deprecated and is always 16
[  741.550378][T28862] n: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  741.581979][T28868] n: the hash_elasticity option has been deprecated and is always 16
[  741.592696][T28868] n: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  741.936809][T28768] chnl_net:caif_netlink_parms(): no params data found
[  741.948829][T28895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6002'.
[  742.144672][T28897] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode
[  742.152496][T28897] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode
[  742.167061][T28897] tipc: Resetting bearer <eth:syzkaller0>
[  742.244441][T28768] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.253119][T28768] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.260981][T28768] bridge_slave_0: entered allmulticast mode
[  742.269810][T28768] bridge_slave_0: entered promiscuous mode
[  742.278722][T28914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6006'.
[  742.278763][T28768] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.296056][T28768] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.303345][T28768] bridge_slave_1: entered allmulticast mode
[  742.312923][T28768] bridge_slave_1: entered promiscuous mode
[  742.358275][T28768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  742.398287][T28768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  742.578102][T25778] tipc: Resetting bearer <eth:syzkaller0>
[  742.623721][ T5885] tipc: Node number set to 2886997007
[  742.648173][T28768] team0: Port device team_slave_0 added
[  742.692008][T28768] team0: Port device team_slave_1 added
[  742.773891][T28768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  742.795125][T28768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  742.853582][T28768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  742.893831][T28768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  742.906488][T28768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  742.955962][ T5828] Bluetooth: hci4: command tx timeout
[  742.967027][T28768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  742.986479][T25778] net_ratelimit: 3 callbacks suppressed
[  742.986497][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  743.124287][T28768] hsr_slave_0: entered promiscuous mode
[  743.155146][T28768] hsr_slave_1: entered promiscuous mode
[  743.164883][T28768] debugfs: 'hsr0' already exists in 'hsr'
[  743.184246][T28768] Cannot create hsr debugfs directory
[  743.216031][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  743.567357][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  743.629295][T28768] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  743.736244][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  743.767483][T28768] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  743.836969][T28970] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode
[  743.850952][T28970] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode
[  743.860782][T28970] tipc: Resetting bearer <eth:syzkaller0>
[  743.872311][T28768] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  743.917670][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  744.003447][T28768] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  744.047275][T25777] bond6: (slave bridge6): failed to get link speed/duplex
[  744.097660][T28984] syzkaller0: entered promiscuous mode
[  744.106533][T28984] syzkaller0: entered allmulticast mode
[  744.218404][T25773] bond6: (slave bridge6): failed to get link speed/duplex
[  744.349834][T28997] macsec1: entered promiscuous mode
[  744.364490][T28997] macsec1: entered allmulticast mode
[  744.505353][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6031'.
[  744.604404][T28768] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  744.641685][T28768] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  744.686238][T25793] bond6: (slave bridge6): failed to get link speed/duplex
[  744.697314][T28768] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  744.722877][T29017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6033'.
[  744.778481][T28768] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  744.813073][T29017] ip6gre1: entered promiscuous mode
[  744.818481][T29017] ip6gre1: entered allmulticast mode
[  744.913517][T29017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  744.967991][T29017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  745.007282][T29028] netlink: 'syz.2.6036': attribute type 14 has an invalid length.
[  745.045954][ T5828] Bluetooth: hci4: command tx timeout
[  745.206671][T28768] 8021q: adding VLAN 0 to HW filter on device bond0
[  745.226024][T25778] bond6: (slave bridge6): failed to get link speed/duplex
[  745.329288][T29036] lo speed is unknown, defaulting to 1000
[  745.341076][T29045] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6040'.
[  745.372091][   T35] bond6: (slave bridge6): failed to get link speed/duplex
[  745.394734][T28768] 8021q: adding VLAN 0 to HW filter on device team0
[  745.408886][T29036] lo speed is unknown, defaulting to 1000
[  745.417937][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.425127][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  745.443299][T25778] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.450524][T25778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  745.579787][T29050] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  745.595063][T29050] syzkaller0: entered promiscuous mode
[  745.609015][T29050] syzkaller0: entered allmulticast mode
[  745.630219][T29050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  745.656855][T29049] tipc: Resetting bearer <eth:syzkaller0>
[  745.666639][T29056] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6042'.
[  745.709770][T29049] tipc: Disabling bearer <eth:syzkaller0>
[  746.010434][T29036] wlan1 speed is unknown, defaulting to 1000
[  746.038163][T29036] lo speed is unknown, defaulting to 1000
[  746.143349][T29075] xt_CT: You must specify a L4 protocol and not use inversions on it
[  746.223959][T28768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  746.330144][T29084] ip6erspan0: left allmulticast mode
[  746.937081][T25793] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  746.959755][T25793] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  746.987847][T25793] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  747.010478][T28768] veth0_vlan: entered promiscuous mode
[  747.018402][T25793] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  747.033508][T28768] veth1_vlan: entered promiscuous mode
[  747.080845][T29106] siw: device registration error -23
[  747.091772][T28768] veth0_macvtap: entered promiscuous mode
[  747.125587][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  747.172043][T28768] veth1_macvtap: entered promiscuous mode
[  747.324592][T28768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  747.341678][T29122] __nla_validate_parse: 1 callbacks suppressed
[  747.341697][T29122] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6055'.
[  747.364304][T29121] Cannot find del_set index 49151 as target
[  747.367949][T28768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  747.381200][T29122] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6055'.
[  747.395207][T29121] netlink: 'syz.0.6054': attribute type 21 has an invalid length.
[  747.398744][T25793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  747.415071][T25793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  747.458090][T25779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  747.471502][T29121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6054'.
[  747.506995][T25790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  747.760829][T25793] wlan1: Trigger new scan to find an IBSS to join
[  747.817210][T29129] syzkaller0: entered promiscuous mode
[  747.822873][T29129] syzkaller0: entered allmulticast mode
[  747.842693][T25793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  747.858730][T25793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  747.969574][T25793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  747.979339][T25793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.155378][ T5828] Bluetooth: hci3: link tx timeout
[  748.164531][ T5828] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  748.365726][T29156] bond0: entered allmulticast mode
[  748.374326][T29156] bond_slave_0: entered allmulticast mode
[  748.383735][T29156] bond_slave_1: entered allmulticast mode
[  748.694688][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  748.722287][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  748.731198][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  748.739787][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  748.757484][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  748.813718][T29175] netlink: 'syz.1.6067': attribute type 30 has an invalid length.
[  750.241693][ T5823] Bluetooth: hci3: command 0x0406 tx timeout
[  750.722437][T25778] wlan1: Trigger new scan to find an IBSS to join
[  750.742683][T29185] "syz.4.6070" (29185) uses obsolete ecb(arc4) skcipher
[  750.810915][ T5828] Bluetooth: hci1: command tx timeout
[  750.829288][T29169] lo speed is unknown, defaulting to 1000
[  750.858041][T29169] lo speed is unknown, defaulting to 1000
[  750.897227][T29171] lo speed is unknown, defaulting to 1000
[  751.120630][T29200] x_tables: duplicate underflow at hook 2
[  751.178415][T29202] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6077'.
[  751.192369][T29171] lo speed is unknown, defaulting to 1000
[  751.198444][T29169] wlan1 speed is unknown, defaulting to 1000
[  751.200498][T29169] lo speed is unknown, defaulting to 1000
[  751.405444][T29208] net_ratelimit: 12 callbacks suppressed
[  751.405466][T29208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.631819][T29210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6081'.
[  751.734550][T29171] wlan1 speed is unknown, defaulting to 1000
[  751.744097][T29171] lo speed is unknown, defaulting to 1000
[  751.822082][T29215] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  751.859326][T29214] lo speed is unknown, defaulting to 1000
[  751.891773][T29214] lo speed is unknown, defaulting to 1000
[  752.471967][T29214] wlan1 speed is unknown, defaulting to 1000
[  752.508510][T29214] lo speed is unknown, defaulting to 1000
[  752.674205][T29245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6090'.
[  752.777359][T29245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6090'.
[  752.795860][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms
[  752.803915][    C0] lec:lec_tx_timeout: lec0
[  752.878978][ T5828] Bluetooth: hci1: command tx timeout
[  753.113456][T29258] bridge0: entered promiscuous mode
[  753.127317][T29258] macsec2: entered allmulticast mode
[  753.132648][T29258] bridge0: entered allmulticast mode
[  753.142241][T29258] bridge0: port 3(macsec2) entered blocking state
[  753.151896][T29258] bridge0: port 3(macsec2) entered disabled state
[  753.165977][T29258] bridge0: left allmulticast mode
[  753.171040][T29258] bridge0: left promiscuous mode
[  753.208183][T29171] chnl_net:caif_netlink_parms(): no params data found
[  753.487181][T29171] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.494610][T29171] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.502617][T29171] bridge_slave_0: entered allmulticast mode
[  753.514890][T29171] bridge_slave_0: entered promiscuous mode
[  753.537513][T29171] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.544887][T29171] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.553488][T29171] bridge_slave_1: entered allmulticast mode
[  753.565267][T29171] bridge_slave_1: entered promiscuous mode
[  753.704846][T29171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  753.757195][T25777] wlan1: Trigger new scan to find an IBSS to join
[  753.821165][T29171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  753.883349][T29171] team0: Port device team_slave_0 added
[  753.892499][T29171] team0: Port device team_slave_1 added
[  754.006372][T29171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  754.013517][T29171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.045125][T29171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  754.068303][T29171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  754.075275][T29171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.123953][T29171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  754.209609][T29266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6094'.
[  754.317699][T29171] hsr_slave_0: entered promiscuous mode
[  754.352434][T29171] hsr_slave_1: entered promiscuous mode
[  754.369447][T29171] debugfs: 'hsr0' already exists in 'hsr'
[  754.386371][T29171] Cannot create hsr debugfs directory
[  754.570956][T29275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6097'.
[  754.687861][T25777] wlan1: Creating new IBSS network, BSSID 66:91:c8:8a:70:ab
[  754.700874][T29281] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  754.781783][T29217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  754.956833][ T5828] Bluetooth: hci1: command tx timeout
[  755.014162][T29292] netlink: 'syz.5.6103': attribute type 4 has an invalid length.
[  755.080390][T29171] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  755.089184][T29294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6103'.
[  755.147782][T29171] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  755.188128][T29171] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  755.213229][T29302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6106'.
[  755.269260][T29171] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  755.298927][T29296] lo speed is unknown, defaulting to 1000
[  755.328324][T29296] lo speed is unknown, defaulting to 1000
[  755.349861][T29307] bridge0: entered promiscuous mode
[  755.355185][T29307] macsec2: entered allmulticast mode
[  755.384070][T29307] bridge0: entered allmulticast mode
[  755.404403][T29307] bridge0: port 3(macsec2) entered blocking state
[  755.423228][T29307] bridge0: port 3(macsec2) entered disabled state
[  755.454302][T29307] bridge0: left allmulticast mode
[  755.468584][T29307] bridge0: left promiscuous mode
[  755.652528][T29330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6112'.
[  755.735716][T29336] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004
[  755.764729][T29296] wlan1 speed is unknown, defaulting to 1000
[  755.779878][T29334] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.791822][T29334] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  755.814613][T29171] 8021q: adding VLAN 0 to HW filter on device bond0
[  755.823892][T29296] lo speed is unknown, defaulting to 1000
[  755.865519][T29171] 8021q: adding VLAN 0 to HW filter on device team0
[  755.891971][T25779] bridge0: port 1(bridge_slave_0) entered blocking state
[  755.899205][T25779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  755.963842][T25779] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.971063][T25779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  756.663319][T29171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  756.686231][T29171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  757.040401][ T5828] Bluetooth: hci1: command tx timeout
[  757.156372][T29369] syz_tun: entered promiscuous mode
[  757.162668][T29369] macsec1: entered allmulticast mode
[  757.169451][T29369] syz_tun: entered allmulticast mode
[  757.181859][T29369] syz_tun: left allmulticast mode
[  757.187423][T29369] syz_tun: left promiscuous mode
[  757.208214][T29171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  757.422622][T29171] veth0_vlan: entered promiscuous mode
[  757.459880][T29171] veth1_vlan: entered promiscuous mode
[  757.559181][T29383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6127'.
[  757.567780][T29171] veth0_macvtap: entered promiscuous mode
[  757.612661][T29171] veth1_macvtap: entered promiscuous mode
[  757.693717][T29171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  757.740429][T29171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  757.771580][   T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  757.794548][   T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  757.820652][   T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  757.855443][   T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  757.965439][ T5828] block nbd6: Receive control failed (result -32)
[  758.274748][T25778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  758.299113][T25778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  758.464905][T29402] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  758.494535][T29402] bond1 (unregistering): Released all slaves
[  758.542592][T29398] lo speed is unknown, defaulting to 1000
[  758.576249][T29398] lo speed is unknown, defaulting to 1000
[  758.653824][T29415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6135'.
[  758.664406][T25778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  758.674806][T25778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  758.978974][T29398] wlan1 speed is unknown, defaulting to 1000
[  758.981508][T29428] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6137'.
[  759.004349][T29398] lo speed is unknown, defaulting to 1000
[  759.028241][T29427] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6137'.
[  759.061809][T29427] .70·: renamed from hsr0 (while UP)
[  759.081846][T29427] .70·: entered allmulticast mode
[  759.089050][T29427] hsr_slave_0: entered allmulticast mode
[  759.107752][T29427] hsr_slave_1: entered allmulticast mode
[  759.134402][T29427] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  759.180011][T29428] .71·: renamed from .70· (while UP)
[  759.219527][T29428] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check.
[  759.460753][T29454] wg1: entered promiscuous mode
[  759.465657][T29454] wg1: entered allmulticast mode
[  759.687913][T29464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6145'.
[  760.000602][T29476] bond9: Unable to set down delay as MII monitoring is disabled
[  760.012151][T29476] bond9 (unregistering): Released all slaves
[  760.038251][T29477] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  760.250362][T29494] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  760.360351][T29499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6156'.
[  760.390732][T29497] tipc: Started in network mode
[  760.396480][T29497] tipc: Node identity 329a49fbc70d, cluster identity 4711
[  760.403843][T29497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  760.414313][T29496] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  760.425102][T29497] syzkaller0: entered promiscuous mode
[  760.444014][T29497] syzkaller0: entered allmulticast mode
[  760.549487][T29496] tipc: Resetting bearer <eth:syzkaller0>
[  760.581237][T29495] tipc: Resetting bearer <eth:syzkaller0>
[  760.638520][T29495] tipc: Disabling bearer <eth:syzkaller0>
[  761.025497][T29526] lo speed is unknown, defaulting to 1000
[  761.044075][T29526] lo speed is unknown, defaulting to 1000
[  761.453986][T29526] wlan1 speed is unknown, defaulting to 1000
[  761.462513][T29526] lo speed is unknown, defaulting to 1000
[  761.809739][T29565] netlink: 'syz.2.6177': attribute type 1 has an invalid length.
[  761.886409][T29570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6178'.
[  761.898701][T29572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6176'.
[  761.953270][T29574] netlink: 'syz.1.6176': attribute type 1 has an invalid length.
[  761.991818][T29571] gretap2: entered allmulticast mode
[  762.012367][T29571] bond9: (slave gretap2): making interface the new active one
[  762.024852][T29571] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  762.276961][T29592] netlink: 'syz.1.6183': attribute type 2 has an invalid length.
[  762.295977][T29592] netlink: 'syz.1.6183': attribute type 2 has an invalid length.
[  762.367120][T29598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6184'.
[  762.406663][T29600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6186'.
[  762.754757][T29617] syzkaller1: entered promiscuous mode
[  762.762249][T29617] syzkaller1: entered allmulticast mode
[  762.840924][T29626] netlink: 'syz.5.6195': attribute type 2 has an invalid length.
[  762.853173][T29627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6194'.
[  762.960921][T29623] 8021q: VLANs not supported on ipvlan1
[  763.569115][T29643] bond1: entered promiscuous mode
[  763.574587][T29643] 8021q: adding VLAN 0 to HW filter on device bond1
[  763.610570][T29639] lo speed is unknown, defaulting to 1000
[  763.671442][T29639] lo speed is unknown, defaulting to 1000
[  763.762921][T29656] block nbd2: NBD_DISCONNECT
[  763.768232][T29656] block nbd2: Send disconnect failed -32
[  763.796148][T29656] block nbd2: shutting down sockets
[  764.142342][T25773] dvmrp1: left allmulticast mode
[  764.388677][T29677] __nla_validate_parse: 2 callbacks suppressed
[  764.388696][T29677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'.
[  764.662106][T25773] bond12 (unregistering): (slave vti0): Releasing backup interface
[  764.679247][T25773] vti0 (unregistering): left promiscuous mode
[  764.744736][T25773] gretap0 (unregistering): left promiscuous mode
[  764.776619][T25773] batman_adv: batadv0: Removing interface: gretap2
[  764.840835][T25773] bond11 (unregistering): (slave gretap3): Releasing active interface
[  765.093775][T25773] bond5 (unregistering): (slave bridge3): Releasing backup interface
[  765.103980][T25773] bridge3 (unregistering): left promiscuous mode
[  765.262569][T25773] bond8 (unregistering): (slave bridge6): Releasing active interface
[  765.271604][T25773] bridge6 (unregistering): left promiscuous mode
[  765.278212][ T5823] Bluetooth: hci1: command 0x0405 tx timeout
[  765.289862][T25773] bridge6 (unregistering): left allmulticast mode
[  765.341916][T25773] bond13 (unregistering): (slave bridge7): Releasing backup interface
[  765.513936][T25773] bond0 (unregistering): left promiscuous mode
[  765.529702][T25773] bond0 (unregistering): Released all slaves
[  765.544650][T25773] bond1 (unregistering): Released all slaves
[  765.569520][T25773] bond2 (unregistering): Released all slaves
[  765.604438][T25773] bond3 (unregistering): (slave veth3): Releasing active interface
[  765.621346][T25773] bond3 (unregistering): Released all slaves
[  765.649692][T25773] bond4 (unregistering): Released all slaves
[  765.672109][T25773] bond5 (unregistering): Released all slaves
[  765.701860][T25773] bond6 (unregistering): Released all slaves
[  765.721342][T25773] bond7 (unregistering): (slave wireguard0): Releasing backup interface
[  765.740042][T25773] wireguard0: left promiscuous mode
[  765.748859][T25773] bond7 (unregistering): (slave wireguard1): Releasing backup interface
[  765.759424][T25773] bond7 (unregistering): Released all slaves
[  765.782748][T25773] bond8 (unregistering): Released all slaves
[  765.811937][T25773] bond9 (unregistering): (slave lo): Releasing backup interface
[  765.821600][T25773] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  765.835590][T25773] bond9 (unregistering): Released all slaves
[  765.859893][T25773] bond10 (unregistering): Released all slaves
[  765.877395][T25773] bond11 (unregistering): Released all slaves
[  765.906766][T25773] bond12 (unregistering): Released all slaves
[  765.924414][T25773] bond13 (unregistering): Released all slaves
[  765.950952][T25773] bond14 (unregistering): Released all slaves
[  765.972765][T25773] bond15 (unregistering): Released all slaves
[  766.017502][T29639] wlan1 speed is unknown, defaulting to 1000
[  766.137465][T25845] lo speed is unknown, defaulting to 1000
[  766.142364][T29639] lo speed is unknown, defaulting to 1000
[  766.143787][T25845] syz0: Port: 1 Link DOWN
[  766.160876][T26373] lo speed is unknown, defaulting to 1000
[  766.209596][T29686] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6209'.
[  766.275984][T29686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6209'.
[  766.313439][T29686] vlan2: entered allmulticast mode
[  766.326136][T29686] bridge0: entered allmulticast mode
[  766.340357][T29686] bridge0: port 3(vlan2) entered blocking state
[  766.347275][T29686] bridge0: port 3(vlan2) entered disabled state
[  766.810254][T29703] netlink: 'syz.4.6214': attribute type 5 has an invalid length.
[  767.050140][T29680] siw: device registration error -23
[  767.098190][T29708] siw: device registration error -23
[  767.515676][T29725] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.523354][T29725] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.647184][ T8508] lec:lec_start_xmit: lec0:No lecd attached
[  767.725359][T29725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  767.772528][T29725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  767.857026][T29743] netlink: 'syz.5.6224': attribute type 21 has an invalid length.
[  767.887827][T29742] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6224'.
[  767.932420][T25779] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  767.953255][T25779] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  767.976697][T25779] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  768.118554][T29756] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6228'.
[  768.136509][T29757] sctp: [Deprecated]: syz.4.6225 (pid 29757) Use of int in max_burst socket option deprecated.
[  768.136509][T29757] Use struct sctp_assoc_value instead
[  768.161587][T25779] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  768.183265][T29746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6225'.
[  768.196450][T29746] tc_dump_action: action bad kind
[  768.299023][T29760] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6229'.
[  768.393111][T29769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  768.662144][T29779] netlink: 'syz.5.6235': attribute type 9 has an invalid length.
[  768.695892][T29779] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.6235'.
[  768.920699][T29788] lo speed is unknown, defaulting to 1000
[  768.957911][T29788] lo speed is unknown, defaulting to 1000
[  769.046300][T29796] lo speed is unknown, defaulting to 1000
[  769.071992][T29797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6241'.
[  769.308926][T29801] lo speed is unknown, defaulting to 1000
[  769.333629][T29799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6242'.
[  769.353039][T29788] wlan1 speed is unknown, defaulting to 1000
[  769.353064][T29796] lo speed is unknown, defaulting to 1000
[  769.361325][T29788] lo speed is unknown, defaulting to 1000
[  769.778216][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  769.797314][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  769.805641][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  769.814791][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  769.822683][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  769.883283][T29808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6245'.
[  769.933936][T29801] lo speed is unknown, defaulting to 1000
[  769.934885][T29805] lo speed is unknown, defaulting to 1000
[  769.946203][T29796] wlan1 speed is unknown, defaulting to 1000
[  769.986445][T29796] lo speed is unknown, defaulting to 1000
[  770.319919][T29816] Cannot find set identified by id 0 to match
[  770.460426][T29801] wlan1 speed is unknown, defaulting to 1000
[  770.471732][T29817] pimreg3: entered allmulticast mode
[  770.481423][T29805] lo speed is unknown, defaulting to 1000
[  770.517781][T29801] lo speed is unknown, defaulting to 1000
[  770.955552][T29805] wlan1 speed is unknown, defaulting to 1000
[  770.967498][T29805] lo speed is unknown, defaulting to 1000
[  771.928475][ T5828] Bluetooth: hci0: command tx timeout
[  772.223812][T29827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6249'.
[  772.717562][T29837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6252'.
[  772.795870][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms
[  772.803909][    C0] lec:lec_tx_timeout: lec0
[  772.954114][T29805] chnl_net:caif_netlink_parms(): no params data found
[  773.131977][T29843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6253'.
[  773.231874][T29843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6253'.
[  773.490000][T29805] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.497337][T29805] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.504630][T29805] bridge_slave_0: entered allmulticast mode
[  773.512917][T29805] bridge_slave_0: entered promiscuous mode
[  773.532578][T29805] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.540481][T29805] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.549722][T29805] bridge_slave_1: entered allmulticast mode
[  773.557942][T29805] bridge_slave_1: entered promiscuous mode
[  773.599798][T29805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  773.602169][T29869] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6258'.
[  773.621680][T29805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  773.691568][T29805] team0: Port device team_slave_0 added
[  773.700856][T29805] team0: Port device team_slave_1 added
[  773.733166][T29873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6259'.
[  773.743365][T29873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6259'.
[  773.752851][T29873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6259'.
[  773.762690][T29873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6259'.
[  773.773189][T29805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  773.781259][T29805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  773.810452][T29805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  773.824892][T29805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  773.832069][T29805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  773.860845][T29805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  774.562944][T29880] netlink: 'syz.4.6260': attribute type 1 has an invalid length.
[  774.601009][T29805] hsr_slave_0: entered promiscuous mode
[  774.617365][T29805] hsr_slave_1: entered promiscuous mode
[  774.627181][T29805] debugfs: 'hsr0' already exists in 'hsr'
[  774.634114][T29805] Cannot create hsr debugfs directory
[  774.650174][T29880] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  774.743867][T29894] netlink: 'syz.0.6265': attribute type 10 has an invalid length.
[  774.991807][T29908] __nla_validate_parse: 1 callbacks suppressed
[  774.991826][T29908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6270'.
[  775.177204][T29911] lo speed is unknown, defaulting to 1000
[  775.184759][T29911] lo speed is unknown, defaulting to 1000
[  775.766947][T29911] wlan1 speed is unknown, defaulting to 1000
[  775.774693][T29911] lo speed is unknown, defaulting to 1000
[  775.908737][T29805] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  775.930859][T29805] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  775.981828][T29805] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  776.047054][T29805] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  776.240045][T29969] netlink: 'syz.4.6283': attribute type 11 has an invalid length.
[  776.261540][T29969] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.6283'.
[  776.291678][T29805] 8021q: adding VLAN 0 to HW filter on device bond0
[  776.343456][T29805] 8021q: adding VLAN 0 to HW filter on device team0
[  776.363702][T25774] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.370929][T25774] bridge0: port 1(bridge_slave_0) entered forwarding state
[  776.491050][T25774] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.498250][T25774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  776.596585][T29805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  776.727457][T29982] "syz.5.6286" (29982) uses obsolete ecb(arc4) skcipher
[  776.847928][T29986] bond1 (unregistering): Released all slaves
[  777.028383][T29805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  777.151962][T29805] veth0_vlan: entered promiscuous mode
[  777.182452][T29805] veth1_vlan: entered promiscuous mode
[  777.193534][T30005] netlink: 'syz.0.6292': attribute type 1 has an invalid length.
[  777.221095][T30005] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6292'.
[  777.280687][T29805] veth0_macvtap: entered promiscuous mode
[  777.319316][T29805] veth1_macvtap: entered promiscuous mode
[  777.367915][T29805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  777.393622][T30009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6293'.
[  777.401710][T29805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  777.544960][T25778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  777.590571][T25778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  777.627469][T25778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  777.640433][T25778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  777.700214][T30020] netlink: 'syz.5.6297': attribute type 101 has an invalid length.
[  777.708424][T30020] netlink: 'syz.5.6297': attribute type 7 has an invalid length.
[  777.963312][T30025] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  777.989862][T25774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.018014][T25774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.052723][T30027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6300'.
[  778.118273][T30030] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6301'.
[  778.161857][T30031] openvswitch: netlink: IP tunnel dst address not specified
[  778.169318][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.169342][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.293096][T30034] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  778.439704][T30044] bond2: entered promiscuous mode
[  778.448195][T30044] 8021q: adding VLAN 0 to HW filter on device bond2
[  778.479407][   T29] audit: type=1800 audit(1772968444.398:19): pid=30044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6305" name="memory.events" dev="tmpfs" ino=597 res=0 errno=0
[  778.575603][   T29] audit: type=1800 audit(1772968444.428:20): pid=30053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6305" name="memory.events" dev="tmpfs" ino=597 res=0 errno=0
[  778.629734][T30046] bond3: entered promiscuous mode
[  778.635186][T30046] 8021q: adding VLAN 0 to HW filter on device bond3
[  778.874067][T30071] xt_CT: You must specify a L4 protocol and not use inversions on it
[  779.031286][T30081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  779.274753][T30096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6316'.
[  779.372497][T30099] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6316'.
[  779.405937][T30099] netlink: 175 bytes leftover after parsing attributes in process `syz.2.6316'.
[  779.576693][T30096] syzkaller0: entered promiscuous mode
[  779.604777][T30096] syzkaller0: entered allmulticast mode
[  779.684003][T30120] lo speed is unknown, defaulting to 1000
[  781.953773][T30120] lo speed is unknown, defaulting to 1000
[  781.953858][T30131] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  782.108972][T30146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6330'.
[  782.112847][T30143] netlink: 'syz.4.6329': attribute type 12 has an invalid length.
[  782.170086][T30143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6329'.
[  782.421574][T30120] wlan1 speed is unknown, defaulting to 1000
[  782.440062][T30120] lo speed is unknown, defaulting to 1000
[  782.655319][T30176] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6337'.
[  782.751055][T30182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6340'.
[  782.866846][T30190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  782.901021][T30192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  782.949100][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6343'.
[  783.074339][T30197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6345'.
[  783.203694][T30197] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  783.238897][T30197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6345'.
[  783.399390][T30215] syzkaller1: entered promiscuous mode
[  783.419647][T30215] syzkaller1: entered allmulticast mode
[  783.474607][T30220] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6352'.
[  783.814942][T30243] netlink: 'syz.4.6356': attribute type 6 has an invalid length.
[  783.866430][T30243] netlink: 'syz.4.6356': attribute type 1 has an invalid length.
[  783.874198][T30243] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6356'.
[  783.886895][T30243] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6356'.
[  783.914251][T30243] netlink: 'syz.4.6356': attribute type 1 has an invalid length.
[  783.935571][T30243] netlink: 'syz.4.6356': attribute type 8 has an invalid length.
[  784.619318][T30292] netlink: 'syz.2.6363': attribute type 1 has an invalid length.
[  784.736735][T25793] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  784.738902][T30300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  785.053752][T30315] syzkaller1: entered promiscuous mode
[  785.060299][T30315] syzkaller1: entered allmulticast mode
[  785.155525][T30315] syzkaller0: entered promiscuous mode
[  785.161363][T30315] syzkaller0: entered allmulticast mode
[  785.711498][T30355] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  786.177415][T30384] lo speed is unknown, defaulting to 1000
[  786.200708][T30384] lo speed is unknown, defaulting to 1000
[  786.839809][T30384] wlan1 speed is unknown, defaulting to 1000
[  786.858159][T30384] lo speed is unknown, defaulting to 1000
[  787.474993][T30441] __nla_validate_parse: 9 callbacks suppressed
[  787.475008][T30441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6407'.
[  787.601299][T30441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6407'.
[  787.613402][T30441] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6407'.
[  787.787794][T30456] netlink: 'syz.5.6411': attribute type 13 has an invalid length.
[  787.811234][T30456] netlink: 'syz.5.6411': attribute type 17 has an invalid length.
[  787.957909][T30456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  788.178558][T30434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  788.349898][T30475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6416'.
[  788.366200][T30475] openvswitch: netlink: Flow key attr not present in new flow.
[  788.387166][T30475] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  788.825110][T30494] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6420'.
[  788.836609][T30495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6420'.
[  788.873398][T30499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6422'.
[  788.932823][T30497] team0 (unregistering): Failed to send options change via netlink (err -105)
[  788.972865][T30497] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  789.004922][T30497] team0 (unregistering): Port device team_slave_0 removed
[  789.041211][T30497] team0 (unregistering): Failed to send options change via netlink (err -105)
[  789.068454][T30497] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  789.093537][T30497] team0 (unregistering): Port device team_slave_1 removed
[  789.257449][T30508] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6425'.
[  789.482490][T30519] team0: Device gtp0 is of different type
[  789.969933][T30534] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6432'.
[  790.293989][T30550] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  790.530458][T30559] vlan2: entered allmulticast mode
[  790.535636][T30559] geneve1: entered allmulticast mode
[  790.630210][T30565] netlink: 'syz.1.6438': attribute type 1 has an invalid length.
[  790.743729][T30565] bond2 (unregistering): Released all slaves
[  790.785792][T30577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6445'.
[  790.966536][T30577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.133194][T30577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.264146][T30577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.518684][T30577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.917833][T25778] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.934285][T25778] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  792.021718][T25778] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  792.041985][T25778] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.112307][T30625] dvmrp12: entered allmulticast mode
[  792.120223][T30623] dvmrp12: left allmulticast mode
[  792.266855][T30630] ip6t_rpfilter: unknown options
[  792.474249][T30647] netlink: 'syz.4.6464': attribute type 21 has an invalid length.
[  792.486855][T30648] __nla_validate_parse: 3 callbacks suppressed
[  792.486875][T30648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6465'.
[  792.542142][T30647] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6464'.
[  792.585068][T30647] netlink: 'syz.4.6464': attribute type 1 has an invalid length.
[  792.596441][T30657] netlink: 'syz.1.6467': attribute type 7 has an invalid length.
[  792.771228][T30669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6469'.
[  792.995614][T30685] geneve2: entered promiscuous mode
[  793.035657][T30685] geneve2: entered allmulticast mode
[  793.059824][T30680] lo speed is unknown, defaulting to 1000
[  793.067539][T30680] lo speed is unknown, defaulting to 1000
[  793.609777][T30680] wlan1 speed is unknown, defaulting to 1000
[  793.617724][T30680] lo speed is unknown, defaulting to 1000
[  794.010031][T30735] dummy0: entered promiscuous mode
[  794.027587][T30735] vlan2: entered promiscuous mode
[  794.334960][T30723] delete_channel: no stack
[  794.488820][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6487'.
[  794.818431][T30751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6490'.
[  794.818743][T30750] vlan0: entered promiscuous mode
[  795.033179][T30759] dvmrp0: entered allmulticast mode
[  795.240674][T30767] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  795.271345][T30767] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6495'.
[  795.554561][T30779] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6498'.
[  795.582967][T30781] xt_ecn: cannot match TCP bits for non-tcp packets
[  795.646482][T30786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6500'.
[  795.655520][T30786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6500'.
[  795.664974][T30786] netlink: 'syz.4.6500': attribute type 15 has an invalid length.
[  795.704983][T30786] netlink: 'syz.4.6500': attribute type 18 has an invalid length.
[  795.968140][T30808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6507'.
[  796.015118][T30804] syzkaller0: entered promiscuous mode
[  796.020817][T30804] syzkaller0: entered allmulticast mode
[  796.183043][T30821] netlink: 'syz.0.6511': attribute type 1 has an invalid length.
[  796.380277][T30829] netlink: 'syz.0.6511': attribute type 1 has an invalid length.
[  796.451291][T30828] lo speed is unknown, defaulting to 1000
[  796.499005][T30828] lo speed is unknown, defaulting to 1000
[  796.522196][T30840] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  796.588742][T30839] netlink: 'syz.4.6516': attribute type 1 has an invalid length.
[  797.018669][T30854] ip6gretap0: entered promiscuous mode
[  797.225637][T30855] syzkaller0: entered promiscuous mode
[  797.234314][T30855] syzkaller0: entered allmulticast mode
[  799.372530][T30828] wlan1 speed is unknown, defaulting to 1000
[  799.398756][T30828] lo speed is unknown, defaulting to 1000
[  799.486122][T30891] netlink: 'syz.2.6530': attribute type 1 has an invalid length.
[  799.509865][T30893] x_tables: duplicate entry at hook 1
[  799.517479][T30891] __nla_validate_parse: 2 callbacks suppressed
[  799.517498][T30891] netlink: 476 bytes leftover after parsing attributes in process `syz.2.6530'.
[  799.570792][T30891] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.6530'.
[  799.612987][T30900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6533'.
[  800.280045][T30933] xt_CT: You must specify a L4 protocol and not use inversions on it
[  800.290402][T30929] lo speed is unknown, defaulting to 1000
[  800.293895][T30923] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  800.330341][T30929] lo speed is unknown, defaulting to 1000
[  800.398858][T30933] bond1: option lacp_active: invalid value (8)
[  800.427695][T30933] bond1 (unregistering): Released all slaves
[  800.461000][T30939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6540'.
[  800.647607][T30944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6544'.
[  800.693655][T30948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6545'.
[  800.862673][T30956] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.6547'.
[  800.881826][T30957] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6545'.
[  800.892320][T30957] netlink: ct family unspecified
[  800.902236][T30929] wlan1 speed is unknown, defaulting to 1000
[  800.934672][T30929] lo speed is unknown, defaulting to 1000
[  800.974785][T30961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6547'.
[  801.007144][T30961] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6547'.
[  801.363138][T30979] netlink: 'syz.2.6553': attribute type 1 has an invalid length.
[  801.458694][T30979] 8021q: adding VLAN 0 to HW filter on device bond1
[  801.615955][T30990] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  802.144493][T31013] bond0: entered promiscuous mode
[  802.164499][T31013] bond_slave_0: entered promiscuous mode
[  802.184700][T31013] bond_slave_1: entered promiscuous mode
[  802.219024][T31013] bond0: left promiscuous mode
[  802.243746][T31013] bond_slave_0: left promiscuous mode
[  802.267988][T31013] bond_slave_1: left promiscuous mode
[  802.972673][T31055] netlink: 'syz.4.6571': attribute type 29 has an invalid length.
[  802.986601][T31052] netlink: 'syz.4.6571': attribute type 29 has an invalid length.
[  803.047344][T31052] netlink: 'syz.4.6571': attribute type 29 has an invalid length.
[  803.068811][T31053] Bluetooth: MGMT ver 1.23
[  803.093841][T31052] netlink: 'syz.4.6571': attribute type 29 has an invalid length.
[  805.134630][T31052] netlink: 'syz.4.6571': attribute type 29 has an invalid length.
[  805.143794][T31052] __nla_validate_parse: 41 callbacks suppressed
[  805.143811][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.164291][T31052] netlink: 'syz.4.6571': attribute type 29 has an invalid length.
[  805.172487][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.192563][T31083] pim6reg: entered allmulticast mode
[  805.198579][T31083] pim6reg: left allmulticast mode
[  805.252209][T31089] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  805.318659][T31052] netlink: 'syz.4.6571': attribute type 29 has an invalid length.
[  805.338265][T31091] netlink: 'syz.5.6581': attribute type 1 has an invalid length.
[  805.346001][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.346216][T31052] netlink: 'syz.4.6571': attribute type 29 has an invalid length.
[  805.346233][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.346405][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.346563][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.346720][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.418005][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.428395][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.443488][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'.
[  805.775148][T31102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  805.887449][T31114] pimreg: entered allmulticast mode
[  806.175431][T31137] ipvlan3: entered allmulticast mode
[  806.176929][T31138] xt_hashlimit: size too large, truncated to 1048576
[  806.190640][T31138] xt_hashlimit: max too large, truncated to 1048576
[  806.191220][T31137] macvlan0: entered allmulticast mode
[  806.204923][T31137] veth1_vlan: entered allmulticast mode
[  806.235112][T31136] ipvlan4: entered allmulticast mode
[  806.433166][T31146] 8021q: VLANs not supported on tunl0
[  806.445019][T31146] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  806.446555][T31149] validate_nla: 18 callbacks suppressed
[  806.446573][T31149] netlink: 'syz.4.6597': attribute type 1 has an invalid length.
[  806.584865][T31154] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  807.317790][T31176] tipc: Resetting bearer <eth:syzkaller0>
[  807.565524][T31189] sctp: [Deprecated]: syz.4.6613 (pid 31189) Use of struct sctp_assoc_value in delayed_ack socket option.
[  807.565524][T31189] Use struct sctp_sack_info instead
[  807.641013][T31190] lo speed is unknown, defaulting to 1000
[  807.652112][T31190] lo speed is unknown, defaulting to 1000
[  807.753516][T31192] lo speed is unknown, defaulting to 1000
[  807.785484][T31193] lo speed is unknown, defaulting to 1000
[  808.068716][T31190] wlan1 speed is unknown, defaulting to 1000
[  808.071344][T31192] lo speed is unknown, defaulting to 1000
[  808.096657][T31190] lo speed is unknown, defaulting to 1000
[  808.230123][T31221] lo speed is unknown, defaulting to 1000
[  808.565803][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  808.931798][T31193] lo speed is unknown, defaulting to 1000
[  808.938998][T31192] wlan1 speed is unknown, defaulting to 1000
[  808.983288][T31192] lo speed is unknown, defaulting to 1000
[  809.421739][T31274] syzkaller0: entered promiscuous mode
[  809.429265][T31274] syzkaller0: entered allmulticast mode
[  811.357415][T31193] wlan1 speed is unknown, defaulting to 1000
[  811.363514][T31221] lo speed is unknown, defaulting to 1000
[  811.410114][T31193] lo speed is unknown, defaulting to 1000
[  811.468101][T31283] netlink: 'syz.4.6630': attribute type 10 has an invalid length.
[  811.570751][T31289] netlink: 'syz.4.6632': attribute type 1 has an invalid length.
[  811.582999][T31289] netlink: 'syz.4.6632': attribute type 1 has an invalid length.
[  811.636164][T31284] __nla_validate_parse: 21 callbacks suppressed
[  811.636184][T31284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6631'.
[  811.667220][T31284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6631'.
[  811.694715][T31291] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6632'.
[  811.747121][T31289] lo speed is unknown, defaulting to 1000
[  812.145820][T31297] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.153299][T31297] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.438766][T31297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  812.476300][T31297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  812.784335][T31289] lo speed is unknown, defaulting to 1000
[  812.843687][T25792] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  812.868867][T25792] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  812.891271][T25792] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  812.900551][T25792] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  813.090137][T31289] wlan1 speed is unknown, defaulting to 1000
[  813.107875][T31289] lo speed is unknown, defaulting to 1000
[  813.108252][T31221] wlan1 speed is unknown, defaulting to 1000
[  813.273266][T31307] netlink: 'syz.0.6637': attribute type 5 has an invalid length.
[  813.293157][T31307] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6637'.
[  813.533663][T31316] netlink: 'syz.0.6640': attribute type 1 has an invalid length.
[  813.673036][T31221] lo speed is unknown, defaulting to 1000
[  813.693289][T31318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6640'.
[  813.755850][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms
[  813.763885][    C0] lec:lec_tx_timeout: lec0
[  814.123702][T31324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6643'.
[  814.138609][T31324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6643'.
[  815.196738][T31340] tipc: Enabling <eth:lo> not permitted
[  815.202349][T31340] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  815.471014][T31345] netlink: 'syz.5.6650': attribute type 5 has an invalid length.
[  815.483395][T31346] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6650'.
[  815.618653][T31353] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  815.851096][T31351] netlink: 'syz.0.6651': attribute type 1 has an invalid length.
[  815.863277][T31351] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6651'.
[  815.934058][T31355] lo speed is unknown, defaulting to 1000
[  816.023210][T31355] lo speed is unknown, defaulting to 1000
[  816.588113][T31374] bridge2: entered promiscuous mode
[  816.785479][T31355] wlan1 speed is unknown, defaulting to 1000
[  816.810749][T31355] lo speed is unknown, defaulting to 1000
[  816.984621][T31388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6662'.
[  817.030289][T31388] 8021q: adding VLAN 0 to HW filter on device bond2
[  817.114558][T31394] netlink: 'syz.2.6664': attribute type 10 has an invalid length.
[  817.265231][   T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  817.413833][T31413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6668'.
[  817.564998][T31418] netlink: 'syz.2.6671': attribute type 1 has an invalid length.
[  817.647176][T31422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6671'.
[  817.656516][T31422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6671'.
[  817.675292][T31418] bond2: entered promiscuous mode
[  817.724299][T31418] 8021q: adding VLAN 0 to HW filter on device bond2
[  817.835719][T31423] bond2: (slave bridge3): making interface the new active one
[  817.846039][T31423] bridge3: entered promiscuous mode
[  817.853991][T31423] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  818.035353][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6678'.
[  818.215704][T31438] syzkaller1: entered promiscuous mode
[  818.237078][T31438] syzkaller1: entered allmulticast mode
[  818.293359][T31448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  818.300647][T31448] IPv6: NLM_F_CREATE should be set when creating new route
[  818.346585][T31450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6681'.
[  818.764319][T31469] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6686'.
[  819.333465][T31463] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  819.367710][T31463] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  819.585628][T31497] netlink: 'syz.1.6693': attribute type 3 has an invalid length.
[  819.627749][T31497] netlink: 'syz.1.6693': attribute type 1 has an invalid length.
[  819.635509][T31497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6693'.
[  819.663188][T31463] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  819.672493][T31499] netlink: 'syz.0.6694': attribute type 21 has an invalid length.
[  819.682565][T31496] netlink: 'syz.1.6693': attribute type 3 has an invalid length.
[  819.716707][T31463] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  819.756783][T31496] netlink: 'syz.1.6693': attribute type 1 has an invalid length.
[  819.764577][T31496] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6693'.
[  820.004151][T31463] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  820.070454][T31463] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  820.111116][T31514] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  820.167772][T31514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6696'.
[  820.363280][T31519] bond3: entered promiscuous mode
[  820.380215][T31519] 8021q: adding VLAN 0 to HW filter on device bond3
[  820.420883][T31519] bond3 (unregistering): Released all slaves
[  820.461628][T31463] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  820.482284][T31463] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  820.594246][T31536] pim6reg1: entered promiscuous mode
[  820.607381][T31536] pim6reg1: entered allmulticast mode
[  820.682390][T31542] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  820.992230][T31557] bond2: entered promiscuous mode
[  821.050106][T31563] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  821.063749][T31563] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  821.080482][T31563] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  821.134369][T31564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  821.640164][T31582] lo speed is unknown, defaulting to 1000
[  821.649949][T31587] syzkaller1: entered promiscuous mode
[  821.657969][T31587] syzkaller1: entered allmulticast mode
[  821.665695][T31582] lo speed is unknown, defaulting to 1000
[  822.094146][T31582] wlan1 speed is unknown, defaulting to 1000
[  822.112347][T31582] lo speed is unknown, defaulting to 1000
[  822.122529][T31606] netlink: 'syz.1.6722': attribute type 2 has an invalid length.
[  822.138470][T31608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  822.160130][T31606] hmac(sha224): entered promiscuous mode
[  822.213427][T31606] bond3: entered promiscuous mode
[  822.218989][T31606] bond3: entered allmulticast mode
[  822.224993][T31606] 8021q: adding VLAN 0 to HW filter on device bond3
[  822.438404][T31615] tipc: Started in network mode
[  822.448562][T31615] tipc: Node identity 324c89971efc, cluster identity 4711
[  822.456481][T31615] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  822.517859][T31613] tipc: Disabling bearer <eth:syzkaller0>
[  822.796661][T31626] 8021q: adding VLAN 0 to HW filter on device bond4
[  822.805628][T31626] bond0: (slave bond4): Enslaving as an active interface with an up link
[  822.818436][T31626] openvswitch: netlink: Tunnel attr 10416 out of range max 16
[  822.826934][T31626] __nla_validate_parse: 5 callbacks suppressed
[  822.826952][T31626] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6725'.
[  822.987066][T31626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  823.041292][T31626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  823.081019][T31626] bond0 (unregistering): (slave bond4): Releasing backup interface
[  823.113797][T31626] bond0 (unregistering): Released all slaves
[  823.628948][T31645] gretap1: entered promiscuous mode
[  823.965155][T31655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6732'.
[  824.299203][T31665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6735'.
[  824.640654][T31668] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6736'.
[  824.680586][T31668] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  824.933077][T31677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6740'.
[  825.129348][T31686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6743'.
[  825.162403][T31686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6743'.
[  825.210933][T31686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6743'.
[  825.300753][T31693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6745'.
[  825.593331][T31693] team0: Port device team_slave_0 removed
[  825.857525][T31720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6752'.
[  826.025317][T31716] nbd: nbd64 already in use
[  826.032067][T31361] block nbd64: NBD_DISCONNECT
[  826.470808][T31731] bond0: option xmit_hash_policy: invalid value (10)
[  826.533926][T31361] udevd[31361]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  828.412279][T31731] bond0 (unregistering): Released all slaves
[  828.454971][T31737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  828.492261][T31750] "syz.0.6757" (31750) uses obsolete ecb(arc4) skcipher
[  828.542640][T31737] tipc: Disabling bearer <eth:syzkaller0>
[  828.544589][T31753] xt_hashlimit: max too large, truncated to 1048576
[  828.562982][T31753] xt_hashlimit: overflow, try lower: 18446744073709551608/8
[  828.778469][T31760] lo speed is unknown, defaulting to 1000
[  828.783355][T31767] __nla_validate_parse: 3 callbacks suppressed
[  828.783376][T31767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6763'.
[  828.798396][T31760] lo speed is unknown, defaulting to 1000
[  828.807651][T31767] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6763'.
[  828.816524][T31770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6760'.
[  828.868675][T31769] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  829.458864][T31810] vlan2: entered promiscuous mode
[  829.476142][T31810] bridge0: entered promiscuous mode
[  829.538274][T31760] wlan1 speed is unknown, defaulting to 1000
[  829.546672][T31760] lo speed is unknown, defaulting to 1000
[  829.713324][T31819] IPv6: NLM_F_CREATE should be specified when creating new route
[  830.021178][T31837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6780'.
[  830.449618][T31857] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002
[  830.823259][T31868] lo speed is unknown, defaulting to 1000
[  830.853537][T31868] lo speed is unknown, defaulting to 1000
[  830.879901][T31879] vcan1: entered promiscuous mode
[  830.897915][T31881] netlink: 'syz.0.6788': attribute type 62 has an invalid length.
[  830.969138][T31881] ip6tnl2: entered allmulticast mode
[  831.016809][T31885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6792'.
[  831.242533][T31891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6793'.
[  831.260157][T31868] wlan1 speed is unknown, defaulting to 1000
[  831.289632][T31868] lo speed is unknown, defaulting to 1000
[  831.399069][T31893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6794'.
[  831.472832][T31895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6795'.
[  831.592778][T31897] syzkaller0: entered promiscuous mode
[  831.598947][T31897] syzkaller0: entered allmulticast mode
[  831.659886][T31903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6798'.
[  831.669157][T31903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6798'.
[  831.799775][T31907] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001
[  831.807325][ T5885] IPVS: starting estimator thread 0...
[  831.936743][T31909] IPVS: using max 55 ests per chain, 132000 per kthread
[  832.512115][ T8508] lec:lec_start_xmit: lec0:No lecd attached
[  833.730911][T31905] lo speed is unknown, defaulting to 1000
[  833.760965][T31905] lo speed is unknown, defaulting to 1000
[  833.885535][T31923] __nla_validate_parse: 2 callbacks suppressed
[  833.885555][T31923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6802'.
[  834.382493][T31948] vlan3: entered allmulticast mode
[  834.389447][T31948] veth0_to_bond: entered allmulticast mode
[  834.394908][T31954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6812'.
[  834.400755][T31905] wlan1 speed is unknown, defaulting to 1000
[  834.473193][T31905] lo speed is unknown, defaulting to 1000
[  834.574430][T31961] netlink: 41 bytes leftover after parsing attributes in process `syz.4.6815'.
[  834.585638][T31961] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6815'.
[  834.623229][T31963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6814'.
[  834.659790][T31963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6814'.
[  834.662675][T31967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6814'.
[  834.678207][T31961] netlink: 41 bytes leftover after parsing attributes in process `syz.4.6815'.
[  834.797205][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  834.949260][T31975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6818'.
[  835.521209][T31997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6822'.
[  835.724515][T31998] team0: Port device dummy0 removed
[  835.752733][T31998] bridge_slave_0: left allmulticast mode
[  835.766147][T31998] bridge_slave_0: left promiscuous mode
[  835.773291][T31998] bridge0: port 1(bridge_slave_0) entered disabled state
[  835.840184][T31998] bridge_slave_1: left allmulticast mode
[  835.853907][T31998] bridge_slave_1: left promiscuous mode
[  835.876791][T31998] bridge0: port 2(bridge_slave_1) entered disabled state
[  835.899955][T31998] bond0: (slave bond_slave_0): Releasing backup interface
[  835.941051][T31998] bond0: (slave bond_slave_1): Releasing backup interface
[  835.974069][T32004] x_tables: ip_tables: icmp match: only valid for protocol 1
[  835.985227][T31998] team0: Port device team_slave_0 removed
[  836.015503][T31998] team0: Port device team_slave_1 removed
[  836.034960][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  836.044488][T31998] batman_adv: batadv0: Removing interface: batadv_slave_0
[  836.058073][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  836.073068][T31998] batman_adv: batadv0: Removing interface: batadv_slave_1
[  836.083083][T31998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  836.664344][T32032] SET target dimension over the limit!
[  836.760236][   T35] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  836.876562][   T35] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  836.898492][   T35] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  836.907905][   T35] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  836.947965][T32041] netlink: 'syz.5.6833': attribute type 1 has an invalid length.
[  836.986828][T32041] netlink: 'syz.5.6833': attribute type 2 has an invalid length.
[  837.121595][T32047] netlink: 'syz.2.6834': attribute type 9 has an invalid length.
[  837.392232][T32049] bridge0: entered promiscuous mode
[  837.404146][T32049] macvlan2: entered allmulticast mode
[  837.410829][T32049] bridge0: entered allmulticast mode
[  837.418115][T32049] bridge0: port 1(macvlan2) entered blocking state
[  837.424898][T32049] bridge0: port 1(macvlan2) entered disabled state
[  837.436560][T32049] bridge0: left allmulticast mode
[  837.441629][T32049] bridge0: left promiscuous mode
[  837.755908][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms
[  837.763995][    C0] lec:lec_tx_timeout: lec0
[  837.808777][T32081] Bluetooth: MGMT ver 1.23
[  837.884005][T32079] sctp: [Deprecated]: syz.4.6841 (pid 32079) Use of int in maxseg socket option.
[  837.884005][T32079] Use struct sctp_assoc_value instead
[  838.115574][T32101] m1Ie5nè‹Ò: entered promiscuous mode
[  838.228196][T32105] netlink: 'syz.0.6853': attribute type 10 has an invalid length.
[  838.261598][T32105] team0: Port device dummy0 added
[  838.282175][T32108] netlink: 'syz.0.6853': attribute type 10 has an invalid length.
[  838.357393][T32108] team0: Port device dummy0 removed
[  838.408417][T32108] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  838.724646][T32134] netlink: 'syz.4.6861': attribute type 1 has an invalid length.
[  838.793813][T32134] netlink: 'syz.4.6861': attribute type 6 has an invalid length.
[  838.804955][T32134] netlink: 'syz.4.6861': attribute type 3 has an invalid length.
[  839.190697][T32155] veth0: entered promiscuous mode
[  839.222188][T32153] batadv_slave_1: entered promiscuous mode
[  839.327439][T32166] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004
[  839.339172][T32162] __nla_validate_parse: 94 callbacks suppressed
[  839.339191][T32162] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6871'.
[  839.359514][T32151] veth0: left promiscuous mode
[  839.379808][T32162] netlink: 'syz.5.6871': attribute type 1 has an invalid length.
[  839.593597][T32178] vlan2: entered promiscuous mode
[  839.616539][T32178] geneve1: entered promiscuous mode
[  839.621999][T32178] vlan2: entered allmulticast mode
[  839.652665][T32178] geneve1: entered allmulticast mode
[  839.999332][T32152] batadv_slave_1: left promiscuous mode
[  840.028030][T32202] x_tables: ip6_tables: mh match: only valid for protocol 135
[  840.314846][T32222] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6888'.
[  840.327365][T32222] ..0ªî{X¹¦: renamed from gretap0
[  840.335590][T32222] ..0ªî{X¹¦: entered allmulticast mode
[  840.365912][T32226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6889'.
[  840.367226][T32222] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  840.410000][T32228] Cannot find del_set index 4 as target
[  841.063724][T32270] netlink: 'syz.0.6902': attribute type 1 has an invalid length.
[  841.106828][T32270] bond2: entered promiscuous mode
[  841.112474][T32270] 8021q: adding VLAN 0 to HW filter on device bond2
[  841.141112][T32270] bond2: (slave bridge3): making interface the new active one
[  841.149161][T32270] bridge3: entered promiscuous mode
[  841.157283][T32270] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  841.196607][   T30] INFO: task syz.3.5578:27108 blocked for more than 143 seconds.
[  841.204794][   T30]       Not tainted syzkaller #0
[  841.210489][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  841.220328][   T30] task:syz.3.5578      state:D stack:23104 pid:27108 tgid:27107 ppid:17031  task_flags:0x400140 flags:0x00080002
[  841.232843][   T30] Call Trace:
[  841.236480][   T30]  <TASK>
[  841.239503][   T30]  __schedule+0x15dd/0x52d0
[  841.244148][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  841.250281][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.255433][   T30]  ? __pfx___schedule+0x10/0x10
[  841.260752][   T30]  ? schedule+0x90/0x360
[  841.265111][   T30]  schedule+0x164/0x360
[  841.273775][   T30]  svc_listen+0x2c3/0x500
[  841.277827][T32278] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6904'.
[  841.279923][   T30]  ? __pfx_svc_listen+0x10/0x10
[  841.292363][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  841.305802][   T30]  ? __fget_files+0x3a0/0x420
[  841.310537][   T30]  ? __fget_files+0x2a/0x420
[  841.315155][   T30]  ? apparmor_socket_listen+0xde/0x180
[  841.321382][   T30]  __x64_sys_listen+0x1c7/0x240
[  841.326667][   T30]  do_syscall_64+0x14d/0xf80
[  841.331284][   T30]  ? trace_irq_disable+0x3b/0x150
[  841.336718][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.342809][   T30]  ? clear_bhb_loop+0x40/0x90
[  841.348058][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.353952][   T30] RIP: 0033:0x7f232dd9c799
[  841.358447][   T30] RSP: 002b:00007f232eb82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[  841.366992][   T30] RAX: ffffffffffffffda RBX: 00007f232e015fa0 RCX: 00007f232dd9c799
[  841.374982][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  841.383787][   T30] RBP: 00007f232de32bd9 R08: 0000000000000000 R09: 0000000000000000
[  841.391851][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  841.399905][   T30] R13: 00007f232e016038 R14: 00007f232e015fa0 R15: 00007ffd9a544858
[  841.408935][   T30]  </TASK>
[  841.412048][   T30] 
[  841.412048][   T30] Showing all locks held in the system:
[  841.422307][   T30] 1 lock held by khungtaskd/30:
[  841.429212][   T30]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  841.440332][   T30] 3 locks held by kworker/u8:2/35:
[  841.445479][   T30]  #0: ffff888032631948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  841.457410][   T30]  #1: ffffc90000ab7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  841.470674][   T30]  #2: ffffffff8fbc7508 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[  841.480739][   T30] 2 locks held by getty/5584:
[  841.485428][   T30]  #0: ffff8880377610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  841.496266][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  841.507098][   T30] 3 locks held by kworker/u8:43/25773:
[  841.512559][   T30]  #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  841.523785][   T30]  #1: ffffc9000219fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  841.536474][   T30]  #2: ffffffff8fbb8d70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  841.546592][   T30] 3 locks held by kworker/u8:68/25801:
[  841.552082][   T30]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  841.564289][   T30]  #1: ffffc90000bb7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  841.575502][   T30]  #2: ffffffff8fbc7508 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  841.585058][   T30] 1 lock held by syz.3.5578/27108:
[  841.590335][   T30]  #0: ffff8880803cd260 (sk_lock-AF_ATMSVC){+.+.}-{0:0}, at: svc_listen+0x13f/0x500
[  841.599879][   T30] 1 lock held by syz.2.6883/32204:
[  841.605000][   T30]  #0: ffff88807a1f4068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330
[  841.614614][   T30] 1 lock held by syz.2.6883/32216:
[  841.619796][   T30]  #0: ffff88807a1f4068 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x40/0x6b0
[  841.629673][   T30] 3 locks held by syz.1.6895/32243:
[  841.634885][   T30]  #0: ffff888038f4d288 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  841.645694][   T30]  #1: ffff8880565f3260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940
[  841.658209][   T30]  #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  841.669538][   T30] 2 locks held by syz.0.6902/32269:
[  841.674742][   T30]  #0: ffffffff8fbc7508 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  841.683990][   T30]  #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  841.694962][   T30] 1 lock held by syz.5.6903/32275:
[  841.700567][   T30]  #0: ffffffff8fbc7508 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  841.709571][   T30] 3 locks held by syz.4.6904/32278:
[  841.714772][   T30]  #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  841.723017][   T30]  #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  841.732375][   T30]  #2: ffffffff8fbc7508 (rtnl_mutex){+.+.}-{4:4}, at: team_nl_options_set_doit+0xb3/0xe50
[  841.742455][   T30] 2 locks held by syz.4.6904/32281:
[  841.747715][   T30]  #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  841.757339][   T30]  #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  841.766434][   T30] 
[  841.768765][   T30] =============================================
[  841.768765][   T30] 
[  841.778720][   T30] NMI backtrace for cpu 0
[  841.778738][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  841.778756][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  841.778767][   T30] Call Trace:
[  841.778775][   T30]  <TASK>
[  841.778782][   T30]  dump_stack_lvl+0xe8/0x150
[  841.778809][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  841.778919][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  841.778953][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  841.778974][   T30]  sys_info+0x135/0x170
[  841.779018][   T30]  watchdog+0xfd9/0x1030
[  841.779044][   T30]  ? watchdog+0x21a/0x1030
[  841.779072][   T30]  kthread+0x388/0x470
[  841.779087][   T30]  ? __pfx_watchdog+0x10/0x10
[  841.779105][   T30]  ? __pfx_kthread+0x10/0x10
[  841.779121][   T30]  ret_from_fork+0x51e/0xb90
[  841.779143][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  841.779160][   T30]  ? __switch_to+0xc7d/0x1450
[  841.779196][   T30]  ? __pfx_kthread+0x10/0x10
[  841.779211][   T30]  ret_from_fork_asm+0x1a/0x30
[  841.779245][   T30]  </TASK>
[  841.779251][   T30] Sending NMI from CPU 0 to CPUs 1:
[  841.891066][    C1] NMI backtrace for cpu 1
[  841.891084][    C1] CPU: 1 UID: 0 PID: 29805 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  841.891101][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  841.891111][    C1] RIP: 0010:preempt_count_sub+0x4/0x170
[  841.891139][    C1] Code: 73 ff ff ff 48 c7 c7 c4 74 11 90 e8 16 f3 9b 00 e9 62 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 53 48 bb 00 00 00 00 00 fc ff df 48 c7 c0 80 14 27 9a 48 c1 e8
[  841.891152][    C1] RSP: 0018:ffffc90005c07bc0 EFLAGS: 00000246
[  841.891168][    C1] RAX: f5c727e46fee9a00 RBX: ffff88808db99e80 RCX: 0000000080000002
[  841.891180][    C1] RDX: 0000000000000000 RSI: ffffffff8c27b1e0 RDI: 0000000000000001
[  841.891190][    C1] RBP: 1ffff11011b733d3 R08: ffffffff901141b7 R09: 1ffffffff2022836
[  841.891202][    C1] R10: dffffc0000000000 R11: fffffbfff2022837 R12: ffff88808db99eac
[  841.891213][    C1] R13: dffffc0000000000 R14: 1ffff11011b733d0 R15: ffff88808db9b170
[  841.891225][    C1] FS:  0000555588659500(0000) GS:ffff888125565000(0000) knlGS:0000000000000000
[  841.891238][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  841.891249][    C1] CR2: 00007fa0773e82f8 CR3: 000000007a8a0000 CR4: 00000000003526f0
[  841.891263][    C1] Call Trace:
[  841.891270][    C1]  <TASK>
[  841.891276][    C1]  schedule+0x16e/0x360
[  841.891302][    C1]  do_nanosleep+0x1c2/0x620
[  841.891401][    C1]  ? do_nanosleep+0x80/0x620
[  841.891420][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  841.891440][    C1]  ? __hrtimer_setup+0x181/0x200
[  841.891461][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  841.891483][    C1]  hrtimer_nanosleep+0x188/0x390
[  841.891505][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  841.891527][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  841.891548][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  841.891573][    C1]  __se_sys_clock_nanosleep+0x35b/0x3b0
[  841.891597][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  841.891624][    C1]  do_syscall_64+0x14d/0xf80
[  841.891638][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.891654][    C1]  ? clear_bhb_loop+0x40/0x90
[  841.891672][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.891687][    C1] RIP: 0033:0x7f1af035cfce
[  841.891702][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  841.891714][    C1] RSP: 002b:00007ffe85c194b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  841.891730][    C1] RAX: ffffffffffffffda RBX: 0000555588659500 RCX: 00007f1af035cfce
[  841.891741][    C1] RDX: 00007ffe85c19510 RSI: 0000000000000000 RDI: 0000000000000000
[  841.891751][    C1] RBP: 00007ffe85c1957c R08: 0000000000000000 R09: 0000000000000000
[  841.891761][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  841.891772][    C1] R13: 00000000000927c0 R14: 00000000000cd4db R15: 00007ffe85c195d0
[  841.891792][    C1]  </TASK>
[  842.183606][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  842.190494][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  842.199600][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  842.209666][   T30] Call Trace:
[  842.212943][   T30]  <TASK>
[  842.215868][   T30]  vpanic+0x56c/0xa60
[  842.219864][   T30]  ? __pfx___schedule+0x10/0x10
[  842.224712][   T30]  ? __pfx_vpanic+0x10/0x10
[  842.229234][   T30]  ? __pfx_console_unlock+0x10/0x10
[  842.234450][   T30]  panic+0xc5/0xd0
[  842.238197][   T30]  ? __pfx_panic+0x10/0x10
[  842.242608][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  842.248007][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  842.254152][   T30]  watchdog+0x1023/0x1030
[  842.258481][   T30]  ? watchdog+0x21a/0x1030
[  842.262912][   T30]  kthread+0x388/0x470
[  842.266976][   T30]  ? __pfx_watchdog+0x10/0x10
[  842.271660][   T30]  ? __pfx_kthread+0x10/0x10
[  842.276239][   T30]  ret_from_fork+0x51e/0xb90
[  842.280830][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  842.285937][   T30]  ? __switch_to+0xc7d/0x1450
[  842.290615][   T30]  ? __pfx_kthread+0x10/0x10
[  842.295195][   T30]  ret_from_fork_asm+0x1a/0x30
[  842.299968][   T30]  </TASK>
[  842.303260][   T30] Kernel Offset: disabled
[  842.307585][   T30] Rebooting in 86400 seconds..